Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/2AFF86401AD011F0B3647E6BC4F9AE02.roa
File: 2AFF86401AD011F0B3647E6BC4F9AE02.roa (raw, json)
Hash identifier: J9PpK556prtRzDVzqDjdzR5clpIqoPR45fvDxVg054c=
Subject key identifier: 6D:24:C7:99:1C:68:C5:E3:80:16:B2:23:56:12:C1:25:FB:01:4B:BF
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 37BB
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/2AFF86401AD011F0B3647E6BC4F9AE02.roa
Signing time: Fri 18 Apr 2025 15:22:40 +0000
ROA not before: Fri 18 Apr 2025 15:22:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150382
IP address blocks: 111.88.76.0/24 maxlen: 24
111.88.77.0/24 maxlen: 24
111.88.79.0/24 maxlen: 24
111.88.138.0/24 maxlen: 24
111.88.139.0/24 maxlen: 24
111.88.148.0/24 maxlen: 24
111.88.153.0/24 maxlen: 24
111.88.156.0/24 maxlen: 24
111.88.164.0/24 maxlen: 24
111.88.165.0/24 maxlen: 24
111.88.166.0/24 maxlen: 24
111.88.167.0/24 maxlen: 24
111.88.184.0/24 maxlen: 24
111.88.185.0/24 maxlen: 24
111.88.186.0/24 maxlen: 24
111.88.187.0/24 maxlen: 24
111.88.188.0/24 maxlen: 24
111.88.189.0/24 maxlen: 24
111.88.190.0/24 maxlen: 24
111.88.191.0/24 maxlen: 24
111.88.232.0/24 maxlen: 24
111.88.234.0/24 maxlen: 24
111.88.235.0/24 maxlen: 24
111.88.236.0/24 maxlen: 24
111.88.237.0/24 maxlen: 24
115.186.1.0/24 maxlen: 24
115.186.10.0/24 maxlen: 24
115.186.11.0/24 maxlen: 24
115.186.12.0/24 maxlen: 24
115.186.13.0/24 maxlen: 24
115.186.16.0/24 maxlen: 24
115.186.18.0/24 maxlen: 24
115.186.19.0/24 maxlen: 24
115.186.22.0/24 maxlen: 24
115.186.24.0/24 maxlen: 24
115.186.26.0/24 maxlen: 24
115.186.27.0/24 maxlen: 24
115.186.28.0/24 maxlen: 24
115.186.29.0/24 maxlen: 24
115.186.41.0/24 maxlen: 24
115.186.48.0/24 maxlen: 24
115.186.49.0/24 maxlen: 24
115.186.50.0/24 maxlen: 24
115.186.51.0/24 maxlen: 24
115.186.52.0/24 maxlen: 24
115.186.53.0/24 maxlen: 24
115.186.54.0/24 maxlen: 24
115.186.55.0/24 maxlen: 24
115.186.64.0/24 maxlen: 24
115.186.65.0/24 maxlen: 24
115.186.66.0/24 maxlen: 24
115.186.67.0/24 maxlen: 24
115.186.68.0/24 maxlen: 24
115.186.69.0/24 maxlen: 24
115.186.70.0/24 maxlen: 24
115.186.71.0/24 maxlen: 24
115.186.72.0/24 maxlen: 24
115.186.73.0/24 maxlen: 24
115.186.74.0/24 maxlen: 24
115.186.75.0/24 maxlen: 24
115.186.88.0/24 maxlen: 24
115.186.89.0/24 maxlen: 24
115.186.91.0/24 maxlen: 24
115.186.92.0/24 maxlen: 24
115.186.93.0/24 maxlen: 24
115.186.94.0/24 maxlen: 24
115.186.95.0/24 maxlen: 24
115.186.97.0/24 maxlen: 24
115.186.99.0/24 maxlen: 24
115.186.100.0/24 maxlen: 24
115.186.105.0/24 maxlen: 24
115.186.114.0/24 maxlen: 24
115.186.116.0/24 maxlen: 24
115.186.122.0/24 maxlen: 24
115.186.123.0/24 maxlen: 24
115.186.124.0/24 maxlen: 24
115.186.125.0/24 maxlen: 24
115.186.127.0/24 maxlen: 24
117.102.10.0/24 maxlen: 24
117.102.11.0/24 maxlen: 24
117.102.13.0/24 maxlen: 24
117.102.14.0/24 maxlen: 24
117.102.15.0/24 maxlen: 24
117.102.20.0/24 maxlen: 24
117.102.21.0/24 maxlen: 24
117.102.22.0/24 maxlen: 24
117.102.23.0/24 maxlen: 24
117.102.27.0/24 maxlen: 24
117.102.29.0/24 maxlen: 24
117.102.30.0/24 maxlen: 24
117.102.31.0/24 maxlen: 24
203.81.212.0/24 maxlen: 24
203.81.214.0/24 maxlen: 24
203.81.216.0/24 maxlen: 24
203.81.217.0/24 maxlen: 24
203.81.218.0/24 maxlen: 24
203.81.219.0/24 maxlen: 24
203.81.220.0/24 maxlen: 24
203.81.221.0/24 maxlen: 24
203.81.222.0/24 maxlen: 24
203.81.223.0/24 maxlen: 24
203.81.224.0/24 maxlen: 24
203.81.225.0/24 maxlen: 24
203.81.226.0/24 maxlen: 24
203.81.227.0/24 maxlen: 24
203.81.228.0/24 maxlen: 24
203.81.229.0/24 maxlen: 24
203.81.231.0/24 maxlen: 24
203.81.232.0/24 maxlen: 24
203.81.233.0/24 maxlen: 24
203.81.234.0/24 maxlen: 24
203.81.235.0/24 maxlen: 24
203.81.236.0/24 maxlen: 24
203.81.237.0/24 maxlen: 24
203.81.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Apr 2025 07:24:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14267 (0x37bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Apr 18 15:22:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68026e40-606a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:80:de:d1:a8:72:96:02:f1:4d:f7:24:36:
a3:43:a1:fd:2f:b8:e8:b1:ac:67:58:5d:d4:c0:08:
16:35:94:cc:6b:22:cc:ed:85:4e:f1:88:83:cf:67:
88:93:af:ea:d4:4f:62:7c:1b:52:81:13:05:72:33:
6c:e7:2e:57:cf:85:b3:f4:9c:ce:d7:d0:15:ad:5d:
03:c1:56:91:a2:bd:ac:80:39:02:b8:42:7e:55:db:
a0:62:60:49:90:e8:6a:9e:34:ce:81:cc:b7:68:a0:
ca:13:ef:d2:08:36:cf:71:77:68:9b:a9:a0:d4:d9:
95:60:09:0a:c8:a1:4d:ea:46:f5:45:3c:9c:ea:6f:
48:5d:0f:b5:d3:93:4b:d5:e2:87:98:89:b3:3a:33:
a7:cc:71:f3:1e:8b:96:70:fd:cf:d9:c6:67:5e:51:
f8:1c:32:6e:a1:3c:12:c3:f8:74:81:0b:3d:7b:99:
70:76:35:6d:9a:57:d5:34:0b:42:39:45:9c:e4:c6:
5b:fe:b0:9f:c5:47:ad:54:4b:6f:76:16:de:dc:e5:
a6:e7:8b:cc:89:fa:16:98:53:f6:90:93:4a:e0:60:
f4:f3:f8:aa:78:12:a6:81:02:92:01:64:c3:3a:c3:
dc:f0:00:11:56:c7:5f:f1:28:79:f1:cd:26:81:67:
df:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:24:C7:99:1C:68:C5:E3:80:16:B2:23:56:12:C1:25:FB:01:4B:BF
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/2AFF86401AD011F0B3647E6BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.76.0/23
111.88.79.0/24
111.88.138.0/23
111.88.148.0/24
111.88.153.0/24
111.88.156.0/24
111.88.164.0/22
111.88.184.0/21
111.88.232.0/24
111.88.234.0-111.88.237.255
115.186.1.0/24
115.186.10.0-115.186.13.255
115.186.16.0/24
115.186.18.0/23
115.186.22.0/24
115.186.24.0/24
115.186.26.0-115.186.29.255
115.186.41.0/24
115.186.48.0/21
115.186.64.0-115.186.75.255
115.186.88.0/23
115.186.91.0-115.186.95.255
115.186.97.0/24
115.186.99.0-115.186.100.255
115.186.105.0/24
115.186.114.0/24
115.186.116.0/24
115.186.122.0-115.186.125.255
115.186.127.0/24
117.102.10.0/23
117.102.13.0-117.102.15.255
117.102.20.0/22
117.102.27.0/24
117.102.29.0-117.102.31.255
203.81.212.0/24
203.81.214.0/24
203.81.216.0-203.81.229.255
203.81.231.0-203.81.238.255
Signature Algorithm: sha256WithRSAEncryption
60:ab:8e:9c:eb:0f:bb:b4:b4:aa:8b:2c:c1:31:62:78:84:dd:
35:55:6a:8d:a2:19:71:76:c4:54:25:2c:f0:47:7e:3a:46:7d:
1c:64:f7:a3:16:8c:aa:ca:e7:76:c5:d7:ad:e8:fa:16:7d:a1:
22:90:80:8b:2f:a0:75:63:38:8d:51:a7:63:7a:38:62:68:31:
06:88:bd:47:a9:39:c8:7a:41:a3:0a:2f:36:44:7a:d2:ee:a9:
9b:1b:3a:37:a6:65:a8:1b:e8:51:0e:81:0f:94:2c:7c:88:99:
30:e7:ef:92:f0:b3:6a:3e:b0:bc:71:bf:21:3a:4a:bb:db:d1:
7c:74:4d:f5:64:b5:d2:72:37:d2:23:cf:fb:3a:9e:88:d0:8a:
60:4c:98:03:86:ad:da:dd:0e:dc:28:56:39:c6:49:01:c5:eb:
12:c9:c3:1b:86:a9:a5:c2:fb:e8:fd:d6:9b:a7:f1:38:0a:f2:
d3:ab:bb:c9:d1:0d:fe:2c:4b:4c:99:57:fb:93:95:83:9a:4a:
5c:2a:14:2b:bd:b4:63:b4:b8:2e:4b:16:aa:a1:2d:fb:42:de:
99:df:83:04:2d:2c:59:9f:48:c3:09:f7:6e:33:c7:da:17:b3:
dc:0a:18:20:68:6e:a8:86:7f:a9:51:aa:67:19:18:e9:c4:8a:
e3:3b:d6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:13:09 2025 by rpki-client