Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/F29BE5C22A9D11F0A2C7F97DC4F9AE02.roa
File: F29BE5C22A9D11F0A2C7F97DC4F9AE02.roa (raw, json)
Hash identifier: qf3pibhkPiEcq+sgGRbNigI/TxtGal1JvzBJ8X8B+WQ=
Subject key identifier: E3:A3:38:7D:AC:3D:66:81:35:FD:EB:C8:C8:6E:5D:DF:FA:9F:98:43
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 37E0
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/F29BE5C22A9D11F0A2C7F97DC4F9AE02.roa
Signing time: Tue 06 May 2025 17:17:12 +0000
ROA not before: Tue 06 May 2025 17:17:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150382
IP address blocks: 111.88.76.0/24 maxlen: 24
111.88.77.0/24 maxlen: 24
111.88.79.0/24 maxlen: 24
111.88.138.0/24 maxlen: 24
111.88.139.0/24 maxlen: 24
111.88.184.0/24 maxlen: 24
111.88.185.0/24 maxlen: 24
111.88.186.0/24 maxlen: 24
111.88.187.0/24 maxlen: 24
111.88.188.0/24 maxlen: 24
111.88.189.0/24 maxlen: 24
111.88.190.0/24 maxlen: 24
111.88.191.0/24 maxlen: 24
111.88.232.0/24 maxlen: 24
111.88.234.0/24 maxlen: 24
111.88.235.0/24 maxlen: 24
111.88.236.0/24 maxlen: 24
111.88.237.0/24 maxlen: 24
115.186.1.0/24 maxlen: 24
115.186.10.0/24 maxlen: 24
115.186.11.0/24 maxlen: 24
115.186.12.0/24 maxlen: 24
115.186.13.0/24 maxlen: 24
115.186.16.0/24 maxlen: 24
115.186.18.0/24 maxlen: 24
115.186.19.0/24 maxlen: 24
115.186.22.0/24 maxlen: 24
115.186.24.0/24 maxlen: 24
115.186.26.0/24 maxlen: 24
115.186.27.0/24 maxlen: 24
115.186.28.0/24 maxlen: 24
115.186.29.0/24 maxlen: 24
115.186.41.0/24 maxlen: 24
115.186.48.0/24 maxlen: 24
115.186.49.0/24 maxlen: 24
115.186.50.0/24 maxlen: 24
115.186.51.0/24 maxlen: 24
115.186.52.0/24 maxlen: 24
115.186.53.0/24 maxlen: 24
115.186.54.0/24 maxlen: 24
115.186.55.0/24 maxlen: 24
115.186.64.0/24 maxlen: 24
115.186.65.0/24 maxlen: 24
115.186.66.0/24 maxlen: 24
115.186.67.0/24 maxlen: 24
115.186.68.0/24 maxlen: 24
115.186.69.0/24 maxlen: 24
115.186.70.0/24 maxlen: 24
115.186.71.0/24 maxlen: 24
115.186.72.0/24 maxlen: 24
115.186.73.0/24 maxlen: 24
115.186.74.0/24 maxlen: 24
115.186.75.0/24 maxlen: 24
115.186.88.0/24 maxlen: 24
115.186.89.0/24 maxlen: 24
115.186.91.0/24 maxlen: 24
115.186.92.0/24 maxlen: 24
115.186.93.0/24 maxlen: 24
115.186.94.0/24 maxlen: 24
115.186.95.0/24 maxlen: 24
115.186.97.0/24 maxlen: 24
115.186.99.0/24 maxlen: 24
115.186.100.0/24 maxlen: 24
115.186.105.0/24 maxlen: 24
115.186.114.0/24 maxlen: 24
115.186.116.0/24 maxlen: 24
115.186.122.0/24 maxlen: 24
115.186.123.0/24 maxlen: 24
115.186.124.0/24 maxlen: 24
115.186.125.0/24 maxlen: 24
115.186.127.0/24 maxlen: 24
117.102.10.0/24 maxlen: 24
117.102.11.0/24 maxlen: 24
117.102.13.0/24 maxlen: 24
117.102.14.0/24 maxlen: 24
117.102.15.0/24 maxlen: 24
117.102.20.0/24 maxlen: 24
117.102.21.0/24 maxlen: 24
117.102.22.0/24 maxlen: 24
117.102.23.0/24 maxlen: 24
117.102.27.0/24 maxlen: 24
117.102.29.0/24 maxlen: 24
117.102.30.0/24 maxlen: 24
117.102.31.0/24 maxlen: 24
203.81.212.0/24 maxlen: 24
203.81.214.0/24 maxlen: 24
203.81.216.0/24 maxlen: 24
203.81.217.0/24 maxlen: 24
203.81.218.0/24 maxlen: 24
203.81.219.0/24 maxlen: 24
203.81.220.0/24 maxlen: 24
203.81.221.0/24 maxlen: 24
203.81.222.0/24 maxlen: 24
203.81.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 May 2025 05:55:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14304 (0x37e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: May 6 17:17:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681a4417-1fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:45:28:bb:2c:3b:1c:82:7b:f7:8d:cf:a4:16:
fd:03:6b:37:a1:48:40:88:10:ab:64:13:a4:94:07:
2c:b5:72:bc:4c:49:84:ce:1b:4a:a5:7f:3a:60:ba:
e5:7b:64:a4:b3:fc:c5:45:ef:9c:ad:12:1e:30:0e:
a5:94:f1:00:6e:72:9e:b1:ef:56:63:9d:55:52:b5:
64:9a:6d:62:e9:a1:3c:59:8b:17:b6:dd:e4:b3:b4:
eb:05:5b:7d:3a:f8:da:90:45:d3:b8:0a:b7:ac:94:
68:0a:56:22:64:da:1a:3b:79:af:40:45:ab:43:1e:
26:a2:05:f6:3e:5d:64:40:d0:d0:2a:3e:3f:cf:30:
98:81:71:79:8a:ca:ab:58:2f:65:e5:32:31:b1:b6:
2e:ee:bd:6b:38:d9:fb:b8:72:e2:cc:89:f8:e9:3d:
3c:4d:a3:54:56:7e:f3:dc:c9:c3:d0:5f:9e:e1:a0:
33:ac:58:74:0d:a3:80:1f:ed:fb:6a:6c:8a:20:0d:
e7:fe:b0:6e:e7:e5:28:e5:1e:65:f8:b8:2f:85:6a:
92:b7:fa:3a:5c:94:4b:c7:c6:5d:ed:dd:b7:0c:20:
19:e8:49:d7:1f:96:47:98:26:69:08:48:2d:18:c5:
03:03:e9:2e:7c:c6:78:33:b3:a5:dd:73:5f:fb:5f:
d3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A3:38:7D:AC:3D:66:81:35:FD:EB:C8:C8:6E:5D:DF:FA:9F:98:43
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/F29BE5C22A9D11F0A2C7F97DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.76.0/23
111.88.79.0/24
111.88.138.0/23
111.88.184.0/21
111.88.232.0/24
111.88.234.0-111.88.237.255
115.186.1.0/24
115.186.10.0-115.186.13.255
115.186.16.0/24
115.186.18.0/23
115.186.22.0/24
115.186.24.0/24
115.186.26.0-115.186.29.255
115.186.41.0/24
115.186.48.0/21
115.186.64.0-115.186.75.255
115.186.88.0/23
115.186.91.0-115.186.95.255
115.186.97.0/24
115.186.99.0-115.186.100.255
115.186.105.0/24
115.186.114.0/24
115.186.116.0/24
115.186.122.0-115.186.125.255
115.186.127.0/24
117.102.10.0/23
117.102.13.0-117.102.15.255
117.102.20.0/22
117.102.27.0/24
117.102.29.0-117.102.31.255
203.81.212.0/24
203.81.214.0/24
203.81.216.0/21
Signature Algorithm: sha256WithRSAEncryption
cc:fa:3e:33:94:34:bd:32:ef:7a:32:c2:99:0b:bf:d4:4b:17:
e7:1f:a3:6b:0a:a3:f1:64:e2:f5:72:e4:71:08:c9:b6:4c:29:
ff:1e:b8:f1:bd:df:70:2c:57:58:06:0e:f3:a5:db:29:ed:7f:
9e:4d:d1:78:b2:88:4b:db:aa:3f:83:6f:fd:32:3b:98:44:6a:
b2:86:6a:d6:5b:7d:12:a4:ea:34:3f:b3:18:a7:61:26:73:ad:
5d:a5:64:53:28:2f:f1:00:a4:05:b5:64:d7:a5:db:89:14:6c:
c6:36:37:c1:af:c2:e8:a8:2f:a5:1d:cb:a2:f1:02:92:71:69:
fe:d0:55:fc:a9:0f:ba:34:5b:3f:57:93:06:ad:31:bf:c3:39:
33:3e:13:da:32:ca:40:0d:84:98:f5:83:29:9e:8f:89:7b:23:
5d:b6:45:4a:b6:96:8f:91:05:49:85:56:c7:2d:f6:2a:fd:e5:
99:84:19:fb:48:dd:e1:49:99:28:1f:b2:9d:d5:5b:66:fb:78:
93:98:9f:9d:bd:6b:09:8f:62:66:74:48:49:84:65:63:65:ad:
7a:03:45:51:b9:03:22:3f:e6:78:16:b4:6f:58:04:17:98:9e:
8d:93:cb:ce:99:d6:23:8c:67:16:f9:11:86:6f:12:7c:49:37:
11:68:91:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 13:59:45 2025 by rpki-client