Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/492881724C4311F08F09AC48C4F9AE02.roa
File: 492881724C4311F08F09AC48C4F9AE02.roa (raw, json)
Hash identifier: Jj/Ra9hHuxVwLG/h6viIv7EUvwbUWoQVJXRxKNRXDOQ=
Subject key identifier: EF:BB:80:83:39:ED:4E:24:79:82:E2:45:25:D3:F1:5C:CA:6B:17:4B
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 38AB
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/492881724C4311F08F09AC48C4F9AE02.roa
Signing time: Wed 18 Jun 2025 12:59:23 +0000
ROA not before: Wed 18 Jun 2025 12:59:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55414
IP address blocks: 115.186.14.0/23 maxlen: 23
115.186.15.0/24 maxlen: 24
115.186.18.0/23 maxlen: 23
115.186.20.0/23 maxlen: 24
115.186.22.0/23 maxlen: 23
115.186.22.0/24 maxlen: 24
115.186.24.0/23 maxlen: 23
115.186.24.0/24 maxlen: 24
115.186.26.0/23 maxlen: 24
115.186.28.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Jun 2025 06:17:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14507 (0x38ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Jun 18 12:59:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6852b82b-c674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ab:2a:2a:5d:09:03:f0:04:1f:64:3c:23:87:
c0:49:29:4c:2e:6d:d3:71:4f:85:7d:44:82:21:e5:
62:7b:6d:70:70:00:27:52:60:45:6b:4a:e8:c8:b2:
b8:1b:dc:9e:86:d2:a9:5d:7f:9c:26:fd:37:9c:8c:
bc:75:30:7b:49:64:b5:14:30:02:fe:c4:bb:13:15:
ee:fb:2f:49:71:b0:77:cb:2d:7c:b8:13:6f:1e:cf:
63:98:a2:a2:c6:92:e2:de:c4:4c:35:38:b8:2c:bd:
19:bc:9e:52:60:1f:f5:55:ad:dc:fa:0c:00:a5:2c:
0f:34:21:23:be:6b:9a:c4:93:46:35:85:1a:9e:c9:
f4:f0:4c:13:a0:1d:45:7d:8c:0d:5b:8a:93:14:be:
88:29:b4:2b:aa:92:85:1c:a1:56:1e:cf:ff:89:e2:
40:c6:93:f9:39:bf:58:4c:c5:fe:28:70:e6:46:e5:
cc:37:7f:b9:a8:83:9a:a6:94:3f:eb:55:18:ec:53:
95:b8:76:1e:ac:37:08:d6:d0:85:d6:fb:3e:1b:a0:
d4:95:38:89:f5:5e:01:b6:b0:f3:f0:56:4f:17:2e:
b5:4e:14:f7:85:99:aa:03:93:bf:0f:52:6d:15:d1:
5c:a6:01:f7:72:bd:f1:71:92:13:9f:77:7d:a8:49:
b0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BB:80:83:39:ED:4E:24:79:82:E2:45:25:D3:F1:5C:CA:6B:17:4B
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/492881724C4311F08F09AC48C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.186.14.0/23
115.186.18.0-115.186.29.255
Signature Algorithm: sha256WithRSAEncryption
79:a7:1e:f7:70:ea:55:fa:ec:25:79:88:d0:68:ee:b4:20:ac:
b6:e2:6a:8c:f9:41:d5:2a:24:5b:26:b7:5a:39:c3:50:18:06:
9c:02:d1:2e:1f:a4:15:65:93:d3:2e:27:e2:a7:f2:bb:cf:65:
17:b3:07:a5:0b:7f:7c:9d:96:e1:e2:49:85:5b:9e:96:36:bc:
e4:a3:3b:c2:e0:b2:1f:95:77:a1:64:a4:79:a9:0c:94:58:1d:
6c:47:62:02:f5:84:3d:3d:38:f3:f1:63:77:7a:75:67:e0:e2:
db:1c:e9:3f:e2:95:85:cf:b3:c5:a4:ed:61:33:86:a1:82:d4:
92:6e:61:6e:52:fb:8a:1a:93:a6:03:9d:d3:81:28:ea:67:85:
a8:9f:2b:3b:4b:df:81:36:0d:fb:82:34:b1:fb:be:18:6c:ec:
0e:a5:2c:10:0b:f0:9a:34:89:e0:d1:5e:30:71:7d:1c:73:90:
3f:4c:d8:a5:54:6e:9a:2c:80:84:f4:e1:ff:b0:9a:47:f4:46:
36:53:c0:1d:79:65:0a:fe:96:2e:e5:69:0d:64:e0:2c:e0:1e:
00:a3:d5:20:9e:a9:57:fa:d0:45:42:db:80:95:76:eb:68:3a:
11:aa:59:ea:7d:69:05:91:59:c3:bb:83:2e:db:b1:4e:8d:09:
d0:f3:75:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 06:53:30 2025 by rpki-client