Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/6289DC0452A811F08D69FB63C4F9AE02.roa
File: 6289DC0452A811F08D69FB63C4F9AE02.roa (raw, json)
Hash identifier: W2zgQDAb4XfHLyMcUc8nGv3qeIFBXgL1hbz0P9cwxMM=
Subject key identifier: F7:9F:7D:BD:8D:C9:F4:28:80:2F:D9:72:ED:3C:6C:9A:0B:A4:75:32
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 3923
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/6289DC0452A811F08D69FB63C4F9AE02.roa
Signing time: Thu 31 Jul 2025 08:10:32 +0000
ROA not before: Thu 31 Jul 2025 08:10:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 111.88.96.0/19 maxlen: 24
111.88.128.0/21 maxlen: 24
111.88.140.0/22 maxlen: 24
111.88.160.0/21 maxlen: 24
111.88.172.0/22 maxlen: 24
111.88.176.0/21 maxlen: 24
111.88.192.0/19 maxlen: 24
111.88.224.0/21 maxlen: 24
115.186.44.0/23 maxlen: 23
115.186.46.0/24 maxlen: 24
115.186.62.0/24 maxlen: 24
115.186.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Aug 2025 10:43:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14627 (0x3923)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Jul 31 08:10:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=688b24f8-8a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dc:d9:b5:96:1a:53:a6:97:cb:e5:ed:31:60:
82:ae:0a:b4:dd:6f:d8:52:fe:cb:9a:91:ac:97:cf:
bb:3a:27:72:d0:d3:c9:2e:32:72:43:40:7a:4f:60:
7b:dc:97:3e:43:94:db:f5:c8:88:4d:89:e6:23:16:
2f:bd:b8:f6:a4:3b:4a:9c:6e:ee:94:ca:d7:71:09:
ac:21:79:be:ee:29:f5:46:1f:4e:68:fd:14:b2:9b:
fa:06:76:5f:af:ac:2b:fa:74:1d:44:d0:1a:92:04:
d5:45:58:dd:46:ee:56:83:06:2a:7e:84:6f:8c:04:
66:67:71:e9:9c:2d:e2:dc:c8:06:06:d6:68:df:a8:
52:2f:96:0b:d2:09:0b:c5:07:7d:bc:f2:61:96:cd:
d8:fb:88:9e:a4:58:02:d3:b7:bc:e8:4b:e8:cd:8c:
1d:7b:af:b9:d1:66:c5:96:7a:f3:6b:d0:58:3b:b0:
93:53:27:75:b5:6c:7c:fc:fa:52:0f:0d:25:88:79:
94:7e:88:7e:ae:91:86:b1:e4:96:f8:6b:df:71:eb:
ab:8f:82:2c:79:7b:aa:78:37:bd:ac:1f:bf:6c:d0:
d6:1d:3b:09:49:b3:54:01:f6:49:ac:f2:4b:ba:73:
14:93:1b:e7:80:c1:fd:22:ef:05:78:bb:b6:72:58:
92:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9F:7D:BD:8D:C9:F4:28:80:2F:D9:72:ED:3C:6C:9A:0B:A4:75:32
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/6289DC0452A811F08D69FB63C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.96.0-111.88.135.255
111.88.140.0/22
111.88.160.0/21
111.88.172.0-111.88.183.255
111.88.192.0-111.88.231.255
115.186.44.0-115.186.46.255
115.186.62.0/24
115.186.104.0/24
Signature Algorithm: sha256WithRSAEncryption
06:94:4e:21:7b:d0:97:d7:27:9c:b4:45:54:2d:32:3c:cf:87:
31:f9:7e:b3:14:d1:21:2e:d3:36:d0:70:e1:62:fd:29:4d:40:
e1:77:ec:14:a1:e6:44:a9:4a:33:0c:52:6f:b3:6c:bd:98:1f:
7d:31:57:c2:c8:65:f8:3e:e4:34:e4:55:98:6b:2f:31:58:73:
bc:0c:85:43:5b:61:0b:03:9d:c9:d4:48:71:73:22:5a:21:24:
5f:20:15:4f:cf:68:a3:59:90:3a:b9:8a:a7:e8:f3:a1:a3:98:
6d:59:01:37:70:18:17:27:b0:1d:b9:33:37:e2:f3:69:88:7f:
28:d6:91:87:0e:54:7d:c5:7c:f1:d4:23:29:af:a0:ea:4a:67:
9c:00:90:9b:67:6e:8c:ed:58:31:ce:93:d7:c1:13:7c:d9:d5:
cf:a1:48:0a:7f:41:c7:88:d5:ed:f2:e6:5b:eb:8c:eb:67:15:
65:d4:9c:fc:a4:80:41:b3:db:26:fc:dc:41:3d:fe:7d:03:a2:
d6:4a:58:5d:de:77:0b:02:f2:21:46:bf:4f:ac:6e:66:43:c9:
98:5c:5b:62:be:e7:10:c3:d3:ff:06:31:49:77:40:ed:76:33:
47:15:8c:d7:a2:57:1b:c6:c8:d2:4c:e5:e9:d0:c1:aa:f1:e7:
23:41:76:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:34:40 2025 by rpki-client