Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/A235609A1B2011F0A4452258C4F9AE02.roa
File: A235609A1B2011F0A4452258C4F9AE02.roa (raw, json)
Hash identifier: D0FZbKeggVGedd4I/6c7H0wj4SgYYLF7P6x7xC6eBHI=
Subject key identifier: 51:9B:83:8C:89:7C:81:29:74:65:3B:F6:74:D6:B2:64:6E:46:5E:EB
Certificate issuer: /CN=A9170304/serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0
Certificate serial: 349E
Authority key identifier: AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/A235609A1B2011F0A4452258C4F9AE02.roa
Signing time: Thu 17 Apr 2025 00:14:40 +0000
ROA not before: Thu 17 Apr 2025 00:14:40 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 198949
IP address blocks: 147.41.0.0/17 maxlen: 17
147.41.0.0/20 maxlen: 20
147.41.16.0/20 maxlen: 20
147.41.32.0/19 maxlen: 19
147.41.64.0/18 maxlen: 18
147.41.128.0/17 maxlen: 17
147.41.128.0/18 maxlen: 18
147.41.192.0/19 maxlen: 19
147.41.224.0/20 maxlen: 20
147.41.240.0/20 maxlen: 20
147.109.0.0/16 maxlen: 16
147.109.124.0/24 maxlen: 24
147.109.192.0/21 maxlen: 21
147.109.208.0/21 maxlen: 21
147.109.216.0/21 maxlen: 21
192.26.232.0/24 maxlen: 24
192.107.101.0/24 maxlen: 24
192.190.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Apr 2025 00:24:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13470 (0x349e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170304, serialNumber=AD270FDE99B1F1069DAB8EF7A576AA2C2AF2C6F0
Validity
Not Before: Apr 17 00:14:40 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=680047f0-5dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:77:ca:d7:d4:d6:8c:56:5e:02:83:c4:85:2d:
75:11:13:94:80:38:4c:f7:a4:c2:94:b9:8e:dc:87:
f7:b5:0e:88:65:66:3a:1b:78:ec:da:33:0e:2a:a9:
1d:17:a6:2f:1a:7c:78:b1:54:38:c9:41:03:c1:89:
f6:b6:84:73:b9:74:6a:17:7b:53:e9:36:b8:5e:4c:
d8:21:21:2a:f9:4a:1c:7b:2e:23:12:1b:32:09:3d:
3f:e9:f1:80:6d:44:f7:e9:58:2c:4c:8e:ce:f8:8c:
3e:19:59:6a:75:d4:fa:71:f6:79:eb:f5:af:0e:78:
99:b0:6c:5e:ce:9b:30:36:cf:e6:fe:21:ba:a5:9e:
16:98:b9:d9:90:54:41:64:2d:d4:f0:7e:2a:ed:28:
ee:e3:9b:d4:13:a7:a0:18:fe:d1:89:65:bc:a8:4c:
6f:da:d7:24:74:ec:18:1a:e8:1f:c3:60:05:a7:ad:
b9:d0:8d:e1:09:e7:90:b7:6f:b5:19:ca:cf:84:31:
d6:19:e2:78:c8:18:e9:ff:7b:1e:c2:01:5c:b3:7d:
db:81:e8:12:9d:95:b5:6f:5b:c5:d8:79:38:7b:20:
1d:84:99:38:9d:fa:0f:aa:5a:5d:7e:b1:ea:9c:b2:
76:7d:d2:1f:0a:20:90:c0:7f:47:1b:0a:70:2c:6c:
1b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:9B:83:8C:89:7C:81:29:74:65:3B:F6:74:D6:B2:64:6E:46:5E:EB
X509v3 Authority Key Identifier:
keyid:AD:27:0F:DE:99:B1:F1:06:9D:AB:8E:F7:A5:76:AA:2C:2A:F2:C6:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/rScP3pmx8Qadq473pXaqLCryxvA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rScP3pmx8Qadq473pXaqLCryxvA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170304/9EF411301D8E11E2B18226ED08B02CD2/A235609A1B2011F0A4452258C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
147.41.0.0/16
147.109.0.0/16
192.26.232.0/24
192.107.101.0/24
192.190.61.0/24
Signature Algorithm: sha256WithRSAEncryption
20:0d:19:6d:ba:48:93:d6:ae:12:e8:b2:2f:75:ed:ab:18:e7:
45:85:5b:7b:13:d8:8a:11:8e:d5:bb:b8:c6:a7:c1:91:27:20:
ab:40:c5:f4:64:c8:21:ff:7b:30:ea:74:f8:08:9c:e0:32:e9:
bc:49:c8:15:3b:dd:b1:67:d2:99:7f:2d:30:19:d8:d9:88:f7:
2f:0a:8d:e7:bb:e8:5e:9f:e3:86:f6:9f:42:82:2c:94:ba:bf:
93:06:71:b3:f0:5f:13:34:56:d8:a5:5e:d9:c4:98:f4:4c:41:
bf:25:db:50:53:d2:ee:4b:86:aa:d0:3e:e5:39:a0:2b:5e:57:
84:d5:ff:22:73:b5:d9:82:45:3b:47:14:aa:87:e4:7a:0e:0e:
cf:34:1b:21:33:4d:c4:e6:82:46:7d:94:e4:ce:2a:f9:77:f2:
a7:e4:a8:4b:76:f2:3d:8f:4d:95:f7:29:6c:29:b9:91:75:fe:
a7:86:9b:3b:43:fa:56:1b:a6:fc:08:00:09:7c:93:c2:f6:e9:
cb:df:e0:b7:11:60:a4:a9:01:13:06:09:f0:f0:f0:07:9f:0b:
3c:0c:73:78:0b:af:03:c2:42:87:64:a2:5a:8a:e7:73:5b:ca:
b7:b3:de:ee:d3:6f:7c:70:58:6d:e4:95:d0:68:b3:34:da:78:
74:7b:b9:a5
-----BEGIN CERTIFICATE-----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Generated at Thu Apr 17 04:18:52 2025 by rpki-client on console.sobornost.net