
Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/CDE3A0164C2211F08A17A03CC4F9AE02.roa
File: CDE3A0164C2211F08A17A03CC4F9AE02.roa (raw, json)
Hash identifier: lIdfTdksAHmb18zQ6G8+6IURaEdfIxSHnRtUbbKMl1k=
Subject key identifier: 12:AE:C4:F5:3F:73:8B:6C:16:C2:A8:43:B0:FF:D1:63:6A:27:EA:55
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 38A1
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/CDE3A0164C2211F08A17A03CC4F9AE02.roa
Signing time: Wed 18 Jun 2025 11:27:15 +0000
ROA not before: Wed 18 Jun 2025 11:27:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38710
IP address blocks: 111.88.184.0/22 maxlen: 23
111.88.188.0/22 maxlen: 23
111.88.233.0/24 maxlen: 24
111.88.238.0/24 maxlen: 24
111.88.239.0/24 maxlen: 24
115.186.10.0/23 maxlen: 23
115.186.13.0/24 maxlen: 24
115.186.14.0/24 maxlen: 24
115.186.16.0/24 maxlen: 24
115.186.17.0/24 maxlen: 24
115.186.18.0/24 maxlen: 24
115.186.21.0/24 maxlen: 24
115.186.23.0/24 maxlen: 24
115.186.24.0/23 maxlen: 23
115.186.25.0/24 maxlen: 24
115.186.30.0/23 maxlen: 24
115.186.32.0/19 maxlen: 19
115.186.32.0/21 maxlen: 21
115.186.32.0/22 maxlen: 22
115.186.32.0/24 maxlen: 24
115.186.33.0/24 maxlen: 24
115.186.34.0/24 maxlen: 24
115.186.35.0/24 maxlen: 24
115.186.36.0/23 maxlen: 24
115.186.38.0/24 maxlen: 24
115.186.39.0/24 maxlen: 24
115.186.40.0/24 maxlen: 24
115.186.41.0/24 maxlen: 24
115.186.42.0/24 maxlen: 24
115.186.43.0/24 maxlen: 24
115.186.44.0/22 maxlen: 22
115.186.44.0/24 maxlen: 24
115.186.45.0/24 maxlen: 24
115.186.46.0/24 maxlen: 24
115.186.47.0/24 maxlen: 24
115.186.56.0/21 maxlen: 23
115.186.56.0/22 maxlen: 24
115.186.60.0/23 maxlen: 24
115.186.63.0/24 maxlen: 24
115.186.64.0/19 maxlen: 23
115.186.76.0/22 maxlen: 24
115.186.80.0/21 maxlen: 24
115.186.90.0/24 maxlen: 24
115.186.96.0/20 maxlen: 23
115.186.96.0/22 maxlen: 24
115.186.101.0/24 maxlen: 24
115.186.102.0/23 maxlen: 24
115.186.104.0/24 maxlen: 24
115.186.106.0/23 maxlen: 24
115.186.108.0/22 maxlen: 24
115.186.112.0/20 maxlen: 23
115.186.112.0/23 maxlen: 24
115.186.115.0/24 maxlen: 24
115.186.117.0/24 maxlen: 24
115.186.118.0/23 maxlen: 24
115.186.120.0/23 maxlen: 24
115.186.125.0/24 maxlen: 24
115.186.126.0/24 maxlen: 24
117.102.0.0/21 maxlen: 21
117.102.0.0/22 maxlen: 22
117.102.0.0/23 maxlen: 24
117.102.2.0/24 maxlen: 24
117.102.3.0/24 maxlen: 24
117.102.4.0/24 maxlen: 24
117.102.5.0/24 maxlen: 24
117.102.6.0/24 maxlen: 24
117.102.7.0/24 maxlen: 24
117.102.8.0/24 maxlen: 24
117.102.9.0/24 maxlen: 24
117.102.12.0/23 maxlen: 23
117.102.12.0/24 maxlen: 24
117.102.14.0/23 maxlen: 23
117.102.16.0/24 maxlen: 24
117.102.17.0/24 maxlen: 24
117.102.18.0/23 maxlen: 24
117.102.20.0/22 maxlen: 23
117.102.24.0/22 maxlen: 22
117.102.24.0/23 maxlen: 24
117.102.26.0/24 maxlen: 24
117.102.28.0/24 maxlen: 24
117.102.32.0/24 maxlen: 24
117.102.33.0/24 maxlen: 24
117.102.34.0/24 maxlen: 24
117.102.35.0/24 maxlen: 24
117.102.36.0/24 maxlen: 24
117.102.37.0/24 maxlen: 24
117.102.38.0/24 maxlen: 24
117.102.39.0/24 maxlen: 24
117.102.40.0/24 maxlen: 24
117.102.41.0/24 maxlen: 24
117.102.42.0/24 maxlen: 24
117.102.43.0/24 maxlen: 24
117.102.44.0/24 maxlen: 24
117.102.45.0/24 maxlen: 24
117.102.46.0/24 maxlen: 24
117.102.47.0/24 maxlen: 24
203.81.230.0/24 maxlen: 24
203.81.239.0/24 maxlen: 24
2406:7000::/32 maxlen: 32
2406:7000::/48 maxlen: 48
2406:7000:1::/48 maxlen: 48
2406:7000:2::/48 maxlen: 48
2406:7000:3::/48 maxlen: 48
2406:7000:4::/48 maxlen: 48
2406:7000:5::/48 maxlen: 48
2406:7000:6::/48 maxlen: 48
2406:7000:7::/48 maxlen: 48
2406:7000:8::/48 maxlen: 48
2406:7000:9::/48 maxlen: 48
2406:7000:a::/48 maxlen: 48
2406:7000:b::/48 maxlen: 48
2406:7000:c::/48 maxlen: 48
2406:7000:d::/48 maxlen: 48
2406:7000:e::/48 maxlen: 48
2406:7000:f::/48 maxlen: 48
2406:7000:10::/48 maxlen: 48
2406:7000:11::/48 maxlen: 48
2406:7000:12::/48 maxlen: 48
2406:7000:13::/48 maxlen: 48
2406:7000:14::/48 maxlen: 48
2406:7000:15::/48 maxlen: 48
2406:7000:16::/48 maxlen: 48
2406:7000:17::/48 maxlen: 48
2406:7000:18::/48 maxlen: 48
2406:7000:19::/48 maxlen: 48
2406:7000:1a::/48 maxlen: 48
2406:7000:1b::/48 maxlen: 48
2406:7000:1c::/48 maxlen: 48
2406:7000:1d::/48 maxlen: 48
2406:7000:1e::/48 maxlen: 48
2406:7000:1f::/48 maxlen: 48
2406:7000:20::/48 maxlen: 48
2406:7000:21::/48 maxlen: 48
2406:7000:22::/48 maxlen: 48
2406:7000:23::/48 maxlen: 48
2406:7000:24::/48 maxlen: 48
2406:7000:25::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 18 Jun 2025 12:54:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14497 (0x38a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Jun 18 11:27:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6852a293-9a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:30:68:12:9f:73:02:b1:2f:d9:82:93:8c:e3:
82:ba:6d:b8:56:36:0f:cb:08:f5:65:81:91:09:a7:
2a:4b:9c:3e:75:b1:a2:d3:72:fe:e7:7e:cc:c6:8c:
09:7a:fe:c7:29:4d:c8:ae:cc:9a:43:53:0f:de:78:
8f:dd:2b:c0:47:67:39:26:06:6b:be:fa:91:74:4f:
6e:59:8b:7c:47:d9:53:57:e0:19:e7:e6:23:74:24:
01:4b:04:73:96:09:21:e0:ef:d6:36:8c:8e:6c:7d:
c9:72:da:3a:b9:dc:4e:5f:1a:9a:7e:a4:11:b1:e4:
52:36:9e:90:a4:86:39:b8:58:ab:e1:76:21:3b:17:
1a:7a:76:8f:8e:1c:59:90:e0:3a:69:4f:41:1b:8a:
9d:52:31:0b:9f:90:f5:32:28:0c:5f:eb:04:3a:87:
a3:01:33:8e:90:e9:43:8b:80:b1:1d:f8:32:08:30:
b7:3e:bf:f7:dd:5c:07:ab:e0:ed:59:f1:21:58:7f:
19:06:7e:3c:8c:67:03:e7:25:01:06:6f:f1:a3:da:
9e:1a:d4:24:8a:7c:75:28:44:d4:71:cb:af:a6:10:
a5:51:73:7d:cd:d6:74:5f:a8:c8:8f:05:15:cc:9d:
c1:31:db:6b:3a:5b:cc:63:30:34:a6:b8:e7:dd:9b:
0d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AE:C4:F5:3F:73:8B:6C:16:C2:A8:43:B0:FF:D1:63:6A:27:EA:55
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/CDE3A0164C2211F08A17A03CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.184.0/21
111.88.233.0/24
111.88.238.0/23
115.186.10.0/23
115.186.13.0-115.186.14.255
115.186.16.0-115.186.18.255
115.186.21.0/24
115.186.23.0-115.186.25.255
115.186.30.0-115.186.127.255
117.102.0.0-117.102.9.255
117.102.12.0-117.102.28.255
117.102.32.0/20
203.81.230.0/24
203.81.239.0/24
IPv6:
2406:7000::/32
Signature Algorithm: sha256WithRSAEncryption
6d:e4:9c:69:b6:3f:d1:c9:66:5e:ad:2c:b4:c1:3c:4d:6a:a2:
ee:b3:ee:59:f3:c6:f7:bc:9e:20:69:6f:75:13:7f:87:a5:77:
75:ad:8b:41:2f:2c:98:bc:99:10:d8:03:e4:47:1a:1d:64:a5:
9b:d2:6b:69:41:5a:6b:b9:60:aa:42:40:23:75:7f:95:d8:6d:
2c:4f:ab:71:e8:17:98:a1:1f:32:37:ac:6b:98:7b:01:63:45:
0b:3f:3a:5d:46:1b:d6:79:9d:8a:68:8e:ca:65:ec:15:31:37:
90:32:f0:d0:72:2f:a0:48:2c:f9:9b:dc:51:b7:73:db:6f:f6:
25:20:4e:34:15:83:f7:b1:05:fd:79:ba:c5:8b:b5:35:1e:90:
e5:69:e4:2a:42:8c:f8:ee:29:01:f5:07:28:1c:28:6f:29:4a:
1d:42:71:eb:4d:6a:a1:c2:b4:2e:fb:24:a2:fa:0e:65:a0:6d:
75:83:23:a1:4d:1d:c9:75:b1:30:8e:28:7a:dc:9e:6e:34:92:
84:6b:05:6e:cd:d7:fa:29:47:4b:f2:6d:15:50:c7:62:f0:ef:
5a:2f:6e:44:63:53:c1:dc:a7:16:a0:ab:57:f8:5d:6c:1c:92:
e3:89:e0:51:3b:6b:8a:46:1d:ea:e8:ad:a5:ce:ec:1c:59:4a:
81:ff:bf:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 06:53:28 2025 by rpki-client