Route Origin Authorization
$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa
File: 3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa (raw, json)
Hash identifier: rBxsOWAFK32+4DqMejppx9mTbJ7rbHyz936L7glyXQ8=
Subject key identifier: 8B:8E:35:16:D4:33:76:EF:75:BC:73:AD:0D:37:1A:03:DF:4A:AC:15
Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Certificate serial: 3B9ABE1683B2963F8D103BC7A91A563495D31EC3
Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa
Signing time: Sat 26 Apr 2025 12:00:01 +0000
ROA not before: Sat 26 Apr 2025 11:55:01 +0000
ROA not after: Sat 25 Apr 2026 12:00:01 +0000
asID: 45163
IP address blocks: 203.147.108.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 28 Apr 2025 00:00:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:9a:be:16:83:b2:96:3f:8d:10:3b:c7:a9:1a:56:34:95:d3:1e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Validity
Not Before: Apr 26 11:55:01 2025 GMT
Not After : Apr 25 12:00:01 2026 GMT
Subject: CN=8B8E3516D43376EF75BC73AD0D371A03DF4AAC15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3d:f6:51:10:2c:1e:21:65:53:e6:48:1e:14:
a3:71:b3:97:de:1f:70:3e:6a:58:8c:3b:f3:26:d3:
fe:20:74:20:b0:1f:e5:46:76:d6:16:17:a1:7f:46:
71:42:e4:59:8d:31:2a:12:63:71:ef:82:ba:e6:a4:
0f:b3:e1:92:f5:74:ad:ed:b3:50:b7:14:af:d4:2d:
1c:23:ae:70:2f:5a:92:f8:e4:29:00:29:05:b3:db:
b0:42:14:52:27:bd:2c:0a:c0:35:87:a0:88:78:0c:
69:63:20:11:92:f8:ab:3c:e1:01:50:5c:d2:df:54:
06:e2:ee:db:3a:55:1d:85:16:0f:d2:5d:4c:10:60:
1e:f7:0e:c9:12:19:64:93:53:4e:93:54:e2:09:4a:
7a:bc:de:6e:40:31:07:85:f1:cb:14:f2:c7:3d:60:
35:70:16:96:56:90:98:9a:73:42:7f:31:ab:1a:95:
d4:e9:30:36:da:80:90:fd:1e:b6:a8:6a:e2:62:09:
bd:63:7d:55:96:8a:76:b3:3b:41:d4:a3:f1:5c:03:
2d:87:c6:94:6f:8a:1f:90:c3:61:08:d9:19:26:e3:
de:47:48:88:9e:d0:17:2b:14:e8:03:12:31:7a:c8:
f3:de:83:d0:0d:60:e7:4e:16:eb:83:43:5c:2e:72:
c4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8E:35:16:D4:33:76:EF:75:BC:73:AD:0D:37:1A:03:DF:4A:AC:15
X509v3 Authority Key Identifier:
keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203435313633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.147.108.0/23
Signature Algorithm: sha256WithRSAEncryption
95:a8:3c:e1:d4:7d:04:79:97:b6:75:66:5d:0c:2a:2f:fd:6b:
c7:22:c0:57:60:67:1b:35:6d:eb:20:64:d1:7c:6d:ec:ec:99:
99:67:6e:70:ae:40:98:ec:e9:45:a4:2f:07:3a:b2:c4:5a:6e:
e0:d3:d9:4d:f7:3f:b1:d9:f3:80:10:27:87:f3:bb:09:35:5c:
26:2a:c6:3a:d7:80:a1:0c:79:d5:1b:93:74:4d:50:b3:6b:22:
a0:be:7e:a4:95:76:0a:ee:22:af:36:b1:c1:77:4e:1d:4f:7b:
5e:8f:9c:25:13:8a:46:88:b7:38:ce:da:9c:52:8b:06:d2:6d:
b2:6a:6d:12:93:6c:d6:5d:34:19:f1:b1:64:82:cb:2a:4d:49:
a4:4f:ce:7b:67:b9:e3:01:fa:fd:3a:e4:e5:86:4c:cb:36:4c:
93:00:18:43:90:a8:f3:1c:6e:8f:cb:f6:31:90:55:dd:ab:e0:
26:61:93:88:8c:8d:0b:32:2b:1a:cb:d1:ea:17:f4:f1:19:d7:
f9:ed:8b:7d:84:b4:61:22:5b:e3:a2:46:96:78:39:34:45:b8:
4d:d2:c0:0c:6c:59:06:91:2d:b4:87:f6:32:36:df:37:b0:f5:
79:58:76:4e:df:fc:4c:1e:d9:6c:25:37:f5:71:d7:80:55:eb:
8c:32:03:15
-----BEGIN CERTIFICATE-----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Generated at Mon Apr 28 06:09:49 2025 by rpki-client on console.sobornost.net