Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/CB525EF4358511F0A24A431EC4F9AE02.roa
File: CB525EF4358511F0A24A431EC4F9AE02.roa (raw, json)
Hash identifier: ZJ5RHhICN0IlssvH08F6/ZLb0Q1s1JheLTJKyQOHME0=
Subject key identifier: 6B:CA:1F:44:1D:8F:3F:8B:C4:7E:FC:58:5B:DB:68:7F:D6:F4:7D:54
Certificate issuer: /CN=A912B600/serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325
Certificate serial: 34C4
Authority key identifier: 2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/CB525EF4358511F0A24A431EC4F9AE02.roa
Signing time: Tue 20 May 2025 14:24:03 +0000
ROA not before: Tue 20 May 2025 14:24:03 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 38466
IP address blocks: 27.125.224.0/19 maxlen: 19
27.125.224.0/24 maxlen: 24
27.125.225.0/24 maxlen: 24
27.125.226.0/24 maxlen: 24
27.125.227.0/24 maxlen: 24
27.125.228.0/24 maxlen: 24
27.125.229.0/24 maxlen: 24
27.125.230.0/24 maxlen: 24
27.125.231.0/24 maxlen: 24
27.125.232.0/24 maxlen: 24
27.125.233.0/24 maxlen: 24
27.125.234.0/24 maxlen: 24
27.125.235.0/24 maxlen: 24
27.125.236.0/24 maxlen: 24
27.125.237.0/24 maxlen: 24
27.125.238.0/24 maxlen: 24
27.125.239.0/24 maxlen: 24
27.125.240.0/24 maxlen: 24
27.125.241.0/24 maxlen: 24
27.125.242.0/24 maxlen: 24
27.125.243.0/24 maxlen: 24
27.125.244.0/24 maxlen: 24
27.125.245.0/24 maxlen: 24
27.125.246.0/24 maxlen: 24
27.125.247.0/24 maxlen: 24
27.125.248.0/24 maxlen: 24
27.125.249.0/24 maxlen: 24
27.125.250.0/24 maxlen: 24
27.125.251.0/24 maxlen: 24
27.125.252.0/24 maxlen: 24
27.125.253.0/24 maxlen: 24
27.125.254.0/24 maxlen: 24
27.125.255.0/24 maxlen: 24
103.1.144.0/22 maxlen: 22
103.1.144.0/24 maxlen: 24
103.1.145.0/24 maxlen: 24
103.1.146.0/24 maxlen: 24
103.1.147.0/24 maxlen: 24
113.30.232.0/21 maxlen: 21
113.30.232.0/24 maxlen: 24
113.30.233.0/24 maxlen: 24
113.30.234.0/23 maxlen: 24
113.30.236.0/22 maxlen: 24
123.136.96.0/19 maxlen: 19
123.136.96.0/24 maxlen: 24
123.136.97.0/24 maxlen: 24
123.136.98.0/24 maxlen: 24
123.136.99.0/24 maxlen: 24
123.136.100.0/24 maxlen: 24
123.136.101.0/24 maxlen: 24
123.136.102.0/23 maxlen: 24
123.136.104.0/22 maxlen: 22
123.136.104.0/24 maxlen: 24
123.136.105.0/24 maxlen: 24
123.136.106.0/24 maxlen: 24
123.136.107.0/24 maxlen: 24
123.136.108.0/24 maxlen: 24
123.136.109.0/24 maxlen: 24
123.136.110.0/24 maxlen: 24
123.136.111.0/24 maxlen: 24
123.136.112.0/24 maxlen: 24
123.136.113.0/24 maxlen: 24
123.136.114.0/24 maxlen: 24
123.136.115.0/24 maxlen: 24
123.136.116.0/24 maxlen: 24
123.136.117.0/24 maxlen: 24
123.136.118.0/24 maxlen: 24
123.136.119.0/24 maxlen: 24
123.136.120.0/24 maxlen: 24
123.136.121.0/24 maxlen: 24
123.136.122.0/24 maxlen: 24
123.136.123.0/24 maxlen: 24
123.136.124.0/24 maxlen: 24
123.136.125.0/24 maxlen: 24
123.136.126.0/24 maxlen: 24
123.136.127.0/24 maxlen: 24
203.168.160.0/19 maxlen: 19
203.168.160.0/24 maxlen: 24
203.168.161.0/24 maxlen: 24
203.168.162.0/24 maxlen: 24
203.168.163.0/24 maxlen: 24
203.168.164.0/22 maxlen: 22
203.168.164.0/24 maxlen: 24
203.168.165.0/24 maxlen: 24
203.168.166.0/24 maxlen: 24
203.168.167.0/24 maxlen: 24
203.168.168.0/24 maxlen: 24
203.168.169.0/24 maxlen: 24
203.168.170.0/24 maxlen: 24
203.168.171.0/24 maxlen: 24
203.168.172.0/24 maxlen: 24
203.168.173.0/24 maxlen: 24
203.168.174.0/24 maxlen: 24
203.168.175.0/24 maxlen: 24
203.168.176.0/24 maxlen: 24
203.168.177.0/24 maxlen: 24
203.168.178.0/24 maxlen: 24
203.168.179.0/24 maxlen: 24
203.168.180.0/24 maxlen: 24
203.168.181.0/24 maxlen: 24
203.168.182.0/24 maxlen: 24
203.168.183.0/24 maxlen: 24
203.168.184.0/24 maxlen: 24
203.168.185.0/24 maxlen: 24
203.168.186.0/24 maxlen: 24
203.168.187.0/24 maxlen: 24
203.168.188.0/24 maxlen: 24
203.168.189.0/24 maxlen: 24
203.168.190.0/24 maxlen: 24
203.168.191.0/24 maxlen: 24
2405:3800::/32 maxlen: 32
2405:3800::/48 maxlen: 48
2405:3800:1::/48 maxlen: 48
2405:3800:80::/41 maxlen: 41
2405:3800:380::/41 maxlen: 41
2405:3800:400::/41 maxlen: 41
2405:3800:480::/41 maxlen: 41
2405:3800:500::/41 maxlen: 41
2405:3800:800::/43 maxlen: 43
2405:3800:820::/43 maxlen: 43
2405:3800:840::/43 maxlen: 43
2405:3800:860::/43 maxlen: 43
2405:3800:880::/43 maxlen: 43
2405:3800:8a0::/43 maxlen: 43
Validation: Failed, certificate revoked on Tue 20 May 2025 14:24:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13508 (0x34c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B600, serialNumber=2F44AEBA0A5544065889705BC2EF1CDAE1158325
Validity
Not Before: May 20 14:24:03 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=682c9082-115d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a4:9f:96:67:4a:c0:59:df:4b:77:5a:29:65:
55:0d:5a:f1:bd:ba:d7:bd:2b:d4:7e:1c:35:42:a8:
06:e3:fc:44:5e:26:b1:fd:45:5b:c1:7d:59:1b:5c:
e6:b5:d2:53:e0:d8:30:17:b1:25:08:7a:e2:64:4b:
e9:6e:08:8a:93:5b:0d:89:2f:86:23:64:2e:65:9d:
73:e9:6b:8c:23:34:79:ad:f6:2a:4b:50:54:55:45:
7f:98:c2:ba:38:3d:09:b6:f0:72:95:ff:a1:a2:44:
2e:29:c7:fd:79:5f:19:35:77:d4:1c:09:be:71:51:
b3:06:c2:b4:e7:18:fb:b7:9e:b1:99:b8:e2:44:90:
f2:00:a3:d8:de:cc:22:2c:ed:1b:cd:56:04:9d:6b:
d2:84:45:51:ec:28:ec:c6:7e:c1:f7:b1:21:a4:9c:
82:60:39:86:3a:58:39:90:40:82:ac:09:17:b6:dc:
63:5a:c9:0f:cc:db:e3:66:3d:59:38:b7:fe:a1:c4:
5d:a3:ad:0b:6a:5e:48:e7:89:fe:ba:3a:3d:a8:1b:
f7:a1:af:93:a0:c8:23:75:91:e8:a4:9c:c2:62:2f:
33:5f:5e:06:e1:4f:33:4f:e5:45:2f:11:db:9b:1c:
74:0f:2f:0f:44:a0:c4:c4:71:63:da:f7:7c:33:20:
c4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CA:1F:44:1D:8F:3F:8B:C4:7E:FC:58:5B:DB:68:7F:D6:F4:7D:54
X509v3 Authority Key Identifier:
keyid:2F:44:AE:BA:0A:55:44:06:58:89:70:5B:C2:EF:1C:DA:E1:15:83:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/L0SuugpVRAZYiXBbwu8c2uEVgyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L0SuugpVRAZYiXBbwu8c2uEVgyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B600/A36A626E1D9311E286175DF708B02CD2/CB525EF4358511F0A24A431EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.125.224.0/19
103.1.144.0/22
113.30.232.0/21
123.136.96.0/19
203.168.160.0/19
IPv6:
2405:3800::/32
Signature Algorithm: sha256WithRSAEncryption
31:50:0a:1d:c9:b3:1d:94:c5:30:3d:a2:ed:53:00:1d:d0:45:
30:ed:9b:6c:ea:6c:32:fd:fa:3c:87:45:68:39:a0:16:0f:31:
22:27:bd:5e:73:c9:ac:5e:dc:a8:a1:e3:b4:df:76:5e:6a:48:
d4:f7:68:06:4c:0b:03:11:bb:52:b8:5d:bf:d1:40:c8:8b:2e:
85:bd:8c:4b:9a:90:8b:a0:8a:fc:b5:a0:e1:8c:26:ba:2c:0e:
c4:bb:a2:74:31:90:4d:30:cd:a7:d2:79:76:df:0b:f2:62:f4:
f8:d1:a7:30:2e:77:b3:3e:3f:9d:a8:70:f5:06:01:c7:ef:f0:
5c:87:c8:23:11:74:3b:e3:34:80:e3:db:60:4d:32:e9:84:e7:
b3:65:16:20:df:59:24:4b:52:b0:b5:e8:74:33:5f:a3:c4:aa:
25:83:f9:01:61:40:12:76:22:87:f4:19:47:de:cc:5e:ed:4f:
27:d8:8e:27:22:ab:3f:70:2f:ac:40:02:c2:ca:76:3e:55:6e:
9a:9e:ff:70:99:e8:0c:69:19:bb:cb:3a:37:fb:9e:c6:44:49:
c4:9b:88:d8:11:f8:06:86:e4:1f:48:a2:38:5e:8a:5b:ff:c7:
86:c5:37:6e:a3:ed:dc:2b:71:13:6c:9e:da:b7:eb:c3:63:cf:
f6:ae:53:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:11:13 2025 by rpki-client