Route Origin Authorization
$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa
File: 3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa (raw, json)
Hash identifier: gjxetdU1gVkaep7WfcAWKMpD910g/DFpEB00M3o4vak=
Subject key identifier: E9:6A:01:95:15:95:F2:26:F1:38:30:52:DE:35:87:CE:B9:08:3F:52
Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Certificate serial: 77EE164AAED7A156DC280C47D11B4AD0E2E289DE
Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa
Signing time: Tue 14 Jul 2026 17:35:59 +0000
ROA not before: Tue 14 Jul 2026 17:30:59 +0000
ROA not after: Tue 13 Jul 2027 17:35:59 +0000
asID: 24021
IP address blocks: 203.147.109.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:ee:16:4a:ae:d7:a1:56:dc:28:0c:47:d1:1b:4a:d0:e2:e2:89:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Validity
Not Before: Jul 14 17:30:59 2026 GMT
Not After : Jul 13 17:35:59 2027 GMT
Subject: CN=E96A01951595F226F1383052DE3587CEB9083F52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e3:f5:9a:3e:83:9d:47:ab:eb:97:85:86:93:
3f:7d:de:bb:06:a5:a6:38:3a:0a:4f:98:e5:82:9d:
b6:04:1f:64:01:46:da:9b:48:08:ee:d4:84:51:6d:
ee:11:2d:94:a7:93:e8:a6:59:06:25:d9:a6:f5:21:
a9:0e:e7:58:5f:0a:5f:e2:49:3e:67:cc:f7:b1:e7:
10:0b:ee:cd:4f:26:6b:fe:34:5f:41:4f:08:81:7a:
25:42:1d:0b:57:05:1d:bf:d5:7e:72:f5:e9:6e:c4:
d5:f9:37:5a:6b:87:8e:c4:b9:8b:eb:b1:ec:d4:ad:
e8:41:3a:d9:35:bb:2b:60:d1:8e:3d:92:7d:8e:e4:
87:60:4f:bd:2a:b8:51:54:d9:c6:f8:66:0c:bf:a7:
80:a1:93:a6:be:47:69:2a:77:b7:e6:f9:85:2e:16:
bb:61:33:1f:bc:fb:9c:c0:3c:5d:04:c9:e1:a8:c7:
dc:f0:df:9b:24:44:a8:54:b2:a8:68:4f:d4:da:a6:
5d:ee:72:2e:cd:5e:81:61:a3:06:c9:5b:de:e7:2d:
9b:ca:b0:7e:85:b3:04:b2:6c:6b:02:a9:0e:d6:2f:
65:0b:1a:18:f5:4d:e5:a2:55:ef:96:f0:dd:1c:62:
fc:88:7d:25:fe:17:9c:bd:6f:eb:e9:e9:e6:08:86:
40:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6A:01:95:15:95:F2:26:F1:38:30:52:DE:35:87:CE:B9:08:3F:52
X509v3 Authority Key Identifier:
keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130392e302f32342d3234203d3e203234303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.147.109.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:e8:ef:05:28:19:2c:b2:2f:de:7e:4d:7b:f5:bd:7d:0e:fe:
da:96:f9:e9:1d:90:e7:86:f9:5d:c6:b9:23:e4:23:16:82:ce:
6f:71:f7:81:4c:27:c4:11:46:75:e3:5a:57:0c:a2:d9:34:aa:
5a:64:2f:08:16:c1:01:45:e9:48:78:42:c0:51:e7:de:a8:09:
7f:de:67:ba:d7:f8:1d:39:5a:10:6c:a2:57:ee:f1:ce:be:41:
77:6b:83:c6:df:2e:da:fb:43:22:d5:1b:ac:b0:0c:bd:9a:63:
a4:bb:03:a5:14:a2:2e:ac:16:6e:ff:01:78:94:41:78:4a:91:
d8:92:00:3a:da:e8:9d:04:93:44:51:35:87:13:5e:53:63:06:
bb:93:f7:ba:88:4c:28:92:71:8b:fb:13:f3:02:f4:14:50:50:
0c:a7:0d:05:8a:44:89:f5:8e:19:a9:26:1f:1c:d7:d8:f1:f4:
84:7c:69:d8:5e:d3:e7:a6:53:73:21:b8:0d:c8:84:21:b7:22:
24:4e:71:36:c3:42:67:67:03:9d:93:31:6a:b5:76:f7:ba:f7:
41:03:d7:b6:2f:f9:12:a5:ef:07:b1:e3:91:b8:f6:8d:85:c1:
0e:cb:ee:cc:0e:0b:93:cf:d0:f4:20:dd:3f:bf:7d:c2:97:2a:
52:2a:87:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:55:03 2026 by rpki-client