Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/989C982C622511F0B0E2B66DC4F9AE02.roa
File: 989C982C622511F0B0E2B66DC4F9AE02.roa (raw, json)
Hash identifier: uFb0KmN6+g/iXPrCqh5CtFBwXxYypJb90DHFKLISS30=
Subject key identifier: 65:CC:06:B7:CB:72:46:1A:C7:CE:AD:5D:F0:BF:B2:89:58:23:F6:8C
Certificate issuer: /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Certificate serial: 0CD8
Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/989C982C622511F0B0E2B66DC4F9AE02.roa
Signing time: Wed 16 Jul 2025 09:16:46 +0000
ROA not before: Wed 16 Jul 2025 09:16:46 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 134371
IP address blocks: 103.62.140.0/22 maxlen: 24
202.136.88.0/22 maxlen: 24
2400:3dc0::/32 maxlen: 32
2400:3dc0::/36 maxlen: 36
2400:3dc0::/44 maxlen: 48
2400:3dc0:10::/44 maxlen: 48
2400:3dc0:2e::/48 maxlen: 48
2400:3dc0:2f::/48 maxlen: 48
2400:3dc0:3e::/48 maxlen: 48
2400:3dc0:3f::/48 maxlen: 48
2400:3dc0:40::/44 maxlen: 47
2400:3dc0:40::/48 maxlen: 48
2400:3dc0:43::/48 maxlen: 48
2400:3dc0:45::/48 maxlen: 48
2400:3dc0:46::/48 maxlen: 48
2400:3dc0:49::/48 maxlen: 48
2400:3dc0:4a::/47 maxlen: 48
2400:3dc0:4c::/48 maxlen: 48
2400:3dc0:50::/44 maxlen: 47
2400:3dc0:52::/47 maxlen: 48
2400:3dc0:54::/48 maxlen: 48
2400:3dc0:56::/47 maxlen: 48
2400:3dc0:58::/48 maxlen: 48
2400:3dc0:5a::/47 maxlen: 48
2400:3dc0:5c::/47 maxlen: 48
2400:3dc0:5e::/48 maxlen: 48
2400:3dc0:60::/44 maxlen: 47
2400:3dc0:60::/47 maxlen: 48
2400:3dc0:62::/48 maxlen: 48
2400:3dc0:64::/48 maxlen: 48
2400:3dc0:68::/47 maxlen: 48
2400:3dc0:6a::/48 maxlen: 48
2400:3dc0:6c::/48 maxlen: 48
2400:3dc0:6e::/47 maxlen: 48
2400:3dc0:89::/48 maxlen: 48
2400:3dc0:100::/48 maxlen: 48
2400:3dc0:101::/48 maxlen: 48
2400:3dc0:140::/48 maxlen: 48
2400:3dc0:200::/48 maxlen: 48
2400:3dc0:201::/48 maxlen: 48
2400:3dc0:300::/48 maxlen: 48
2400:3dc0:400::/48 maxlen: 48
2400:3dc0:500::/48 maxlen: 48
2400:3dc0:600::/48 maxlen: 48
2400:3dc0:700::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 16 Jul 2025 10:06:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3288 (0xcd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D75C, serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Validity
Not Before: Jul 16 09:16:46 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=68776dfe-48ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3f:f7:4f:7d:9a:57:63:c3:9c:70:0a:4e:a3:
01:9e:2f:68:81:9b:9e:c9:67:be:24:c9:91:70:cb:
31:8a:5d:4e:2f:b7:fc:b1:70:da:2a:30:e3:fe:32:
db:49:c5:7f:ea:25:56:e2:d3:11:88:06:3c:0a:2d:
f8:fc:00:b0:ca:12:30:cc:b1:d1:f8:fe:a7:28:96:
e8:5d:6d:b0:76:65:22:5c:12:e8:91:1f:61:4b:2d:
0a:79:e3:32:36:c2:b1:71:e2:83:11:c1:83:c8:d3:
e4:65:31:40:af:e3:1f:ce:34:96:95:98:24:99:40:
5e:9d:89:74:9d:06:6f:3c:61:d6:a3:a3:8d:06:d4:
24:c3:e7:0b:c0:86:ef:af:d0:34:59:16:44:36:a6:
b7:e3:db:d7:0e:66:61:7c:77:e3:fb:1c:bc:bd:2d:
5c:36:5f:20:34:2a:8e:2e:da:dd:99:fb:6b:87:08:
b0:79:2e:27:73:74:11:76:17:96:6c:2c:c7:7b:a8:
9b:49:8a:09:b0:8b:7e:f1:81:3e:d5:5a:b0:61:82:
47:45:b1:02:0d:87:c7:1c:c6:e5:a0:ad:3d:29:dd:
78:1f:57:45:e4:00:e8:62:ab:37:43:3b:3f:30:7f:
4a:d6:0d:23:66:40:25:b4:17:da:63:82:02:65:8a:
61:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CC:06:B7:CB:72:46:1A:C7:CE:AD:5D:F0:BF:B2:89:58:23:F6:8C
X509v3 Authority Key Identifier:
keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/989C982C622511F0B0E2B66DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.62.140.0/22
202.136.88.0/22
IPv6:
2400:3dc0::/32
Signature Algorithm: sha256WithRSAEncryption
78:bf:98:af:aa:c7:0f:41:3c:50:7f:1b:03:9c:90:3e:a5:01:
b5:e9:b0:e1:86:a2:a2:22:7a:74:1c:de:d1:8d:59:17:46:fd:
67:bd:f9:ed:80:c3:6b:fe:fa:36:03:ae:3e:46:5e:8f:0e:d3:
67:66:6b:10:d7:21:5b:c2:94:d3:5c:ca:d6:98:ea:5b:71:c8:
f0:09:a6:d5:9b:29:cd:5a:c0:39:90:bb:a4:9a:05:62:d8:a5:
31:f4:c7:a8:b6:9d:52:41:65:38:b0:d9:df:a9:45:4b:02:65:
bf:35:c0:3f:cb:61:53:24:d8:4a:ec:e9:d0:ea:bc:0a:5c:c4:
3d:8a:b1:ae:53:ad:21:5e:76:7b:af:2d:9f:94:17:19:61:ba:
95:77:10:51:bc:d2:9d:53:ff:72:be:c3:60:20:f3:8f:29:99:
53:5e:30:25:75:09:f4:6d:1f:5e:f4:5a:16:2a:62:e7:41:d0:
1b:9e:bb:9e:68:7f:7d:91:4f:31:ba:75:f6:bf:64:80:73:4d:
35:6f:6a:18:fe:55:2e:b1:38:e6:e4:18:86:82:ea:d4:ff:74:
cf:c4:8e:55:3c:f7:d0:da:b2:b8:78:9a:18:66:97:4b:d3:86:
0b:7f:99:31:bd:ef:c7:6c:ef:eb:43:c2:2e:dc:b2:6c:70:d5:
6d:10:37:c5
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICDNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUQ3NUMxMTAvBgNVBAUTKDFBMUE0MEFEOTNBNEE0MzA3RUQ3MjY0RDQ3RDI1MkNB
RjYyREVGRkQwHhcNMjUwNzE2MDkxNjQ2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODc3NmRmZS00OGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6j/3T32aV2PDnHAKTqMBni9ogZueyWe+JMmRcMsxil1OL7f8sXDaKjDj/jLb
ScV/6iVW4tMRiAY8Ci34/ACwyhIwzLHR+P6nKJboXW2wdmUiXBLokR9hSy0KeeMy
NsKxceKDEcGDyNPkZTFAr+MfzjSWlZgkmUBenYl0nQZvPGHWo6ONBtQkw+cLwIbv
r9A0WRZENqa349vXDmZhfHfj+xy8vS1cNl8gNCqOLtrdmftrhwiweS4nc3QRdheW
bCzHe6ibSYoJsIt+8YE+1VqwYYJHRbECDYfHHMbloK09Kd14H1dF5ADoYqs3Qzs/
MH9K1g0jZkAltBfaY4ICZYphaQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFGXMBrfL
ckYax86tXfC/solYI/aMMB8GA1UdIwQYMBaAFBoaQK2TpKQwftcmTUfSUsr2Le/9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDc1Qy8yQkM1RkQ0MDA2
QzAxMUVBQkM0M0I3MDlDNEY5QUUwMi9HaHBBclpPa3BEQi0xeVpOUjlKU3l2WXQ3
XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0docEFyWk9rcERCLTF5Wk5SOUpTeXZZdDdfMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUQ3NUMvMkJDNUZENDAwNkMwMTFFQUJDNDNCNzA5QzRGOUFFMDIvOTg5Qzk4MkM2
MjI1MTFGMEIwRTJCNjZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBAJnPowDBALKiFgwDQQCAAIwBwMFACQAPcAwDQYJKoZIhvcN
AQELBQADggEBAHi/mK+qxw9BPFB/GwOckD6lAbXpsOGGoqIienQc3tGNWRdG/We9
+e2Aw2v++jYDrj5GXo8O02dmaxDXIVvClNNcytaY6ltxyPAJptWbKc1awDmQu6Sa
BWLYpTH0x6i2nVJBZTiw2d+pRUsCZb81wD/LYVMk2Ers6dDqvApcxD2Ksa5TrSFe
dnuvLZ+UFxlhupV3EFG80p1T/3K+w2Ag848pmVNeMCV1CfRtH170WhYqYudB0Bue
u55of32RTzG6dfa/ZIBzTTVvahj+VS6xOObkGIaC6tT/dM/EjlU899Dasrh4mhhm
l0vThgt/mTG978ds7+tDwi7csmxw1W0QN8U=
-----END CERTIFICATE-----
Generated at Mon Jul 21 07:01:26 2025 by rpki-client