Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/DB6EDF225C7911F0882B0340C4F9AE02.roa
File: DB6EDF225C7911F0882B0340C4F9AE02.roa (raw, json)
Hash identifier: pnirEfDCjGDi4JeN7pvpuZD7VXwvhXmVpRcP/wX5Bl0=
Subject key identifier: 8F:3A:47:95:D6:4A:0B:57:E6:2B:FE:4E:7F:CC:28:58:A6:60:EF:F4
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2A6B
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/DB6EDF225C7911F0882B0340C4F9AE02.roa
Signing time: Wed 09 Jul 2025 04:04:49 +0000
ROA not before: Wed 09 Jul 2025 04:04:49 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 133481
IP address blocks: 49.0.64.0/19 maxlen: 24
49.0.96.0/20 maxlen: 24
49.228.0.0/16 maxlen: 16
49.228.0.0/24 maxlen: 24
49.228.1.0/24 maxlen: 24
49.228.2.0/24 maxlen: 24
49.228.3.0/24 maxlen: 24
49.228.4.0/24 maxlen: 24
49.228.5.0/24 maxlen: 24
49.228.6.0/24 maxlen: 24
49.228.7.0/24 maxlen: 24
49.228.8.0/22 maxlen: 24
49.228.12.0/24 maxlen: 24
49.228.13.0/24 maxlen: 24
49.228.14.0/24 maxlen: 24
49.228.15.0/24 maxlen: 24
49.228.16.0/22 maxlen: 22
49.228.20.0/22 maxlen: 22
49.228.24.0/22 maxlen: 22
49.228.28.0/24 maxlen: 24
49.228.29.0/24 maxlen: 24
49.228.30.0/24 maxlen: 24
49.228.31.0/24 maxlen: 24
49.228.32.0/22 maxlen: 22
49.228.36.0/22 maxlen: 22
49.228.40.0/22 maxlen: 22
49.228.44.0/24 maxlen: 24
49.228.45.0/24 maxlen: 24
49.228.46.0/24 maxlen: 24
49.228.47.0/24 maxlen: 24
49.228.48.0/22 maxlen: 22
49.228.52.0/24 maxlen: 24
49.228.53.0/24 maxlen: 24
49.228.54.0/24 maxlen: 24
49.228.55.0/24 maxlen: 24
49.228.56.0/22 maxlen: 24
49.228.60.0/24 maxlen: 24
49.228.61.0/24 maxlen: 24
49.228.62.0/24 maxlen: 24
49.228.63.0/24 maxlen: 24
49.228.64.0/22 maxlen: 22
49.228.68.0/22 maxlen: 22
49.228.72.0/22 maxlen: 22
49.228.76.0/24 maxlen: 24
49.228.77.0/24 maxlen: 24
49.228.78.0/24 maxlen: 24
49.228.79.0/24 maxlen: 24
49.228.80.0/24 maxlen: 24
49.228.81.0/24 maxlen: 24
49.228.82.0/24 maxlen: 24
49.228.83.0/24 maxlen: 24
49.228.84.0/24 maxlen: 24
49.228.85.0/24 maxlen: 24
49.228.86.0/24 maxlen: 24
49.228.87.0/24 maxlen: 24
49.228.88.0/24 maxlen: 24
49.228.89.0/24 maxlen: 24
49.228.90.0/24 maxlen: 24
49.228.91.0/24 maxlen: 24
49.228.92.0/24 maxlen: 24
49.228.93.0/24 maxlen: 24
49.228.94.0/24 maxlen: 24
49.228.95.0/24 maxlen: 24
49.228.96.0/22 maxlen: 22
49.228.100.0/22 maxlen: 22
49.228.104.0/22 maxlen: 22
49.228.108.0/22 maxlen: 22
49.228.112.0/20 maxlen: 20
49.228.112.0/22 maxlen: 22
49.228.116.0/22 maxlen: 22
49.228.120.0/22 maxlen: 22
49.228.124.0/22 maxlen: 22
49.228.128.0/24 maxlen: 24
49.228.129.0/24 maxlen: 24
49.228.130.0/24 maxlen: 24
49.228.131.0/24 maxlen: 24
49.228.132.0/23 maxlen: 23
49.228.134.0/23 maxlen: 23
49.228.136.0/22 maxlen: 22
49.228.140.0/24 maxlen: 24
49.228.141.0/24 maxlen: 24
49.228.142.0/24 maxlen: 24
49.228.143.0/24 maxlen: 24
49.228.144.0/22 maxlen: 22
49.228.148.0/22 maxlen: 22
49.228.152.0/22 maxlen: 22
49.228.156.0/24 maxlen: 24
49.228.157.0/24 maxlen: 24
49.228.158.0/24 maxlen: 24
49.228.159.0/24 maxlen: 24
49.228.160.0/22 maxlen: 22
49.228.164.0/22 maxlen: 22
49.228.168.0/22 maxlen: 22
49.228.172.0/24 maxlen: 24
49.228.173.0/24 maxlen: 24
49.228.174.0/24 maxlen: 24
49.228.175.0/24 maxlen: 24
49.228.176.0/22 maxlen: 22
49.228.180.0/24 maxlen: 24
49.228.181.0/24 maxlen: 24
49.228.182.0/24 maxlen: 24
49.228.183.0/24 maxlen: 24
49.228.184.0/22 maxlen: 22
49.228.188.0/24 maxlen: 24
49.228.189.0/24 maxlen: 24
49.228.190.0/24 maxlen: 24
49.228.191.0/24 maxlen: 24
49.228.192.0/22 maxlen: 22
49.228.196.0/22 maxlen: 22
49.228.200.0/22 maxlen: 22
49.228.204.0/24 maxlen: 24
49.228.205.0/24 maxlen: 24
49.228.206.0/24 maxlen: 24
49.228.207.0/24 maxlen: 24
49.228.208.0/24 maxlen: 24
49.228.209.0/24 maxlen: 24
49.228.210.0/24 maxlen: 24
49.228.211.0/24 maxlen: 24
49.228.212.0/24 maxlen: 24
49.228.213.0/24 maxlen: 24
49.228.214.0/24 maxlen: 24
49.228.215.0/24 maxlen: 24
49.228.216.0/24 maxlen: 24
49.228.217.0/24 maxlen: 24
49.228.218.0/24 maxlen: 24
49.228.219.0/24 maxlen: 24
49.228.220.0/24 maxlen: 24
49.228.221.0/24 maxlen: 24
49.228.222.0/24 maxlen: 24
49.228.223.0/24 maxlen: 24
49.228.224.0/22 maxlen: 22
49.228.228.0/22 maxlen: 22
49.228.232.0/22 maxlen: 22
49.228.236.0/22 maxlen: 22
49.228.240.0/20 maxlen: 20
49.228.240.0/22 maxlen: 22
49.228.244.0/22 maxlen: 22
49.228.248.0/22 maxlen: 22
49.228.252.0/22 maxlen: 22
49.229.100.0/24 maxlen: 24
49.229.101.0/24 maxlen: 24
49.229.120.0/21 maxlen: 21
49.229.128.0/20 maxlen: 20
49.229.144.0/21 maxlen: 21
58.64.48.0/20 maxlen: 24
58.64.64.0/18 maxlen: 24
58.136.0.0/17 maxlen: 24
58.136.128.0/17 maxlen: 24
110.49.3.0/24 maxlen: 24
110.49.114.0/23 maxlen: 24
110.49.116.0/22 maxlen: 24
110.49.120.0/22 maxlen: 24
110.49.124.0/24 maxlen: 24
203.146.174.0/24 maxlen: 24
203.146.182.0/24 maxlen: 24
203.146.185.0/24 maxlen: 24
203.146.199.0/24 maxlen: 24
203.146.207.0/24 maxlen: 24
2405:9800:b000::/36 maxlen: 48
Validation: Failed, certificate revoked on Tue 15 Jul 2025 02:08:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10859 (0x2a6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: Jul 9 04:04:49 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=686dea61-6fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7d:ba:e5:df:57:0d:cd:ee:50:ed:78:db:21:
ed:5e:96:e3:41:7f:26:d0:b6:82:62:e8:84:34:4c:
ce:d4:03:3b:51:3f:bb:fd:24:2d:30:6d:fb:6a:5e:
1e:96:54:94:ad:38:fc:5c:9a:d7:ff:ca:85:15:a6:
5f:1c:b7:8b:2d:57:05:78:31:24:84:a6:62:5d:ab:
f8:9d:ab:41:c4:06:0c:c9:6c:30:50:27:e0:c1:33:
93:96:20:ae:13:a8:d4:6f:18:78:a2:7f:6d:f5:ed:
dc:ae:ca:99:2a:76:34:08:74:16:8f:59:a9:0a:69:
ef:52:f6:0d:f5:80:84:98:89:ac:8b:73:7e:8e:4f:
1d:39:e9:2c:65:f7:5f:0d:6e:aa:64:d4:d1:fd:a8:
35:5c:ff:38:5b:20:bd:77:61:40:f5:19:e3:73:f7:
7a:a7:9e:2f:e7:d2:c1:ca:87:14:aa:a6:c4:8d:ef:
dd:4e:c4:26:b7:ad:7a:21:ed:9a:95:3c:57:32:75:
92:96:ea:15:f5:72:5a:a5:9a:d3:39:f6:6e:9c:f1:
3d:0b:15:5a:9a:1b:f8:e6:a8:94:55:95:a1:e9:db:
66:5d:12:0f:54:8a:fd:6b:c2:0d:ed:ce:ca:07:0a:
0e:6f:81:d3:e3:af:f1:e4:5b:1f:c4:a6:b6:ba:70:
b8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3A:47:95:D6:4A:0B:57:E6:2B:FE:4E:7F:CC:28:58:A6:60:EF:F4
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/DB6EDF225C7911F0882B0340C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.0.64.0-49.0.111.255
49.228.0.0/16
49.229.100.0/23
49.229.120.0-49.229.151.255
58.64.48.0-58.64.127.255
58.136.0.0/16
110.49.3.0/24
110.49.114.0-110.49.124.255
203.146.174.0/24
203.146.182.0/24
203.146.185.0/24
203.146.199.0/24
203.146.207.0/24
IPv6:
2405:9800:b000::/36
Signature Algorithm: sha256WithRSAEncryption
4d:9a:ee:eb:9a:b2:df:96:09:11:7b:5c:a6:91:6a:14:46:18:
0e:32:b4:88:18:61:1f:d2:c1:cc:32:7f:fe:ff:0b:41:de:87:
8e:bd:a9:5b:0c:21:66:08:c7:d5:a5:05:d6:50:77:a7:23:9c:
86:11:02:28:68:1e:6f:98:8f:50:cd:85:32:42:61:f0:db:86:
f8:6b:e7:4b:07:c4:58:97:0f:41:a2:ee:b3:cd:d5:90:eb:a6:
cd:3e:42:c0:dc:c6:2a:3b:ca:76:7c:6d:04:45:71:a6:f1:02:
b5:7f:a5:36:66:ea:56:a5:4d:a3:48:60:24:2b:cf:5c:60:88:
a2:19:f7:31:ce:2f:a0:7e:64:d0:0d:1d:4b:bb:e7:45:a0:1c:
2e:e9:46:6c:80:b6:54:5c:77:b9:7d:66:d0:82:93:db:4b:01:
c8:b9:35:52:3a:4c:db:a6:75:9d:91:de:d5:78:39:73:6b:30:
b8:c6:8e:38:e9:9a:fa:d6:87:7d:1f:1b:20:bb:1d:5c:cf:df:
f7:9e:40:ee:26:d6:be:4f:f8:d5:ba:ca:42:29:3a:e9:91:ed:
57:9f:2b:6b:93:c9:30:ee:47:21:48:84:fc:c4:e3:73:1e:16:
80:50:11:bc:ea:c4:fb:f6:70:9b:46:1b:5c:21:24:27:03:68:
fa:c5:75:c5
-----BEGIN CERTIFICATE-----
MIIF6jCCBNKgAwIBAgICKmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2
QUYyMDcxNUMwHhcNMjUwNzA5MDQwNDQ5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODZkZWE2MS02ZmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy3265d9XDc3uUO142yHtXpbjQX8m0LaCYuiENEzO1AM7UT+7/SQtMG37al4e
llSUrTj8XJrX/8qFFaZfHLeLLVcFeDEkhKZiXav4natBxAYMyWwwUCfgwTOTliCu
E6jUbxh4on9t9e3crsqZKnY0CHQWj1mpCmnvUvYN9YCEmImsi3N+jk8dOeksZfdf
DW6qZNTR/ag1XP84WyC9d2FA9Rnjc/d6p54v59LByocUqqbEje/dTsQmt616Ie2a
lTxXMnWSluoV9XJapZrTOfZunPE9CxVamhv45qiUVZWh6dtmXRIPVIr9a8IN7c7K
BwoOb4HT46/x5FsfxKa2unC4LQIDAQABo4IDDjCCAwowHQYDVR0OBBYEFI86R5XW
SgtX5iv+Tn/MKFimYO/0MB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw
NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvREI2RURGMjI1
Qzc5MTFGMDg4MkIwMzQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgZcGCCsGAQUFBwEHAQH/
BIGHMIGEMHIEAgABMGwwDAMEBjEAQAMEBDEAYAMDADHkAwQBMeVkMAwDBAMx5XgD
BAMx5ZAwDAMEBDpAMAMEBzpAAAMDADqIAwQAbjEDMAwDBAFuMXIDBABuMXwDBADL
kq4DBADLkrYDBADLkrkDBADLkscDBADLks8wDgQCAAIwCAMGBCQFmACwMA0GCSqG
SIb3DQEBCwUAA4IBAQBNmu7rmrLflgkRe1ymkWoURhgOMrSIGGEf0sHMMn/+/wtB
3oeOvalbDCFmCMfVpQXWUHenI5yGEQIoaB5vmI9QzYUyQmHw24b4a+dLB8RYlw9B
ou6zzdWQ66bNPkLA3MYqO8p2fG0ERXGm8QK1f6U2ZupWpU2jSGAkK89cYIiiGfcx
zi+gfmTQDR1Lu+dFoBwu6UZsgLZUXHe5fWbQgpPbSwHIuTVSOkzbpnWdkd7VeDlz
azC4xo446Zr61od9Hxsgux1cz9/3nkDuJta+T/jVuspCKTrpke1Xnytrk8kw7kch
SIT8xONzHhaAUBG86sT79nCbRhtcISQnA2j6xXXF
-----END CERTIFICATE-----
Generated at Sun Jul 20 07:32:18 2025 by rpki-client