Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/E4F5ABCE322711F0A912F846C4F9AE02.roa
File:                     E4F5ABCE322711F0A912F846C4F9AE02.roa (raw, json)
Hash identifier:          Fv1knZ2pI50SGKnkTiNmbhdA3tBWLPwo5jJnSxDtLbk=
Subject key identifier:   78:E9:1D:3E:15:5F:B6:4A:70:19:03:63:5B:FC:3F:24:09:70:6B:AD
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       385A
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/E4F5ABCE322711F0A912F846C4F9AE02.roa
Signing time:             Thu 22 May 2025 09:06:19 +0000
ROA not before:           Thu 22 May 2025 09:06:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     150382
IP address blocks:        111.88.76.0/24 maxlen: 24
                          111.88.77.0/24 maxlen: 24
                          111.88.79.0/24 maxlen: 24
                          111.88.138.0/24 maxlen: 24
                          111.88.139.0/24 maxlen: 24
                          111.88.184.0/24 maxlen: 24
                          111.88.185.0/24 maxlen: 24
                          111.88.186.0/24 maxlen: 24
                          111.88.187.0/24 maxlen: 24
                          111.88.188.0/24 maxlen: 24
                          111.88.189.0/24 maxlen: 24
                          111.88.190.0/24 maxlen: 24
                          111.88.191.0/24 maxlen: 24
                          111.88.232.0/24 maxlen: 24
                          111.88.234.0/24 maxlen: 24
                          111.88.235.0/24 maxlen: 24
                          111.88.236.0/24 maxlen: 24
                          111.88.237.0/24 maxlen: 24
                          115.186.1.0/24 maxlen: 24
                          115.186.10.0/24 maxlen: 24
                          115.186.11.0/24 maxlen: 24
                          115.186.12.0/24 maxlen: 24
                          115.186.13.0/24 maxlen: 24
                          115.186.16.0/24 maxlen: 24
                          115.186.19.0/24 maxlen: 24
                          115.186.22.0/24 maxlen: 24
                          115.186.24.0/24 maxlen: 24
                          115.186.26.0/24 maxlen: 24
                          115.186.27.0/24 maxlen: 24
                          115.186.28.0/24 maxlen: 24
                          115.186.29.0/24 maxlen: 24
                          115.186.41.0/24 maxlen: 24
                          115.186.48.0/24 maxlen: 24
                          115.186.49.0/24 maxlen: 24
                          115.186.50.0/24 maxlen: 24
                          115.186.51.0/24 maxlen: 24
                          115.186.52.0/24 maxlen: 24
                          115.186.53.0/24 maxlen: 24
                          115.186.54.0/24 maxlen: 24
                          115.186.55.0/24 maxlen: 24
                          115.186.64.0/24 maxlen: 24
                          115.186.65.0/24 maxlen: 24
                          115.186.66.0/24 maxlen: 24
                          115.186.67.0/24 maxlen: 24
                          115.186.68.0/24 maxlen: 24
                          115.186.69.0/24 maxlen: 24
                          115.186.70.0/24 maxlen: 24
                          115.186.71.0/24 maxlen: 24
                          115.186.72.0/24 maxlen: 24
                          115.186.73.0/24 maxlen: 24
                          115.186.74.0/24 maxlen: 24
                          115.186.75.0/24 maxlen: 24
                          115.186.88.0/24 maxlen: 24
                          115.186.89.0/24 maxlen: 24
                          115.186.91.0/24 maxlen: 24
                          115.186.92.0/24 maxlen: 24
                          115.186.93.0/24 maxlen: 24
                          115.186.94.0/24 maxlen: 24
                          115.186.95.0/24 maxlen: 24
                          115.186.97.0/24 maxlen: 24
                          115.186.99.0/24 maxlen: 24
                          115.186.100.0/24 maxlen: 24
                          115.186.105.0/24 maxlen: 24
                          115.186.114.0/24 maxlen: 24
                          115.186.116.0/24 maxlen: 24
                          115.186.122.0/24 maxlen: 24
                          115.186.123.0/24 maxlen: 24
                          115.186.124.0/24 maxlen: 24
                          115.186.125.0/24 maxlen: 24
                          115.186.127.0/24 maxlen: 24
                          117.102.10.0/24 maxlen: 24
                          117.102.11.0/24 maxlen: 24
                          117.102.13.0/24 maxlen: 24
                          117.102.14.0/24 maxlen: 24
                          117.102.15.0/24 maxlen: 24
                          117.102.20.0/24 maxlen: 24
                          117.102.21.0/24 maxlen: 24
                          117.102.22.0/24 maxlen: 24
                          117.102.23.0/24 maxlen: 24
                          117.102.27.0/24 maxlen: 24
                          117.102.29.0/24 maxlen: 24
                          117.102.30.0/24 maxlen: 24
                          117.102.31.0/24 maxlen: 24
                          203.81.224.0/24 maxlen: 24
                          203.81.225.0/24 maxlen: 24
                          203.81.226.0/24 maxlen: 24
                          203.81.227.0/24 maxlen: 24
                          203.81.228.0/24 maxlen: 24
                          203.81.229.0/24 maxlen: 24
                          203.81.231.0/24 maxlen: 24
                          203.81.232.0/24 maxlen: 24
                          203.81.233.0/24 maxlen: 24
                          203.81.234.0/24 maxlen: 24
                          203.81.235.0/24 maxlen: 24
                          203.81.236.0/24 maxlen: 24
                          203.81.237.0/24 maxlen: 24
                          203.81.238.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 27 May 2025 11:46:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14426 (0x385a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: May 22 09:06:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=682ee90b-9d8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b6:f7:ed:ee:3d:18:fa:be:8a:44:55:45:90:
                    2d:8b:42:12:4d:1d:7d:f5:06:73:7f:f5:a4:2f:de:
                    84:73:ad:fe:d3:76:74:08:b2:18:08:49:ff:93:c8:
                    5b:4a:82:a2:6d:c5:9e:95:f3:d6:9f:a4:13:7a:9d:
                    4f:2d:77:b3:21:b4:da:8d:20:a6:bd:c2:4e:2b:cf:
                    92:28:2c:36:54:95:f8:74:3c:96:2b:9c:da:1c:af:
                    44:b0:fe:a0:01:b3:00:5c:b4:86:1d:ae:d0:2d:24:
                    c0:0e:02:27:b1:84:f2:1a:81:f6:b1:b5:1a:64:de:
                    9e:82:39:2d:1a:53:a3:58:9b:db:fa:3e:a0:65:b5:
                    b2:82:34:58:ff:a7:65:ce:7a:2a:5a:b4:91:fb:5b:
                    0e:72:98:e8:67:fd:59:a9:8d:ea:a4:02:27:ce:0a:
                    cc:a9:40:b2:2b:3b:5d:22:c6:83:ca:ff:e6:f1:38:
                    b4:04:5c:f1:b2:72:30:17:f0:3f:2a:8f:d0:88:94:
                    20:23:55:ca:8c:26:7b:95:61:b9:f6:fb:31:b3:35:
                    37:a8:41:1d:3d:ee:e2:04:e4:36:9a:db:df:5e:49:
                    8c:7c:2f:cd:f3:d1:b2:b6:a5:33:30:7e:e7:6b:27:
                    b9:19:dc:03:3e:21:a4:6f:6d:f2:a2:ca:c4:c0:64:
                    37:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E9:1D:3E:15:5F:B6:4A:70:19:03:63:5B:FC:3F:24:09:70:6B:AD
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/E4F5ABCE322711F0A912F846C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.88.76.0/23
                  111.88.79.0/24
                  111.88.138.0/23
                  111.88.184.0/21
                  111.88.232.0/24
                  111.88.234.0-111.88.237.255
                  115.186.1.0/24
                  115.186.10.0-115.186.13.255
                  115.186.16.0/24
                  115.186.19.0/24
                  115.186.22.0/24
                  115.186.24.0/24
                  115.186.26.0-115.186.29.255
                  115.186.41.0/24
                  115.186.48.0/21
                  115.186.64.0-115.186.75.255
                  115.186.88.0/23
                  115.186.91.0-115.186.95.255
                  115.186.97.0/24
                  115.186.99.0-115.186.100.255
                  115.186.105.0/24
                  115.186.114.0/24
                  115.186.116.0/24
                  115.186.122.0-115.186.125.255
                  115.186.127.0/24
                  117.102.10.0/23
                  117.102.13.0-117.102.15.255
                  117.102.20.0/22
                  117.102.27.0/24
                  117.102.29.0-117.102.31.255
                  203.81.224.0-203.81.229.255
                  203.81.231.0-203.81.238.255

    Signature Algorithm: sha256WithRSAEncryption
         20:fe:ec:fd:36:04:42:2e:78:fa:57:a4:8f:f7:8e:27:a8:5c:
         5d:53:07:d3:26:4a:8d:dd:95:59:3f:c8:8f:f0:8f:04:8a:16:
         c5:36:92:47:73:56:13:98:58:3b:11:c0:d5:f7:ba:da:38:c0:
         e5:bd:60:40:32:91:e9:e5:b3:7f:c8:4a:86:c9:47:d4:ed:7f:
         5b:aa:47:74:ea:a1:76:29:a4:7f:bd:22:86:d0:23:2a:9d:f7:
         4c:13:d1:37:7e:6e:68:7f:59:9d:9b:59:e9:d4:89:12:23:a1:
         5d:dc:18:7c:17:76:47:06:65:dd:b9:1b:bc:d0:23:3e:10:1e:
         18:a7:74:dd:33:30:3d:23:47:8c:a1:b8:df:09:45:48:5e:6c:
         88:4c:dc:7f:5c:70:ee:e8:65:bc:51:73:4e:99:d8:bb:1d:69:
         9e:11:0f:e1:5b:bc:71:c5:38:a0:2a:a5:81:e8:b2:a3:be:e0:
         86:3a:1c:cc:85:78:b5:10:5a:2e:f9:87:7f:5b:d7:be:24:a2:
         52:e4:8a:ae:84:b4:d1:1c:e4:2f:28:13:ef:3c:cd:0c:44:97:
         a5:d5:ef:28:92:1e:97:af:35:dc:5b:58:50:4a:79:54:5c:d8:
         1a:67:3c:cf:5a:a2:99:61:bc:29:aa:f3:9b:a1:b8:fe:64:43:
         ef:ba:d6:a2
-----BEGIN CERTIFICATE-----
MIIGjTCCBXWgAwIBAgICOFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE
RDIxRkUyMDYwHhcNMjUwNTIyMDkwNjE5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODJlZTkwYi05ZDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAubb37e49GPq+ikRVRZAti0ISTR199QZzf/WkL96Ec63+03Z0CLIYCEn/k8hb
SoKibcWelfPWn6QTep1PLXezIbTajSCmvcJOK8+SKCw2VJX4dDyWK5zaHK9EsP6g
AbMAXLSGHa7QLSTADgInsYTyGoH2sbUaZN6egjktGlOjWJvb+j6gZbWygjRY/6dl
znoqWrSR+1sOcpjoZ/1ZqY3qpAInzgrMqUCyKztdIsaDyv/m8Ti0BFzxsnIwF/A/
Ko/QiJQgI1XKjCZ7lWG59vsxszU3qEEdPe7iBOQ2mtvfXkmMfC/N89GytqUzMH7n
aye5GdwDPiGkb23yosrEwGQ3IwIDAQABo4IDsTCCA60wHQYDVR0OBBYEFHjpHT4V
X7ZKcBkDY1v8PyQJcGutMB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE
ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvRTRGNUFCQ0Uz
MjI3MTFGMEE5MTJGODQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggE5BggrBgEFBQcBBwEB
/wSCASgwggEkMIIBIAQCAAEwggEYAwQBb1hMAwQAb1hPAwQBb1iKAwQDb1i4AwQA
b1joMAwDBAFvWOoDBAFvWOwDBABzugEwDAMEAXO6CgMEAXO6DAMEAHO6EAMEAHO6
EwMEAHO6FgMEAHO6GDAMAwQBc7oaAwQBc7ocAwQAc7opAwQDc7owMAwDBAZzukAD
BAJzukgDBAFzulgwDAMEAHO6WwMEBXO6QAMEAHO6YTAMAwQAc7pjAwQAc7pkAwQA
c7ppAwQAc7pyAwQAc7p0MAwDBAFzunoDBAFzunwDBABzun8DBAF1ZgowDAMEAHVm
DQMEBHVmAAMEAnVmFAMEAHVmGzAMAwQAdWYdAwQFdWYAMAwDBAXLUeADBAHLUeQw
DAMEAMtR5wMEAMtR7jANBgkqhkiG9w0BAQsFAAOCAQEAIP7s/TYEQi54+lekj/eO
J6hcXVMH0yZKjd2VWT/Ij/CPBIoWxTaSR3NWE5hYOxHA1fe62jjA5b1gQDKR6eWz
f8hKhslH1O1/W6pHdOqhdimkf70ihtAjKp33TBPRN35uaH9ZnZtZ6dSJEiOhXdwY
fBd2RwZl3bkbvNAjPhAeGKd03TMwPSNHjKG43wlFSF5siEzcf1xw7uhlvFFzTpnY
ux1pnhEP4Vu8ccU4oCqlgeiyo77ghjoczIV4tRBaLvmHf1vXviSiUuSKroS00Rzk
LygT7zzNDESXpdXvKJIel6813FtYUEp5VFzYGmc8z1qimWG8Karzm6G4/mRD77rW
og==
-----END CERTIFICATE-----
Generated at Mon Jul 21 07:05:33 2025 by rpki-client