Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/CD495B3608F511EE8E3D9231C4F9AE02.roa
File:                     CD495B3608F511EE8E3D9231C4F9AE02.roa (raw, json)
Hash identifier:          Z3pxItAVOrRokKi/boCEw2PFDYNf5fGyuwhinFMzE3s=
Subject key identifier:   5A:B9:C6:45:F2:70:B2:86:1E:81:EC:38:0F:07:F3:67:2D:2A:56:D4
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       344B
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/CD495B3608F511EE8E3D9231C4F9AE02.roa
Signing time:             Mon 12 Jun 2023 07:50:30 +0000
ROA not before:           Mon 12 Jun 2023 07:50:30 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     132165
IP address blocks:        103.246.108.0/22 maxlen: 22
                          103.246.108.0/24 maxlen: 24
                          103.246.109.0/24 maxlen: 24
                          103.246.110.0/24 maxlen: 24
                          103.246.111.0/24 maxlen: 24
                          111.88.0.0/20 maxlen: 24
                          111.88.16.0/20 maxlen: 24
                          111.88.32.0/20 maxlen: 24
                          111.88.48.0/20 maxlen: 24
                          111.88.64.0/21 maxlen: 21
                          111.88.64.0/24 maxlen: 24
                          111.88.65.0/24 maxlen: 24
                          111.88.66.0/24 maxlen: 24
                          111.88.67.0/24 maxlen: 24
                          111.88.68.0/24 maxlen: 24
                          111.88.69.0/24 maxlen: 24
                          111.88.70.0/23 maxlen: 24
                          111.88.70.0/24 maxlen: 24
                          111.88.71.0/24 maxlen: 24
                          111.88.72.0/22 maxlen: 22
                          111.88.72.0/24 maxlen: 24
                          111.88.73.0/24 maxlen: 24
                          111.88.74.0/24 maxlen: 24
                          111.88.75.0/24 maxlen: 24
                          111.88.78.0/24 maxlen: 24
                          111.88.80.0/20 maxlen: 20
                          111.88.80.0/22 maxlen: 22
                          111.88.80.0/24 maxlen: 24
                          111.88.81.0/24 maxlen: 24
                          111.88.82.0/24 maxlen: 24
                          111.88.83.0/24 maxlen: 24
                          111.88.84.0/22 maxlen: 22
                          111.88.84.0/24 maxlen: 24
                          111.88.85.0/24 maxlen: 24
                          111.88.86.0/24 maxlen: 24
                          111.88.87.0/24 maxlen: 24
                          111.88.88.0/21 maxlen: 21
                          111.88.88.0/24 maxlen: 24
                          111.88.89.0/24 maxlen: 24
                          111.88.90.0/24 maxlen: 24
                          111.88.91.0/24 maxlen: 24
                          111.88.92.0/24 maxlen: 24
                          111.88.93.0/24 maxlen: 24
                          111.88.94.0/24 maxlen: 24
                          111.88.95.0/24 maxlen: 24
                          111.88.96.0/19 maxlen: 19
                          111.88.96.0/20 maxlen: 20
                          111.88.96.0/24 maxlen: 24
                          111.88.97.0/24 maxlen: 24
                          111.88.98.0/24 maxlen: 24
                          111.88.99.0/24 maxlen: 24
                          111.88.100.0/24 maxlen: 24
                          111.88.101.0/24 maxlen: 24
                          111.88.102.0/24 maxlen: 24
                          111.88.103.0/24 maxlen: 24
                          111.88.104.0/24 maxlen: 24
                          111.88.105.0/24 maxlen: 24
                          111.88.106.0/24 maxlen: 24
                          111.88.107.0/24 maxlen: 24
                          111.88.108.0/24 maxlen: 24
                          111.88.109.0/24 maxlen: 24
                          111.88.110.0/24 maxlen: 24
                          111.88.111.0/24 maxlen: 24
                          111.88.112.0/20 maxlen: 20
                          111.88.112.0/24 maxlen: 24
                          111.88.113.0/24 maxlen: 24
                          111.88.114.0/24 maxlen: 24
                          111.88.115.0/24 maxlen: 24
                          111.88.116.0/24 maxlen: 24
                          111.88.117.0/24 maxlen: 24
                          111.88.118.0/24 maxlen: 24
                          111.88.119.0/24 maxlen: 24
                          111.88.120.0/24 maxlen: 24
                          111.88.121.0/24 maxlen: 24
                          111.88.122.0/24 maxlen: 24
                          111.88.123.0/24 maxlen: 24
                          111.88.124.0/24 maxlen: 24
                          111.88.125.0/24 maxlen: 24
                          111.88.126.0/24 maxlen: 24
                          111.88.127.0/24 maxlen: 24
                          111.88.128.0/21 maxlen: 21
                          111.88.128.0/24 maxlen: 24
                          111.88.129.0/24 maxlen: 24
                          111.88.130.0/24 maxlen: 24
                          111.88.131.0/24 maxlen: 24
                          111.88.132.0/24 maxlen: 24
                          111.88.133.0/24 maxlen: 24
                          111.88.134.0/24 maxlen: 24
                          111.88.135.0/24 maxlen: 24
                          111.88.136.0/23 maxlen: 24
                          111.88.140.0/22 maxlen: 22
                          111.88.140.0/24 maxlen: 24
                          111.88.141.0/24 maxlen: 24
                          111.88.142.0/24 maxlen: 24
                          111.88.143.0/24 maxlen: 24
                          111.88.160.0/22 maxlen: 22
                          111.88.160.0/24 maxlen: 24
                          111.88.161.0/24 maxlen: 24
                          111.88.162.0/24 maxlen: 24
                          111.88.163.0/24 maxlen: 24
                          111.88.172.0/22 maxlen: 22
                          111.88.172.0/24 maxlen: 24
                          111.88.173.0/24 maxlen: 24
                          111.88.174.0/24 maxlen: 24
                          111.88.175.0/24 maxlen: 24
                          111.88.176.0/21 maxlen: 21
                          111.88.176.0/24 maxlen: 24
                          111.88.177.0/24 maxlen: 24
                          111.88.178.0/24 maxlen: 24
                          111.88.179.0/24 maxlen: 24
                          111.88.180.0/24 maxlen: 24
                          111.88.181.0/24 maxlen: 24
                          111.88.182.0/24 maxlen: 24
                          111.88.183.0/24 maxlen: 24
                          111.88.192.0/19 maxlen: 19
                          111.88.192.0/24 maxlen: 24
                          111.88.193.0/24 maxlen: 24
                          111.88.194.0/24 maxlen: 24
                          111.88.195.0/24 maxlen: 24
                          111.88.196.0/24 maxlen: 24
                          111.88.197.0/24 maxlen: 24
                          111.88.198.0/24 maxlen: 24
                          111.88.199.0/24 maxlen: 24
                          111.88.200.0/24 maxlen: 24
                          111.88.201.0/24 maxlen: 24
                          111.88.202.0/24 maxlen: 24
                          111.88.203.0/24 maxlen: 24
                          111.88.204.0/24 maxlen: 24
                          111.88.205.0/24 maxlen: 24
                          111.88.206.0/24 maxlen: 24
                          111.88.207.0/24 maxlen: 24
                          111.88.208.0/24 maxlen: 24
                          111.88.209.0/24 maxlen: 24
                          111.88.210.0/24 maxlen: 24
                          111.88.211.0/24 maxlen: 24
                          111.88.212.0/24 maxlen: 24
                          111.88.213.0/24 maxlen: 24
                          111.88.214.0/24 maxlen: 24
                          111.88.215.0/24 maxlen: 24
                          111.88.216.0/24 maxlen: 24
                          111.88.217.0/24 maxlen: 24
                          111.88.218.0/24 maxlen: 24
                          111.88.219.0/24 maxlen: 24
                          111.88.220.0/24 maxlen: 24
                          111.88.221.0/24 maxlen: 24
                          111.88.222.0/24 maxlen: 24
                          111.88.223.0/24 maxlen: 24
                          111.88.224.0/21 maxlen: 21
                          111.88.224.0/24 maxlen: 24
                          111.88.225.0/24 maxlen: 24
                          111.88.226.0/24 maxlen: 24
                          111.88.227.0/24 maxlen: 24
                          111.88.228.0/24 maxlen: 24
                          111.88.229.0/24 maxlen: 24
                          111.88.230.0/24 maxlen: 24
                          111.88.231.0/24 maxlen: 24
                          115.186.2.0/23 maxlen: 24
                          115.186.4.0/22 maxlen: 22
                          115.186.4.0/24 maxlen: 24
                          115.186.5.0/24 maxlen: 24
                          115.186.6.0/24 maxlen: 24
                          115.186.7.0/24 maxlen: 24
                          115.186.8.0/23 maxlen: 24
                          115.186.76.0/22 maxlen: 22
                          115.186.76.0/24 maxlen: 24
                          115.186.77.0/24 maxlen: 24
                          115.186.78.0/24 maxlen: 24
                          115.186.79.0/24 maxlen: 24
                          115.186.80.0/22 maxlen: 22
                          115.186.80.0/24 maxlen: 24
                          115.186.81.0/24 maxlen: 24
                          115.186.82.0/24 maxlen: 24
                          115.186.83.0/24 maxlen: 24
                          115.186.84.0/22 maxlen: 22
                          115.186.84.0/24 maxlen: 24
                          115.186.85.0/24 maxlen: 24
                          115.186.86.0/24 maxlen: 24
                          115.186.87.0/24 maxlen: 24
                          117.102.48.0/20 maxlen: 20
                          117.102.48.0/24 maxlen: 24
                          117.102.49.0/24 maxlen: 24
                          117.102.50.0/24 maxlen: 24
                          117.102.51.0/24 maxlen: 24
                          117.102.52.0/24 maxlen: 24
                          117.102.53.0/24 maxlen: 24
                          117.102.54.0/24 maxlen: 24
                          117.102.55.0/24 maxlen: 24
                          117.102.56.0/24 maxlen: 24
                          117.102.57.0/24 maxlen: 24
                          117.102.58.0/24 maxlen: 24
                          117.102.59.0/24 maxlen: 24
                          117.102.60.0/24 maxlen: 24
                          117.102.61.0/24 maxlen: 24
                          117.102.62.0/24 maxlen: 24
                          117.102.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 16 Apr 2024 13:44:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13387 (0x344b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Jun 12 07:50:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6486ce46-8bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:22:7a:80:c4:a6:14:e8:9f:3c:ad:20:94:dc:
                    24:c9:f8:b0:23:2e:57:94:64:94:8a:9f:4a:6e:a3:
                    69:54:a8:2c:30:46:6f:4d:51:cf:50:97:b5:b6:7d:
                    12:64:92:7e:27:c4:c5:f4:19:8a:cd:de:08:32:fd:
                    00:34:4d:de:72:87:11:73:86:d1:c6:58:9c:ab:3c:
                    db:fd:7e:7b:eb:61:c8:da:34:6a:c4:c8:69:4f:59:
                    30:81:72:b9:57:a9:cb:d4:87:14:00:51:ce:ea:8a:
                    a2:da:f2:8c:ab:bd:ea:aa:7e:f4:af:8d:2f:a5:cf:
                    b9:d2:48:9b:d8:ba:10:c9:7c:12:97:14:ec:62:5f:
                    dd:a3:65:22:ca:19:8e:24:01:a4:fb:4a:a6:62:ce:
                    60:69:74:eb:69:3a:1e:b4:b5:32:1d:40:e5:f9:7f:
                    07:6c:eb:0c:89:64:8b:d7:89:05:e6:64:97:89:11:
                    57:14:61:b2:6b:b2:d3:83:43:b6:5a:47:f6:97:d3:
                    7a:d2:ff:8f:2c:15:ab:a8:2e:f5:0a:04:cc:ee:21:
                    16:0a:18:9d:1b:f8:2f:26:63:24:57:13:d8:ad:3f:
                    f2:ad:c0:da:85:72:25:0c:5c:d5:76:d3:95:4f:1e:
                    30:52:78:0a:88:41:cc:85:e1:7a:f5:a8:20:13:e4:
                    2a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B9:C6:45:F2:70:B2:86:1E:81:EC:38:0F:07:F3:67:2D:2A:56:D4
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/CD495B3608F511EE8E3D9231C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.108.0/22
                  111.88.0.0-111.88.75.255
                  111.88.78.0/24
                  111.88.80.0-111.88.137.255
                  111.88.140.0/22
                  111.88.160.0/22
                  111.88.172.0-111.88.183.255
                  111.88.192.0-111.88.231.255
                  115.186.2.0-115.186.9.255
                  115.186.76.0-115.186.87.255
                  117.102.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         73:5c:35:a9:93:d0:04:d0:85:a2:7a:a8:19:c1:13:01:ed:f8:
         de:ef:9b:e1:c6:ea:4a:ea:7d:dc:51:28:6e:c7:e8:f1:32:15:
         dd:49:ac:e7:8c:4f:ac:34:05:c7:6e:23:c1:5e:cd:42:07:e1:
         f2:bf:a0:ca:f3:87:ed:9c:1e:c3:f5:d8:6e:68:ee:eb:45:7d:
         59:45:6c:74:91:e1:29:47:62:21:18:83:1d:65:73:0f:88:5f:
         b6:98:d8:95:de:aa:54:2b:8e:be:48:d2:53:3d:e2:1b:5e:7f:
         f9:b1:00:41:0f:cf:69:2f:e7:32:e5:93:62:79:fc:d3:5c:82:
         51:e1:c1:3c:2a:51:4a:8a:1f:6a:c7:eb:48:60:3f:5b:15:51:
         99:1d:ad:8a:da:8d:f0:3d:a8:56:8f:cd:12:76:3f:d8:9c:b8:
         fb:ce:45:57:9f:16:79:9f:3f:e7:b8:d6:c4:94:90:58:78:66:
         12:c9:4f:bc:13:f2:3e:93:83:e8:a6:00:0f:c6:5f:c1:c5:e3:
         f4:93:2a:a7:70:ec:e0:33:24:83:37:fa:f3:be:f3:27:6c:06:
         35:35:60:8f:dd:bc:f6:76:f9:b5:49:4e:a7:7b:fb:2d:5a:d5:
         49:e0:4e:b3:b6:6d:14:1d:9c:84:5d:83:e8:20:28:c0:d0:8f:
         dc:30:ff:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:11 2024 by rpki-client on console-fra.rpki-client.org