Route Origin Authorization
$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/323430383a323030303a3a2f32342d3234203d3e2034363038.roa
File: 323430383a323030303a3a2f32342d3234203d3e2034363038.roa (raw, json)
Hash identifier: L5nXEZk8u99uDUdvi4n/OSkLKtMNAHr8KHN8EzMXIG8=
Subject key identifier: 51:D7:AD:60:4C:A2:2A:7E:5B:9D:3D:35:BC:A6:69:73:9D:52:2C:A4
Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Certificate serial: 369316AF8A9A8BA18F02F542BE0341DBF5023DDC
Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/323430383a323030303a3a2f32342d3234203d3e2034363038.roa
Signing time: Tue 14 Jul 2026 16:35:59 +0000
ROA not before: Tue 14 Jul 2026 16:30:59 +0000
ROA not after: Tue 13 Jul 2027 16:35:59 +0000
asID: 4608
IP address blocks: 2408:2000::/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:93:16:af:8a:9a:8b:a1:8f:02:f5:42:be:03:41:db:f5:02:3d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Validity
Not Before: Jul 14 16:30:59 2026 GMT
Not After : Jul 13 16:35:59 2027 GMT
Subject: CN=51D7AD604CA22A7E5B9D3D35BCA669739D522CA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:32:8f:ca:97:d4:1d:6d:6e:9e:ee:48:ac:93:
51:c0:e1:3e:7d:01:40:a3:c0:13:12:e6:b4:96:8b:
53:eb:a5:8f:ae:5f:e3:96:59:08:bd:6c:60:85:27:
78:70:f5:66:37:74:66:e6:53:b9:b8:17:b7:b2:bf:
a5:d3:51:9d:1b:62:f3:61:36:f2:0f:68:b3:5e:30:
4f:81:3f:f3:dd:c7:c3:e7:6e:5d:3c:31:a5:8d:59:
fe:a7:bf:74:1f:d4:bd:da:09:72:2e:08:b8:a0:66:
4c:8a:5d:0d:27:01:c3:5d:14:da:dc:03:bf:0e:cd:
5d:95:bf:5a:7a:3c:bd:cc:36:44:90:61:87:97:1c:
9f:8c:8b:c5:d2:f1:0c:c2:6a:9d:eb:0b:32:e0:4d:
66:f3:20:51:33:b5:f6:76:0a:7a:0f:b6:bd:30:34:
da:71:a9:07:32:22:91:c0:9f:0c:39:16:88:5a:93:
d1:fb:09:76:86:fc:59:2a:2b:22:9f:00:a0:c3:53:
81:76:9c:45:6e:40:78:de:26:2c:c3:2a:a8:19:8e:
a8:98:46:f9:cb:8f:61:a7:42:35:2e:16:79:d9:20:
22:d3:de:2d:c5:69:de:9e:dd:84:a0:38:7f:c1:87:
3a:3b:f7:84:72:75:ca:98:cd:57:a3:b7:1e:d7:4e:
b5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D7:AD:60:4C:A2:2A:7E:5B:9D:3D:35:BC:A6:69:73:9D:52:2C:A4
X509v3 Authority Key Identifier:
keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/323430383a323030303a3a2f32342d3234203d3e2034363038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2408:2000::/24
Signature Algorithm: sha256WithRSAEncryption
0e:54:02:2e:b8:ef:87:31:06:73:23:b0:d0:ac:a7:ba:29:76:
2c:77:93:79:5a:04:02:06:0e:e1:13:f9:82:c2:4d:28:62:1b:
57:b1:62:7b:f7:bd:bb:c5:b5:68:d6:21:ca:ea:e7:6c:ee:d6:
48:d8:4c:d4:f5:11:35:62:67:52:61:4b:f3:4f:65:fb:9e:28:
4d:ff:d7:55:96:15:b8:25:3d:a9:94:7d:c1:e4:f4:00:50:b8:
f6:bb:08:5f:16:c9:43:f8:5e:96:98:6d:47:60:9e:51:65:07:
96:51:7b:a8:f8:f3:ba:87:25:f8:b3:91:93:64:df:78:ac:6d:
f0:ba:7b:9d:67:30:9c:7b:97:ce:6c:bc:20:3f:4e:9e:08:1f:
04:25:92:3f:e5:67:04:26:c3:7c:cd:8e:35:b2:e2:c4:99:ae:
3c:4b:d2:1b:a3:69:64:4d:87:4b:b7:2e:d9:cf:13:03:4e:3f:
3b:89:81:7d:2a:5c:79:aa:af:72:72:b4:a2:52:fd:8e:ab:e7:
74:a3:b5:66:e5:7c:19:d4:05:36:ee:51:7e:04:ef:fd:6e:ea:
21:e0:02:a4:a6:b3:d1:7b:c2:00:11:70:d0:29:65:76:7f:92:
c9:67:f1:13:b8:ea:32:bc:48:dc:2e:cc:42:18:8c:18:ee:2c:
66:27:30:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:41:32 2026 by rpki-client