Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/FA35D814315B11F09F69B131C4F9AE02.roa
File: FA35D814315B11F09F69B131C4F9AE02.roa (raw, json)
Hash identifier: 8tskmLL0HVYDBhjsEJpqGbWyGBQ89b5+Z0ypXhWizfU=
Subject key identifier: 1F:04:FC:57:31:39:4C:3D:E9:11:28:81:46:4D:C7:C1:05:3B:1A:C8
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3822
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/FA35D814315B11F09F69B131C4F9AE02.roa
Signing time: Thu 15 May 2025 07:26:35 +0000
ROA not before: Thu 15 May 2025 07:26:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 111.88.96.0/21 maxlen: 21
111.88.112.0/20 maxlen: 20
111.88.128.0/21 maxlen: 21
111.88.140.0/22 maxlen: 22
111.88.160.0/24 maxlen: 24
111.88.161.0/24 maxlen: 24
111.88.162.0/24 maxlen: 24
111.88.163.0/24 maxlen: 24
111.88.164.0/24 maxlen: 24
111.88.165.0/24 maxlen: 24
111.88.166.0/24 maxlen: 24
111.88.167.0/24 maxlen: 24
111.88.168.0/24 maxlen: 24
111.88.169.0/24 maxlen: 24
111.88.170.0/24 maxlen: 24
111.88.171.0/24 maxlen: 24
111.88.200.0/21 maxlen: 21
111.88.224.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 15 May 2025 09:44:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14370 (0x3822)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: May 15 07:26:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6825972b-bd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2f:09:3f:5f:ef:b0:dc:a1:d0:2e:98:20:b5:
bd:e8:1d:ec:19:5c:31:bd:2b:c5:54:e6:01:18:50:
3d:58:fe:ea:39:18:10:1c:eb:55:de:7a:c6:fa:64:
88:32:b0:a8:b7:3a:7f:a6:35:45:1f:ab:df:12:0e:
f0:6d:0f:e2:32:8b:a4:e0:9d:09:ff:20:96:2b:f0:
45:e8:2f:6c:89:b6:fb:b8:be:f4:79:86:0a:18:7e:
8e:92:53:7c:c1:12:0d:af:c4:a7:af:80:97:76:73:
7f:28:34:53:8d:88:3b:90:cc:ea:9c:d1:3a:e9:e5:
a2:11:1f:5b:26:8f:86:3c:41:22:e5:d9:02:89:84:
29:a7:ff:8a:f2:e5:1a:5b:31:fa:f3:e3:a0:62:b6:
f3:95:d9:44:66:b4:9b:19:60:67:b8:ae:c0:79:68:
c4:a6:70:a4:6d:57:00:04:fe:6c:9e:44:a0:6a:b2:
52:12:34:94:50:c4:04:dd:9f:94:2a:84:2e:21:1f:
d4:f5:aa:89:62:0f:20:db:75:37:98:34:f8:50:6a:
65:3e:28:a0:92:3f:69:d4:1c:c5:b9:b3:38:a2:83:
c1:1e:60:53:a0:43:f5:1a:ab:7c:58:7c:e4:8b:28:
ef:4a:c9:d8:53:6b:2d:f1:2f:da:2a:ea:fc:19:ee:
76:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:04:FC:57:31:39:4C:3D:E9:11:28:81:46:4D:C7:C1:05:3B:1A:C8
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/FA35D814315B11F09F69B131C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.96.0/21
111.88.112.0-111.88.135.255
111.88.140.0/22
111.88.160.0-111.88.171.255
111.88.200.0/21
111.88.224.0/21
Signature Algorithm: sha256WithRSAEncryption
b0:6c:17:cf:f0:c7:90:30:a6:d4:6f:a5:3a:44:f5:5f:35:d6:
56:78:00:b3:de:61:2b:ec:a2:3f:af:98:99:2e:a1:2c:2c:00:
7a:c9:7d:c6:42:34:c1:2f:5e:dc:57:5c:e7:53:a4:f2:10:b9:
69:86:9d:83:4b:0f:30:e4:49:41:b6:c8:41:5f:ab:03:2b:c3:
17:ea:2a:0c:14:8f:69:27:da:8b:f7:1e:0d:7a:07:ef:a5:fc:
13:e3:f2:a7:ba:1a:84:83:b3:ea:b0:eb:3e:47:be:37:e4:95:
fa:2d:ac:ed:89:d0:a2:0d:5b:ba:c2:b5:8d:e2:bf:3a:c9:66:
98:4a:d6:7a:1f:c7:93:98:dc:b2:d3:8c:2a:2d:5d:ad:cd:19:
2d:f6:bd:1e:85:d1:27:87:65:05:ac:7d:05:13:83:cc:8b:38:
24:1d:7f:0d:96:61:5a:10:c3:b7:ca:69:36:3a:01:aa:c1:bb:
b7:a8:bb:c3:ce:a0:7d:7a:f6:79:b2:ed:2a:14:42:d5:d8:a3:
2d:8d:4a:36:af:24:fb:66:e8:d0:61:18:87:fb:e7:65:c5:6c:
65:a2:00:ae:f5:53:3c:ae:95:d6:f3:eb:44:a9:7b:94:b5:8d:
7e:5b:ab:c0:a6:83:47:36:47:ae:ab:ec:e0:d2:10:f8:b0:e1:
da:26:a2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:04:28 2025 by rpki-client