Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/39AAF9F6431E11F0B70AC84FC4F9AE02.roa
File: 39AAF9F6431E11F0B70AC84FC4F9AE02.roa (raw, json)
Hash identifier: dj+1BHblVoQ2YgJMrjkWImhqvOvyg4wZ9QEAFYNhsw4=
Subject key identifier: 5F:F6:E8:D1:AF:68:AB:EF:0B:56:94:FA:57:A7:EF:1A:AD:0A:87:19
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 388C
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/39AAF9F6431E11F0B70AC84FC4F9AE02.roa
Signing time: Fri 06 Jun 2025 21:35:54 +0000
ROA not before: Fri 06 Jun 2025 21:35:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38710
IP address blocks: 111.88.184.0/22 maxlen: 23
111.88.188.0/22 maxlen: 23
111.88.233.0/24 maxlen: 24
111.88.238.0/24 maxlen: 24
111.88.239.0/24 maxlen: 24
115.186.10.0/23 maxlen: 23
115.186.14.0/24 maxlen: 24
115.186.16.0/24 maxlen: 24
115.186.17.0/24 maxlen: 24
115.186.18.0/24 maxlen: 24
115.186.21.0/24 maxlen: 24
115.186.23.0/24 maxlen: 24
115.186.24.0/23 maxlen: 23
115.186.25.0/24 maxlen: 24
115.186.30.0/23 maxlen: 24
115.186.32.0/19 maxlen: 19
115.186.32.0/21 maxlen: 21
115.186.32.0/22 maxlen: 22
115.186.32.0/24 maxlen: 24
115.186.33.0/24 maxlen: 24
115.186.34.0/24 maxlen: 24
115.186.35.0/24 maxlen: 24
115.186.36.0/23 maxlen: 24
115.186.38.0/24 maxlen: 24
115.186.39.0/24 maxlen: 24
115.186.40.0/24 maxlen: 24
115.186.41.0/24 maxlen: 24
115.186.42.0/24 maxlen: 24
115.186.43.0/24 maxlen: 24
115.186.44.0/22 maxlen: 22
115.186.44.0/24 maxlen: 24
115.186.45.0/24 maxlen: 24
115.186.46.0/24 maxlen: 24
115.186.47.0/24 maxlen: 24
115.186.56.0/21 maxlen: 23
115.186.56.0/22 maxlen: 24
115.186.60.0/23 maxlen: 24
115.186.63.0/24 maxlen: 24
115.186.64.0/19 maxlen: 23
115.186.76.0/22 maxlen: 24
115.186.80.0/21 maxlen: 24
115.186.90.0/24 maxlen: 24
115.186.96.0/20 maxlen: 23
115.186.96.0/22 maxlen: 24
115.186.101.0/24 maxlen: 24
115.186.102.0/23 maxlen: 24
115.186.104.0/24 maxlen: 24
115.186.106.0/23 maxlen: 24
115.186.108.0/22 maxlen: 24
115.186.112.0/20 maxlen: 23
115.186.112.0/23 maxlen: 24
115.186.115.0/24 maxlen: 24
115.186.117.0/24 maxlen: 24
115.186.118.0/23 maxlen: 24
115.186.120.0/23 maxlen: 24
115.186.125.0/24 maxlen: 24
115.186.126.0/24 maxlen: 24
117.102.0.0/21 maxlen: 21
117.102.0.0/22 maxlen: 22
117.102.0.0/23 maxlen: 24
117.102.2.0/24 maxlen: 24
117.102.3.0/24 maxlen: 24
117.102.4.0/24 maxlen: 24
117.102.5.0/24 maxlen: 24
117.102.6.0/24 maxlen: 24
117.102.7.0/24 maxlen: 24
117.102.8.0/24 maxlen: 24
117.102.9.0/24 maxlen: 24
117.102.12.0/23 maxlen: 23
117.102.12.0/24 maxlen: 24
117.102.14.0/23 maxlen: 23
117.102.16.0/24 maxlen: 24
117.102.17.0/24 maxlen: 24
117.102.18.0/23 maxlen: 24
117.102.20.0/22 maxlen: 23
117.102.24.0/22 maxlen: 22
117.102.24.0/23 maxlen: 24
117.102.26.0/24 maxlen: 24
117.102.28.0/24 maxlen: 24
117.102.32.0/24 maxlen: 24
117.102.33.0/24 maxlen: 24
117.102.34.0/24 maxlen: 24
117.102.35.0/24 maxlen: 24
117.102.36.0/24 maxlen: 24
117.102.37.0/24 maxlen: 24
117.102.38.0/24 maxlen: 24
117.102.39.0/24 maxlen: 24
117.102.40.0/24 maxlen: 24
117.102.41.0/24 maxlen: 24
117.102.42.0/24 maxlen: 24
117.102.43.0/24 maxlen: 24
117.102.44.0/24 maxlen: 24
117.102.45.0/24 maxlen: 24
117.102.46.0/24 maxlen: 24
117.102.47.0/24 maxlen: 24
203.81.230.0/24 maxlen: 24
203.81.239.0/24 maxlen: 24
2406:7000::/32 maxlen: 32
2406:7000::/48 maxlen: 48
2406:7000:1::/48 maxlen: 48
2406:7000:2::/48 maxlen: 48
2406:7000:3::/48 maxlen: 48
2406:7000:4::/48 maxlen: 48
2406:7000:5::/48 maxlen: 48
2406:7000:6::/48 maxlen: 48
2406:7000:7::/48 maxlen: 48
2406:7000:8::/48 maxlen: 48
2406:7000:9::/48 maxlen: 48
2406:7000:a::/48 maxlen: 48
2406:7000:b::/48 maxlen: 48
2406:7000:c::/48 maxlen: 48
2406:7000:d::/48 maxlen: 48
2406:7000:e::/48 maxlen: 48
2406:7000:f::/48 maxlen: 48
2406:7000:10::/48 maxlen: 48
2406:7000:11::/48 maxlen: 48
2406:7000:12::/48 maxlen: 48
2406:7000:13::/48 maxlen: 48
2406:7000:14::/48 maxlen: 48
2406:7000:15::/48 maxlen: 48
2406:7000:16::/48 maxlen: 48
2406:7000:17::/48 maxlen: 48
2406:7000:18::/48 maxlen: 48
2406:7000:19::/48 maxlen: 48
2406:7000:1a::/48 maxlen: 48
2406:7000:1b::/48 maxlen: 48
2406:7000:1c::/48 maxlen: 48
2406:7000:1d::/48 maxlen: 48
2406:7000:1e::/48 maxlen: 48
2406:7000:1f::/48 maxlen: 48
2406:7000:20::/48 maxlen: 48
2406:7000:21::/48 maxlen: 48
2406:7000:22::/48 maxlen: 48
2406:7000:23::/48 maxlen: 48
2406:7000:24::/48 maxlen: 48
2406:7000:25::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 18 Jun 2025 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14476 (0x388c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Jun 6 21:35:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68435f3a-a959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:47:0b:ab:25:27:77:98:cd:a9:1c:89:7f:
3e:b3:d0:3b:76:9e:6b:51:20:52:88:9b:2a:57:98:
81:e0:25:63:b9:35:c2:f9:5d:34:5f:1f:2e:87:04:
fc:2e:83:2d:05:79:e2:93:95:4f:8f:a8:0d:43:b2:
a1:78:05:2f:e7:d9:13:20:b4:65:8e:6e:d7:cf:a5:
06:26:39:ad:1a:a7:cb:a8:91:59:26:5b:4b:b9:15:
3a:b8:c5:d5:58:85:53:09:48:4f:32:9c:10:87:cf:
6e:6c:84:c7:ee:3b:c3:c8:54:bd:c2:01:51:55:d5:
a9:32:a0:02:0d:8c:d3:8d:ed:08:fe:52:38:61:81:
a7:be:26:ec:93:fc:cb:98:c1:04:1b:c2:94:6c:99:
eb:68:b4:57:41:bd:f0:51:cd:3b:39:ab:d2:5c:cc:
e9:1c:66:21:66:51:e9:ed:9e:ee:76:39:44:75:85:
47:d1:41:bc:c8:d7:45:e9:12:7c:80:5f:7f:37:fb:
23:35:fd:04:ee:58:00:94:88:cf:81:7a:41:6d:ef:
20:0b:6f:09:8d:8d:bc:01:36:b5:2f:b9:90:c5:8e:
41:9a:2a:9b:2e:b7:42:65:9e:b3:90:5c:d3:cd:55:
dd:42:46:45:0a:34:0c:68:08:9a:61:96:f7:bc:0d:
67:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F6:E8:D1:AF:68:AB:EF:0B:56:94:FA:57:A7:EF:1A:AD:0A:87:19
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/39AAF9F6431E11F0B70AC84FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.184.0/21
111.88.233.0/24
111.88.238.0/23
115.186.10.0/23
115.186.14.0/24
115.186.16.0-115.186.18.255
115.186.21.0/24
115.186.23.0-115.186.25.255
115.186.30.0-115.186.127.255
117.102.0.0-117.102.9.255
117.102.12.0-117.102.28.255
117.102.32.0/20
203.81.230.0/24
203.81.239.0/24
IPv6:
2406:7000::/32
Signature Algorithm: sha256WithRSAEncryption
b6:cc:3e:ac:49:97:67:9a:e6:06:96:fb:41:6c:d5:da:24:45:
28:f1:cf:2d:67:04:60:66:37:34:07:a2:7f:b9:a9:94:b2:ed:
06:fb:ee:7e:22:53:b1:e5:69:ec:e2:97:41:ed:f7:23:dd:f0:
4e:07:52:32:10:8c:d8:a4:81:24:90:00:29:52:b1:73:52:f6:
e9:0a:61:52:ce:e2:8a:c6:b4:fb:e0:d4:2b:5e:ef:7b:8b:01:
69:e3:73:6d:60:2e:0f:93:cf:3f:82:35:9f:73:be:ce:04:bf:
84:ac:d2:ca:a6:fb:8b:85:52:da:b3:ad:43:25:f0:2e:ff:91:
1c:29:d1:ff:fd:53:86:c6:9e:fc:67:51:50:a0:f9:aa:55:99:
48:77:c0:57:97:66:74:5f:1d:4c:28:c6:24:af:03:18:e7:1f:
6e:35:55:15:a4:0f:ed:7d:c8:37:33:33:05:be:cc:f9:27:3b:
42:46:97:a1:81:53:01:73:f1:27:f2:14:3f:a9:7e:81:31:f7:
8f:c2:8d:e2:d2:ce:04:a1:a5:ca:5b:cf:f6:6f:4f:1e:5c:27:
cc:52:9a:07:d8:d5:df:fa:fc:54:b8:50:9d:0c:f2:c0:f5:68:
2b:85:46:b9:66:d4:e2:68:eb:97:58:5a:59:86:4c:84:0c:24:
74:f7:65:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 06:58:38 2025 by rpki-client