Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/9/3230332e33312e3131302e302f32342d3234203d3e2039393133.roa
File: 3230332e33312e3131302e302f32342d3234203d3e2039393133.roa (raw, json)
Hash identifier: Th3RG2y4VUTKhfMzlUUSBpKBps2IwB4thNo9+TULNBQ=
Subject key identifier: 2E:7E:42:DC:82:EA:C9:EE:17:DB:60:D7:0A:B6:01:63:F1:B2:33:2B
Certificate issuer: /CN=A919B0BE0000/serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB
Certificate serial: 05A6CD89E53474368FEF1E1F63E14C48AB6318CA
Authority key identifier: 33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/9/3230332e33312e3131302e302f32342d3234203d3e2039393133.roa
Signing time: Mon 19 May 2025 06:53:18 +0000
ROA not before: Mon 19 May 2025 06:48:18 +0000
ROA not after: Mon 18 May 2026 06:53:18 +0000
asID: 9913
IP address blocks: 203.31.110.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:a6:cd:89:e5:34:74:36:8f:ef:1e:1f:63:e1:4c:48:ab:63:18:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB
Validity
Not Before: May 19 06:48:18 2025 GMT
Not After : May 18 06:53:18 2026 GMT
Subject: CN=2E7E42DC82EAC9EE17DB60D70AB60163F1B2332B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:84:85:9f:33:bb:2f:db:7a:08:84:94:8f:92:
6e:8f:a6:ea:ff:4f:04:64:7f:f6:ab:5b:33:b2:c2:
c3:1e:82:f6:2d:39:22:9d:3b:af:08:99:2a:d9:59:
83:25:8e:3a:33:5e:a7:68:58:07:83:c1:71:06:45:
08:3a:fe:3e:68:d3:dc:33:ab:59:ee:1a:c8:d6:c4:
d6:73:b5:ae:ed:fd:cc:6c:cc:2e:13:ae:81:41:b9:
22:18:cc:d0:2e:88:fb:61:5e:ea:87:72:43:0e:a9:
8c:57:c5:83:de:cd:1c:f1:c7:e1:3a:6b:27:5d:ac:
12:e7:97:27:64:b6:c1:3d:ba:39:98:c8:80:ed:fe:
50:55:4b:c4:cc:87:c1:30:71:be:c8:1b:53:c9:0f:
6e:b7:b8:96:b8:73:81:90:c6:ff:24:fc:08:b6:d4:
72:30:e6:19:13:33:6a:2a:89:98:6f:98:24:84:45:
75:2e:d5:69:6d:02:67:79:2a:ef:f9:5c:27:d2:56:
06:ee:8b:95:87:9c:41:d6:aa:75:81:37:d2:3d:31:
69:0c:b1:98:1c:86:da:d4:ae:dd:c5:8d:a2:ff:90:
a6:0d:ef:0e:85:9b:b2:74:48:e7:20:bb:62:6d:0b:
61:9d:08:f0:96:3b:f0:b4:e4:44:3c:e3:a3:bf:b5:
38:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7E:42:DC:82:EA:C9:EE:17:DB:60:D7:0A:B6:01:63:F1:B2:33:2B
X509v3 Authority Key Identifier:
keyid:33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/3230332e33312e3131302e302f32342d3234203d3e2039393133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.31.110.0/24
Signature Algorithm: sha256WithRSAEncryption
63:a2:21:5b:5f:29:06:32:26:38:a6:ca:ba:f6:05:a0:37:ff:
fb:81:e6:36:a0:48:d3:79:33:68:45:cd:2b:cc:a9:96:72:23:
cc:e8:f5:cb:a3:b9:e5:88:64:83:81:76:8c:0c:c8:3c:42:ce:
8a:89:89:6d:28:fc:52:32:62:a7:e4:06:de:39:c1:9d:db:f3:
f6:fd:ad:6a:a2:a0:d1:82:d0:70:ec:7e:d2:f9:16:a1:7d:4d:
bd:1e:02:f6:aa:f7:f3:78:ed:8b:d9:d9:aa:03:37:44:69:03:
89:8d:bd:16:cd:b7:1a:78:75:81:9d:f0:6b:75:e6:b5:b1:67:
10:7a:2d:da:24:83:61:77:7a:74:da:ab:75:42:e4:c8:0e:00:
ee:a2:10:76:02:6b:f6:0c:46:37:bf:f7:46:a4:90:3c:bd:18:
25:6e:46:4d:0b:b6:36:d7:1b:8c:8c:1d:e4:47:0b:76:5b:27:
c2:a1:34:9f:36:0c:46:42:19:d2:aa:3b:4f:8a:a6:5c:3a:41:
5e:62:c6:3a:32:8b:4f:b7:c3:7a:92:91:c9:03:00:27:5c:91:
6e:a7:f4:ca:29:c9:6d:f1:45:05:e1:48:ea:f9:ff:cb:04:09:
d2:e4:27:ae:59:c3:64:ad:f7:4f:93:5f:88:22:34:26:7d:da:
22:48:6a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:15:10 2025 by rpki-client