Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/04CC503286DF11EF94006141C4F9AE02.roa
File:                     04CC503286DF11EF94006141C4F9AE02.roa (raw, json)
Hash identifier:          AWBbERyXiY0+bF9xvU5blokJ/LpY2yqjfgM8TWOMV2U=
Subject key identifier:   4C:12:77:B5:E3:3E:45:E5:FF:50:B5:F3:5B:29:94:B3:43:99:0B:25
Certificate issuer:       /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial:       3682
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/04CC503286DF11EF94006141C4F9AE02.roa
Signing time:             Thu 10 Oct 2024 08:14:01 +0000
ROA not before:           Thu 10 Oct 2024 08:14:01 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     9255
IP address blocks:        116.12.224.0/24 maxlen: 24
                          118.201.12.0/22 maxlen: 22
                          118.201.16.0/20 maxlen: 20
                          118.201.81.0/24 maxlen: 24
                          118.201.157.0/24 maxlen: 24
                          203.125.128.0/24 maxlen: 24
                          203.125.199.0/24 maxlen: 24
                          203.126.8.0/24 maxlen: 24
                          203.126.130.0/24 maxlen: 24
                          203.126.133.0/24 maxlen: 24
                          203.126.134.0/24 maxlen: 24
                          203.126.137.0/24 maxlen: 24
                          203.126.147.0/24 maxlen: 24
                          203.127.2.0/24 maxlen: 24
                          203.127.3.0/24 maxlen: 24
                          203.127.10.0/24 maxlen: 24
                          203.127.31.0/24 maxlen: 24
                          203.127.104.0/24 maxlen: 24
                          203.127.111.0/24 maxlen: 24
                          203.127.135.0/24 maxlen: 24
                          203.127.146.0/24 maxlen: 24
                          203.127.148.0/24 maxlen: 24
                          203.127.200.0/24 maxlen: 24
                          203.127.201.0/24 maxlen: 24
                          203.127.202.0/24 maxlen: 24
                          2001:c20:405::/48 maxlen: 48
                          2001:c20:4849::/48 maxlen: 48
                          2001:c20:484a::/48 maxlen: 48
                          2001:c20:4851::/48 maxlen: 48
                          2001:c20:485e::/48 maxlen: 48
                          2001:c20:485f::/48 maxlen: 48
                          2001:c20:4861::/48 maxlen: 48
                          2001:c20:4865::/48 maxlen: 48
                          2001:c20:4866::/48 maxlen: 48
                          2001:c20:4868::/48 maxlen: 48
                          2001:c20:486a::/48 maxlen: 48
                          2001:c20:486c::/48 maxlen: 48
                          2001:c20:486e::/48 maxlen: 48
                          2001:c20:4871::/48 maxlen: 48
                          2001:c20:4874::/48 maxlen: 48
                          2001:c20:4875::/48 maxlen: 48
                          2001:c20:4878::/48 maxlen: 48
                          2001:c20:4879::/48 maxlen: 48
                          2001:c20:487b::/48 maxlen: 48
                          2001:c20:487e::/48 maxlen: 48
                          2001:c20:4883::/48 maxlen: 48
                          2001:c20:4884::/48 maxlen: 48
                          2001:c20:4885::/48 maxlen: 48
                          2001:c20:4886::/48 maxlen: 48
                          2001:c20:4887::/48 maxlen: 48
                          2001:c20:488b::/48 maxlen: 48
                          2001:c20:488c::/48 maxlen: 48
                          2001:c20:488d::/48 maxlen: 48
                          2001:c20:488e::/48 maxlen: 48
                          2001:c20:488f::/48 maxlen: 48
                          2001:c20:4890::/48 maxlen: 48
                          2001:c20:4891::/48 maxlen: 48
                          2001:c20:4892::/48 maxlen: 48
                          2001:c20:4893::/48 maxlen: 48
                          2001:c20:4894::/48 maxlen: 48
                          2001:c20:4895::/48 maxlen: 48
                          2001:c20:4896::/48 maxlen: 48
                          2001:c20:4898::/48 maxlen: 48
                          2001:c20:489a::/48 maxlen: 48
                          2001:c20:48a0::/48 maxlen: 48
                          2001:c20:48a1::/48 maxlen: 48
                          2001:c20:48a2::/48 maxlen: 48
                          2001:c20:48a3::/48 maxlen: 48
                          2001:c20:48a4::/48 maxlen: 48
                          2001:c20:48a6::/48 maxlen: 48
                          2001:c20:48aa::/48 maxlen: 48
                          2001:c20:48ab::/48 maxlen: 48
                          2001:c20:48ad::/48 maxlen: 48
                          2001:c20:48ae::/48 maxlen: 48
                          2001:c20:48af::/48 maxlen: 48
                          2001:c20:48b0::/48 maxlen: 48
                          2001:c20:48b1::/48 maxlen: 48
                          2001:c20:48b2::/48 maxlen: 48
                          2001:c20:48b5::/48 maxlen: 48
                          2001:c20:48b6::/48 maxlen: 48
                          2001:c20:48b7::/48 maxlen: 48
                          2001:c20:48b8::/48 maxlen: 48
                          2001:c20:48b9::/48 maxlen: 48
                          2001:c20:48ba::/48 maxlen: 48
                          2001:c20:5009::/48 maxlen: 48
                          2001:c20:8409::/48 maxlen: 48
                          2001:c20:c80a::/48 maxlen: 48
                          2001:c20:c80d::/48 maxlen: 48
                          2001:c20:c80e::/48 maxlen: 48
                          2001:c20:c80f::/48 maxlen: 48
                          2001:c20:c811::/48 maxlen: 48
                          2001:c20:c814::/48 maxlen: 48
                          2001:c20:c815::/48 maxlen: 48
                          2001:c20:c819::/48 maxlen: 48
                          2001:c20:c824::/48 maxlen: 48
                          2001:c20:c825::/48 maxlen: 48
                          2001:c20:c826::/48 maxlen: 48
                          2001:c20:c827::/48 maxlen: 48
                          2001:c20:c831::/48 maxlen: 48
                          2001:c20:c833::/48 maxlen: 48
                          2001:c20:c835::/48 maxlen: 48
                          2001:c20:c837::/48 maxlen: 48
                          2001:c20:c839::/48 maxlen: 48
                          2001:c20:c83f::/48 maxlen: 48
                          2001:c20:c840::/48 maxlen: 48
                          2001:c20:c842::/48 maxlen: 48
                          2001:c20:c847::/48 maxlen: 48
                          2001:c20:c84c::/48 maxlen: 48
                          2001:c20:c84d::/48 maxlen: 48
                          2001:c20:c84e::/48 maxlen: 48
                          2001:c20:c854::/48 maxlen: 48
                          2001:c20:c855::/48 maxlen: 48
                          2001:c20:c856::/48 maxlen: 48
                          2001:c20:e808::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 11 Oct 2024 06:39:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13954 (0x3682)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C
        Validity
            Not Before: Oct 10 08:14:01 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=67078cc9-3d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dd:82:4f:e0:97:2e:52:0c:89:d3:b7:77:bd:
                    5a:55:c9:34:e2:08:f6:a9:43:b0:78:58:7d:cf:d5:
                    93:bc:61:2e:4e:a8:bd:7c:c3:23:84:6e:8d:dc:72:
                    96:b6:a8:e2:e4:ad:1d:d0:b0:21:8b:c3:49:a5:f6:
                    b8:d2:a8:47:25:70:9e:ea:91:f0:40:c7:83:6e:ba:
                    40:23:01:95:4c:47:58:d4:ad:a0:68:c8:f6:5a:c4:
                    43:b6:9a:29:6c:df:fb:9e:5e:64:ec:40:60:4c:78:
                    64:f9:59:94:66:9e:36:9d:e4:b7:98:55:46:12:ef:
                    68:52:73:b3:0b:f0:32:d7:e5:a9:d5:63:fa:42:c5:
                    2b:93:1a:58:cf:ba:88:81:d7:62:0f:72:5c:79:72:
                    a3:dc:7a:5a:30:0e:b1:fa:e8:73:75:9c:6d:08:af:
                    40:de:ab:78:19:20:8e:f8:74:38:1b:09:4a:b0:96:
                    5d:b8:aa:2a:53:82:0a:9c:05:93:64:f0:78:b4:2c:
                    68:c7:7b:89:1f:c4:e1:54:25:fb:cc:db:fd:84:3e:
                    8d:0a:66:a1:45:51:ca:3b:3f:fc:78:d4:c5:16:59:
                    31:b0:34:fd:41:09:16:f6:6d:6c:8c:f2:b6:07:7e:
                    fa:20:c6:99:ba:1c:c1:a2:76:80:12:3a:5c:51:5d:
                    25:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:12:77:B5:E3:3E:45:E5:FF:50:B5:F3:5B:29:94:B3:43:99:0B:25
            X509v3 Authority Key Identifier:
                keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/04CC503286DF11EF94006141C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.12.224.0/24
                  118.201.12.0-118.201.31.255
                  118.201.81.0/24
                  118.201.157.0/24
                  203.125.128.0/24
                  203.125.199.0/24
                  203.126.8.0/24
                  203.126.130.0/24
                  203.126.133.0-203.126.134.255
                  203.126.137.0/24
                  203.126.147.0/24
                  203.127.2.0/23
                  203.127.10.0/24
                  203.127.31.0/24
                  203.127.104.0/24
                  203.127.111.0/24
                  203.127.135.0/24
                  203.127.146.0/24
                  203.127.148.0/24
                  203.127.200.0-203.127.202.255
                IPv6:
                  2001:c20:405::/48
                  2001:c20:4849::-2001:c20:484a:ffff:ffff:ffff:ffff:ffff
                  2001:c20:4851::/48
                  2001:c20:485e::/47
                  2001:c20:4861::/48
                  2001:c20:4865::-2001:c20:4866:ffff:ffff:ffff:ffff:ffff
                  2001:c20:4868::/48
                  2001:c20:486a::/48
                  2001:c20:486c::/48
                  2001:c20:486e::/48
                  2001:c20:4871::/48
                  2001:c20:4874::/47
                  2001:c20:4878::/47
                  2001:c20:487b::/48
                  2001:c20:487e::/48
                  2001:c20:4883::-2001:c20:4887:ffff:ffff:ffff:ffff:ffff
                  2001:c20:488b::-2001:c20:4896:ffff:ffff:ffff:ffff:ffff
                  2001:c20:4898::/48
                  2001:c20:489a::/48
                  2001:c20:48a0::-2001:c20:48a4:ffff:ffff:ffff:ffff:ffff
                  2001:c20:48a6::/48
                  2001:c20:48aa::/47
                  2001:c20:48ad::-2001:c20:48b2:ffff:ffff:ffff:ffff:ffff
                  2001:c20:48b5::-2001:c20:48ba:ffff:ffff:ffff:ffff:ffff
                  2001:c20:5009::/48
                  2001:c20:8409::/48
                  2001:c20:c80a::/48
                  2001:c20:c80d::-2001:c20:c80f:ffff:ffff:ffff:ffff:ffff
                  2001:c20:c811::/48
                  2001:c20:c814::/47
                  2001:c20:c819::/48
                  2001:c20:c824::/46
                  2001:c20:c831::/48
                  2001:c20:c833::/48
                  2001:c20:c835::/48
                  2001:c20:c837::/48
                  2001:c20:c839::/48
                  2001:c20:c83f::-2001:c20:c840:ffff:ffff:ffff:ffff:ffff
                  2001:c20:c842::/48
                  2001:c20:c847::/48
                  2001:c20:c84c::-2001:c20:c84e:ffff:ffff:ffff:ffff:ffff
                  2001:c20:c854::-2001:c20:c856:ffff:ffff:ffff:ffff:ffff
                  2001:c20:e808::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:bf:8a:c5:65:1e:d2:29:38:a4:e1:21:6d:ff:ac:da:58:03:
         0f:8d:8e:f5:22:3f:ed:76:78:60:31:f3:26:51:7a:1f:47:6b:
         f7:b3:84:71:b5:d9:c9:51:88:d9:bb:df:c6:6c:33:58:48:bd:
         1f:05:1e:a9:e0:2d:66:dc:a0:99:2c:57:fc:d0:5f:fa:30:68:
         b4:c6:f9:37:c9:cf:ab:31:34:27:19:70:cd:91:9d:fb:80:33:
         42:cd:33:b0:d2:6b:05:cf:24:86:d4:ec:8e:af:f5:58:32:e0:
         4c:06:4c:6d:ad:83:cb:2c:b2:94:e5:c4:59:f3:f4:9c:a5:9b:
         ed:81:df:4d:cd:23:3a:e6:a4:0e:a3:3c:4b:c4:dc:24:d0:ca:
         51:46:64:0d:3c:7d:2f:88:3f:fc:7a:5b:09:4d:13:6d:8c:f9:
         3c:d2:0b:11:60:d7:d2:19:60:c0:94:20:1a:5f:e3:fe:1f:7e:
         5a:86:14:e3:c4:f2:30:de:14:3f:97:d1:98:db:4d:74:20:31:
         32:15:40:f3:aa:d9:02:b3:d7:f4:2a:45:55:e9:49:11:90:11:
         a4:26:46:d6:4c:1c:e1:dc:7c:a2:c3:0f:57:a0:2c:5d:eb:35:
         3d:72:94:b4:9d:24:a0:fa:be:51:c5:18:2e:93:de:11:cd:c8:
         c8:4b:7c:e4
-----BEGIN CERTIFICATE-----
MIIICzCCBvOgAwIBAgICNoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUY4OUMxMTAvBgNVBAUTKEFGOEYwQ0ZCNDdGQkZDQzdDNDkzM0M0NzNDREIzNjQ0
MkI1MDUxQ0UwHhcNMjQxMDEwMDgxNDAxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzA3OGNjOS0zZDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAst2CT+CXLlIMidO3d71aVck04gj2qUOweFh9z9WTvGEuTqi9fMMjhG6N3HKW
tqji5K0d0LAhi8NJpfa40qhHJXCe6pHwQMeDbrpAIwGVTEdY1K2gaMj2WsRDtpop
bN/7nl5k7EBgTHhk+VmUZp42neS3mFVGEu9oUnOzC/Ay1+Wp1WP6QsUrkxpYz7qI
gddiD3JceXKj3HpaMA6x+uhzdZxtCK9A3qt4GSCO+HQ4GwlKsJZduKoqU4IKnAWT
ZPB4tCxox3uJH8ThVCX7zNv9hD6NCmahRVHKOz/8eNTFFlkxsDT9QQkW9m1sjPK2
B376IMaZuhzBonaAEjpcUV0lFwIDAQABo4IFLzCCBSswHQYDVR0OBBYEFEwSd7Xj
PkXl/1C181splLNDmQslMB8GA1UdIwQYMBaAFK+PDPtH+/zHxJM8RzzbNkQrUFHO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy82OTA3QzNFMjFE
ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi9yNDhNLTBmN19NZkVrenhIUE5zMlJDdFFV
YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3I0OE0tMGY3X01mRWt6eEhQTnMyUkN0UVVjNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUY4OUMvNjkwN0MzRTIxRDgzMTFFMjlCMzVBNUQ4MDhCMDJDRDIvMDRDQzUwMzI4
NkRGMTFFRjk0MDA2MTQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggK3BggrBgEFBQcBBwEB
/wSCAqYwggKiMIGXBAIAATCBkAMEAHQM4DAMAwQCdskMAwQFdskAAwQAdslRAwQA
dsmdAwQAy32AAwQAy33HAwQAy34IAwQAy36CMAwDBADLfoUDBADLfoYDBADLfokD
BADLfpMDBAHLfwIDBADLfwoDBADLfx8DBADLf2gDBADLf28DBADLf4cDBADLf5ID
BADLf5QwDAMEA8t/yAMEAMt/yjCCAgQEAgACMIIB/AMHACABDCAEBTASAwcAIAEM
IEhJAwcAIAEMIEhKAwcAIAEMIEhRAwcBIAEMIEheAwcAIAEMIEhhMBIDBwAgAQwg
SGUDBwAgAQwgSGYDBwAgAQwgSGgDBwAgAQwgSGoDBwAgAQwgSGwDBwAgAQwgSG4D
BwAgAQwgSHEDBwEgAQwgSHQDBwEgAQwgSHgDBwAgAQwgSHsDBwAgAQwgSH4wEgMH
ACABDCBIgwMHAyABDCBIgDASAwcAIAEMIEiLAwcAIAEMIEiWAwcAIAEMIEiYAwcA
IAEMIEiaMBIDBwUgAQwgSKADBwAgAQwgSKQDBwAgAQwgSKYDBwEgAQwgSKowEgMH
ACABDCBIrQMHACABDCBIsjASAwcAIAEMIEi1AwcAIAEMIEi6AwcAIAEMIFAJAwcA
IAEMIIQJAwcAIAEMIMgKMBIDBwAgAQwgyA0DBwQgAQwgyAADBwAgAQwgyBEDBwEg
AQwgyBQDBwAgAQwgyBkDBwIgAQwgyCQDBwAgAQwgyDEDBwAgAQwgyDMDBwAgAQwg
yDUDBwAgAQwgyDcDBwAgAQwgyDkwEgMHACABDCDIPwMHACABDCDIQAMHACABDCDI
QgMHACABDCDIRzASAwcCIAEMIMhMAwcAIAEMIMhOMBIDBwIgAQwgyFQDBwAgAQwg
yFYDBwAgAQwg6AgwDQYJKoZIhvcNAQELBQADggEBADu/isVlHtIpOKThIW3/rNpY
Aw+NjvUiP+12eGAx8yZReh9Ha/ezhHG12clRiNm738ZsM1hIvR8FHqngLWbcoJks
V/zQX/owaLTG+TfJz6sxNCcZcM2RnfuAM0LNM7DSawXPJIbU7I6v9Vgy4EwGTG2t
g8ssspTlxFnz9Jylm+2B303NIzrmpA6jPEvE3CTQylFGZA08fS+IP/x6WwlNE22M
+TzSCxFg19IZYMCUIBpf4/4fflqGFOPE8jDeFD+X0ZjbTXQgMTIVQPOq2QKz1/Qq
RVXpSRGQEaQmRtZMHOHcfKLDD1egLF3rNT1ylLSdJKD6vlHFGC6T3hHNyMhLfOQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:00:39 2025 by rpki-client