
Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/C34AC2E61ACD11F08744CE41C4F9AE02.roa
File: C34AC2E61ACD11F08744CE41C4F9AE02.roa (raw, json)
Hash identifier: fL2Uvz8JtVrSGovf9Wcyc9DKg9Xnivlu/nHyMHmdEzs=
Subject key identifier: 1A:16:B7:7A:6D:8C:B3:CE:F0:2C:99:AC:B5:06:0F:18:F5:2B:D0:15
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 37A1
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/C34AC2E61ACD11F08744CE41C4F9AE02.roa
Signing time: Wed 16 Apr 2025 14:19:09 +0000
ROA not before: Wed 16 Apr 2025 14:19:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150382
IP address blocks: 111.88.76.0/24 maxlen: 24
111.88.77.0/24 maxlen: 24
111.88.79.0/24 maxlen: 24
111.88.138.0/24 maxlen: 24
111.88.139.0/24 maxlen: 24
111.88.144.0/24 maxlen: 24
111.88.145.0/24 maxlen: 24
111.88.146.0/24 maxlen: 24
111.88.147.0/24 maxlen: 24
111.88.148.0/24 maxlen: 24
111.88.149.0/24 maxlen: 24
111.88.150.0/24 maxlen: 24
111.88.151.0/24 maxlen: 24
111.88.152.0/24 maxlen: 24
111.88.153.0/24 maxlen: 24
111.88.154.0/24 maxlen: 24
111.88.155.0/24 maxlen: 24
111.88.156.0/24 maxlen: 24
111.88.157.0/24 maxlen: 24
111.88.158.0/24 maxlen: 24
111.88.159.0/24 maxlen: 24
111.88.164.0/24 maxlen: 24
111.88.165.0/24 maxlen: 24
111.88.166.0/24 maxlen: 24
111.88.167.0/24 maxlen: 24
111.88.184.0/24 maxlen: 24
111.88.185.0/24 maxlen: 24
111.88.186.0/24 maxlen: 24
111.88.187.0/24 maxlen: 24
111.88.188.0/24 maxlen: 24
111.88.189.0/24 maxlen: 24
111.88.190.0/24 maxlen: 24
111.88.191.0/24 maxlen: 24
111.88.232.0/24 maxlen: 24
111.88.235.0/24 maxlen: 24
111.88.236.0/24 maxlen: 24
111.88.237.0/24 maxlen: 24
115.186.1.0/24 maxlen: 24
115.186.10.0/24 maxlen: 24
115.186.11.0/24 maxlen: 24
115.186.12.0/24 maxlen: 24
115.186.13.0/24 maxlen: 24
115.186.16.0/24 maxlen: 24
115.186.18.0/24 maxlen: 24
115.186.19.0/24 maxlen: 24
115.186.22.0/24 maxlen: 24
115.186.24.0/24 maxlen: 24
115.186.26.0/24 maxlen: 24
115.186.27.0/24 maxlen: 24
115.186.28.0/24 maxlen: 24
115.186.29.0/24 maxlen: 24
115.186.41.0/24 maxlen: 24
115.186.48.0/24 maxlen: 24
115.186.49.0/24 maxlen: 24
115.186.50.0/24 maxlen: 24
115.186.51.0/24 maxlen: 24
115.186.52.0/24 maxlen: 24
115.186.53.0/24 maxlen: 24
115.186.54.0/24 maxlen: 24
115.186.55.0/24 maxlen: 24
115.186.64.0/24 maxlen: 24
115.186.65.0/24 maxlen: 24
115.186.66.0/24 maxlen: 24
115.186.67.0/24 maxlen: 24
115.186.68.0/24 maxlen: 24
115.186.69.0/24 maxlen: 24
115.186.70.0/24 maxlen: 24
115.186.71.0/24 maxlen: 24
115.186.72.0/24 maxlen: 24
115.186.73.0/24 maxlen: 24
115.186.74.0/24 maxlen: 24
115.186.75.0/24 maxlen: 24
115.186.88.0/24 maxlen: 24
115.186.89.0/24 maxlen: 24
115.186.91.0/24 maxlen: 24
115.186.92.0/24 maxlen: 24
115.186.93.0/24 maxlen: 24
115.186.94.0/24 maxlen: 24
115.186.95.0/24 maxlen: 24
115.186.97.0/24 maxlen: 24
115.186.99.0/24 maxlen: 24
115.186.100.0/24 maxlen: 24
115.186.105.0/24 maxlen: 24
115.186.114.0/24 maxlen: 24
115.186.116.0/24 maxlen: 24
115.186.122.0/24 maxlen: 24
115.186.123.0/24 maxlen: 24
115.186.124.0/24 maxlen: 24
115.186.125.0/24 maxlen: 24
115.186.127.0/24 maxlen: 24
117.102.10.0/24 maxlen: 24
117.102.11.0/24 maxlen: 24
117.102.13.0/24 maxlen: 24
117.102.14.0/24 maxlen: 24
117.102.15.0/24 maxlen: 24
117.102.20.0/24 maxlen: 24
117.102.21.0/24 maxlen: 24
117.102.22.0/24 maxlen: 24
117.102.23.0/24 maxlen: 24
117.102.27.0/24 maxlen: 24
117.102.29.0/24 maxlen: 24
117.102.30.0/24 maxlen: 24
117.102.31.0/24 maxlen: 24
203.81.212.0/24 maxlen: 24
203.81.214.0/24 maxlen: 24
203.81.216.0/24 maxlen: 24
203.81.217.0/24 maxlen: 24
203.81.218.0/24 maxlen: 24
203.81.219.0/24 maxlen: 24
203.81.220.0/24 maxlen: 24
203.81.221.0/24 maxlen: 24
203.81.222.0/24 maxlen: 24
203.81.223.0/24 maxlen: 24
203.81.224.0/24 maxlen: 24
203.81.225.0/24 maxlen: 24
203.81.226.0/24 maxlen: 24
203.81.227.0/24 maxlen: 24
203.81.228.0/24 maxlen: 24
203.81.229.0/24 maxlen: 24
203.81.231.0/24 maxlen: 24
203.81.232.0/24 maxlen: 24
203.81.233.0/24 maxlen: 24
203.81.234.0/24 maxlen: 24
203.81.235.0/24 maxlen: 24
203.81.236.0/24 maxlen: 24
203.81.237.0/24 maxlen: 24
203.81.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Apr 2025 14:31:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14241 (0x37a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Apr 16 14:19:09 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67ffbc5d-3012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9f:b8:7f:4a:64:4e:d6:fb:99:bf:88:14:cb:
59:62:92:c7:ad:b7:59:7f:8a:61:d2:7f:80:de:b6:
8d:2f:ef:e2:b8:f8:e9:13:cc:3b:81:df:5f:54:ea:
e4:85:26:41:cc:30:1d:4a:8e:55:59:7a:06:1c:20:
23:d4:b2:e0:55:8e:db:7a:50:ac:6e:95:50:19:e2:
b7:26:02:ca:8a:b2:b4:6b:69:43:f0:06:81:48:79:
78:78:f9:96:6b:92:43:5e:5a:28:75:26:e3:fc:cd:
4d:7a:76:79:02:f1:ff:78:89:45:13:fc:15:bf:06:
98:41:2c:1a:7e:8f:af:41:0d:68:f8:de:64:18:73:
23:52:64:36:94:8c:f1:8f:9e:9f:ea:c1:0b:79:21:
92:71:40:c7:f5:52:d6:98:6b:05:bf:76:c6:3b:a6:
fe:a4:3f:1e:72:0e:6e:57:0e:ea:1b:71:42:17:09:
09:ab:ca:25:dc:26:f7:24:95:a1:09:e5:85:d6:a2:
b0:39:b9:67:d2:b8:00:56:f5:92:1a:7b:8c:29:a3:
49:5c:b2:65:fc:0d:73:a1:3d:c3:0b:81:4c:2e:2f:
51:5f:0a:e0:e6:fe:59:41:bf:e1:1f:30:60:d5:95:
39:a6:7d:52:7b:ad:b4:05:71:0a:60:37:b2:03:c3:
4f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:16:B7:7A:6D:8C:B3:CE:F0:2C:99:AC:B5:06:0F:18:F5:2B:D0:15
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/C34AC2E61ACD11F08744CE41C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.76.0/23
111.88.79.0/24
111.88.138.0/23
111.88.144.0/20
111.88.164.0/22
111.88.184.0/21
111.88.232.0/24
111.88.235.0-111.88.237.255
115.186.1.0/24
115.186.10.0-115.186.13.255
115.186.16.0/24
115.186.18.0/23
115.186.22.0/24
115.186.24.0/24
115.186.26.0-115.186.29.255
115.186.41.0/24
115.186.48.0/21
115.186.64.0-115.186.75.255
115.186.88.0/23
115.186.91.0-115.186.95.255
115.186.97.0/24
115.186.99.0-115.186.100.255
115.186.105.0/24
115.186.114.0/24
115.186.116.0/24
115.186.122.0-115.186.125.255
115.186.127.0/24
117.102.10.0/23
117.102.13.0-117.102.15.255
117.102.20.0/22
117.102.27.0/24
117.102.29.0-117.102.31.255
203.81.212.0/24
203.81.214.0/24
203.81.216.0-203.81.229.255
203.81.231.0-203.81.238.255
Signature Algorithm: sha256WithRSAEncryption
95:2e:55:bb:58:32:fc:d1:17:ff:a6:76:41:93:f8:5e:ed:31:
b0:18:cf:99:35:46:8f:ff:b8:d8:f8:5a:a0:52:e1:ed:03:67:
df:08:27:32:e3:14:b6:fe:55:c1:8c:9f:4d:68:db:b5:ab:5e:
03:8d:91:9d:03:2a:96:e0:55:77:1a:18:c4:35:dc:ef:58:88:
8f:87:b3:16:b6:9a:c1:c0:e5:b3:6e:ef:e2:74:d3:82:40:fc:
ad:50:83:54:98:c6:43:b5:e6:00:97:20:c7:2e:c7:f1:af:10:
f7:e2:09:24:34:91:ba:f7:ff:4b:9d:d7:6d:10:f4:60:cf:df:
c3:0c:cb:f4:d9:24:6b:23:5a:ef:73:a0:a5:70:2f:f9:b9:1d:
87:58:02:75:82:be:27:73:6a:9a:7d:b9:aa:cd:d1:a8:6f:b2:
79:28:bb:de:01:58:1f:ca:be:3b:59:e4:cd:59:d5:83:1d:4b:
0f:ea:f4:c8:89:1d:3e:ce:21:70:31:54:81:75:13:ed:4c:c9:
18:54:fe:08:e8:bf:19:75:a2:0f:b6:b3:c4:5e:bc:a6:43:24:
1c:08:c6:c5:ae:7c:2d:92:96:5a:3d:9b:98:75:32:68:50:0d:
6b:2a:87:1a:82:b0:5b:a5:ac:e2:88:a7:60:cb:52:42:20:7f:
c7:f3:60:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:21:54 2025 by rpki-client