Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/5A4A9FC82FD111F08F17E90BC4F9AE02.roa
File: 5A4A9FC82FD111F08F17E90BC4F9AE02.roa (raw, json)
Hash identifier: JLTxDC7zMty48u8nwDutjuk1XK9m7r4aQ5F7sT4Jq2s=
Subject key identifier: 97:D8:2E:F1:FD:4A:0F:EF:CF:7A:DD:B1:22:C8:70:3F:C0:A0:66:A1
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3803
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/5A4A9FC82FD111F08F17E90BC4F9AE02.roa
Signing time: Tue 13 May 2025 08:29:12 +0000
ROA not before: Tue 13 May 2025 08:29:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132165
IP address blocks: 103.246.108.0/22 maxlen: 22
103.246.108.0/24 maxlen: 24
103.246.109.0/24 maxlen: 24
103.246.110.0/24 maxlen: 24
103.246.111.0/24 maxlen: 24
111.88.0.0/20 maxlen: 24
111.88.16.0/20 maxlen: 24
111.88.32.0/20 maxlen: 24
111.88.48.0/20 maxlen: 24
111.88.64.0/21 maxlen: 21
111.88.64.0/24 maxlen: 24
111.88.65.0/24 maxlen: 24
111.88.66.0/24 maxlen: 24
111.88.67.0/24 maxlen: 24
111.88.68.0/24 maxlen: 24
111.88.69.0/24 maxlen: 24
111.88.70.0/24 maxlen: 24
111.88.71.0/24 maxlen: 24
111.88.72.0/22 maxlen: 22
111.88.72.0/24 maxlen: 24
111.88.73.0/24 maxlen: 24
111.88.74.0/24 maxlen: 24
111.88.75.0/24 maxlen: 24
111.88.78.0/24 maxlen: 24
111.88.80.0/20 maxlen: 20
111.88.80.0/22 maxlen: 22
111.88.80.0/24 maxlen: 24
111.88.81.0/24 maxlen: 24
111.88.82.0/24 maxlen: 24
111.88.83.0/24 maxlen: 24
111.88.84.0/22 maxlen: 22
111.88.84.0/24 maxlen: 24
111.88.85.0/24 maxlen: 24
111.88.86.0/24 maxlen: 24
111.88.87.0/24 maxlen: 24
111.88.88.0/21 maxlen: 21
111.88.88.0/24 maxlen: 24
111.88.89.0/24 maxlen: 24
111.88.90.0/24 maxlen: 24
111.88.91.0/24 maxlen: 24
111.88.92.0/24 maxlen: 24
111.88.93.0/24 maxlen: 24
111.88.94.0/24 maxlen: 24
111.88.95.0/24 maxlen: 24
111.88.104.0/21 maxlen: 21
111.88.136.0/23 maxlen: 24
111.88.160.0/22 maxlen: 22
111.88.160.0/24 maxlen: 24
111.88.161.0/24 maxlen: 24
111.88.162.0/24 maxlen: 24
111.88.163.0/24 maxlen: 24
111.88.172.0/22 maxlen: 22
111.88.172.0/24 maxlen: 24
111.88.173.0/24 maxlen: 24
111.88.174.0/24 maxlen: 24
111.88.175.0/24 maxlen: 24
111.88.176.0/21 maxlen: 21
111.88.176.0/24 maxlen: 24
111.88.177.0/24 maxlen: 24
111.88.178.0/24 maxlen: 24
111.88.179.0/24 maxlen: 24
111.88.180.0/24 maxlen: 24
111.88.181.0/24 maxlen: 24
111.88.182.0/24 maxlen: 24
111.88.183.0/24 maxlen: 24
111.88.192.0/19 maxlen: 19
111.88.192.0/24 maxlen: 24
111.88.193.0/24 maxlen: 24
111.88.194.0/24 maxlen: 24
111.88.195.0/24 maxlen: 24
111.88.196.0/24 maxlen: 24
111.88.197.0/24 maxlen: 24
111.88.198.0/24 maxlen: 24
111.88.199.0/24 maxlen: 24
111.88.200.0/24 maxlen: 24
111.88.201.0/24 maxlen: 24
111.88.202.0/24 maxlen: 24
111.88.203.0/24 maxlen: 24
111.88.204.0/24 maxlen: 24
111.88.205.0/24 maxlen: 24
111.88.206.0/24 maxlen: 24
111.88.207.0/24 maxlen: 24
111.88.208.0/24 maxlen: 24
111.88.209.0/24 maxlen: 24
111.88.210.0/24 maxlen: 24
111.88.211.0/24 maxlen: 24
111.88.212.0/24 maxlen: 24
111.88.213.0/24 maxlen: 24
111.88.214.0/24 maxlen: 24
111.88.215.0/24 maxlen: 24
111.88.216.0/24 maxlen: 24
111.88.217.0/24 maxlen: 24
111.88.218.0/24 maxlen: 24
111.88.219.0/24 maxlen: 24
111.88.220.0/24 maxlen: 24
111.88.221.0/24 maxlen: 24
111.88.222.0/24 maxlen: 24
111.88.223.0/24 maxlen: 24
115.186.2.0/23 maxlen: 24
115.186.4.0/22 maxlen: 24
115.186.8.0/23 maxlen: 24
115.186.76.0/22 maxlen: 24
115.186.80.0/22 maxlen: 22
115.186.80.0/24 maxlen: 24
115.186.81.0/24 maxlen: 24
115.186.82.0/24 maxlen: 24
115.186.83.0/24 maxlen: 24
115.186.84.0/22 maxlen: 22
115.186.84.0/24 maxlen: 24
115.186.85.0/24 maxlen: 24
115.186.86.0/24 maxlen: 24
115.186.87.0/24 maxlen: 24
117.102.48.0/20 maxlen: 20
117.102.48.0/24 maxlen: 24
117.102.49.0/24 maxlen: 24
117.102.50.0/24 maxlen: 24
117.102.51.0/24 maxlen: 24
117.102.52.0/24 maxlen: 24
117.102.53.0/24 maxlen: 24
117.102.54.0/24 maxlen: 24
117.102.55.0/24 maxlen: 24
117.102.56.0/24 maxlen: 24
117.102.57.0/24 maxlen: 24
117.102.58.0/24 maxlen: 24
117.102.59.0/24 maxlen: 24
117.102.60.0/24 maxlen: 24
117.102.61.0/24 maxlen: 24
117.102.62.0/24 maxlen: 24
117.102.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 May 2025 12:40:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14339 (0x3803)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: May 13 08:29:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=682302d8-940d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d4:85:9c:cd:23:2d:cb:13:cb:60:69:3d:6d:
ce:6e:64:ca:31:74:4d:9d:2b:b5:7b:19:02:13:2e:
a0:ad:f0:4d:a1:5d:bf:da:c5:f7:db:31:ce:42:f5:
3f:c6:5f:21:46:be:cc:e9:56:d6:9c:10:44:d7:b3:
21:32:fe:aa:3d:ae:d8:4d:c7:1a:06:c4:5d:a4:76:
e8:55:b6:a8:62:79:f7:4c:81:a6:d0:c8:a6:d7:2d:
00:b8:a6:89:d4:25:ca:44:fd:65:1d:03:ce:10:c1:
9f:e8:fb:54:b4:11:8d:14:54:29:78:20:b4:d5:a8:
95:7a:a9:db:c3:59:ed:f0:b3:9b:02:59:12:17:33:
cf:81:7c:53:0a:5e:ff:1b:f0:24:b9:3f:2b:57:d4:
66:e5:1b:90:20:bf:b4:0d:0e:56:a9:97:a9:7b:43:
69:78:1b:0a:94:99:3f:b4:b6:6f:42:a5:dd:7a:33:
c8:71:72:fd:e5:fe:11:48:51:cc:db:16:26:2b:0d:
06:28:e2:4c:c8:39:c4:83:10:3e:e8:6f:7b:0d:9f:
cb:8e:ba:8d:df:f1:93:ad:05:7f:8d:f1:78:64:57:
d8:8d:4e:27:0e:a6:ea:92:b2:57:b5:6f:c6:74:c6:
90:b3:25:26:0b:52:74:58:a0:4c:4d:ec:47:16:3f:
e9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D8:2E:F1:FD:4A:0F:EF:CF:7A:DD:B1:22:C8:70:3F:C0:A0:66:A1
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/5A4A9FC82FD111F08F17E90BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.246.108.0/22
111.88.0.0-111.88.75.255
111.88.78.0/24
111.88.80.0/20
111.88.104.0/21
111.88.136.0/23
111.88.160.0/22
111.88.172.0-111.88.183.255
111.88.192.0/19
115.186.2.0-115.186.9.255
115.186.76.0-115.186.87.255
117.102.48.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:4d:7c:26:c8:9e:a8:7a:eb:c9:37:53:ff:c0:68:56:7d:77:
e1:e9:ab:3d:1f:7e:a9:dd:4b:5f:ad:0b:7e:b3:95:4d:cb:8e:
a0:97:6f:dc:82:c6:8e:d0:28:1b:c3:59:0a:26:df:85:e8:35:
a2:55:c9:b0:00:1d:98:9d:2f:4b:cb:35:e6:1b:47:51:be:63:
26:d2:d0:fe:6b:dd:4f:96:6b:5e:29:f5:69:eb:3d:59:d6:5c:
86:3f:9f:a0:bf:5e:7c:da:b0:8a:14:cc:2c:a6:7b:2d:66:b1:
59:bc:f1:86:db:33:b5:a8:71:99:31:4d:92:f4:dc:28:d1:2c:
7b:11:0a:97:9d:a8:50:b4:00:3a:11:c8:d9:8d:a0:12:8a:a6:
1b:f0:81:b4:f6:59:86:6e:e0:56:94:79:b0:a0:89:4f:4a:68:
96:3f:a0:6a:35:ef:b5:dc:58:3b:59:34:e4:7a:27:7f:3c:ac:
c7:ce:e3:49:81:11:51:36:67:7d:46:63:b1:f1:ee:a2:e7:bd:
34:81:ec:ae:d6:b3:09:e8:c3:96:a2:cd:f4:b1:f9:8d:ac:e4:
e2:55:47:03:62:4b:ac:bd:8d:7c:6a:46:34:8c:74:52:65:fd:
39:78:be:4f:d7:02:a3:44:b2:af:ea:e3:97:93:c5:97:1e:a4:
0c:4a:12:5f
-----BEGIN CERTIFICATE-----
MIIF0zCCBLugAwIBAgICOAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE
RDIxRkUyMDYwHhcNMjUwNTEzMDgyOTEyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODIzMDJkOC05NDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAztSFnM0jLcsTy2BpPW3ObmTKMXRNnSu1exkCEy6grfBNoV2/2sX32zHOQvU/
xl8hRr7M6VbWnBBE17MhMv6qPa7YTccaBsRdpHboVbaoYnn3TIGm0Mim1y0AuKaJ
1CXKRP1lHQPOEMGf6PtUtBGNFFQpeCC01aiVeqnbw1nt8LObAlkSFzPPgXxTCl7/
G/AkuT8rV9Rm5RuQIL+0DQ5WqZepe0NpeBsKlJk/tLZvQqXdejPIcXL95f4RSFHM
2xYmKw0GKOJMyDnEgxA+6G97DZ/LjrqN3/GTrQV/jfF4ZFfYjU4nDqbqkrJXtW/G
dMaQsyUmC1J0WKBMTexHFj/puQIDAQABo4IC9zCCAvMwHQYDVR0OBBYEFJfYLvH9
Sg/vz3rdsSLIcD/AoGahMB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE
ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvNUE0QTlGQzgy
RkQxMTFGMDhGMTdFOTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYAGCCsGAQUFBwEHAQH/
BHEwbzBtBAIAATBnAwQCZ/ZsMAsDAwNvWAMEAm9YSAMEAG9YTgMEBG9YUAMEA29Y
aAMEAW9YiAMEAm9YoDAMAwQCb1isAwQDb1iwAwQFb1jAMAwDBAFzugIDBAFzuggw
DAMEAnO6TAMEA3O6UAMEBHVmMDANBgkqhkiG9w0BAQsFAAOCAQEAOk18JsieqHrr
yTdT/8BoVn134emrPR9+qd1LX60LfrOVTcuOoJdv3ILGjtAoG8NZCibfheg1olXJ
sAAdmJ0vS8s15htHUb5jJtLQ/mvdT5ZrXin1aes9WdZchj+foL9efNqwihTMLKZ7
LWaxWbzxhtsztahxmTFNkvTcKNEsexEKl52oULQAOhHI2Y2gEoqmG/CBtPZZhm7g
VpR5sKCJT0polj+gajXvtdxYO1k05Honfzysx87jSYERUTZnfUZjsfHuoue9NIHs
rtazCejDlqLN9LH5jazk4lVHA2JLrL2NfGpGNIx0UmX9OXi+T9cCo0Syr+rjl5PF
lx6kDEoSXw==
-----END CERTIFICATE-----
Generated at Mon Jul 21 07:23:43 2025 by rpki-client