Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/31F8A6262C9A11F08F292C09C4F9AE02.roa
File: 31F8A6262C9A11F08F292C09C4F9AE02.roa (raw, json)
Hash identifier: TE/B7jxWJutoRHGjcCkYB7PTKT6Fm1b335rU9gpESLU=
Subject key identifier: 83:77:D9:1C:EB:5D:E7:23:29:72:C4:6F:96:99:5D:66:5D:8F:5D:F6
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 37E3
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/31F8A6262C9A11F08F292C09C4F9AE02.roa
Signing time: Fri 09 May 2025 05:55:23 +0000
ROA not before: Fri 09 May 2025 05:55:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150382
IP address blocks: 111.88.76.0/24 maxlen: 24
111.88.77.0/24 maxlen: 24
111.88.79.0/24 maxlen: 24
111.88.138.0/24 maxlen: 24
111.88.139.0/24 maxlen: 24
111.88.184.0/24 maxlen: 24
111.88.185.0/24 maxlen: 24
111.88.186.0/24 maxlen: 24
111.88.187.0/24 maxlen: 24
111.88.188.0/24 maxlen: 24
111.88.189.0/24 maxlen: 24
111.88.190.0/24 maxlen: 24
111.88.191.0/24 maxlen: 24
111.88.232.0/24 maxlen: 24
111.88.234.0/24 maxlen: 24
111.88.235.0/24 maxlen: 24
111.88.236.0/24 maxlen: 24
111.88.237.0/24 maxlen: 24
115.186.1.0/24 maxlen: 24
115.186.10.0/24 maxlen: 24
115.186.11.0/24 maxlen: 24
115.186.12.0/24 maxlen: 24
115.186.13.0/24 maxlen: 24
115.186.16.0/24 maxlen: 24
115.186.18.0/24 maxlen: 24
115.186.19.0/24 maxlen: 24
115.186.22.0/24 maxlen: 24
115.186.24.0/24 maxlen: 24
115.186.26.0/24 maxlen: 24
115.186.27.0/24 maxlen: 24
115.186.28.0/24 maxlen: 24
115.186.29.0/24 maxlen: 24
115.186.41.0/24 maxlen: 24
115.186.48.0/24 maxlen: 24
115.186.49.0/24 maxlen: 24
115.186.50.0/24 maxlen: 24
115.186.51.0/24 maxlen: 24
115.186.52.0/24 maxlen: 24
115.186.53.0/24 maxlen: 24
115.186.54.0/24 maxlen: 24
115.186.55.0/24 maxlen: 24
115.186.64.0/24 maxlen: 24
115.186.65.0/24 maxlen: 24
115.186.66.0/24 maxlen: 24
115.186.67.0/24 maxlen: 24
115.186.68.0/24 maxlen: 24
115.186.69.0/24 maxlen: 24
115.186.70.0/24 maxlen: 24
115.186.71.0/24 maxlen: 24
115.186.72.0/24 maxlen: 24
115.186.73.0/24 maxlen: 24
115.186.74.0/24 maxlen: 24
115.186.75.0/24 maxlen: 24
115.186.88.0/24 maxlen: 24
115.186.89.0/24 maxlen: 24
115.186.91.0/24 maxlen: 24
115.186.92.0/24 maxlen: 24
115.186.93.0/24 maxlen: 24
115.186.94.0/24 maxlen: 24
115.186.95.0/24 maxlen: 24
115.186.97.0/24 maxlen: 24
115.186.99.0/24 maxlen: 24
115.186.100.0/24 maxlen: 24
115.186.105.0/24 maxlen: 24
115.186.114.0/24 maxlen: 24
115.186.116.0/24 maxlen: 24
115.186.122.0/24 maxlen: 24
115.186.123.0/24 maxlen: 24
115.186.124.0/24 maxlen: 24
115.186.125.0/24 maxlen: 24
115.186.127.0/24 maxlen: 24
117.102.10.0/24 maxlen: 24
117.102.11.0/24 maxlen: 24
117.102.13.0/24 maxlen: 24
117.102.14.0/24 maxlen: 24
117.102.15.0/24 maxlen: 24
117.102.20.0/24 maxlen: 24
117.102.21.0/24 maxlen: 24
117.102.22.0/24 maxlen: 24
117.102.23.0/24 maxlen: 24
117.102.27.0/24 maxlen: 24
117.102.29.0/24 maxlen: 24
117.102.30.0/24 maxlen: 24
117.102.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 May 2025 13:24:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14307 (0x37e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: May 9 05:55:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681d98ca-7f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dc:6a:27:8f:33:24:26:06:c8:0a:39:f7:fa:
c0:df:9b:bf:c7:fd:18:c0:94:f7:8c:c9:d8:8d:64:
b9:22:58:53:02:d2:a9:f2:04:09:78:b3:ce:3c:41:
33:fe:21:2a:7d:7c:b5:48:a2:98:76:ff:36:d1:98:
bd:9e:51:e3:b7:c5:a7:5a:f2:3e:9f:d2:b5:24:34:
ad:43:ae:c9:96:7e:76:c2:fe:20:da:c0:b3:0e:9c:
88:c5:20:7d:12:ab:27:dc:c2:07:94:6b:6f:40:dd:
6a:33:f0:34:e8:d7:a2:42:af:9d:2c:03:06:31:cf:
57:98:f2:b1:c2:40:d7:84:35:07:89:4f:87:55:17:
17:57:0e:e1:25:e1:bc:53:6d:1e:3e:61:f0:a0:56:
95:af:75:32:be:eb:d3:0a:bb:58:5b:a0:12:df:c0:
eb:ae:de:40:76:32:4a:61:12:ba:d4:c3:b5:a5:a6:
86:66:ca:c7:7c:2e:88:8a:ee:ea:ab:fc:e3:09:c5:
e6:97:37:d6:ab:07:13:a7:ee:03:d3:f7:e3:24:de:
d3:ea:13:cb:2a:a6:99:fe:14:4c:1e:3b:1d:06:8b:
7e:ee:05:61:7d:09:33:17:65:96:74:4e:5b:b2:e7:
f4:e1:bb:27:a0:21:5c:c6:20:8b:10:ac:c3:6a:65:
b5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:77:D9:1C:EB:5D:E7:23:29:72:C4:6F:96:99:5D:66:5D:8F:5D:F6
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/31F8A6262C9A11F08F292C09C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.76.0/23
111.88.79.0/24
111.88.138.0/23
111.88.184.0/21
111.88.232.0/24
111.88.234.0-111.88.237.255
115.186.1.0/24
115.186.10.0-115.186.13.255
115.186.16.0/24
115.186.18.0/23
115.186.22.0/24
115.186.24.0/24
115.186.26.0-115.186.29.255
115.186.41.0/24
115.186.48.0/21
115.186.64.0-115.186.75.255
115.186.88.0/23
115.186.91.0-115.186.95.255
115.186.97.0/24
115.186.99.0-115.186.100.255
115.186.105.0/24
115.186.114.0/24
115.186.116.0/24
115.186.122.0-115.186.125.255
115.186.127.0/24
117.102.10.0/23
117.102.13.0-117.102.15.255
117.102.20.0/22
117.102.27.0/24
117.102.29.0-117.102.31.255
Signature Algorithm: sha256WithRSAEncryption
74:37:57:6d:22:5e:20:d4:eb:d2:e3:da:d3:45:ac:30:06:75:
f9:88:09:1b:3d:28:43:d4:49:3c:d4:04:4e:41:fd:37:f1:1f:
40:dc:2a:b3:19:b6:ce:15:3d:28:8f:aa:ea:45:4a:c6:1c:84:
9e:84:88:1e:6c:b2:91:d8:ed:32:8d:8f:f6:98:ea:15:94:b8:
71:9e:9e:c7:48:e5:5a:b7:df:45:9d:49:b2:0e:12:ac:1a:c3:
67:7f:3b:c8:5a:74:a7:00:9d:7e:24:32:06:7e:31:20:17:4c:
35:b4:63:c7:dd:57:54:b8:4f:d6:44:29:5d:86:ad:c7:fe:56:
e7:1d:9e:a1:a0:85:33:7a:53:d7:56:24:8b:ce:9d:5f:41:39:
1b:9d:bf:4d:06:87:85:3b:6a:6a:e6:54:25:d5:c1:6b:34:09:
10:16:f9:cc:1e:82:37:a4:52:81:75:29:0c:91:04:c8:0e:81:
16:01:36:70:a7:f0:ac:86:d3:d5:33:d9:aa:5f:30:11:eb:3e:
27:03:7c:6f:c3:14:c1:46:cf:6f:50:61:aa:38:50:cd:8e:9e:
6a:74:22:d0:d2:28:4a:cf:19:f8:94:ed:27:d1:50:aa:9b:04:
1a:66:77:cb:12:06:1b:74:3d:2f:a5:17:13:12:f8:cf:df:3a:
79:3e:15:e6
-----BEGIN CERTIFICATE-----
MIIGcDCCBVigAwIBAgICN+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE
RDIxRkUyMDYwHhcNMjUwNTA5MDU1NTIzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODFkOThjYS03Zjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqdxqJ48zJCYGyAo59/rA35u/x/0YwJT3jMnYjWS5IlhTAtKp8gQJeLPOPEEz
/iEqfXy1SKKYdv820Zi9nlHjt8WnWvI+n9K1JDStQ67Jln52wv4g2sCzDpyIxSB9
Eqsn3MIHlGtvQN1qM/A06NeiQq+dLAMGMc9XmPKxwkDXhDUHiU+HVRcXVw7hJeG8
U20ePmHwoFaVr3UyvuvTCrtYW6AS38Drrt5AdjJKYRK61MO1paaGZsrHfC6Iiu7q
q/zjCcXmlzfWqwcTp+4D0/fjJN7T6hPLKqaZ/hRMHjsdBot+7gVhfQkzF2WWdE5b
suf04bsnoCFcxiCLEKzDamW1VwIDAQABo4IDlDCCA5AwHQYDVR0OBBYEFIN32Rzr
XecjKXLEb5aZXWZdj132MB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE
ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvMzFGOEE2MjYy
QzlBMTFGMDhGMjkyQzA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggEcBggrBgEFBQcBBwEB
/wSCAQswggEHMIIBAwQCAAEwgfwDBAFvWEwDBABvWE8DBAFvWIoDBANvWLgDBABv
WOgwDAMEAW9Y6gMEAW9Y7AMEAHO6ATAMAwQBc7oKAwQBc7oMAwQAc7oQAwQBc7oS
AwQAc7oWAwQAc7oYMAwDBAFzuhoDBAFzuhwDBABzuikDBANzujAwDAMEBnO6QAME
AnO6SAMEAXO6WDAMAwQAc7pbAwQFc7pAAwQAc7phMAwDBABzumMDBABzumQDBABz
umkDBABzunIDBABzunQwDAMEAXO6egMEAXO6fAMEAHO6fwMEAXVmCjAMAwQAdWYN
AwQEdWYAAwQCdWYUAwQAdWYbMAwDBAB1Zh0DBAV1ZgAwDQYJKoZIhvcNAQELBQAD
ggEBAHQ3V20iXiDU69Lj2tNFrDAGdfmICRs9KEPUSTzUBE5B/TfxH0DcKrMZts4V
PSiPqupFSsYchJ6EiB5sspHY7TKNj/aY6hWUuHGensdI5Vq330WdSbIOEqwaw2d/
O8hadKcAnX4kMgZ+MSAXTDW0Y8fdV1S4T9ZEKV2Grcf+VucdnqGghTN6U9dWJIvO
nV9BORudv00Gh4U7amrmVCXVwWs0CRAW+cwegjekUoF1KQyRBMgOgRYBNnCn8KyG
09Uz2apfMBHrPicDfG/DFMFGz29QYao4UM2Onmp0ItDSKErPGfiU7SfRUKqbBBpm
d8sSBht0PS+lFxMS+M/fOnk+FeY=
-----END CERTIFICATE-----
Generated at Mon May 12 10:12:17 2025 by rpki-client