Route Origin Authorization
$ rpki-client -vvf rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa
File: 3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa (raw, json)
Hash identifier: zvSp0xOlM8iVeuSFLabxgyat3GHI5E/U/vyIvDF0nso=
Subject key identifier: A0:78:D9:50:C5:0D:6D:56:BB:A4:5F:C8:2F:80:58:AA:B0:F1:FD:1B
Certificate issuer: /CN=A91872ED0001/serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Certificate serial: 4C224DFDB7E4EC44EE8F0FCF65EFE9765DF41840
Authority key identifier: C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject info access: rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa
Signing time: Mon 14 Apr 2025 00:00:01 +0000
ROA not before: Sun 13 Apr 2025 23:55:01 +0000
ROA not after: Mon 13 Apr 2026 00:00:01 +0000
asID: 24021
IP address blocks: 203.147.108.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 15 Apr 2025 12:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:22:4d:fd:b7:e4:ec:44:ee:8f:0f:cf:65:ef:e9:76:5d:f4:18:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91872ED0001, serialNumber=C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1
Validity
Not Before: Apr 13 23:55:01 2025 GMT
Not After : Apr 13 00:00:01 2026 GMT
Subject: CN=A078D950C50D6D56BBA45FC82F8058AAB0F1FD1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ef:35:f9:08:09:77:2a:c7:40:68:7c:af:66:
e7:98:f5:87:a7:17:00:71:b3:33:ea:9e:2e:4f:7c:
5a:12:8b:bf:a0:90:82:44:91:61:ff:23:1a:16:5a:
f1:1f:2a:e4:da:e1:27:bf:bb:ba:99:c6:1a:b6:14:
56:e4:39:6b:31:ec:8f:6e:51:cf:5d:32:f4:ba:28:
9e:4e:24:4e:65:8c:f5:3a:0b:0d:0c:28:aa:a5:66:
5d:7d:23:22:e0:cd:45:52:8c:e7:57:7b:85:f2:52:
e8:c1:e5:4b:42:86:57:be:ee:95:63:7b:05:a6:45:
2f:90:fa:c5:00:94:7a:1e:88:3b:b6:8d:97:c7:55:
5d:2f:66:8b:aa:1a:1d:10:18:c2:b4:7b:2a:47:d7:
28:34:78:67:0b:2a:02:3d:81:f0:7c:9c:80:e6:2a:
2a:00:37:35:3c:f0:b5:1f:96:e5:51:84:f4:93:ce:
d5:04:09:56:c6:10:75:17:fc:a4:b2:32:f8:bc:8b:
de:40:5d:ef:d5:5f:3a:96:bd:0b:d0:88:df:68:39:
0d:c4:b9:e5:4a:97:f2:53:8a:a6:0a:2d:31:f0:3f:
8f:0e:ad:41:12:63:71:e0:6c:86:db:f7:89:bc:d3:
33:6c:4f:8d:e9:30:fd:4f:5b:7f:9a:1b:7b:00:22:
e6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:78:D9:50:C5:0D:6D:56:BB:A4:5F:C8:2F:80:58:AA:B0:F1:FD:1B
X509v3 Authority Key Identifier:
keyid:C0:90:6A:19:A7:DE:34:9B:FA:2B:32:B3:C3:EB:4C:2D:17:76:0C:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/C0906A19A7DE349BFA2B32B3C3EB4C2D17760CE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wJBqGafeNJv6KzKzw-tMLRd2DOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.rand.apnic.net/repo/A91872ED0001/0/3230332e3134372e3130382e302f32332d3233203d3e203234303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.147.108.0/23
Signature Algorithm: sha256WithRSAEncryption
29:85:11:77:11:58:68:d4:63:dc:e9:de:e1:8e:de:c9:27:55:
1e:0e:5d:4b:8a:a7:e3:fe:2f:14:9c:5e:92:33:e8:61:bd:ef:
fb:1d:9e:e6:f6:e8:9d:36:57:02:83:3d:df:cc:54:4a:07:46:
d1:e7:ed:9d:c3:95:c7:7d:ce:b7:6c:62:6a:d2:cc:e5:dc:46:
60:65:08:e0:01:83:f5:1f:9b:b4:25:8e:8c:bd:a5:b4:56:aa:
cb:16:38:a2:33:0b:52:25:99:02:3b:ee:36:e3:62:b4:f2:24:
03:de:6c:b3:f5:92:a1:f5:8f:4d:ec:82:72:8a:f8:3c:00:38:
e8:78:42:15:7b:85:b2:b9:1e:5f:cd:12:1c:6c:54:a1:cd:e9:
65:40:07:37:07:95:4c:ba:26:3a:0e:42:e4:c3:2d:ba:fe:64:
d7:62:65:04:a3:87:17:9d:72:53:04:ef:68:e5:4b:d9:8c:8b:
29:6f:f9:10:a0:68:17:eb:9c:f5:99:39:c8:3c:1e:ca:70:62:
fd:32:3e:92:ac:b3:3e:46:98:6c:ca:cf:c4:ca:8b:00:7e:83:
a0:08:24:b4:b9:27:e4:fe:b2:50:f5:2d:4c:44:ea:30:fd:e7:
f2:ed:e6:22:dc:0b:fc:db:e7:e3:68:d7:ff:7a:e1:96:b4:ea:
f5:c6:4b:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgIUTCJN/bfk7ETujw/PZe/pdl30GEAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODcyRUQwMDAxMTEwLwYDVQQFEyhDMDkwNkExOUE3
REUzNDlCRkEyQjMyQjNDM0VCNEMyRDE3NzYwQ0UxMB4XDTI1MDQxMzIzNTUwMVoX
DTI2MDQxMzAwMDAwMVowMzExMC8GA1UEAxMoQTA3OEQ5NTBDNTBENkQ1NkJCQTQ1
RkM4MkY4MDU4QUFCMEYxRkQxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANzvNfkICXcqx0BofK9m55j1h6cXAHGzM+qeLk98WhKLv6CQgkSRYf8jGhZa
8R8q5NrhJ7+7upnGGrYUVuQ5azHsj25Rz10y9Loonk4kTmWM9ToLDQwoqqVmXX0j
IuDNRVKM51d7hfJS6MHlS0KGV77ulWN7BaZFL5D6xQCUeh6IO7aNl8dVXS9mi6oa
HRAYwrR7KkfXKDR4ZwsqAj2B8HycgOYqKgA3NTzwtR+W5VGE9JPO1QQJVsYQdRf8
pLIy+LyL3kBd79VfOpa9C9CI32g5DcS55UqX8lOKpgotMfA/jw6tQRJjceBshtv3
ibzTM2xPjekw/U9bf5obewAi5lcCAwEAAaOCAgkwggIFMB0GA1UdDgQWBBSgeNlQ
xQ1tVrukX8gvgFiqsPH9GzAfBgNVHSMEGDAWgBTAkGoZp940m/orMrPD60wtF3YM
4TAOBgNVHQ8BAf8EBAMCB4AwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtp
LnJhbmQuYXBuaWMubmV0L3JlcG8vQTkxODcyRUQwMDAxLzAvQzA5MDZBMTlBN0RF
MzQ5QkZBMkIzMkIzQzNFQjRDMkQxNzc2MENFMS5jcmwwfgYIKwYBBQUHAQEEcjBw
MG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkv
QjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvd0pCcUdhZmVOSnY2S3pL
enctdE1MUmQyRE9FLmNlcjCBiAYIKwYBBQUHAQsEfDB6MHgGCCsGAQUFBzALhmxy
c3luYzovL3Jwa2kucmFuZC5hcG5pYy5uZXQvcmVwby9BOTE4NzJFRDAwMDEvMC8z
MjMwMzMyZTMxMzQzNzJlMzEzMDM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIz
NDMwMzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAcuTbDANBgkqhkiG9w0BAQsFAAOCAQEAKYURdxFY
aNRj3One4Y7eySdVHg5dS4qn4/4vFJxekjPoYb3v+x2e5vbonTZXAoM938xUSgdG
0eftncOVx33Ot2xiatLM5dxGYGUI4AGD9R+btCWOjL2ltFaqyxY4ojMLUiWZAjvu
NuNitPIkA95ss/WSofWPTeyCcor4PAA46HhCFXuFsrkeX80SHGxUoc3pZUAHNweV
TLomOg5C5MMtuv5k12JlBKOHF51yUwTvaOVL2YyLKW/5EKBoF+uc9Zk5yDweynBi
/TI+kqyzPkaYbMrPxMqLAH6DoAgktLkn5P6yUPUtTETqMP3n8u3mItwL/Nvn42jX
/3rhlrTq9cZL6A==
-----END CERTIFICATE-----
Generated at Tue Apr 15 21:32:44 2025 by rpki-client