Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/114B1F524CD511F09475AF83C4F9AE02.roa
File: 114B1F524CD511F09475AF83C4F9AE02.roa (raw, json)
Hash identifier: ZIBwcW3WsotJiyEHHlvu+aZL0fEq14/uSQnLedZnIZ0=
Subject key identifier: 81:32:60:92:22:F9:16:F1:66:E2:CC:DC:84:3F:6C:A2:B6:8F:D4:12
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 38B1
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/114B1F524CD511F09475AF83C4F9AE02.roa
Signing time: Thu 19 Jun 2025 06:17:25 +0000
ROA not before: Thu 19 Jun 2025 06:17:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55414
IP address blocks: 115.186.15.0/24 maxlen: 24
115.186.18.0/23 maxlen: 23
115.186.20.0/23 maxlen: 24
115.186.22.0/23 maxlen: 23
115.186.22.0/24 maxlen: 24
115.186.24.0/23 maxlen: 23
115.186.24.0/24 maxlen: 24
115.186.26.0/23 maxlen: 24
115.186.28.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Jun 2025 10:39:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14513 (0x38b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Jun 19 06:17:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6853ab75-2a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:77:c6:1f:94:65:73:2c:ca:97:e4:a9:79:3c:
fe:94:bd:7f:6a:5e:f5:ee:6e:84:25:c7:af:de:a9:
bd:af:db:1a:37:79:5d:8c:db:a8:b5:93:d2:2f:ca:
9e:df:0c:2c:40:70:91:95:22:5a:c8:1f:58:e8:a3:
db:f5:f5:f8:bc:64:b5:96:21:fa:3d:d4:7e:f7:0c:
0e:9d:54:2f:6e:3c:87:61:39:c9:5d:fc:59:cb:e9:
4c:61:3b:5c:2c:6f:10:d0:ad:dc:d9:3e:be:3b:54:
c2:4b:ea:9e:90:b0:2d:9f:b1:ac:da:af:d9:b2:e4:
51:02:42:25:c7:2d:38:13:11:ba:c5:6a:3a:4c:b8:
8f:2f:0b:31:33:eb:ef:22:91:aa:6f:a8:03:7a:64:
7f:cd:fe:40:5e:e5:89:c3:bb:e4:c9:8b:00:e2:1d:
74:44:c6:96:6e:47:c5:37:66:8d:f9:77:90:f9:4e:
ca:e0:10:0a:cf:4f:43:3f:be:3e:de:c4:e8:3e:68:
7d:ea:df:df:45:45:65:d6:96:66:81:f5:11:4b:0d:
5d:cc:50:93:1c:07:25:17:7a:b5:4f:d8:b7:a4:cf:
81:93:4c:b9:fd:8f:c3:4e:55:ac:8c:0d:86:b1:15:
c5:1d:c7:43:87:4d:4d:96:3d:de:f5:53:08:16:00:
27:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:32:60:92:22:F9:16:F1:66:E2:CC:DC:84:3F:6C:A2:B6:8F:D4:12
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/114B1F524CD511F09475AF83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.186.15.0/24
115.186.18.0-115.186.29.255
Signature Algorithm: sha256WithRSAEncryption
b4:fd:eb:9c:90:ba:94:d7:e1:d4:2c:7b:aa:00:54:fb:db:09:
86:fa:31:6e:76:dd:d0:da:54:fb:ee:2d:62:3c:28:cd:74:e4:
26:ed:cd:dd:ad:fd:ea:dc:3d:cd:7f:c1:2c:80:25:02:05:06:
41:27:88:1a:ab:a3:e6:12:e9:42:38:a7:74:20:ac:6a:4c:bd:
11:bd:c9:13:d5:98:f2:18:74:2c:d6:51:6f:0f:27:0a:aa:e6:
2c:88:a6:56:55:a0:e2:2b:7b:4e:06:c3:4f:c0:62:9c:a0:13:
16:b3:55:9c:8f:fa:ef:de:41:1b:b8:29:56:f4:e5:3f:c9:64:
e8:ae:f3:44:dd:8f:bf:24:1d:0b:de:c0:a2:31:a6:53:e2:0d:
7a:a4:59:14:b6:17:0d:69:10:61:55:35:0e:eb:47:e4:f0:df:
b3:df:48:16:f6:29:31:04:34:d6:8f:4e:51:69:32:a7:cf:82:
a0:a2:c1:a0:b6:fd:7b:61:a6:77:7a:8c:6f:cf:e4:91:01:76:
d6:9e:80:7b:4f:0d:dc:6e:fc:9a:cf:34:47:6e:aa:a0:cd:35:
59:d4:8a:73:7f:4f:0c:21:de:c1:5a:e8:29:4f:96:ec:15:36:
ae:52:e6:23:33:8b:d1:a2:fc:2b:0d:91:17:40:4f:65:0e:be:
d2:41:af:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 06:53:30 2025 by rpki-client