Route Origin Authorization
$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa
File: 3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (raw, json)
Hash identifier: q9QOFEKnYwQGXZMslwj1RepXzzxQcEglsKOUhEPQ968=
Subject key identifier: 24:78:7F:E9:21:6E:F8:26:2E:15:9B:33:F3:BE:CF:2A:EF:CF:DD:3D
Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Certificate serial: 010CE55D6B75ADA585B5CFDB36C1C0E0C1B78074
Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa
Signing time: Tue 21 Jul 2026 12:00:01 +0000
ROA not before: Tue 21 Jul 2026 11:55:01 +0000
ROA not after: Tue 20 Jul 2027 12:00:01 +0000
asID: 45163
IP address blocks: 203.147.108.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0c:e5:5d:6b:75:ad:a5:85:b5:cf:db:36:c1:c0:e0:c1:b7:80:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Validity
Not Before: Jul 21 11:55:01 2026 GMT
Not After : Jul 20 12:00:01 2027 GMT
Subject: CN=24787FE9216EF8262E159B33F3BECF2AEFCFDD3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:12:d6:d3:08:5d:f9:a2:87:86:69:de:65:
95:21:5d:1a:1c:11:bb:cd:eb:35:4b:05:fa:48:f5:
9a:dc:b4:a0:6c:d3:c9:8e:e0:8c:55:22:6d:16:a2:
7e:be:a1:b2:ba:cb:a2:36:87:41:fd:fb:31:8c:58:
b1:97:ac:cc:cf:66:24:60:5e:15:b5:4a:69:cc:4e:
a0:73:b0:5c:be:c0:d9:45:d5:57:8a:50:9a:ec:d2:
ce:1e:70:85:7f:41:c9:d3:31:ec:d0:8d:86:f8:b4:
c1:59:34:43:f5:d0:b7:94:13:ee:50:f3:01:e1:bf:
a7:ff:07:fe:a0:ae:68:0c:ae:ac:ed:46:f0:81:4f:
e8:07:3a:40:a3:db:29:2b:fd:23:e1:fe:7e:ad:5c:
d1:05:ef:e2:bb:ea:fc:14:53:15:ef:ef:94:9d:0e:
33:7c:b4:a3:7f:fe:e6:7e:36:ba:7d:5d:61:56:20:
07:6f:13:51:75:b5:b1:17:33:9c:fa:5d:d8:13:56:
f9:8f:f4:bf:65:9b:77:b6:7f:ba:d9:dd:52:66:8d:
da:d9:e9:e8:64:f1:eb:bf:98:a3:3e:53:d9:9e:a1:
26:e5:2e:0c:27:ad:bd:60:0e:3e:34:f4:62:df:bb:
cd:d0:f5:1a:5c:72:b3:a5:55:7d:60:a3:6c:e3:06:
48:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:78:7F:E9:21:6E:F8:26:2E:15:9B:33:F3:BE:CF:2A:EF:CF:DD:3D
X509v3 Authority Key Identifier:
keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.147.108.0/23
Signature Algorithm: sha256WithRSAEncryption
52:4d:15:76:f6:5d:bb:d0:d8:27:9a:6a:9c:a6:fc:f2:21:da:
09:f8:ef:2a:4a:cc:cd:54:99:4a:95:50:d2:67:78:5b:a6:23:
54:70:62:73:b8:e9:4c:b2:a2:6f:fd:70:e3:b9:34:21:cf:d5:
c9:ee:45:d3:45:ff:ba:2d:3f:35:71:77:95:07:ba:60:c9:b6:
b1:51:39:4b:0b:f5:e7:ce:09:cc:21:28:99:87:2a:a4:79:18:
e0:54:b3:b3:67:be:29:f2:b7:aa:b0:9c:61:0e:fd:31:3f:ad:
88:bb:21:26:99:95:81:99:ae:38:2f:84:07:20:60:30:8b:ec:
c5:db:7f:12:84:ba:e5:e9:56:95:8e:b9:0c:b6:be:c6:fd:3b:
1b:21:af:c0:e2:50:88:c7:5b:ee:2d:47:8f:d5:6d:e9:9d:a8:
14:d4:c2:9e:01:a1:53:85:c8:b0:7a:01:c5:1c:c5:0b:8f:33:
a7:2b:36:c9:79:24:8e:0a:22:c5:38:c0:b5:be:19:7d:ed:1e:
da:c4:f2:02:0f:05:e1:c0:cc:1e:80:7e:3c:dd:e8:73:67:4f:
68:cf:60:89:6d:c4:6c:24:33:06:c1:c6:89:c7:7d:75:03:fc:
ec:6d:36:8a:93:ed:d7:0d:cc:9b:47:58:65:a0:43:b6:f6:11:
6e:ee:5c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:37:27 2026 by rpki-client