Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/9/3130332e3233332e3230382e302f32322d3234203d3e2039393133.roa
File: 3130332e3233332e3230382e302f32322d3234203d3e2039393133.roa (raw, json)
Hash identifier: gjG1OZMW5faujAfknl/AsEqIEMo1X4J8rMD0eZTWBDg=
Subject key identifier: 79:24:FD:7E:C7:B7:F4:F8:50:F0:42:57:DB:FB:54:D3:56:BB:13:6E
Certificate issuer: /CN=A919B0BE0000/serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB
Certificate serial: 66E4497C2F6CAB575FCC5964B83E994F659B3109
Authority key identifier: 33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/9/3130332e3233332e3230382e302f32322d3234203d3e2039393133.roa
Signing time: Mon 19 May 2025 06:50:51 +0000
ROA not before: Mon 19 May 2025 06:45:51 +0000
ROA not after: Mon 18 May 2026 06:50:51 +0000
asID: 9913
IP address blocks: 103.233.208.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:e4:49:7c:2f:6c:ab:57:5f:cc:59:64:b8:3e:99:4f:65:9b:31:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB
Validity
Not Before: May 19 06:45:51 2025 GMT
Not After : May 18 06:50:51 2026 GMT
Subject: CN=7924FD7EC7B7F4F850F04257DBFB54D356BB136E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c0:e6:0f:eb:b0:8e:60:95:8f:2e:c4:a8:b1:
50:76:6a:17:d1:b0:98:21:77:62:f7:40:3c:a0:45:
1f:d7:3f:6d:d8:7b:4f:3b:77:5e:f8:42:b7:f5:2b:
31:20:65:45:bf:c1:b2:20:fe:e9:56:aa:61:6c:b0:
8a:13:70:41:45:91:79:92:eb:ac:84:5d:1e:9b:23:
8d:c0:49:c7:3c:d1:12:82:1a:3b:5e:42:ea:95:36:
93:15:b9:60:b7:b2:a3:13:25:87:90:de:f0:ca:bd:
43:b8:70:6e:6e:2d:8e:ab:f5:88:62:4d:7f:5f:c9:
13:82:9b:34:38:d1:2e:7e:a9:4a:e3:33:71:f4:d0:
cf:7a:47:3c:53:d7:04:01:30:a8:4c:eb:38:a2:25:
09:d0:da:59:f0:3f:9b:ff:eb:25:e8:8e:84:14:d2:
10:51:dc:32:17:b7:9a:1b:a5:b3:b0:cc:9e:5d:0e:
8b:40:54:ef:3a:58:79:09:c6:ba:65:a9:be:5b:6b:
ac:22:75:15:35:93:ba:89:0c:7a:f2:d3:b2:d2:5a:
95:78:4b:a5:50:d1:50:74:91:39:b1:d1:2f:f7:30:
d8:ef:7d:57:b0:79:a5:fa:ab:4c:ca:40:4a:6a:63:
bd:2f:1f:00:f3:c3:88:2d:42:f5:cd:2d:a7:06:c2:
20:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:24:FD:7E:C7:B7:F4:F8:50:F0:42:57:DB:FB:54:D3:56:BB:13:6E
X509v3 Authority Key Identifier:
keyid:33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/3130332e3233332e3230382e302f32322d3234203d3e2039393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.233.208.0/22
Signature Algorithm: sha256WithRSAEncryption
67:4e:06:4f:8f:4e:4b:36:c3:2a:08:bc:4b:87:d6:86:a0:20:
d9:ae:c9:56:d6:b6:b4:86:8a:be:fb:93:6d:5d:12:97:d1:55:
ed:a8:9a:e1:7f:fa:86:cb:48:4b:c2:c3:a1:af:7e:81:fb:14:
99:9c:78:36:99:06:f2:39:0e:2a:92:31:c6:e0:df:16:fb:08:
87:5f:b5:0c:a3:99:7c:5d:03:7b:71:58:5b:97:cd:2a:5d:03:
29:d6:0e:fe:19:10:72:7c:b9:24:dd:6c:fb:77:f9:e8:aa:3d:
a1:5f:c5:90:31:e3:9b:a1:72:ad:25:ce:c0:f5:8b:17:5c:9a:
15:7f:02:55:df:ba:64:5e:44:28:77:a9:be:aa:cc:83:67:d7:
0c:1a:24:b8:dd:6c:dd:04:b1:cd:2d:c2:79:19:31:62:23:54:
9d:61:5f:e3:e1:be:02:86:52:28:a1:2f:94:fd:23:0c:bb:a7:
3b:b8:3f:5c:2c:3f:81:df:e4:42:e6:63:80:f8:b4:70:ca:f6:
63:fb:a1:82:70:96:c8:96:75:4a:d8:b7:97:1d:d5:a9:0d:e1:
b3:de:9f:e7:b2:8c:ce:b5:d2:7d:10:06:27:92:52:6d:d7:8b:
e7:84:19:e0:6b:d9:66:5a:26:92:bb:b7:63:6a:d0:6b:00:c8:
aa:74:ee:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:17:49 2025 by rpki-client