Route Origin Authorization
$ rpki-client -vvvf rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa
File: 3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (raw, json)
Hash identifier: tZXzTcXQqryIoPVMwIE/NSuQbW0FRusewtzZ72VfBAI=
Subject key identifier: 3B:79:55:3F:7F:F1:7A:4B:45:F2:3A:EC:C8:82:8A:FC:34:A8:35:46
Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Certificate serial: 3FF23BF4C69ACB8554AD50086B69A09B5BA8E701
Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa
Signing time: Thu 10 Sep 2026 12:00:01 +0000
ROA not before: Thu 10 Sep 2026 11:55:01 +0000
ROA not after: Thu 09 Sep 2027 12:00:01 +0000
asID: 45163
IP address blocks: 203.147.108.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 11 Sep 2026 00:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:f2:3b:f4:c6:9a:cb:85:54:ad:50:08:6b:69:a0:9b:5b:a8:e7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Validity
Not Before: Sep 10 11:55:01 2026 GMT
Not After : Sep 9 12:00:01 2027 GMT
Subject: CN=3B79553F7FF17A4B45F23AECC8828AFC34A83546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:73:f5:3d:77:11:b1:79:99:76:88:b1:c1:79:
de:07:6f:08:75:29:a7:5e:da:54:03:c1:33:65:67:
8c:a6:26:9b:57:0d:d2:6c:4d:fe:a7:d0:07:28:6f:
05:9f:b2:3f:93:f3:20:cf:48:87:85:da:70:15:81:
73:fd:a5:12:9f:69:5a:a4:60:14:e0:5f:3c:c2:4a:
35:d1:b8:35:ff:84:4b:f8:4a:ea:b2:33:4a:52:75:
12:ca:e3:ac:e6:b9:5d:ac:a0:45:de:e6:70:5f:d9:
58:3c:90:5d:8d:27:e9:97:1d:1d:0c:5e:b5:e2:83:
47:fd:6e:00:89:8a:86:bd:7b:e2:ca:2f:33:27:e3:
f8:a4:0b:52:1b:d3:d3:e3:3f:3c:fe:dd:e1:99:f4:
69:fb:a0:a8:61:00:5e:66:c0:0f:dd:25:7c:b0:fa:
49:d3:23:1f:1b:62:9b:72:8d:e2:23:66:1e:d2:6e:
d5:1e:52:a6:d6:55:ff:3b:55:7e:34:0d:5d:e2:f7:
7b:14:6d:2d:75:9f:24:f3:d0:d3:ae:77:7f:76:a0:
e0:5b:1e:5c:d7:b8:00:f9:4e:b5:35:10:3c:6c:78:
96:c2:47:04:71:f9:92:23:0e:7c:1e:65:50:e4:7e:
8c:c2:15:9b:69:87:87:91:df:b6:e7:7f:5e:c1:7c:
7b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:79:55:3F:7F:F1:7A:4B:45:F2:3A:EC:C8:82:8A:FC:34:A8:35:46
X509v3 Authority Key Identifier:
keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.147.108.0/23
Signature Algorithm: sha256WithRSAEncryption
21:3c:2e:9e:5e:e5:e3:8a:b5:6d:b0:3d:73:cb:98:48:2d:38:
05:37:4f:86:e6:7c:79:0f:1b:ab:35:d5:02:37:26:8f:cf:30:
29:ab:34:fa:c9:45:f3:89:d0:df:ee:43:2d:d8:a7:f0:67:1a:
f5:4c:1f:1a:b2:8c:c5:1d:fe:b0:b0:e5:8a:a2:08:2a:b1:87:
39:8d:98:5d:a6:93:44:8b:a7:1a:c8:a2:e7:94:55:67:28:84:
e2:d1:03:29:b7:72:86:f6:27:59:4a:b9:fe:34:b7:2c:96:3f:
38:e1:84:5f:b4:93:3a:0d:42:cc:72:72:dc:d5:e7:9e:cb:9f:
2b:95:a7:2c:01:1f:87:fa:8b:8a:c6:fa:de:3c:60:f3:1f:7d:
44:07:df:2a:0d:de:c7:61:ee:b6:a8:b1:73:3c:6e:b8:0b:cf:
83:6c:49:e3:b9:e7:33:33:60:8a:58:f5:b1:06:5c:b7:3a:a0:
04:4c:a2:7b:31:3d:55:98:44:81:16:a8:1c:1a:0d:80:d6:2d:
87:85:aa:e0:0a:a6:e1:27:f0:4a:77:c4:0d:4c:66:60:81:49:
c0:82:1a:fc:cd:7c:42:7d:3b:73:92:1e:78:0c:23:99:64:bb:
85:04:d1:7e:5c:27:38:4e:e5:83:c4:86:1b:0f:a5:37:7e:0a:
c0:e3:17:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:32:54 2026 by rpki-client