Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/65D4191CFB0E11EEA5977B0BC4F9AE02.roa
File:                     65D4191CFB0E11EEA5977B0BC4F9AE02.roa (raw, json)
Hash identifier:          lQQEWZ++G809KMISx2ONDHwQveJzfoG8abeycv4yVWs=
Subject key identifier:   06:04:AD:79:13:E1:FB:78:37:EB:B4:68:E4:4B:61:FD:CA:14:3D:54
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       35BB
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/65D4191CFB0E11EEA5977B0BC4F9AE02.roa
Signing time:             Mon 15 Apr 2024 09:56:15 +0000
ROA not before:           Mon 15 Apr 2024 09:56:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     38710
IP address blocks:        111.88.76.0/24 maxlen: 24
                          111.88.77.0/24 maxlen: 24
                          111.88.79.0/24 maxlen: 24
                          111.88.138.0/24 maxlen: 24
                          111.88.139.0/24 maxlen: 24
                          111.88.144.0/20 maxlen: 24
                          111.88.164.0/22 maxlen: 24
                          111.88.168.0/22 maxlen: 24
                          111.88.184.0/22 maxlen: 24
                          111.88.188.0/22 maxlen: 24
                          111.88.233.0/24 maxlen: 24
                          111.88.234.0/24 maxlen: 24
                          111.88.240.0/24 maxlen: 24
                          111.88.241.0/24 maxlen: 24
                          111.88.242.0/24 maxlen: 24
                          111.88.243.0/24 maxlen: 24
                          111.88.244.0/22 maxlen: 22
                          111.88.244.0/24 maxlen: 24
                          111.88.245.0/24 maxlen: 24
                          111.88.246.0/24 maxlen: 24
                          111.88.247.0/24 maxlen: 24
                          111.88.248.0/21 maxlen: 21
                          111.88.248.0/22 maxlen: 22
                          111.88.248.0/23 maxlen: 24
                          111.88.250.0/24 maxlen: 24
                          111.88.251.0/24 maxlen: 24
                          111.88.252.0/24 maxlen: 24
                          111.88.253.0/24 maxlen: 24
                          111.88.254.0/24 maxlen: 24
                          111.88.255.0/24 maxlen: 24
                          115.186.1.0/24 maxlen: 24
                          115.186.10.0/23 maxlen: 24
                          115.186.12.0/23 maxlen: 24
                          115.186.14.0/24 maxlen: 24
                          115.186.16.0/24 maxlen: 24
                          115.186.17.0/24 maxlen: 24
                          115.186.21.0/24 maxlen: 24
                          115.186.23.0/24 maxlen: 24
                          115.186.24.0/23 maxlen: 23
                          115.186.25.0/24 maxlen: 24
                          115.186.30.0/23 maxlen: 24
                          115.186.32.0/20 maxlen: 22
                          115.186.32.0/24 maxlen: 24
                          115.186.33.0/24 maxlen: 24
                          115.186.34.0/24 maxlen: 24
                          115.186.35.0/24 maxlen: 24
                          115.186.36.0/22 maxlen: 23
                          115.186.36.0/23 maxlen: 24
                          115.186.40.0/24 maxlen: 24
                          115.186.41.0/24 maxlen: 24
                          115.186.42.0/24 maxlen: 24
                          115.186.43.0/24 maxlen: 24
                          115.186.44.0/24 maxlen: 24
                          115.186.45.0/24 maxlen: 24
                          115.186.46.0/24 maxlen: 24
                          115.186.47.0/24 maxlen: 24
                          115.186.56.0/21 maxlen: 24
                          115.186.72.0/22 maxlen: 24
                          115.186.88.0/24 maxlen: 24
                          115.186.90.0/24 maxlen: 24
                          115.186.91.0/24 maxlen: 24
                          115.186.93.0/24 maxlen: 24
                          115.186.94.0/24 maxlen: 24
                          115.186.96.0/24 maxlen: 24
                          115.186.98.0/24 maxlen: 24
                          115.186.101.0/24 maxlen: 24
                          115.186.102.0/24 maxlen: 24
                          115.186.103.0/24 maxlen: 24
                          115.186.104.0/24 maxlen: 24
                          115.186.106.0/23 maxlen: 24
                          115.186.108.0/22 maxlen: 24
                          115.186.112.0/24 maxlen: 24
                          115.186.113.0/24 maxlen: 24
                          115.186.115.0/24 maxlen: 24
                          115.186.117.0/24 maxlen: 24
                          115.186.118.0/24 maxlen: 24
                          115.186.119.0/24 maxlen: 24
                          115.186.120.0/24 maxlen: 24
                          115.186.121.0/24 maxlen: 24
                          115.186.122.0/24 maxlen: 24
                          115.186.123.0/24 maxlen: 24
                          115.186.124.0/24 maxlen: 24
                          115.186.125.0/24 maxlen: 24
                          115.186.126.0/24 maxlen: 24
                          117.102.0.0/21 maxlen: 21
                          117.102.0.0/22 maxlen: 22
                          117.102.0.0/23 maxlen: 24
                          117.102.2.0/24 maxlen: 24
                          117.102.3.0/24 maxlen: 24
                          117.102.4.0/24 maxlen: 24
                          117.102.5.0/24 maxlen: 24
                          117.102.6.0/24 maxlen: 24
                          117.102.7.0/24 maxlen: 24
                          117.102.8.0/24 maxlen: 24
                          117.102.9.0/24 maxlen: 24
                          117.102.10.0/24 maxlen: 24
                          117.102.12.0/23 maxlen: 24
                          117.102.14.0/23 maxlen: 24
                          117.102.16.0/24 maxlen: 24
                          117.102.17.0/24 maxlen: 24
                          117.102.18.0/23 maxlen: 24
                          117.102.20.0/22 maxlen: 24
                          117.102.24.0/22 maxlen: 22
                          117.102.24.0/23 maxlen: 24
                          117.102.26.0/24 maxlen: 24
                          117.102.27.0/24 maxlen: 24
                          117.102.28.0/24 maxlen: 24
                          117.102.30.0/24 maxlen: 24
                          117.102.31.0/24 maxlen: 24
                          117.102.32.0/24 maxlen: 24
                          117.102.33.0/24 maxlen: 24
                          117.102.34.0/24 maxlen: 24
                          117.102.35.0/24 maxlen: 24
                          117.102.36.0/24 maxlen: 24
                          117.102.37.0/24 maxlen: 24
                          117.102.38.0/24 maxlen: 24
                          117.102.39.0/24 maxlen: 24
                          117.102.40.0/24 maxlen: 24
                          117.102.41.0/24 maxlen: 24
                          117.102.42.0/24 maxlen: 24
                          117.102.43.0/24 maxlen: 24
                          117.102.44.0/24 maxlen: 24
                          117.102.45.0/24 maxlen: 24
                          117.102.46.0/24 maxlen: 24
                          117.102.47.0/24 maxlen: 24
                          203.81.192.0/21 maxlen: 22
                          203.81.192.0/24 maxlen: 24
                          203.81.193.0/24 maxlen: 24
                          203.81.194.0/24 maxlen: 24
                          203.81.195.0/24 maxlen: 24
                          203.81.196.0/24 maxlen: 24
                          203.81.197.0/24 maxlen: 24
                          203.81.198.0/23 maxlen: 24
                          203.81.208.0/21 maxlen: 24
                          203.81.230.0/24 maxlen: 24
                          203.81.232.0/21 maxlen: 24
                          2406:7000::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 16 Apr 2024 13:44:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13755 (0x35bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Apr 15 09:56:15 2024 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=661cf9bf-bff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bf:b1:bf:36:9f:f0:55:db:27:c2:03:05:19:
                    9c:31:b1:a1:f3:85:a0:48:e1:af:36:fe:dc:f9:75:
                    99:74:76:6b:0d:a4:39:cd:cc:77:f2:2a:62:10:c4:
                    b2:9a:24:83:f0:49:70:0f:61:24:23:08:d7:3c:ce:
                    b4:aa:a5:89:f6:48:92:7c:98:7f:ba:57:53:bb:b3:
                    f0:7a:a6:ca:1f:a5:db:65:2b:84:9d:9b:2f:b5:c4:
                    fe:f1:6f:f8:6a:16:76:44:c4:ae:14:c0:79:3e:5d:
                    4b:49:0e:d5:56:25:54:e4:4e:10:8b:0f:5d:82:a7:
                    93:3e:59:27:94:45:0c:af:de:80:dd:e3:59:59:24:
                    3d:86:c2:81:bf:0a:ee:1e:ce:4e:7b:4a:70:35:24:
                    e9:e9:f9:1f:a2:db:dd:b2:d0:49:30:13:6e:e5:33:
                    7f:c9:2a:a3:0d:c8:4d:c7:a1:53:08:6f:bd:ac:66:
                    3e:67:28:93:29:64:bf:b9:16:d9:8e:6a:97:d7:68:
                    dd:3b:27:39:22:c9:2a:0d:00:22:66:0b:13:07:ec:
                    82:85:98:bd:4a:a0:51:6d:4f:e6:8b:3f:95:84:39:
                    0b:67:76:43:bb:14:8a:76:d5:05:0f:c0:e7:de:9a:
                    ac:07:75:fc:d2:44:b3:41:d9:b4:2d:ae:47:87:1f:
                    d6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:04:AD:79:13:E1:FB:78:37:EB:B4:68:E4:4B:61:FD:CA:14:3D:54
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/65D4191CFB0E11EEA5977B0BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.88.76.0/23
                  111.88.79.0/24
                  111.88.138.0/23
                  111.88.144.0/20
                  111.88.164.0-111.88.171.255
                  111.88.184.0/21
                  111.88.233.0-111.88.234.255
                  111.88.240.0/20
                  115.186.1.0/24
                  115.186.10.0-115.186.14.255
                  115.186.16.0/23
                  115.186.21.0/24
                  115.186.23.0-115.186.25.255
                  115.186.30.0-115.186.47.255
                  115.186.56.0/21
                  115.186.72.0/22
                  115.186.88.0/24
                  115.186.90.0/23
                  115.186.93.0-115.186.94.255
                  115.186.96.0/24
                  115.186.98.0/24
                  115.186.101.0-115.186.104.255
                  115.186.106.0-115.186.113.255
                  115.186.115.0/24
                  115.186.117.0-115.186.126.255
                  117.102.0.0-117.102.10.255
                  117.102.12.0-117.102.28.255
                  117.102.30.0-117.102.47.255
                  203.81.192.0/21
                  203.81.208.0/21
                  203.81.230.0/24
                  203.81.232.0/21
                IPv6:
                  2406:7000::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:2d:17:56:67:47:97:88:2d:7e:be:8a:78:c2:7c:f3:4b:40:
         37:bc:07:30:1b:e0:45:e3:08:01:17:fe:78:11:d7:1e:d5:ec:
         e6:bd:81:38:1b:cb:27:6c:9e:b5:63:43:54:38:3a:8b:c0:f3:
         95:d5:cc:16:4e:1a:ee:e7:3a:f9:f2:15:0b:3f:1f:25:b4:5b:
         14:e1:7f:1f:e2:b1:99:70:0c:6a:11:4e:e6:a7:db:9b:43:82:
         c8:a6:5c:e2:54:c5:f7:84:a2:9b:ea:29:4c:de:bb:21:9e:2e:
         54:19:9e:43:c3:3e:1d:05:e8:b3:7d:92:fb:80:10:27:d3:59:
         65:3d:d2:3d:ee:a2:ee:d6:d0:09:d4:65:e3:8e:c8:cd:77:91:
         e8:e0:cb:07:ac:45:45:65:fd:67:5e:8e:f9:d4:6a:55:23:8b:
         d7:10:81:c3:a2:f0:e5:42:73:b7:63:b6:f1:63:72:51:3d:de:
         e1:28:11:00:e9:11:24:f5:5c:8c:2d:fa:5d:80:40:d1:f2:2b:
         20:84:c3:00:e1:ae:72:97:d3:2e:c7:21:7b:f1:e3:59:49:17:
         7f:fc:59:d4:68:04:82:78:d3:49:05:9b:c1:df:2f:ed:11:31:
         d2:77:7c:96:1c:4e:d6:8f:48:53:96:fa:3e:65:71:3d:52:54:
         a1:03:02:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 16:50:18 2024 by rpki-client on console-ams.rpki-client.org