Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91BE6D70000/0/3130332e3137352e32372e302f32342d3234203d3e20383334.roa
File:                     3130332e3137352e32372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          Lk+SsdtbrANWV2nijvQOlAUdOOBaDgz1FwOw4ZRQW0w=
Subject key identifier:   C9:8D:BF:AD:51:9B:1F:02:64:F0:74:F4:76:31:37:7B:20:FB:3F:CA
Certificate issuer:       /CN=A91BE6D70000/serialNumber=BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB
Certificate serial:       3B64C8E7DE9BD39DC6FDCF1F72475C671359B2F2
Authority key identifier: BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/3130332e3137352e32372e302f32342d3234203d3e20383334.roa
Signing time:             Thu 16 Jan 2025 00:28:41 +0000
ROA not before:           Thu 16 Jan 2025 00:23:41 +0000
ROA not after:            Thu 15 Jan 2026 00:28:41 +0000
asID:                     834
IP address blocks:        103.175.27.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:64:c8:e7:de:9b:d3:9d:c6:fd:cf:1f:72:47:5c:67:13:59:b2:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE6D70000
        Validity
            Not Before: Jan 16 00:23:41 2025 GMT
            Not After : Jan 15 00:28:41 2026 GMT
        Subject: CN=C98DBFAD519B1F0264F074F47631377B20FB3FCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:56:42:fe:49:e0:98:8f:68:aa:b3:ef:77:d9:
                    37:d3:b5:ca:91:c0:0e:16:01:4c:f6:54:d4:d7:77:
                    08:99:03:ab:d8:0b:aa:22:9d:a1:5d:7e:e3:33:c4:
                    bb:3e:40:b1:52:98:99:e4:ba:6f:99:f5:ab:89:c5:
                    1a:b3:06:b2:c8:bb:10:a2:8d:dd:15:ac:4e:f3:59:
                    c8:d3:c0:33:ad:dc:e4:25:4a:3c:a6:45:67:fe:18:
                    3f:90:f6:11:3e:10:9a:56:62:bb:98:2f:4d:fa:f2:
                    a6:61:fb:57:cc:5b:40:a5:36:69:01:41:69:f8:bf:
                    3c:53:9b:86:2b:48:7e:12:a4:ee:21:cd:9f:c3:a6:
                    66:48:34:d0:a1:92:88:80:3f:38:ab:c5:26:cf:ab:
                    93:bf:b8:4b:88:c7:9d:3a:62:52:da:cb:1a:8d:e5:
                    ea:a0:f2:aa:51:e4:e2:98:1e:d9:da:3e:d9:74:f6:
                    90:a2:d9:d7:d8:9c:e8:29:f9:2b:fe:40:89:02:7c:
                    b3:2a:13:a7:df:39:8d:31:89:dd:09:58:7a:57:47:
                    0e:a3:98:e7:ee:dd:d4:c3:00:41:39:03:28:60:e5:
                    03:06:83:fe:f2:ff:49:e9:23:2d:65:8a:92:98:32:
                    62:6c:78:81:5c:20:62:46:05:4d:57:fa:ba:a2:8c:
                    3f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:8D:BF:AD:51:9B:1F:02:64:F0:74:F4:76:31:37:7B:20:FB:3F:CA
            X509v3 Authority Key Identifier:
                keyid:BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/3130332e3137352e32372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:d7:70:f8:2e:55:27:46:e9:d7:ea:2a:67:1a:9b:09:e5:6a:
         08:ca:9d:b6:28:17:33:58:a4:92:2b:f6:9d:2a:1c:ac:38:85:
         29:a8:d8:5f:65:eb:06:2c:f6:d8:36:69:53:9f:5e:ff:ca:30:
         b1:19:6c:c9:f9:a1:2e:27:68:b2:d6:22:07:01:7b:b2:65:5c:
         a4:17:e1:17:75:18:27:d4:0f:40:55:16:dd:9a:d6:8d:68:39:
         7e:c9:ab:f1:fc:14:df:96:08:56:9f:39:64:2e:70:8a:d3:3c:
         50:a8:99:db:de:9b:8d:23:f2:55:2d:de:e4:31:83:3a:06:5d:
         92:95:f6:f9:07:60:ec:0a:97:1f:15:0a:ad:ee:43:fb:ef:59:
         0e:b3:cf:9c:f6:af:7b:d9:46:f3:65:91:a3:b2:9c:40:af:e5:
         79:b9:09:18:b8:e6:0d:28:4f:c2:ff:72:93:33:04:a3:ba:35:
         4b:16:d6:ee:6d:e4:63:ad:93:db:b3:85:26:fe:c4:f7:a2:8a:
         a2:40:09:0a:85:d7:37:39:92:57:49:9b:d9:c3:db:5f:a9:e2:
         27:ce:27:79:79:b2:8c:5a:2d:cb:4d:03:cd:7b:99:76:2a:ad:
         57:83:0f:07:18:de:e1:5a:24:91:36:a0:f5:ac:21:99:4c:07:
         16:32:62:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:51:27 2025 by rpki-client