
Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/FD5E17FC35FE11F08F4D2843C4F9AE02.roa
File: FD5E17FC35FE11F08F4D2843C4F9AE02.roa (raw, json)
Hash identifier: ZGf7YEeuHbGmmbYlBxB1BQdlyPBdg0MefBgTKGtEOpo=
Subject key identifier: F9:D3:8E:44:FA:C1:47:22:66:89:B5:31:15:3A:08:62:C7:40:1F:01
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 385F
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/FD5E17FC35FE11F08F4D2843C4F9AE02.roa
Signing time: Fri 23 May 2025 17:06:01 +0000
ROA not before: Fri 23 May 2025 17:06:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38710
IP address blocks: 111.88.112.0/20 maxlen: 20
111.88.184.0/22 maxlen: 23
111.88.188.0/22 maxlen: 23
111.88.233.0/24 maxlen: 24
111.88.238.0/24 maxlen: 24
111.88.239.0/24 maxlen: 24
115.186.10.0/23 maxlen: 23
115.186.12.0/23 maxlen: 23
115.186.14.0/24 maxlen: 24
115.186.16.0/24 maxlen: 24
115.186.17.0/24 maxlen: 24
115.186.18.0/24 maxlen: 24
115.186.21.0/24 maxlen: 24
115.186.23.0/24 maxlen: 24
115.186.24.0/23 maxlen: 23
115.186.25.0/24 maxlen: 24
115.186.30.0/23 maxlen: 24
115.186.32.0/19 maxlen: 19
115.186.32.0/21 maxlen: 21
115.186.32.0/22 maxlen: 22
115.186.32.0/24 maxlen: 24
115.186.33.0/24 maxlen: 24
115.186.34.0/24 maxlen: 24
115.186.35.0/24 maxlen: 24
115.186.36.0/23 maxlen: 24
115.186.38.0/24 maxlen: 24
115.186.39.0/24 maxlen: 24
115.186.40.0/21 maxlen: 22
115.186.40.0/24 maxlen: 24
115.186.42.0/24 maxlen: 24
115.186.43.0/24 maxlen: 24
115.186.44.0/24 maxlen: 24
115.186.45.0/24 maxlen: 24
115.186.46.0/24 maxlen: 24
115.186.47.0/24 maxlen: 24
115.186.56.0/21 maxlen: 23
115.186.56.0/22 maxlen: 24
115.186.60.0/23 maxlen: 24
115.186.63.0/24 maxlen: 24
115.186.64.0/19 maxlen: 23
115.186.76.0/22 maxlen: 24
115.186.80.0/21 maxlen: 24
115.186.90.0/24 maxlen: 24
115.186.96.0/20 maxlen: 23
115.186.96.0/22 maxlen: 24
115.186.101.0/24 maxlen: 24
115.186.102.0/23 maxlen: 24
115.186.104.0/24 maxlen: 24
115.186.106.0/23 maxlen: 24
115.186.108.0/22 maxlen: 24
115.186.112.0/20 maxlen: 23
115.186.112.0/23 maxlen: 24
115.186.115.0/24 maxlen: 24
115.186.117.0/24 maxlen: 24
115.186.118.0/23 maxlen: 24
115.186.120.0/23 maxlen: 24
115.186.125.0/24 maxlen: 24
115.186.126.0/24 maxlen: 24
117.102.0.0/21 maxlen: 21
117.102.0.0/22 maxlen: 22
117.102.0.0/23 maxlen: 24
117.102.2.0/24 maxlen: 24
117.102.3.0/24 maxlen: 24
117.102.4.0/24 maxlen: 24
117.102.5.0/24 maxlen: 24
117.102.6.0/24 maxlen: 24
117.102.7.0/24 maxlen: 24
117.102.8.0/24 maxlen: 24
117.102.9.0/24 maxlen: 24
117.102.12.0/23 maxlen: 23
117.102.12.0/24 maxlen: 24
117.102.14.0/23 maxlen: 23
117.102.16.0/24 maxlen: 24
117.102.17.0/24 maxlen: 24
117.102.18.0/23 maxlen: 24
117.102.20.0/22 maxlen: 23
117.102.24.0/22 maxlen: 22
117.102.24.0/23 maxlen: 24
117.102.26.0/24 maxlen: 24
117.102.28.0/24 maxlen: 24
117.102.32.0/24 maxlen: 24
117.102.33.0/24 maxlen: 24
117.102.34.0/24 maxlen: 24
117.102.35.0/24 maxlen: 24
117.102.36.0/24 maxlen: 24
117.102.37.0/24 maxlen: 24
117.102.38.0/24 maxlen: 24
117.102.39.0/24 maxlen: 24
117.102.40.0/24 maxlen: 24
117.102.41.0/24 maxlen: 24
117.102.42.0/24 maxlen: 24
117.102.43.0/24 maxlen: 24
117.102.44.0/24 maxlen: 24
117.102.45.0/24 maxlen: 24
117.102.46.0/24 maxlen: 24
117.102.47.0/24 maxlen: 24
203.81.230.0/24 maxlen: 24
203.81.239.0/24 maxlen: 24
2406:7000::/32 maxlen: 32
2406:7000::/48 maxlen: 48
2406:7000:1::/48 maxlen: 48
2406:7000:2::/48 maxlen: 48
2406:7000:3::/48 maxlen: 48
2406:7000:4::/48 maxlen: 48
2406:7000:5::/48 maxlen: 48
2406:7000:6::/48 maxlen: 48
2406:7000:7::/48 maxlen: 48
2406:7000:8::/48 maxlen: 48
2406:7000:9::/48 maxlen: 48
2406:7000:a::/48 maxlen: 48
2406:7000:b::/48 maxlen: 48
2406:7000:c::/48 maxlen: 48
2406:7000:d::/48 maxlen: 48
2406:7000:e::/48 maxlen: 48
2406:7000:f::/48 maxlen: 48
2406:7000:10::/48 maxlen: 48
2406:7000:11::/48 maxlen: 48
2406:7000:12::/48 maxlen: 48
2406:7000:13::/48 maxlen: 48
2406:7000:14::/48 maxlen: 48
2406:7000:15::/48 maxlen: 48
2406:7000:16::/48 maxlen: 48
2406:7000:17::/48 maxlen: 48
2406:7000:18::/48 maxlen: 48
2406:7000:19::/48 maxlen: 48
2406:7000:1a::/48 maxlen: 48
2406:7000:1b::/48 maxlen: 48
2406:7000:1c::/48 maxlen: 48
2406:7000:1d::/48 maxlen: 48
2406:7000:1e::/48 maxlen: 48
2406:7000:1f::/48 maxlen: 48
2406:7000:20::/48 maxlen: 48
2406:7000:21::/48 maxlen: 48
2406:7000:22::/48 maxlen: 48
2406:7000:23::/48 maxlen: 48
2406:7000:24::/48 maxlen: 48
2406:7000:25::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 11:49:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14431 (0x385f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: May 23 17:06:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6830aaf9-6f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:47:da:a9:f8:ac:21:f6:10:07:5d:9b:36:2d:
e9:8c:bc:3c:e6:e9:c1:12:e5:6a:92:86:04:91:ac:
7a:9b:7b:fe:74:b9:d2:5b:99:67:c6:67:c3:5b:c4:
b5:b3:85:3b:3d:54:b1:a7:eb:a7:07:c5:0b:e6:87:
9c:e9:b5:e9:ff:cb:05:50:71:4e:48:9b:a6:b7:f5:
61:72:a4:b0:af:21:fc:e8:49:16:e4:c8:4b:fd:1d:
ae:0e:cf:75:c0:c1:c0:7d:fb:f9:cf:68:0b:60:27:
b5:aa:e2:90:ca:e4:8f:ba:43:2b:86:9f:16:c8:fe:
b2:e2:ae:68:21:cd:ff:e9:84:09:ca:e6:8b:dd:7d:
00:dc:2f:b4:54:56:4e:a1:eb:73:16:7d:a5:94:96:
69:f7:ab:a5:5d:cf:ba:c6:d8:d3:ed:40:02:f2:71:
ce:c2:ca:64:06:26:36:4d:d0:82:81:73:89:b8:a6:
8f:38:a3:65:43:f7:05:f6:d7:8f:05:b6:5b:ea:fd:
51:69:b1:db:86:c1:ba:5b:1b:66:ef:06:cd:2b:32:
cb:11:ee:81:11:f9:18:61:ff:e4:82:42:14:e1:2b:
61:d2:59:c1:3c:73:14:ab:ad:9d:d4:07:71:02:26:
64:1d:ef:0c:1d:aa:95:40:49:93:5c:7e:7c:35:f0:
91:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D3:8E:44:FA:C1:47:22:66:89:B5:31:15:3A:08:62:C7:40:1F:01
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/FD5E17FC35FE11F08F4D2843C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.112.0/20
111.88.184.0/21
111.88.233.0/24
111.88.238.0/23
115.186.10.0-115.186.14.255
115.186.16.0-115.186.18.255
115.186.21.0/24
115.186.23.0-115.186.25.255
115.186.30.0-115.186.127.255
117.102.0.0-117.102.9.255
117.102.12.0-117.102.28.255
117.102.32.0/20
203.81.230.0/24
203.81.239.0/24
IPv6:
2406:7000::/32
Signature Algorithm: sha256WithRSAEncryption
08:b5:8b:20:ff:89:46:80:08:58:2a:fd:9b:4c:1a:1c:fd:78:
d0:31:82:21:9d:5d:b5:d3:73:c0:0b:2b:78:15:f8:1f:5a:d3:
3f:0e:4f:3d:92:76:ca:76:3d:ec:be:e1:81:79:ec:6a:9d:42:
c6:27:20:04:ce:48:9d:a1:51:00:8f:6e:56:98:2b:02:58:d2:
89:55:9f:c5:c1:63:16:83:4f:e7:50:57:8c:44:8f:a9:e7:55:
0e:02:a1:f6:22:e5:82:2d:fb:1b:1c:27:02:d3:29:35:cf:f5:
54:c4:6f:b7:9d:49:c8:42:de:53:30:66:46:70:28:28:c6:0e:
cd:78:bf:05:dc:45:dd:72:cc:89:a7:53:0f:82:9c:e6:88:74:
ce:aa:18:73:aa:4a:57:c3:b1:24:0d:d9:05:89:b6:d6:cb:1e:
ee:2b:6f:94:99:87:a1:f0:b6:fd:51:5f:cc:59:97:3c:c1:c5:
09:64:2a:33:28:cb:cf:44:ca:a8:04:84:d4:d1:29:ae:b1:ff:
47:27:d8:71:7c:6e:d3:01:11:e4:b8:5c:ce:a2:3a:64:e6:b2:
cd:f7:01:78:12:6f:d2:82:ab:27:75:d8:68:89:3a:fb:e5:ff:
8d:28:4c:5a:7a:6a:41:ae:f3:90:b4:27:e8:e6:6a:b7:fc:48:
89:53:52:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:09:57 2025 by rpki-client