Route Origin Authorization
$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/3130332e302e302e302f31362d3136203d3e2034363038.roa
File: 3130332e302e302e302f31362d3136203d3e2034363038.roa (raw, json)
Hash identifier: Kd5d5D6As0bcRgXGfiEQ86zbyYy89MgFbc7n+nAmNF8=
Subject key identifier: 83:DC:D0:60:C4:69:CB:D1:0E:70:D1:61:94:82:0F:ED:79:46:C3:D5
Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Certificate serial: 4BE6184D5112078C3968DA454AFFE4148CD9A0CA
Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3130332e302e302e302f31362d3136203d3e2034363038.roa
Signing time: Tue 14 Jul 2026 17:35:59 +0000
ROA not before: Tue 14 Jul 2026 17:30:59 +0000
ROA not after: Tue 13 Jul 2027 17:35:59 +0000
asID: 4608
IP address blocks: 103.0.0.0/16 maxlen: 16
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:e6:18:4d:51:12:07:8c:39:68:da:45:4a:ff:e4:14:8c:d9:a0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Validity
Not Before: Jul 14 17:30:59 2026 GMT
Not After : Jul 13 17:35:59 2027 GMT
Subject: CN=83DCD060C469CBD10E70D16194820FED7946C3D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b4:cc:e4:8d:22:95:2d:0a:df:46:a3:65:28:
c0:a9:f2:1e:3c:d5:02:1e:83:39:03:b9:49:e8:54:
f8:a7:c3:03:cb:39:d6:29:f3:64:f0:4f:48:d6:4c:
e3:f5:a3:7c:41:4f:64:aa:46:42:d0:03:35:6d:0b:
9b:89:08:e7:2b:8c:9d:d2:79:98:00:8b:01:b0:61:
6a:60:76:f6:80:e9:08:32:10:69:0f:16:e5:93:51:
ad:eb:89:b0:2d:5d:37:51:9a:4e:75:41:1b:36:3d:
1d:10:23:8e:7f:93:0f:aa:07:1c:04:5a:63:f7:15:
9b:7b:0e:33:bc:a9:fd:28:15:36:4d:7a:c1:a6:2a:
92:87:21:cc:cd:29:42:51:ae:82:85:80:9b:d8:02:
22:a4:80:1e:1f:20:33:80:2a:78:2f:a5:1d:76:33:
61:56:82:8c:57:27:13:d8:b7:88:46:87:1a:43:2c:
72:aa:a2:cc:6d:1a:de:0d:32:45:1e:26:59:b9:66:
06:4a:c8:5a:40:c1:f2:2d:4d:d1:e3:e1:8c:7f:af:
ac:fd:27:47:4b:a5:80:dc:f0:cf:00:2b:e1:fd:0e:
b5:da:ae:e6:93:35:e4:9b:e6:81:d5:d6:19:85:d3:
b8:95:e0:f1:15:78:67:ef:23:f7:4a:f8:8d:f8:2b:
eb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DC:D0:60:C4:69:CB:D1:0E:70:D1:61:94:82:0F:ED:79:46:C3:D5
X509v3 Authority Key Identifier:
keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3130332e302e302e302f31362d3136203d3e2034363038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.0.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8b:40:38:e8:31:28:b8:f4:c7:85:ba:a5:52:3b:5b:d1:c2:ae:
d0:7f:02:f3:cb:4f:7d:17:28:0b:97:20:33:38:b3:40:e4:9e:
b2:a4:18:0c:79:5e:95:9f:ac:f5:7c:e1:55:05:40:1f:b4:a3:
ac:4f:b9:b7:d6:aa:87:d3:27:de:98:04:be:97:3b:99:b7:05:
b5:92:1b:3c:f4:23:3b:02:a1:5e:17:68:49:21:b2:0c:dd:3a:
b7:05:4a:98:1d:40:dc:ba:b3:09:17:c5:e0:6f:0c:1a:25:62:
81:b2:6b:6d:d2:d7:42:c2:ce:15:39:3e:90:f9:6c:e2:5c:70:
67:e4:f6:b1:90:dc:72:fb:18:b0:cb:76:3e:05:79:55:e4:fc:
86:9d:bc:5c:ce:c7:c0:d8:4c:2a:c6:3f:12:78:6f:d2:03:90:
e1:41:ea:f6:5d:87:2c:8d:b9:2c:4c:a3:51:64:11:1a:05:c4:
1a:48:db:38:40:2f:53:d3:74:8c:9f:b5:cc:2a:bb:62:80:ea:
2a:b1:ab:62:91:82:dc:8b:c0:47:9f:6d:37:81:6e:b2:28:be:
52:72:47:35:b1:ed:c2:3d:14:08:ec:9f:c3:cd:61:86:62:5e:
f3:9b:58:2f:52:d0:f4:f4:84:a1:7a:b1:10:ee:63:c7:ea:0c:
39:94:e6:b0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:35:15 2026 by rpki-client