Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/2DA01570481811F09EE6BE31C4F9AE02.roa
File: 2DA01570481811F09EE6BE31C4F9AE02.roa (raw, json)
Hash identifier: q2HgMDGurDyVn8ALfJKFgBGNieE1cpD5RctAwhiwTW0=
Subject key identifier: D1:F1:24:DC:F1:2B:93:1D:A4:01:45:53:E3:91:0F:9B:BC:7B:05:08
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3896
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/2DA01570481811F09EE6BE31C4F9AE02.roa
Signing time: Fri 13 Jun 2025 05:35:13 +0000
ROA not before: Fri 13 Jun 2025 05:35:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 111.88.96.0/21 maxlen: 21
111.88.96.0/24 maxlen: 24
111.88.97.0/24 maxlen: 24
111.88.98.0/24 maxlen: 24
111.88.99.0/24 maxlen: 24
111.88.100.0/24 maxlen: 24
111.88.101.0/24 maxlen: 24
111.88.102.0/24 maxlen: 24
111.88.103.0/24 maxlen: 24
111.88.112.0/20 maxlen: 20
111.88.112.0/24 maxlen: 24
111.88.113.0/24 maxlen: 24
111.88.114.0/24 maxlen: 24
111.88.115.0/24 maxlen: 24
111.88.116.0/24 maxlen: 24
111.88.117.0/24 maxlen: 24
111.88.118.0/24 maxlen: 24
111.88.119.0/24 maxlen: 24
111.88.120.0/24 maxlen: 24
111.88.121.0/24 maxlen: 24
111.88.122.0/24 maxlen: 24
111.88.123.0/24 maxlen: 24
111.88.124.0/24 maxlen: 24
111.88.125.0/24 maxlen: 24
111.88.126.0/24 maxlen: 24
111.88.127.0/24 maxlen: 24
111.88.128.0/21 maxlen: 21
111.88.128.0/24 maxlen: 24
111.88.129.0/24 maxlen: 24
111.88.130.0/24 maxlen: 24
111.88.131.0/24 maxlen: 24
111.88.132.0/24 maxlen: 24
111.88.133.0/24 maxlen: 24
111.88.134.0/24 maxlen: 24
111.88.135.0/24 maxlen: 24
111.88.140.0/22 maxlen: 22
111.88.140.0/24 maxlen: 24
111.88.141.0/24 maxlen: 24
111.88.142.0/24 maxlen: 24
111.88.143.0/24 maxlen: 24
111.88.144.0/20 maxlen: 20
111.88.160.0/21 maxlen: 21
111.88.160.0/22 maxlen: 22
111.88.160.0/23 maxlen: 23
111.88.160.0/24 maxlen: 24
111.88.161.0/24 maxlen: 24
111.88.162.0/23 maxlen: 23
111.88.162.0/24 maxlen: 24
111.88.163.0/24 maxlen: 24
111.88.164.0/22 maxlen: 22
111.88.164.0/23 maxlen: 23
111.88.164.0/24 maxlen: 24
111.88.165.0/24 maxlen: 24
111.88.166.0/23 maxlen: 23
111.88.166.0/24 maxlen: 24
111.88.167.0/24 maxlen: 24
111.88.200.0/21 maxlen: 21
111.88.200.0/24 maxlen: 24
111.88.201.0/24 maxlen: 24
111.88.202.0/24 maxlen: 24
111.88.203.0/24 maxlen: 24
111.88.204.0/24 maxlen: 24
111.88.205.0/24 maxlen: 24
111.88.206.0/24 maxlen: 24
111.88.207.0/24 maxlen: 24
111.88.224.0/21 maxlen: 21
111.88.240.0/20 maxlen: 20
203.81.208.0/22 maxlen: 22
203.81.212.0/24 maxlen: 24
203.81.213.0/24 maxlen: 24
203.81.214.0/24 maxlen: 24
203.81.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Jun 2025 08:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14486 (0x3896)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Jun 13 05:35:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=684bb891-e59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:14:61:93:da:77:22:b0:88:57:0b:63:e8:47:
57:70:62:fa:da:21:b2:0a:98:d8:95:48:2c:79:ba:
dd:58:2d:25:9e:01:57:27:f5:59:16:aa:7c:26:9c:
bc:2d:c2:f0:b5:3e:8f:ef:5c:77:5f:e6:d0:1d:44:
17:26:9a:0b:89:86:05:c3:98:55:ce:62:f5:ec:26:
e3:ce:ce:c9:95:74:f1:6c:b5:83:26:84:4d:9b:5c:
21:4e:0b:2c:06:cc:6e:24:9f:13:33:d4:2f:38:fa:
7e:41:29:a1:b0:a1:3a:13:bc:92:a1:d0:61:03:72:
b3:c7:ff:f8:94:05:f5:97:2d:62:2a:35:1c:86:d4:
00:13:39:b5:3f:81:bf:15:0c:9d:70:a6:e2:b5:47:
4a:0c:c3:6b:0f:aa:31:c4:96:63:25:af:91:bd:5d:
cf:b6:44:60:df:3e:a0:cc:54:fd:a0:23:9b:c1:14:
9c:6b:ff:f6:6b:80:ef:8c:23:a3:ed:a5:42:75:88:
e4:63:ca:c3:83:6a:f3:57:2e:b0:5d:6b:3f:20:b2:
83:61:e5:07:1c:2a:f1:79:ea:e5:e0:5f:b4:e3:68:
18:01:24:15:41:fe:95:41:b7:bf:a2:f2:12:f6:59:
9e:4c:72:ac:04:80:86:bc:e8:48:f6:06:33:ac:78:
6d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F1:24:DC:F1:2B:93:1D:A4:01:45:53:E3:91:0F:9B:BC:7B:05:08
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/2DA01570481811F09EE6BE31C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.96.0/21
111.88.112.0-111.88.135.255
111.88.140.0-111.88.167.255
111.88.200.0/21
111.88.224.0/21
111.88.240.0/20
203.81.208.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:74:5b:62:cc:eb:f9:30:f1:92:b3:08:44:a4:91:26:73:6d:
b3:98:0b:b1:db:82:ea:6a:07:58:8e:48:da:cf:80:0e:c1:c9:
83:09:34:eb:3e:68:a2:72:4a:72:51:55:32:27:3d:b7:e0:53:
30:7c:12:4d:c3:7d:e7:8b:21:dc:0f:39:34:ad:62:2d:7c:ee:
c5:c6:ea:67:ba:30:05:c6:fb:9b:71:89:b8:29:58:be:53:d1:
8e:94:d7:50:01:ec:ee:8e:e9:8f:fe:db:61:42:7d:45:5d:bf:
da:87:db:1e:82:a3:41:6a:de:da:c5:d9:02:bf:48:1a:d6:6c:
6c:9d:df:18:5e:74:08:c3:36:63:18:73:13:05:99:6e:02:dd:
d1:40:4a:b1:3f:40:48:ff:12:11:ca:a4:b2:72:8f:0a:52:cc:
b3:09:15:81:32:65:73:1a:b5:3a:fa:52:ef:34:30:ca:6f:0d:
0b:68:bb:e6:9a:b4:37:d3:b2:5c:46:10:15:b4:e9:2a:60:50:
2b:d9:43:7c:3c:c7:7b:c2:4d:22:e7:a8:36:5d:d0:7a:ca:61:
af:fa:b4:76:64:45:d4:ca:39:55:d4:41:4f:c1:70:b3:05:19:
9f:46:1a:0c:88:82:31:4b:da:10:d3:0c:f0:7a:3f:83:1d:34:
21:1d:fb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:12:15 2025 by rpki-client