Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/3E88AD7850E911F09706050DC4F9AE02.roa
File: 3E88AD7850E911F09706050DC4F9AE02.roa (raw, json)
Hash identifier: /VDToq6WmKkxhJJGGYLo2m02Mnhcv908YL0c2rxyaTU=
Subject key identifier: 4F:60:3B:06:0F:8A:D8:35:3F:3E:7C:BB:6E:F9:85:30:F3:18:56:2C
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 38D8
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/3E88AD7850E911F09706050DC4F9AE02.roa
Signing time: Thu 26 Jun 2025 14:16:21 +0000
ROA not before: Thu 26 Jun 2025 14:16:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 111.88.96.0/21 maxlen: 21
111.88.96.0/24 maxlen: 24
111.88.97.0/24 maxlen: 24
111.88.98.0/24 maxlen: 24
111.88.99.0/24 maxlen: 24
111.88.100.0/24 maxlen: 24
111.88.101.0/24 maxlen: 24
111.88.102.0/24 maxlen: 24
111.88.103.0/24 maxlen: 24
111.88.104.0/21 maxlen: 24
111.88.112.0/20 maxlen: 20
111.88.112.0/24 maxlen: 24
111.88.113.0/24 maxlen: 24
111.88.114.0/24 maxlen: 24
111.88.115.0/24 maxlen: 24
111.88.116.0/24 maxlen: 24
111.88.117.0/24 maxlen: 24
111.88.118.0/24 maxlen: 24
111.88.119.0/24 maxlen: 24
111.88.120.0/24 maxlen: 24
111.88.121.0/24 maxlen: 24
111.88.122.0/24 maxlen: 24
111.88.123.0/24 maxlen: 24
111.88.124.0/24 maxlen: 24
111.88.125.0/24 maxlen: 24
111.88.126.0/24 maxlen: 24
111.88.127.0/24 maxlen: 24
111.88.128.0/21 maxlen: 21
111.88.128.0/24 maxlen: 24
111.88.129.0/24 maxlen: 24
111.88.130.0/24 maxlen: 24
111.88.131.0/24 maxlen: 24
111.88.132.0/24 maxlen: 24
111.88.133.0/24 maxlen: 24
111.88.134.0/24 maxlen: 24
111.88.135.0/24 maxlen: 24
111.88.140.0/22 maxlen: 22
111.88.140.0/24 maxlen: 24
111.88.141.0/24 maxlen: 24
111.88.142.0/24 maxlen: 24
111.88.143.0/24 maxlen: 24
111.88.160.0/21 maxlen: 21
111.88.160.0/22 maxlen: 22
111.88.160.0/23 maxlen: 23
111.88.160.0/24 maxlen: 24
111.88.161.0/24 maxlen: 24
111.88.162.0/23 maxlen: 23
111.88.162.0/24 maxlen: 24
111.88.163.0/24 maxlen: 24
111.88.164.0/22 maxlen: 22
111.88.164.0/23 maxlen: 23
111.88.164.0/24 maxlen: 24
111.88.165.0/24 maxlen: 24
111.88.166.0/23 maxlen: 23
111.88.166.0/24 maxlen: 24
111.88.167.0/24 maxlen: 24
111.88.172.0/22 maxlen: 24
111.88.176.0/21 maxlen: 24
111.88.192.0/21 maxlen: 24
111.88.200.0/21 maxlen: 21
111.88.200.0/24 maxlen: 24
111.88.201.0/24 maxlen: 24
111.88.202.0/24 maxlen: 24
111.88.203.0/24 maxlen: 24
111.88.204.0/24 maxlen: 24
111.88.205.0/24 maxlen: 24
111.88.206.0/24 maxlen: 24
111.88.207.0/24 maxlen: 24
111.88.208.0/20 maxlen: 24
111.88.224.0/22 maxlen: 24
111.88.228.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Jun 2025 14:40:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14552 (0x38d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Jun 26 14:16:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=685d5635-c3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9d:cd:7b:94:54:c2:e3:14:20:93:34:7a:fe:
d0:d6:f2:07:57:6f:22:0b:18:93:06:58:a3:b1:50:
f4:4b:30:6a:74:81:fd:72:c7:07:f1:b9:6f:c9:5a:
18:55:46:ed:37:4e:ca:f9:c9:e0:de:74:36:44:d6:
21:af:f9:46:07:aa:74:e9:d7:41:d8:1f:51:61:fd:
63:b7:47:84:62:b6:73:b5:b0:4b:81:66:84:a9:2c:
43:50:ce:ce:a5:b0:89:01:47:3e:c5:27:d4:43:7b:
49:4f:03:2e:48:98:22:39:8b:61:5b:a5:ac:49:43:
1a:06:ff:62:94:6f:b7:00:48:d7:80:19:6c:c6:96:
d5:ea:ab:27:40:c9:fe:58:8c:22:be:ba:2f:2e:bf:
90:8d:00:74:10:4c:7d:a7:e6:3f:6a:a3:7b:88:d2:
74:b9:d9:38:dd:9d:10:6e:4c:ed:79:7e:06:84:e7:
6d:b1:fe:63:7d:51:9d:60:25:53:0e:0f:28:95:ff:
7e:34:d5:6e:38:f7:a6:ca:bc:07:df:da:6e:fc:e3:
cc:21:16:20:8f:1d:af:a0:59:4c:10:66:b6:bb:9e:
90:fe:27:e7:e0:18:ae:bc:be:ea:ff:85:55:91:6c:
dd:10:e4:c1:fb:b2:2c:c9:58:80:44:a7:d8:fb:82:
78:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:60:3B:06:0F:8A:D8:35:3F:3E:7C:BB:6E:F9:85:30:F3:18:56:2C
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/3E88AD7850E911F09706050DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.96.0-111.88.135.255
111.88.140.0/22
111.88.160.0/21
111.88.172.0-111.88.183.255
111.88.192.0-111.88.231.255
Signature Algorithm: sha256WithRSAEncryption
c7:0a:30:e4:0d:ab:c5:db:16:f1:6c:5b:8b:50:53:1c:f2:92:
a1:10:31:18:b2:56:04:9b:37:2c:10:1e:19:71:97:9f:b0:ce:
2e:08:47:b9:c5:c5:c4:96:a0:e7:62:ba:6d:fb:bf:df:4e:17:
c5:8b:0c:3c:a5:6f:d6:19:80:8e:38:6f:5d:9a:c7:89:27:f9:
d9:26:b5:17:88:6c:5b:de:92:c6:ce:9e:63:34:86:4c:5e:25:
e6:db:e2:74:e7:92:40:1c:c7:c8:9d:7a:55:18:bc:fa:ef:30:
d2:31:e7:a8:a2:f8:45:5e:4b:ae:fa:40:fa:4a:60:e4:f4:11:
7f:a0:1c:d8:b4:b8:8e:cd:d0:30:28:a7:d4:37:bd:58:0d:1b:
6b:e1:e4:f4:5c:c0:55:d6:8e:ff:7d:f4:17:2c:6a:99:83:9f:
8d:2c:4a:ba:97:de:d4:63:39:dd:93:96:61:e6:a3:51:e1:93:
e3:b6:1a:c2:d3:4c:d9:d2:f5:c5:f2:86:9d:68:7b:fa:11:8a:
6e:dc:5c:3c:77:af:86:9d:5e:26:88:34:a4:f7:ec:55:f1:f5:
27:0a:55:e9:9b:39:67:d1:aa:31:6e:7b:41:b0:0c:74:c3:7b:
1b:e5:8d:a1:ab:35:ff:33:eb:24:1b:4e:6a:e6:63:be:23:7c:
d7:90:d6:43
-----BEGIN CERTIFICATE-----
MIIFoTCCBImgAwIBAgICONgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE
RDIxRkUyMDYwHhcNMjUwNjI2MTQxNjIxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODVkNTYzNS1jM2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu53Ne5RUwuMUIJM0ev7Q1vIHV28iCxiTBlijsVD0SzBqdIH9cscH8blvyVoY
VUbtN07K+cng3nQ2RNYhr/lGB6p06ddB2B9RYf1jt0eEYrZztbBLgWaEqSxDUM7O
pbCJAUc+xSfUQ3tJTwMuSJgiOYthW6WsSUMaBv9ilG+3AEjXgBlsxpbV6qsnQMn+
WIwivrovLr+QjQB0EEx9p+Y/aqN7iNJ0udk43Z0QbkzteX4GhOdtsf5jfVGdYCVT
Dg8olf9+NNVuOPemyrwH39pu/OPMIRYgjx2voFlMEGa2u56Q/ifn4BiuvL7q/4VV
kWzdEOTB+7IsyViARKfY+4J4TQIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFE9gOwYP
itg1Pz58u275hTDzGFYsMB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE
ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvM0U4OEFENzg1
MEU5MTFGMDk3MDYwNTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTwYIKwYBBQUHAQcBAf8E
QDA+MDwEAgABMDYwDAMEBW9YYAMEA29YgAMEAm9YjAMEA29YoDAMAwQCb1isAwQD
b1iwMAwDBAZvWMADBANvWOAwDQYJKoZIhvcNAQELBQADggEBAMcKMOQNq8XbFvFs
W4tQUxzykqEQMRiyVgSbNywQHhlxl5+wzi4IR7nFxcSWoOdium37v99OF8WLDDyl
b9YZgI44b12ax4kn+dkmtReIbFveksbOnmM0hkxeJebb4nTnkkAcx8idelUYvPrv
MNIx56ii+EVeS676QPpKYOT0EX+gHNi0uI7N0DAop9Q3vVgNG2vh5PRcwFXWjv99
9BcsapmDn40sSrqX3tRjOd2TlmHmo1Hhk+O2GsLTTNnS9cXyhp1oe/oRim7cXDx3
r4adXiaINKT37FXx9ScKVembOWfRqjFue0GwDHTDexvljaGrNf8z6yQbTmrmY74j
fNeQ1kM=
-----END CERTIFICATE-----
Generated at Mon Jul 21 07:23:44 2025 by rpki-client