Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/EA19E5B02CD811F08A3B9716C4F9AE02.roa
File: EA19E5B02CD811F08A3B9716C4F9AE02.roa (raw, json)
Hash identifier: 1RNLcgCN1qS5J8P/9i+Qd3M4l/MrFvLIceF1RG/v+P4=
Subject key identifier: 8B:A4:72:04:8C:45:73:51:08:4E:A5:64:9E:12:D8:A2:33:CA:0E:5E
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3827
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/EA19E5B02CD811F08A3B9716C4F9AE02.roa
Signing time: Thu 15 May 2025 09:44:09 +0000
ROA not before: Thu 15 May 2025 09:44:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150382
IP address blocks: 111.88.76.0/24 maxlen: 24
111.88.77.0/24 maxlen: 24
111.88.79.0/24 maxlen: 24
111.88.138.0/24 maxlen: 24
111.88.139.0/24 maxlen: 24
111.88.164.0/24 maxlen: 24
111.88.165.0/24 maxlen: 24
111.88.166.0/24 maxlen: 24
111.88.167.0/24 maxlen: 24
111.88.184.0/24 maxlen: 24
111.88.185.0/24 maxlen: 24
111.88.186.0/24 maxlen: 24
111.88.187.0/24 maxlen: 24
111.88.188.0/24 maxlen: 24
111.88.189.0/24 maxlen: 24
111.88.190.0/24 maxlen: 24
111.88.191.0/24 maxlen: 24
111.88.232.0/24 maxlen: 24
111.88.234.0/24 maxlen: 24
111.88.235.0/24 maxlen: 24
111.88.236.0/24 maxlen: 24
111.88.237.0/24 maxlen: 24
115.186.1.0/24 maxlen: 24
115.186.10.0/24 maxlen: 24
115.186.11.0/24 maxlen: 24
115.186.12.0/24 maxlen: 24
115.186.13.0/24 maxlen: 24
115.186.16.0/24 maxlen: 24
115.186.19.0/24 maxlen: 24
115.186.22.0/24 maxlen: 24
115.186.24.0/24 maxlen: 24
115.186.26.0/24 maxlen: 24
115.186.27.0/24 maxlen: 24
115.186.28.0/24 maxlen: 24
115.186.29.0/24 maxlen: 24
115.186.41.0/24 maxlen: 24
115.186.48.0/24 maxlen: 24
115.186.49.0/24 maxlen: 24
115.186.50.0/24 maxlen: 24
115.186.51.0/24 maxlen: 24
115.186.52.0/24 maxlen: 24
115.186.53.0/24 maxlen: 24
115.186.54.0/24 maxlen: 24
115.186.55.0/24 maxlen: 24
115.186.64.0/24 maxlen: 24
115.186.65.0/24 maxlen: 24
115.186.66.0/24 maxlen: 24
115.186.67.0/24 maxlen: 24
115.186.68.0/24 maxlen: 24
115.186.69.0/24 maxlen: 24
115.186.70.0/24 maxlen: 24
115.186.71.0/24 maxlen: 24
115.186.72.0/24 maxlen: 24
115.186.73.0/24 maxlen: 24
115.186.74.0/24 maxlen: 24
115.186.75.0/24 maxlen: 24
115.186.88.0/24 maxlen: 24
115.186.89.0/24 maxlen: 24
115.186.91.0/24 maxlen: 24
115.186.92.0/24 maxlen: 24
115.186.93.0/24 maxlen: 24
115.186.94.0/24 maxlen: 24
115.186.95.0/24 maxlen: 24
115.186.97.0/24 maxlen: 24
115.186.99.0/24 maxlen: 24
115.186.100.0/24 maxlen: 24
115.186.105.0/24 maxlen: 24
115.186.114.0/24 maxlen: 24
115.186.116.0/24 maxlen: 24
115.186.122.0/24 maxlen: 24
115.186.123.0/24 maxlen: 24
115.186.124.0/24 maxlen: 24
115.186.125.0/24 maxlen: 24
115.186.127.0/24 maxlen: 24
117.102.10.0/24 maxlen: 24
117.102.11.0/24 maxlen: 24
117.102.13.0/24 maxlen: 24
117.102.14.0/24 maxlen: 24
117.102.15.0/24 maxlen: 24
117.102.20.0/24 maxlen: 24
117.102.21.0/24 maxlen: 24
117.102.22.0/24 maxlen: 24
117.102.23.0/24 maxlen: 24
117.102.27.0/24 maxlen: 24
117.102.29.0/24 maxlen: 24
117.102.30.0/24 maxlen: 24
117.102.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 May 2025 07:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14375 (0x3827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: May 15 09:44:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6825b769-b3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0e:3c:e0:64:b1:82:b5:09:c0:b2:49:f9:87:
85:2b:1e:54:5c:95:09:e8:a2:51:01:11:97:ad:af:
92:e6:f0:20:17:13:c1:b5:e3:10:9e:b6:e4:c8:0b:
a2:b6:75:cd:2f:a1:5b:f6:3d:05:a8:e2:56:7b:b9:
40:99:0c:d3:d9:31:2b:e4:24:fd:f2:65:78:1c:a9:
89:b9:15:ff:27:2c:4c:f4:56:23:66:ce:e1:27:b9:
b4:e5:c3:59:8a:40:f0:f9:28:41:dc:4a:4d:85:f7:
0f:58:cc:ba:e9:68:af:c7:41:40:58:8a:b5:a5:12:
79:6c:64:b4:5d:93:a9:6f:78:01:e8:db:e6:84:f9:
4b:60:b3:e8:49:fb:de:41:1a:4e:de:b9:83:47:a3:
3e:11:55:74:48:9c:dc:7f:90:7b:8d:db:97:d9:94:
ac:f0:a5:7d:14:b9:cb:21:dc:73:79:7b:38:17:27:
d2:42:66:69:b3:45:98:7f:8e:a7:94:1c:28:b0:83:
d2:53:5d:c5:95:e4:45:75:e5:9a:ce:15:89:66:b1:
3e:87:74:77:cf:f7:66:af:30:e1:98:a4:d2:00:52:
fd:34:4f:90:2f:7f:cf:6d:e6:c3:e2:64:81:1b:e2:
1e:3c:d9:db:ea:1c:5e:86:47:85:fa:6c:21:db:9d:
4e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A4:72:04:8C:45:73:51:08:4E:A5:64:9E:12:D8:A2:33:CA:0E:5E
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/EA19E5B02CD811F08A3B9716C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.76.0/23
111.88.79.0/24
111.88.138.0/23
111.88.164.0/22
111.88.184.0/21
111.88.232.0/24
111.88.234.0-111.88.237.255
115.186.1.0/24
115.186.10.0-115.186.13.255
115.186.16.0/24
115.186.19.0/24
115.186.22.0/24
115.186.24.0/24
115.186.26.0-115.186.29.255
115.186.41.0/24
115.186.48.0/21
115.186.64.0-115.186.75.255
115.186.88.0/23
115.186.91.0-115.186.95.255
115.186.97.0/24
115.186.99.0-115.186.100.255
115.186.105.0/24
115.186.114.0/24
115.186.116.0/24
115.186.122.0-115.186.125.255
115.186.127.0/24
117.102.10.0/23
117.102.13.0-117.102.15.255
117.102.20.0/22
117.102.27.0/24
117.102.29.0-117.102.31.255
Signature Algorithm: sha256WithRSAEncryption
38:e1:78:a8:d3:73:0d:f0:2f:fa:30:23:dd:85:2f:b0:f1:01:
57:8d:58:50:3a:d8:ae:00:5b:6b:ce:a0:aa:40:0f:4d:f4:91:
50:81:54:a1:e9:32:15:be:66:94:fb:b9:0c:9b:f8:95:34:50:
0a:66:4b:05:98:62:c6:4e:85:59:d6:46:a1:39:30:8f:60:39:
67:24:14:f9:32:89:88:d9:a8:68:47:a1:26:9a:58:c8:83:94:
f6:99:6c:ac:25:95:04:c6:0d:26:9c:da:58:54:8b:54:f3:aa:
91:db:b2:a4:a5:e9:98:3a:d2:ea:ce:73:d7:d5:4d:3c:5a:1a:
7a:2a:70:61:57:1f:1c:4e:e9:a7:7a:8e:c0:34:c0:b8:bb:e7:
ba:50:9f:95:cb:01:2a:72:6b:d9:3c:7c:4a:39:49:df:2b:39:
ba:15:15:57:19:c2:b1:36:c9:b9:48:63:fe:01:66:9e:d3:bc:
2a:39:37:1d:21:ec:56:6a:79:22:80:7d:e6:7d:49:58:b9:f3:
2c:99:72:f3:60:d0:c8:55:89:71:8a:0f:68:e9:0a:18:cc:91:
74:c1:54:ca:f3:e4:79:31:a5:ab:28:a6:3c:14:fd:99:db:72:
26:41:2c:4f:dc:3a:e7:90:d8:a4:3b:f7:38:cd:62:49:7b:2a:
bb:ec:c6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:07:53 2025 by rpki-client