Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/3A464B7E2FF811F0BD4EFC54C4F9AE02.roa
File: 3A464B7E2FF811F0BD4EFC54C4F9AE02.roa (raw, json)
Hash identifier: T08wEhYUGuCCUW0+N/t1/+nQ3z6qGYenvnikbsXnCYA=
Subject key identifier: 0C:EB:95:18:49:04:B1:B8:0A:5A:2E:F1:38:A6:4B:B2:66:D7:D5:7C
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 380A
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/3A464B7E2FF811F0BD4EFC54C4F9AE02.roa
Signing time: Tue 13 May 2025 13:10:14 +0000
ROA not before: Tue 13 May 2025 13:10:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132165
IP address blocks: 103.246.108.0/22 maxlen: 22
103.246.108.0/24 maxlen: 24
103.246.109.0/24 maxlen: 24
103.246.110.0/24 maxlen: 24
103.246.111.0/24 maxlen: 24
111.88.0.0/20 maxlen: 24
111.88.16.0/20 maxlen: 24
111.88.32.0/20 maxlen: 24
111.88.48.0/20 maxlen: 24
111.88.64.0/21 maxlen: 21
111.88.64.0/24 maxlen: 24
111.88.65.0/24 maxlen: 24
111.88.66.0/24 maxlen: 24
111.88.67.0/24 maxlen: 24
111.88.68.0/24 maxlen: 24
111.88.69.0/24 maxlen: 24
111.88.70.0/24 maxlen: 24
111.88.71.0/24 maxlen: 24
111.88.72.0/22 maxlen: 22
111.88.72.0/24 maxlen: 24
111.88.73.0/24 maxlen: 24
111.88.74.0/24 maxlen: 24
111.88.75.0/24 maxlen: 24
111.88.78.0/24 maxlen: 24
111.88.80.0/20 maxlen: 20
111.88.80.0/22 maxlen: 22
111.88.80.0/24 maxlen: 24
111.88.81.0/24 maxlen: 24
111.88.82.0/24 maxlen: 24
111.88.83.0/24 maxlen: 24
111.88.84.0/22 maxlen: 22
111.88.84.0/24 maxlen: 24
111.88.85.0/24 maxlen: 24
111.88.86.0/24 maxlen: 24
111.88.87.0/24 maxlen: 24
111.88.88.0/21 maxlen: 21
111.88.88.0/24 maxlen: 24
111.88.89.0/24 maxlen: 24
111.88.90.0/24 maxlen: 24
111.88.91.0/24 maxlen: 24
111.88.92.0/24 maxlen: 24
111.88.93.0/24 maxlen: 24
111.88.94.0/24 maxlen: 24
111.88.95.0/24 maxlen: 24
111.88.104.0/21 maxlen: 21
111.88.136.0/23 maxlen: 24
111.88.172.0/22 maxlen: 22
111.88.172.0/24 maxlen: 24
111.88.173.0/24 maxlen: 24
111.88.174.0/24 maxlen: 24
111.88.175.0/24 maxlen: 24
111.88.176.0/21 maxlen: 21
111.88.176.0/24 maxlen: 24
111.88.177.0/24 maxlen: 24
111.88.178.0/24 maxlen: 24
111.88.179.0/24 maxlen: 24
111.88.180.0/24 maxlen: 24
111.88.181.0/24 maxlen: 24
111.88.182.0/24 maxlen: 24
111.88.183.0/24 maxlen: 24
111.88.192.0/21 maxlen: 21
111.88.208.0/20 maxlen: 20
115.186.2.0/23 maxlen: 24
115.186.4.0/22 maxlen: 24
115.186.8.0/23 maxlen: 24
115.186.76.0/22 maxlen: 24
115.186.80.0/22 maxlen: 22
115.186.80.0/24 maxlen: 24
115.186.81.0/24 maxlen: 24
115.186.82.0/24 maxlen: 24
115.186.83.0/24 maxlen: 24
115.186.84.0/22 maxlen: 22
115.186.84.0/24 maxlen: 24
115.186.85.0/24 maxlen: 24
115.186.86.0/24 maxlen: 24
115.186.87.0/24 maxlen: 24
117.102.48.0/20 maxlen: 20
117.102.48.0/24 maxlen: 24
117.102.49.0/24 maxlen: 24
117.102.50.0/24 maxlen: 24
117.102.51.0/24 maxlen: 24
117.102.52.0/24 maxlen: 24
117.102.53.0/24 maxlen: 24
117.102.54.0/24 maxlen: 24
117.102.55.0/24 maxlen: 24
117.102.56.0/24 maxlen: 24
117.102.57.0/24 maxlen: 24
117.102.58.0/24 maxlen: 24
117.102.59.0/24 maxlen: 24
117.102.60.0/24 maxlen: 24
117.102.61.0/24 maxlen: 24
117.102.62.0/24 maxlen: 24
117.102.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 May 2025 15:54:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14346 (0x380a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: May 13 13:10:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=682344b6-101c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:04:48:db:4d:e2:a0:10:d3:0f:70:c1:00:db:
d4:f3:cb:24:cc:37:18:dc:86:4b:fc:80:bc:9c:b8:
e1:96:09:90:37:f9:10:c6:74:7a:b4:08:2c:a8:08:
33:12:87:50:6a:08:6d:85:71:82:13:24:15:98:32:
db:5f:66:f6:78:5c:de:ca:40:f4:91:fe:64:15:c7:
f8:e9:2e:bf:8e:90:02:8b:46:42:1a:3f:40:cb:ba:
9e:00:ce:66:27:66:52:c9:fa:01:d3:9b:05:9e:ef:
45:f7:01:52:2a:f5:89:11:b5:a6:9d:d9:05:d7:e8:
88:74:fb:51:3d:6a:b4:47:16:af:96:b0:3a:34:c1:
50:81:21:e0:7e:14:5d:80:1f:e7:e7:cd:e0:fb:cd:
bc:7b:b2:bd:d8:78:07:d8:26:4f:35:11:13:0f:9d:
08:dc:89:88:36:18:04:7b:fc:cc:67:bb:0d:0a:e1:
36:44:6a:48:5d:11:3a:eb:1e:b0:c8:f9:bb:ac:c8:
2f:e6:5f:e7:0c:9e:8f:49:32:5b:f8:33:a9:3c:45:
24:05:f4:d1:3e:ee:df:c7:33:34:1e:72:b1:83:7c:
95:05:f9:47:0c:3e:0f:46:c9:94:85:af:de:7c:a7:
c5:da:f5:e5:14:20:8d:5f:1e:67:8a:2b:29:08:f5:
6b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EB:95:18:49:04:B1:B8:0A:5A:2E:F1:38:A6:4B:B2:66:D7:D5:7C
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/3A464B7E2FF811F0BD4EFC54C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.246.108.0/22
111.88.0.0-111.88.75.255
111.88.78.0/24
111.88.80.0/20
111.88.104.0/21
111.88.136.0/23
111.88.172.0-111.88.183.255
111.88.192.0/21
111.88.208.0/20
115.186.2.0-115.186.9.255
115.186.76.0-115.186.87.255
117.102.48.0/20
Signature Algorithm: sha256WithRSAEncryption
63:63:fd:1b:90:34:48:d0:51:92:2a:f2:c7:4c:6e:fc:25:76:
be:32:3d:b8:5c:35:78:aa:1f:70:b2:c2:e2:34:a9:60:f0:08:
d6:f3:13:4c:2f:98:dd:10:c8:ae:55:3c:d6:9a:ea:6e:91:f7:
12:68:44:3d:ab:7d:b9:61:f7:8d:ff:79:d1:96:3e:5d:54:d1:
0a:fb:c5:cd:3f:2f:f1:7c:23:0d:2a:30:a4:7a:7f:b9:4c:fc:
4d:9d:c7:cc:79:68:88:4d:84:29:d0:11:a2:1a:e5:bf:22:70:
4e:cc:49:04:55:60:5d:d8:3d:98:9f:46:32:b2:61:8f:d8:07:
01:2f:43:9b:a5:87:1f:84:b4:38:1b:59:c2:ad:6f:a6:8d:dc:
c5:05:c5:9f:07:3b:b7:76:21:d7:9e:f4:a4:1c:04:a5:80:0d:
20:d4:82:12:fb:a7:26:4c:e7:7d:31:22:cc:20:37:c3:28:e9:
b7:51:38:fe:85:c6:12:82:10:e9:67:14:c0:27:17:d4:43:5f:
94:e7:ea:0d:29:b5:c2:47:69:0c:31:61:6d:51:a7:19:b1:c4:
f3:c3:c8:a5:01:74:11:f2:80:a3:de:09:3d:49:9a:c1:d7:34:
dc:a4:18:2e:2e:41:c4:07:6e:48:94:43:9e:90:18:68:99:54:
d6:85:be:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 06:50:11 2025 by rpki-client