Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/FD5E17FC35FE11F08F4D2843C4F9AE02.roa
File:                     FD5E17FC35FE11F08F4D2843C4F9AE02.roa (raw, json)
Hash identifier:          ZGf7YEeuHbGmmbYlBxB1BQdlyPBdg0MefBgTKGtEOpo=
Subject key identifier:   F9:D3:8E:44:FA:C1:47:22:66:89:B5:31:15:3A:08:62:C7:40:1F:01
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       385F
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/FD5E17FC35FE11F08F4D2843C4F9AE02.roa
Signing time:             Fri 23 May 2025 17:06:01 +0000
ROA not before:           Fri 23 May 2025 17:06:01 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     38710
IP address blocks:        111.88.112.0/20 maxlen: 20
                          111.88.184.0/22 maxlen: 23
                          111.88.188.0/22 maxlen: 23
                          111.88.233.0/24 maxlen: 24
                          111.88.238.0/24 maxlen: 24
                          111.88.239.0/24 maxlen: 24
                          115.186.10.0/23 maxlen: 23
                          115.186.12.0/23 maxlen: 23
                          115.186.14.0/24 maxlen: 24
                          115.186.16.0/24 maxlen: 24
                          115.186.17.0/24 maxlen: 24
                          115.186.18.0/24 maxlen: 24
                          115.186.21.0/24 maxlen: 24
                          115.186.23.0/24 maxlen: 24
                          115.186.24.0/23 maxlen: 23
                          115.186.25.0/24 maxlen: 24
                          115.186.30.0/23 maxlen: 24
                          115.186.32.0/19 maxlen: 19
                          115.186.32.0/21 maxlen: 21
                          115.186.32.0/22 maxlen: 22
                          115.186.32.0/24 maxlen: 24
                          115.186.33.0/24 maxlen: 24
                          115.186.34.0/24 maxlen: 24
                          115.186.35.0/24 maxlen: 24
                          115.186.36.0/23 maxlen: 24
                          115.186.38.0/24 maxlen: 24
                          115.186.39.0/24 maxlen: 24
                          115.186.40.0/21 maxlen: 22
                          115.186.40.0/24 maxlen: 24
                          115.186.42.0/24 maxlen: 24
                          115.186.43.0/24 maxlen: 24
                          115.186.44.0/24 maxlen: 24
                          115.186.45.0/24 maxlen: 24
                          115.186.46.0/24 maxlen: 24
                          115.186.47.0/24 maxlen: 24
                          115.186.56.0/21 maxlen: 23
                          115.186.56.0/22 maxlen: 24
                          115.186.60.0/23 maxlen: 24
                          115.186.63.0/24 maxlen: 24
                          115.186.64.0/19 maxlen: 23
                          115.186.76.0/22 maxlen: 24
                          115.186.80.0/21 maxlen: 24
                          115.186.90.0/24 maxlen: 24
                          115.186.96.0/20 maxlen: 23
                          115.186.96.0/22 maxlen: 24
                          115.186.101.0/24 maxlen: 24
                          115.186.102.0/23 maxlen: 24
                          115.186.104.0/24 maxlen: 24
                          115.186.106.0/23 maxlen: 24
                          115.186.108.0/22 maxlen: 24
                          115.186.112.0/20 maxlen: 23
                          115.186.112.0/23 maxlen: 24
                          115.186.115.0/24 maxlen: 24
                          115.186.117.0/24 maxlen: 24
                          115.186.118.0/23 maxlen: 24
                          115.186.120.0/23 maxlen: 24
                          115.186.125.0/24 maxlen: 24
                          115.186.126.0/24 maxlen: 24
                          117.102.0.0/21 maxlen: 21
                          117.102.0.0/22 maxlen: 22
                          117.102.0.0/23 maxlen: 24
                          117.102.2.0/24 maxlen: 24
                          117.102.3.0/24 maxlen: 24
                          117.102.4.0/24 maxlen: 24
                          117.102.5.0/24 maxlen: 24
                          117.102.6.0/24 maxlen: 24
                          117.102.7.0/24 maxlen: 24
                          117.102.8.0/24 maxlen: 24
                          117.102.9.0/24 maxlen: 24
                          117.102.12.0/23 maxlen: 23
                          117.102.12.0/24 maxlen: 24
                          117.102.14.0/23 maxlen: 23
                          117.102.16.0/24 maxlen: 24
                          117.102.17.0/24 maxlen: 24
                          117.102.18.0/23 maxlen: 24
                          117.102.20.0/22 maxlen: 23
                          117.102.24.0/22 maxlen: 22
                          117.102.24.0/23 maxlen: 24
                          117.102.26.0/24 maxlen: 24
                          117.102.28.0/24 maxlen: 24
                          117.102.32.0/24 maxlen: 24
                          117.102.33.0/24 maxlen: 24
                          117.102.34.0/24 maxlen: 24
                          117.102.35.0/24 maxlen: 24
                          117.102.36.0/24 maxlen: 24
                          117.102.37.0/24 maxlen: 24
                          117.102.38.0/24 maxlen: 24
                          117.102.39.0/24 maxlen: 24
                          117.102.40.0/24 maxlen: 24
                          117.102.41.0/24 maxlen: 24
                          117.102.42.0/24 maxlen: 24
                          117.102.43.0/24 maxlen: 24
                          117.102.44.0/24 maxlen: 24
                          117.102.45.0/24 maxlen: 24
                          117.102.46.0/24 maxlen: 24
                          117.102.47.0/24 maxlen: 24
                          203.81.230.0/24 maxlen: 24
                          203.81.239.0/24 maxlen: 24
                          2406:7000::/32 maxlen: 32
                          2406:7000::/48 maxlen: 48
                          2406:7000:1::/48 maxlen: 48
                          2406:7000:2::/48 maxlen: 48
                          2406:7000:3::/48 maxlen: 48
                          2406:7000:4::/48 maxlen: 48
                          2406:7000:5::/48 maxlen: 48
                          2406:7000:6::/48 maxlen: 48
                          2406:7000:7::/48 maxlen: 48
                          2406:7000:8::/48 maxlen: 48
                          2406:7000:9::/48 maxlen: 48
                          2406:7000:a::/48 maxlen: 48
                          2406:7000:b::/48 maxlen: 48
                          2406:7000:c::/48 maxlen: 48
                          2406:7000:d::/48 maxlen: 48
                          2406:7000:e::/48 maxlen: 48
                          2406:7000:f::/48 maxlen: 48
                          2406:7000:10::/48 maxlen: 48
                          2406:7000:11::/48 maxlen: 48
                          2406:7000:12::/48 maxlen: 48
                          2406:7000:13::/48 maxlen: 48
                          2406:7000:14::/48 maxlen: 48
                          2406:7000:15::/48 maxlen: 48
                          2406:7000:16::/48 maxlen: 48
                          2406:7000:17::/48 maxlen: 48
                          2406:7000:18::/48 maxlen: 48
                          2406:7000:19::/48 maxlen: 48
                          2406:7000:1a::/48 maxlen: 48
                          2406:7000:1b::/48 maxlen: 48
                          2406:7000:1c::/48 maxlen: 48
                          2406:7000:1d::/48 maxlen: 48
                          2406:7000:1e::/48 maxlen: 48
                          2406:7000:1f::/48 maxlen: 48
                          2406:7000:20::/48 maxlen: 48
                          2406:7000:21::/48 maxlen: 48
                          2406:7000:22::/48 maxlen: 48
                          2406:7000:23::/48 maxlen: 48
                          2406:7000:24::/48 maxlen: 48
                          2406:7000:25::/48 maxlen: 48
Validation:               Failed, certificate revoked on Tue 27 May 2025 11:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14431 (0x385f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: May 23 17:06:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6830aaf9-6f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:47:da:a9:f8:ac:21:f6:10:07:5d:9b:36:2d:
                    e9:8c:bc:3c:e6:e9:c1:12:e5:6a:92:86:04:91:ac:
                    7a:9b:7b:fe:74:b9:d2:5b:99:67:c6:67:c3:5b:c4:
                    b5:b3:85:3b:3d:54:b1:a7:eb:a7:07:c5:0b:e6:87:
                    9c:e9:b5:e9:ff:cb:05:50:71:4e:48:9b:a6:b7:f5:
                    61:72:a4:b0:af:21:fc:e8:49:16:e4:c8:4b:fd:1d:
                    ae:0e:cf:75:c0:c1:c0:7d:fb:f9:cf:68:0b:60:27:
                    b5:aa:e2:90:ca:e4:8f:ba:43:2b:86:9f:16:c8:fe:
                    b2:e2:ae:68:21:cd:ff:e9:84:09:ca:e6:8b:dd:7d:
                    00:dc:2f:b4:54:56:4e:a1:eb:73:16:7d:a5:94:96:
                    69:f7:ab:a5:5d:cf:ba:c6:d8:d3:ed:40:02:f2:71:
                    ce:c2:ca:64:06:26:36:4d:d0:82:81:73:89:b8:a6:
                    8f:38:a3:65:43:f7:05:f6:d7:8f:05:b6:5b:ea:fd:
                    51:69:b1:db:86:c1:ba:5b:1b:66:ef:06:cd:2b:32:
                    cb:11:ee:81:11:f9:18:61:ff:e4:82:42:14:e1:2b:
                    61:d2:59:c1:3c:73:14:ab:ad:9d:d4:07:71:02:26:
                    64:1d:ef:0c:1d:aa:95:40:49:93:5c:7e:7c:35:f0:
                    91:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D3:8E:44:FA:C1:47:22:66:89:B5:31:15:3A:08:62:C7:40:1F:01
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/FD5E17FC35FE11F08F4D2843C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.88.112.0/20
                  111.88.184.0/21
                  111.88.233.0/24
                  111.88.238.0/23
                  115.186.10.0-115.186.14.255
                  115.186.16.0-115.186.18.255
                  115.186.21.0/24
                  115.186.23.0-115.186.25.255
                  115.186.30.0-115.186.127.255
                  117.102.0.0-117.102.9.255
                  117.102.12.0-117.102.28.255
                  117.102.32.0/20
                  203.81.230.0/24
                  203.81.239.0/24
                IPv6:
                  2406:7000::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:b5:8b:20:ff:89:46:80:08:58:2a:fd:9b:4c:1a:1c:fd:78:
         d0:31:82:21:9d:5d:b5:d3:73:c0:0b:2b:78:15:f8:1f:5a:d3:
         3f:0e:4f:3d:92:76:ca:76:3d:ec:be:e1:81:79:ec:6a:9d:42:
         c6:27:20:04:ce:48:9d:a1:51:00:8f:6e:56:98:2b:02:58:d2:
         89:55:9f:c5:c1:63:16:83:4f:e7:50:57:8c:44:8f:a9:e7:55:
         0e:02:a1:f6:22:e5:82:2d:fb:1b:1c:27:02:d3:29:35:cf:f5:
         54:c4:6f:b7:9d:49:c8:42:de:53:30:66:46:70:28:28:c6:0e:
         cd:78:bf:05:dc:45:dd:72:cc:89:a7:53:0f:82:9c:e6:88:74:
         ce:aa:18:73:aa:4a:57:c3:b1:24:0d:d9:05:89:b6:d6:cb:1e:
         ee:2b:6f:94:99:87:a1:f0:b6:fd:51:5f:cc:59:97:3c:c1:c5:
         09:64:2a:33:28:cb:cf:44:ca:a8:04:84:d4:d1:29:ae:b1:ff:
         47:27:d8:71:7c:6e:d3:01:11:e4:b8:5c:ce:a2:3a:64:e6:b2:
         cd:f7:01:78:12:6f:d2:82:ab:27:75:d8:68:89:3a:fb:e5:ff:
         8d:28:4c:5a:7a:6a:41:ae:f3:90:b4:27:e8:e6:6a:b7:fc:48:
         89:53:52:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 07:09:57 2025 by rpki-client