Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/25931AFED13E11EF83D6702CC4F9AE02.roa
File:                     25931AFED13E11EF83D6702CC4F9AE02.roa (raw, json)
Hash identifier:          utr6Y/tCR8oBX2j5cAz1wo/0Ya9PhmOreiBx8UmfAHs=
Subject key identifier:   FE:97:31:3C:2A:C7:0F:79:25:CA:CD:DB:4B:1A:23:A7:8E:23:65:FB
Certificate issuer:       /CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
Certificate serial:       05D1
Authority key identifier: 09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/25931AFED13E11EF83D6702CC4F9AE02.roa
Signing time:             Sun 12 Jan 2025 23:37:12 +0000
ROA not before:           Sun 12 Jan 2025 23:37:12 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     18190
IP address blocks:        49.157.9.0/24 maxlen: 24
                          49.157.10.0/24 maxlen: 24
                          49.157.11.0/24 maxlen: 24
                          49.157.12.0/24 maxlen: 24
                          49.157.13.0/24 maxlen: 24
                          49.157.16.0/24 maxlen: 24
                          49.157.17.0/24 maxlen: 24
                          49.157.18.0/24 maxlen: 24
                          49.157.19.0/24 maxlen: 24
                          49.157.20.0/24 maxlen: 24
                          49.157.21.0/24 maxlen: 24
                          49.157.22.0/24 maxlen: 24
                          49.157.23.0/24 maxlen: 24
                          49.157.24.0/24 maxlen: 24
                          49.157.25.0/24 maxlen: 24
                          49.157.29.0/24 maxlen: 24
                          49.157.30.0/24 maxlen: 24
                          49.157.31.0/24 maxlen: 24
                          49.157.32.0/24 maxlen: 24
                          49.157.33.0/24 maxlen: 24
                          49.157.34.0/24 maxlen: 24
                          49.157.35.0/24 maxlen: 24
                          49.157.36.0/24 maxlen: 24
                          49.157.37.0/24 maxlen: 24
                          49.157.38.0/24 maxlen: 24
                          49.157.39.0/24 maxlen: 24
                          49.157.40.0/24 maxlen: 24
                          49.157.41.0/24 maxlen: 24
                          49.157.42.0/24 maxlen: 24
                          49.157.43.0/24 maxlen: 24
                          49.157.44.0/24 maxlen: 24
                          49.157.45.0/24 maxlen: 24
                          49.157.55.0/24 maxlen: 24
                          49.157.56.0/24 maxlen: 24
                          49.157.57.0/24 maxlen: 24
                          49.157.58.0/24 maxlen: 24
                          49.157.59.0/24 maxlen: 24
                          61.28.168.0/24 maxlen: 24
                          112.199.73.0/24 maxlen: 24
                          113.61.32.0/24 maxlen: 24
                          113.61.33.0/24 maxlen: 24
                          113.61.34.0/24 maxlen: 24
                          113.61.35.0/24 maxlen: 24
                          113.61.36.0/24 maxlen: 24
                          113.61.38.0/24 maxlen: 24
                          113.61.42.0/24 maxlen: 24
                          113.61.43.0/24 maxlen: 24
                          113.61.44.0/24 maxlen: 24
                          113.61.45.0/24 maxlen: 24
                          113.61.46.0/24 maxlen: 24
                          113.61.47.0/24 maxlen: 24
                          113.61.48.0/24 maxlen: 24
                          113.61.49.0/24 maxlen: 24
                          113.61.50.0/24 maxlen: 24
                          113.61.51.0/24 maxlen: 24
                          113.61.52.0/24 maxlen: 24
                          113.61.53.0/24 maxlen: 24
                          113.61.54.0/24 maxlen: 24
                          113.61.55.0/24 maxlen: 24
                          113.61.56.0/24 maxlen: 24
                          113.61.57.0/24 maxlen: 24
                          113.61.58.0/24 maxlen: 24
                          113.61.59.0/24 maxlen: 24
                          113.61.60.0/24 maxlen: 24
                          113.61.61.0/24 maxlen: 24
                          113.61.62.0/24 maxlen: 24
                          113.61.63.0/24 maxlen: 24
                          115.85.2.0/24 maxlen: 24
                          116.50.137.0/24 maxlen: 24
                          116.50.138.0/24 maxlen: 24
                          116.50.139.0/24 maxlen: 24
                          116.50.140.0/24 maxlen: 24
                          116.50.142.0/24 maxlen: 24
                          116.50.143.0/24 maxlen: 24
                          116.50.144.0/24 maxlen: 24
                          116.50.145.0/24 maxlen: 24
                          116.50.146.0/24 maxlen: 24
                          116.50.183.0/24 maxlen: 24
                          116.50.238.0/24 maxlen: 24
                          116.50.252.0/24 maxlen: 24
                          117.104.240.0/24 maxlen: 24
                          117.104.241.0/24 maxlen: 24
                          117.104.242.0/24 maxlen: 24
                          117.104.243.0/24 maxlen: 24
                          117.104.244.0/24 maxlen: 24
                          117.104.245.0/24 maxlen: 24
                          117.104.246.0/24 maxlen: 24
                          117.104.247.0/24 maxlen: 24
                          117.104.248.0/24 maxlen: 24
                          117.104.249.0/24 maxlen: 24
                          117.104.250.0/24 maxlen: 24
                          117.104.251.0/24 maxlen: 24
                          117.104.252.0/24 maxlen: 24
                          117.104.253.0/24 maxlen: 24
                          117.104.254.0/24 maxlen: 24
                          180.232.5.0/24 maxlen: 24
                          180.232.6.0/24 maxlen: 24
                          180.232.7.0/24 maxlen: 24
                          180.232.8.0/24 maxlen: 24
                          180.232.9.0/24 maxlen: 24
                          180.232.15.0/24 maxlen: 24
                          180.232.16.0/24 maxlen: 24
                          180.232.17.0/24 maxlen: 24
                          180.232.18.0/24 maxlen: 24
                          180.232.19.0/24 maxlen: 24
                          180.232.113.0/24 maxlen: 24
                          180.232.114.0/24 maxlen: 24
                          180.232.115.0/24 maxlen: 24
                          180.232.116.0/24 maxlen: 24
                          180.232.117.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 18 Feb 2025 00:56:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1489 (0x5d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161613
        Validity
            Not Before: Jan 12 23:37:12 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67845228-b6f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2a:f0:32:62:78:84:6a:92:92:40:66:c0:53:
                    51:a7:c0:63:27:da:b1:4b:18:ff:1f:a4:57:d0:d6:
                    a4:22:ae:aa:90:ce:f0:53:ba:35:bc:35:25:d4:e1:
                    90:5c:5d:92:89:47:6f:00:47:29:69:92:4f:5a:31:
                    8b:ff:ca:44:d7:64:f0:36:c6:3c:68:73:51:76:2e:
                    62:6c:2a:d7:38:84:ee:f2:52:c0:33:44:d3:0f:74:
                    e1:d3:77:f2:e4:fa:57:b0:1a:4d:8f:d9:81:e2:76:
                    4f:b9:65:3a:c1:f0:37:44:26:a4:0e:6d:da:01:cc:
                    e6:df:13:41:e4:e6:1d:44:7b:97:d9:25:c1:3f:44:
                    56:12:60:92:4a:e8:92:fd:c4:88:77:95:34:7b:ec:
                    d9:e1:52:c9:0e:63:68:05:f5:85:59:61:69:64:89:
                    ee:da:b6:27:f4:74:c0:a5:4a:4d:cf:e7:5b:01:a0:
                    2d:13:d3:78:7e:40:ca:70:4b:86:a8:34:cd:68:25:
                    5a:f0:d4:20:ae:c7:af:ef:dc:9a:08:e7:36:c5:06:
                    19:f1:61:ec:8a:80:3a:3b:fa:31:db:e7:81:ef:29:
                    cc:d0:2d:a9:4f:d9:49:c9:3f:df:f0:2b:21:e3:6e:
                    f9:92:e4:94:30:f3:ff:42:d4:4a:68:58:85:f1:ff:
                    82:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:97:31:3C:2A:C7:0F:79:25:CA:CD:DB:4B:1A:23:A7:8E:23:65:FB
            X509v3 Authority Key Identifier:
                keyid:09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/25931AFED13E11EF83D6702CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.157.9.0-49.157.13.255
                  49.157.16.0-49.157.25.255
                  49.157.29.0-49.157.45.255
                  49.157.55.0-49.157.59.255
                  61.28.168.0/24
                  112.199.73.0/24
                  113.61.32.0-113.61.36.255
                  113.61.38.0/24
                  113.61.42.0-113.61.63.255
                  115.85.2.0/24
                  116.50.137.0-116.50.140.255
                  116.50.142.0-116.50.146.255
                  116.50.183.0/24
                  116.50.238.0/24
                  116.50.252.0/24
                  117.104.240.0-117.104.254.255
                  180.232.5.0-180.232.9.255
                  180.232.15.0-180.232.19.255
                  180.232.113.0-180.232.117.255

    Signature Algorithm: sha256WithRSAEncryption
         b8:6b:31:c1:66:b2:b6:f9:a1:ba:04:59:e2:da:d2:5f:95:21:
         84:47:68:1a:25:f1:7e:0b:b5:c2:74:f1:41:a8:ee:c3:ab:85:
         53:a1:94:0e:a3:d5:c2:ee:6b:d5:e2:0e:39:70:0a:80:29:2c:
         5d:f9:66:97:85:cd:b1:73:3d:d6:0b:59:20:89:da:f5:59:04:
         f3:2a:b3:db:f1:88:ec:43:90:a4:e7:5a:95:fc:04:21:52:01:
         e6:6d:16:b9:39:b7:3a:0e:87:8f:24:6d:0c:c2:3f:e1:98:f4:
         27:23:73:90:8b:c1:2c:cc:4e:76:ea:df:1a:68:7c:c3:40:35:
         4d:86:5e:7c:92:79:c8:14:dd:f9:c4:96:96:0f:b1:85:6a:0c:
         f9:bf:85:96:68:30:4c:69:a7:4a:7e:30:13:a2:a4:38:c3:6a:
         c6:4c:f7:ab:0f:55:63:59:20:3b:35:06:00:f3:46:a4:29:4f:
         a0:81:0a:18:e8:25:cb:d8:c4:4d:ab:65:27:f5:87:b6:4c:b2:
         b4:1c:6d:1c:30:d2:cf:4a:c0:97:b3:fd:22:f2:10:e6:4d:8a:
         6f:db:a1:19:41:34:23:8c:0e:17:31:a0:25:41:07:71:70:bf:
         fa:aa:b7:74:8d:03:f8:89:b7:5a:6d:9a:06:ba:72:0a:ae:51:
         f2:27:be:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:08:19 2025 by rpki-client