Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/9D00ABAC089C11F09075A534C4F9AE02.roa
File:                     9D00ABAC089C11F09075A534C4F9AE02.roa (raw, json)
Hash identifier:          9pE9CoLbnpn5+Pjy7UYb5qZUteFTclIE7aw7lxSUeqc=
Subject key identifier:   5D:65:69:A5:6A:D4:7B:76:12:8B:6C:7E:F1:57:E2:C4:E3:E2:9C:3A
Certificate issuer:       /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial:       07F3
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/9D00ABAC089C11F09075A534C4F9AE02.roa
Signing time:             Mon 24 Mar 2025 10:41:59 +0000
ROA not before:           Mon 24 Mar 2025 10:41:59 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     135607
IP address blocks:        61.245.4.0/24 maxlen: 24
                          61.245.5.0/24 maxlen: 24
                          61.245.6.0/24 maxlen: 24
                          61.245.7.0/24 maxlen: 24
                          61.245.8.0/24 maxlen: 24
                          61.245.9.0/24 maxlen: 24
                          61.245.12.0/24 maxlen: 24
                          61.245.13.0/24 maxlen: 24
                          61.245.14.0/24 maxlen: 24
                          61.245.15.0/24 maxlen: 24
                          61.245.16.0/24 maxlen: 24
                          61.245.17.0/24 maxlen: 24
                          61.245.18.0/24 maxlen: 24
                          61.245.19.0/24 maxlen: 24
                          61.245.20.0/24 maxlen: 24
                          61.245.21.0/24 maxlen: 24
                          61.245.22.0/24 maxlen: 24
                          61.245.23.0/24 maxlen: 24
                          61.245.24.0/24 maxlen: 24
                          61.245.25.0/24 maxlen: 24
                          61.245.26.0/24 maxlen: 24
                          61.245.27.0/24 maxlen: 24
                          61.245.28.0/24 maxlen: 24
                          61.245.29.0/24 maxlen: 24
                          61.245.30.0/24 maxlen: 24
                          61.245.121.0/24 maxlen: 24
                          61.245.122.0/24 maxlen: 24
                          61.245.123.0/24 maxlen: 24
                          103.76.160.0/23 maxlen: 23
                          103.76.160.0/24 maxlen: 24
                          103.76.161.0/24 maxlen: 24
                          103.100.100.0/23 maxlen: 23
                          103.100.100.0/24 maxlen: 24
                          103.100.101.0/24 maxlen: 24
                          126.209.0.0/24 maxlen: 24
                          126.209.1.0/24 maxlen: 24
                          126.209.2.0/24 maxlen: 24
                          126.209.3.0/24 maxlen: 24
                          126.209.4.0/24 maxlen: 24
                          126.209.5.0/24 maxlen: 24
                          126.209.6.0/24 maxlen: 24
                          126.209.7.0/24 maxlen: 24
                          126.209.8.0/24 maxlen: 24
                          126.209.9.0/24 maxlen: 24
                          126.209.10.0/24 maxlen: 24
                          126.209.11.0/24 maxlen: 24
                          126.209.12.0/24 maxlen: 24
                          126.209.13.0/24 maxlen: 24
                          126.209.14.0/24 maxlen: 24
                          126.209.15.0/24 maxlen: 24
                          126.209.16.0/24 maxlen: 24
                          126.209.17.0/24 maxlen: 24
                          126.209.18.0/24 maxlen: 24
                          126.209.19.0/24 maxlen: 24
                          126.209.20.0/24 maxlen: 24
                          126.209.21.0/24 maxlen: 24
                          126.209.22.0/24 maxlen: 24
                          126.209.23.0/24 maxlen: 24
                          126.209.24.0/24 maxlen: 24
                          126.209.25.0/24 maxlen: 24
                          126.209.26.0/24 maxlen: 24
                          126.209.27.0/24 maxlen: 24
                          126.209.28.0/24 maxlen: 24
                          126.209.29.0/24 maxlen: 24
                          126.209.30.0/24 maxlen: 24
                          126.209.31.0/24 maxlen: 24
                          126.209.32.0/24 maxlen: 24
                          126.209.33.0/24 maxlen: 24
                          126.209.34.0/24 maxlen: 24
                          126.209.35.0/24 maxlen: 24
                          126.209.36.0/24 maxlen: 24
                          126.209.37.0/24 maxlen: 24
                          126.209.38.0/24 maxlen: 24
                          126.209.39.0/24 maxlen: 24
                          126.209.40.0/24 maxlen: 24
                          126.209.41.0/24 maxlen: 24
                          126.209.44.0/24 maxlen: 24
                          126.209.45.0/24 maxlen: 24
                          126.209.46.0/24 maxlen: 24
                          126.209.47.0/24 maxlen: 24
                          126.209.48.0/24 maxlen: 24
                          126.209.49.0/24 maxlen: 24
                          126.209.50.0/24 maxlen: 24
                          126.209.52.0/24 maxlen: 24
                          126.209.53.0/24 maxlen: 24
                          126.209.54.0/24 maxlen: 24
                          126.209.55.0/24 maxlen: 24
                          126.209.56.0/24 maxlen: 24
                          126.209.57.0/24 maxlen: 24
                          126.209.61.0/24 maxlen: 24
                          126.209.62.0/24 maxlen: 24
                          126.209.63.0/24 maxlen: 24
                          126.209.64.0/24 maxlen: 24
                          126.209.65.0/24 maxlen: 24
                          126.209.66.0/24 maxlen: 24
                          126.209.67.0/24 maxlen: 24
                          126.209.68.0/24 maxlen: 24
                          126.209.69.0/24 maxlen: 24
                          126.209.70.0/24 maxlen: 24
                          126.209.71.0/24 maxlen: 24
                          126.209.72.0/24 maxlen: 24
                          126.209.73.0/24 maxlen: 24
                          126.209.74.0/24 maxlen: 24
                          126.209.75.0/24 maxlen: 24
                          126.209.76.0/24 maxlen: 24
                          126.209.77.0/24 maxlen: 24
                          126.209.78.0/24 maxlen: 24
                          126.209.79.0/24 maxlen: 24
                          126.209.80.0/24 maxlen: 24
                          126.209.81.0/24 maxlen: 24
                          126.209.82.0/24 maxlen: 24
                          126.209.83.0/24 maxlen: 24
                          126.209.84.0/24 maxlen: 24
                          126.209.85.0/24 maxlen: 24
                          126.209.86.0/24 maxlen: 24
                          126.209.87.0/24 maxlen: 24
                          126.209.92.0/24 maxlen: 24
                          126.209.93.0/24 maxlen: 24
                          126.209.95.0/24 maxlen: 24
                          2401:e740::/32 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2035 (0x7f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D1EA
        Validity
            Not Before: Mar 24 10:41:59 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=67e136f7-7494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b7:77:56:ad:82:6e:88:89:a5:eb:9e:77:1d:
                    4d:57:5a:1f:71:7b:80:f5:c8:a2:e2:a0:14:9c:9a:
                    a0:29:b5:f1:7f:02:5c:e9:79:9d:99:97:4b:9b:3e:
                    47:53:1b:dc:9f:c2:70:09:86:51:01:32:48:91:d7:
                    77:a1:0c:5a:96:e1:e4:0a:2e:52:c9:1a:66:95:6d:
                    63:8c:e0:69:7a:7a:4d:d7:cd:a7:46:4a:42:88:b9:
                    30:a3:2e:cb:cb:f6:12:70:b6:2f:15:26:2e:39:09:
                    36:b2:37:f5:52:b1:18:bf:be:91:9a:e1:74:fe:70:
                    a7:34:bf:49:f8:8c:6c:69:b6:47:53:63:f0:56:8c:
                    fc:fa:91:e8:1c:34:35:b3:94:c7:80:55:98:8c:32:
                    ee:d4:e3:8f:f1:da:01:b8:3b:0f:b0:91:a1:7b:38:
                    0d:dc:2e:a9:62:26:a3:7b:3a:e3:93:a5:2d:c8:82:
                    28:8c:84:44:90:d8:4d:f6:5e:75:92:be:50:68:fb:
                    b1:05:78:ba:dc:25:4c:82:07:b8:69:83:e2:c4:71:
                    99:6e:e6:55:f7:13:89:bb:af:56:06:67:63:8f:d3:
                    54:57:6e:c9:8d:81:f5:e6:ee:11:5c:95:d1:fd:60:
                    24:3b:50:ab:f5:a3:73:35:c9:85:8c:50:f6:ec:9a:
                    e4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:65:69:A5:6A:D4:7B:76:12:8B:6C:7E:F1:57:E2:C4:E3:E2:9C:3A
            X509v3 Authority Key Identifier:
                keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/9D00ABAC089C11F09075A534C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.245.4.0-61.245.9.255
                  61.245.12.0-61.245.30.255
                  61.245.121.0-61.245.123.255
                  103.76.160.0/23
                  103.100.100.0/23
                  126.209.0.0-126.209.41.255
                  126.209.44.0-126.209.50.255
                  126.209.52.0-126.209.57.255
                  126.209.61.0-126.209.87.255
                  126.209.92.0/23
                  126.209.95.0/24
                IPv6:
                  2401:e740::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:15:cb:cd:8d:8a:4a:fb:9b:15:c3:ab:10:f6:dc:d5:c0:e5:
         6d:f6:51:2f:27:a5:3d:99:30:6d:7a:ff:27:76:f8:f9:8d:4c:
         d7:3d:27:26:4e:ea:2d:db:d0:a1:15:a9:4f:52:ac:90:a6:4b:
         e4:c9:70:6e:66:b8:55:27:d6:45:d6:27:6b:8a:37:5a:cc:90:
         8b:14:b5:0a:8b:86:d3:d5:b1:3e:df:ca:6e:62:01:49:cf:de:
         b2:36:42:b7:35:6d:dd:84:09:88:e6:1d:3f:d4:d3:5d:d3:05:
         0d:33:d1:4f:e5:3e:f1:7d:a8:89:47:c9:86:59:d6:08:c3:64:
         cb:33:c1:a1:94:29:f1:49:37:cd:31:36:00:f0:9d:17:52:c6:
         1d:03:1c:19:6c:cc:9d:75:9a:a7:e5:5a:75:6c:ef:7d:aa:81:
         48:6f:3b:d9:ce:12:54:65:a8:96:b9:e7:3e:1e:98:e2:fd:2f:
         df:80:91:44:33:8c:db:6c:e6:48:b2:10:2e:64:8d:b9:ab:7d:
         35:f1:c2:39:b3:98:68:e2:91:a6:73:35:e6:78:08:bd:ea:78:
         3c:79:ff:3a:ad:1e:4b:a9:7e:e2:7f:29:e1:bf:7c:85:84:ca:
         eb:8e:6f:bb:20:b0:be:ce:ec:dc:f4:ac:58:a4:52:4e:c9:3d:
         20:e0:9d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:18:06 2025 by rpki-client