Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/C42C9EFA1ACD11F08744CE41C4F9AE02.roa
File: C42C9EFA1ACD11F08744CE41C4F9AE02.roa (raw, json)
Hash identifier: vzcpdmRsAg0RAFXLYZQAS90TfnSMuhbgLvtLFnwJ5Dc=
Subject key identifier: F7:50:F7:32:79:34:3A:44:09:92:5A:69:EB:7B:64:2C:8C:2D:8E:CD
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 37A2
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/C42C9EFA1ACD11F08744CE41C4F9AE02.roa
Signing time: Wed 16 Apr 2025 14:19:11 +0000
ROA not before: Wed 16 Apr 2025 14:19:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38710
IP address blocks: 111.88.96.0/19 maxlen: 19
111.88.144.0/20 maxlen: 23
111.88.164.0/22 maxlen: 23
111.88.168.0/22 maxlen: 24
111.88.184.0/22 maxlen: 23
111.88.188.0/22 maxlen: 23
111.88.233.0/24 maxlen: 24
111.88.238.0/24 maxlen: 24
111.88.239.0/24 maxlen: 24
115.186.10.0/23 maxlen: 23
115.186.12.0/23 maxlen: 23
115.186.14.0/24 maxlen: 24
115.186.16.0/24 maxlen: 24
115.186.17.0/24 maxlen: 24
115.186.21.0/24 maxlen: 24
115.186.23.0/24 maxlen: 24
115.186.24.0/23 maxlen: 23
115.186.25.0/24 maxlen: 24
115.186.30.0/23 maxlen: 24
115.186.32.0/20 maxlen: 22
115.186.32.0/24 maxlen: 24
115.186.33.0/24 maxlen: 24
115.186.34.0/24 maxlen: 24
115.186.35.0/24 maxlen: 24
115.186.36.0/22 maxlen: 23
115.186.36.0/23 maxlen: 24
115.186.40.0/24 maxlen: 24
115.186.42.0/24 maxlen: 24
115.186.43.0/24 maxlen: 24
115.186.44.0/24 maxlen: 24
115.186.45.0/24 maxlen: 24
115.186.46.0/24 maxlen: 24
115.186.47.0/24 maxlen: 24
115.186.56.0/21 maxlen: 23
115.186.56.0/22 maxlen: 24
115.186.60.0/23 maxlen: 24
115.186.63.0/24 maxlen: 24
115.186.64.0/19 maxlen: 23
115.186.76.0/22 maxlen: 24
115.186.80.0/21 maxlen: 24
115.186.90.0/24 maxlen: 24
115.186.96.0/20 maxlen: 23
115.186.96.0/22 maxlen: 24
115.186.101.0/24 maxlen: 24
115.186.102.0/23 maxlen: 24
115.186.104.0/24 maxlen: 24
115.186.106.0/23 maxlen: 24
115.186.108.0/22 maxlen: 24
115.186.112.0/20 maxlen: 23
115.186.112.0/23 maxlen: 24
115.186.115.0/24 maxlen: 24
115.186.117.0/24 maxlen: 24
115.186.118.0/23 maxlen: 24
115.186.120.0/23 maxlen: 24
115.186.125.0/24 maxlen: 24
115.186.126.0/24 maxlen: 24
117.102.0.0/21 maxlen: 21
117.102.0.0/22 maxlen: 22
117.102.0.0/23 maxlen: 24
117.102.2.0/24 maxlen: 24
117.102.3.0/24 maxlen: 24
117.102.4.0/24 maxlen: 24
117.102.5.0/24 maxlen: 24
117.102.6.0/24 maxlen: 24
117.102.7.0/24 maxlen: 24
117.102.8.0/24 maxlen: 24
117.102.9.0/24 maxlen: 24
117.102.12.0/23 maxlen: 23
117.102.12.0/24 maxlen: 24
117.102.14.0/23 maxlen: 23
117.102.16.0/24 maxlen: 24
117.102.17.0/24 maxlen: 24
117.102.18.0/23 maxlen: 24
117.102.20.0/22 maxlen: 23
117.102.24.0/22 maxlen: 22
117.102.24.0/23 maxlen: 24
117.102.26.0/24 maxlen: 24
117.102.28.0/24 maxlen: 24
117.102.32.0/24 maxlen: 24
117.102.33.0/24 maxlen: 24
117.102.34.0/24 maxlen: 24
117.102.35.0/24 maxlen: 24
117.102.36.0/24 maxlen: 24
117.102.37.0/24 maxlen: 24
117.102.38.0/24 maxlen: 24
117.102.39.0/24 maxlen: 24
117.102.40.0/24 maxlen: 24
117.102.41.0/24 maxlen: 24
117.102.42.0/24 maxlen: 24
117.102.43.0/24 maxlen: 24
117.102.44.0/24 maxlen: 24
117.102.45.0/24 maxlen: 24
117.102.46.0/24 maxlen: 24
117.102.47.0/24 maxlen: 24
203.81.208.0/20 maxlen: 23
203.81.208.0/22 maxlen: 24
203.81.213.0/24 maxlen: 24
203.81.215.0/24 maxlen: 24
203.81.224.0/20 maxlen: 23
203.81.230.0/24 maxlen: 24
203.81.239.0/24 maxlen: 24
2406:7000::/32 maxlen: 32
2406:7000::/48 maxlen: 48
2406:7000:1::/48 maxlen: 48
2406:7000:2::/48 maxlen: 48
2406:7000:3::/48 maxlen: 48
2406:7000:4::/48 maxlen: 48
2406:7000:5::/48 maxlen: 48
2406:7000:6::/48 maxlen: 48
2406:7000:7::/48 maxlen: 48
2406:7000:8::/48 maxlen: 48
2406:7000:9::/48 maxlen: 48
2406:7000:a::/48 maxlen: 48
2406:7000:b::/48 maxlen: 48
2406:7000:c::/48 maxlen: 48
2406:7000:d::/48 maxlen: 48
2406:7000:e::/48 maxlen: 48
2406:7000:f::/48 maxlen: 48
2406:7000:10::/48 maxlen: 48
2406:7000:11::/48 maxlen: 48
2406:7000:12::/48 maxlen: 48
2406:7000:13::/48 maxlen: 48
2406:7000:14::/48 maxlen: 48
2406:7000:15::/48 maxlen: 48
2406:7000:16::/48 maxlen: 48
2406:7000:17::/48 maxlen: 48
2406:7000:18::/48 maxlen: 48
2406:7000:19::/48 maxlen: 48
2406:7000:1a::/48 maxlen: 48
2406:7000:1b::/48 maxlen: 48
2406:7000:1c::/48 maxlen: 48
2406:7000:1d::/48 maxlen: 48
2406:7000:1e::/48 maxlen: 48
2406:7000:1f::/48 maxlen: 48
2406:7000:20::/48 maxlen: 48
2406:7000:21::/48 maxlen: 48
2406:7000:22::/48 maxlen: 48
2406:7000:23::/48 maxlen: 48
2406:7000:24::/48 maxlen: 48
2406:7000:25::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 16 Apr 2025 14:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14242 (0x37a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Apr 16 14:19:11 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67ffbc5f-7aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fb:50:3a:fa:75:68:05:8e:43:cd:58:07:be:
3f:18:50:9d:9e:b0:63:f8:80:2f:ef:7d:a6:f8:3d:
85:e0:a1:7e:f3:69:6a:9c:4d:65:b5:18:59:fd:0a:
fa:05:24:83:de:3d:90:4b:1c:f5:e5:ad:a2:f8:27:
e5:f4:c1:d3:47:16:67:d6:c4:0e:2f:e9:de:55:44:
ed:2d:4e:96:b8:7c:95:ae:f5:ec:38:9a:3e:fc:e7:
b7:5b:ed:db:18:e1:a2:72:8b:74:59:90:02:63:0f:
c1:a9:46:0e:df:99:6e:7b:d7:c9:26:b2:b1:71:80:
bc:4b:29:af:23:3d:55:11:b2:87:ad:2a:d7:38:88:
d9:b3:1a:ef:7c:75:bc:b0:8f:bd:6b:5c:bb:4a:16:
ad:38:e8:c3:d2:45:c2:75:6b:45:0d:c6:4a:df:ee:
87:04:6a:ec:ff:27:6a:bc:2b:91:2c:d4:d4:22:d7:
c2:61:98:77:96:22:c1:22:c1:57:95:7e:a5:a6:aa:
3d:00:03:b5:78:7d:ae:02:b7:5b:94:0d:8d:20:fc:
97:ab:7c:7d:ee:6f:e3:67:6e:be:7a:4a:55:62:d4:
29:cb:d4:b5:da:5f:e4:59:8f:f1:d8:08:83:f6:23:
23:eb:9f:10:3d:e7:88:d5:44:b0:57:37:b9:90:d9:
8b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:50:F7:32:79:34:3A:44:09:92:5A:69:EB:7B:64:2C:8C:2D:8E:CD
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/C42C9EFA1ACD11F08744CE41C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.96.0/19
111.88.144.0/20
111.88.164.0-111.88.171.255
111.88.184.0/21
111.88.233.0/24
111.88.238.0/23
115.186.10.0-115.186.14.255
115.186.16.0/23
115.186.21.0/24
115.186.23.0-115.186.25.255
115.186.30.0-115.186.47.255
115.186.56.0-115.186.127.255
117.102.0.0-117.102.9.255
117.102.12.0-117.102.28.255
117.102.32.0/20
203.81.208.0-203.81.239.255
IPv6:
2406:7000::/32
Signature Algorithm: sha256WithRSAEncryption
56:d2:71:93:45:82:6c:36:25:ed:12:c7:00:37:35:03:ee:69:
bf:d4:4c:4d:a7:da:bf:bf:2e:5a:f1:f2:28:5d:6a:3a:47:97:
c7:00:b8:b6:c9:7e:d1:27:89:c9:ef:1e:90:8f:fa:27:97:4c:
a2:2d:aa:3a:c5:98:ee:1d:37:76:15:21:ca:9b:47:e0:4c:69:
e2:a7:8f:60:47:4d:0f:54:30:39:16:20:3a:eb:40:4c:27:6f:
10:37:c0:2d:cd:3a:6e:b8:62:2c:25:7a:ff:22:2f:b7:66:a7:
81:e0:9f:c9:ba:3e:3b:be:33:e0:00:54:46:99:87:76:02:e5:
7c:f8:e1:05:cc:82:9a:6b:5e:b7:84:27:7f:6d:8e:e8:47:39:
ae:c2:21:c7:ad:32:ea:e7:76:0b:5a:e9:2d:08:cf:93:53:81:
b3:7f:4c:b6:12:3a:cd:39:90:76:2d:4c:3d:97:38:e7:c8:4e:
c5:2d:43:19:0d:8d:9e:78:93:43:fe:95:34:1b:19:f9:f2:a6:
1a:05:9e:25:cf:34:0f:28:ef:26:7d:01:de:aa:82:41:a5:81:
e2:39:fc:48:fd:2a:b5:e0:da:7f:2f:d7:f0:65:ed:59:5b:0b:
79:38:c7:6d:ad:fa:35:08:f7:ac:ee:b7:ac:50:1e:93:7b:65:
1c:4e:87:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:22:43 2025 by rpki-client