Route Origin Authorization
$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa
File: 3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa (raw, json)
Hash identifier: pXU5vn2wZaGhdkg63jo+HVbWd8AAV6cZg7n1bhb4dAs=
Subject key identifier: EC:11:34:C6:07:5C:E2:52:B4:8A:F7:E6:2D:38:8B:0A:61:E8:25:B3
Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Certificate serial: 51150ACCD0CAF2DB67406009E01232AB5F46C751
Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa
Signing time: Tue 14 Jul 2026 17:35:59 +0000
ROA not before: Tue 14 Jul 2026 17:30:59 +0000
ROA not after: Tue 13 Jul 2027 17:35:59 +0000
asID: 24021
IP address blocks: 203.147.108.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:15:0a:cc:d0:ca:f2:db:67:40:60:09:e0:12:32:ab:5f:46:c7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Validity
Not Before: Jul 14 17:30:59 2026 GMT
Not After : Jul 13 17:35:59 2027 GMT
Subject: CN=EC1134C6075CE252B48AF7E62D388B0A61E825B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:76:1a:4c:a4:cd:b8:9b:b2:59:28:eb:c0:27:
20:3b:56:2a:1e:08:5b:2e:43:79:63:7c:e7:33:1e:
54:1a:4e:30:9a:5b:3f:8b:f0:2d:76:e8:15:0f:99:
ce:6b:e7:1f:61:95:ee:74:8d:38:73:ac:5a:24:22:
7d:3e:9e:d8:1c:55:5b:b5:cf:13:9a:44:32:d1:fc:
1a:bc:8b:06:d4:45:43:dd:eb:0b:10:12:75:c3:25:
24:43:72:ce:1a:ed:ef:e0:82:c2:25:00:91:0e:8e:
c7:16:df:b7:99:87:da:4c:f6:80:17:55:bd:82:e0:
06:34:bf:69:82:6a:0d:89:37:b0:b4:07:4d:37:63:
4c:f6:f5:5d:f7:47:0f:f7:f9:12:c5:df:70:bf:e4:
62:a4:7c:78:51:b9:d5:3e:80:b4:e1:87:e5:c7:d3:
ea:32:55:0b:70:64:77:19:d3:06:27:d3:3e:a8:b5:
fd:e8:bc:1b:70:44:a1:ff:bd:8d:5c:5b:58:f2:c9:
f1:83:58:2d:1a:13:b7:7a:c2:44:1e:90:0b:19:01:
bc:83:91:36:1c:1d:8b:0d:ba:9f:23:5b:7a:17:04:
8d:22:f0:a1:f3:31:dc:66:0d:48:4a:fd:d2:29:98:
72:94:92:7b:20:1b:2a:8d:85:24:ec:0e:d3:9c:d1:
ec:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:11:34:C6:07:5C:E2:52:B4:8A:F7:E6:2D:38:8B:0A:61:E8:25:B3
X509v3 Authority Key Identifier:
keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32342d3234203d3e203234303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.147.108.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c1:d4:e6:c8:a8:29:ba:7e:70:c9:ca:67:95:a4:e2:0e:bf:
01:5c:55:a1:94:70:b5:77:51:da:09:32:b3:5a:93:26:49:48:
72:3e:fb:47:59:f4:63:6f:11:48:82:a5:58:6c:b7:a2:37:28:
c6:ae:09:83:83:c3:da:9a:d1:03:22:f5:4c:0b:77:90:64:a5:
84:8a:62:f5:85:bb:47:9d:48:f9:75:aa:d4:e6:74:a2:3d:65:
5f:85:40:50:03:39:50:ed:e1:01:6d:a8:69:e2:21:81:ad:04:
1c:8c:9c:59:c0:d6:c4:97:b7:8c:67:cc:23:d5:a0:9f:61:8d:
88:85:d4:9e:aa:d9:74:c9:f9:12:a0:21:f8:4c:44:92:df:60:
c9:cf:e8:df:be:49:c7:54:35:5f:d6:c4:cd:e5:19:36:a4:07:
d7:b9:9e:2d:c3:7e:f8:b6:82:81:f6:61:24:69:fd:46:e7:b5:
51:26:63:34:44:72:8a:92:5e:99:13:fb:f6:f0:82:28:f3:b0:
0e:0a:62:20:a4:3e:03:b2:a6:27:3c:3c:65:a5:48:ce:b0:68:
20:a4:70:c0:e7:6c:a0:e5:f0:29:7a:8a:b2:c5:19:d6:26:90:
fb:fa:1c:82:36:f5:4f:98:90:66:70:46:a6:67:eb:4b:21:eb:
cf:c5:8d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:42:29 2026 by rpki-client