Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/C43CDF6C7A0C11EE9317F083C4F9AE02.roa
File:                     C43CDF6C7A0C11EE9317F083C4F9AE02.roa (raw, json)
Hash identifier:          kEXapiBl0eQo11PEhn7wjrX2iX9fc+f3vHEfKaKEGcs=
Subject key identifier:   95:30:63:FC:A0:E9:1D:34:78:1F:44:9B:E2:97:D7:5A:BC:BC:3D:09
Certificate issuer:       /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
Certificate serial:       06D2
Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/C43CDF6C7A0C11EE9317F083C4F9AE02.roa
Signing time:             Fri 03 Nov 2023 05:50:40 +0000
ROA not before:           Fri 03 Nov 2023 05:50:40 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     17747
IP address blocks:        45.117.200.0/24 maxlen: 24
                          45.117.201.0/24 maxlen: 24
                          45.117.202.0/24 maxlen: 24
                          45.117.203.0/24 maxlen: 24
                          45.117.204.0/24 maxlen: 24
                          45.117.205.0/24 maxlen: 24
                          45.117.206.0/24 maxlen: 24
                          45.117.207.0/24 maxlen: 24
                          45.126.160.0/24 maxlen: 24
                          45.126.161.0/24 maxlen: 24
                          45.126.162.0/24 maxlen: 24
                          45.126.163.0/24 maxlen: 24
                          103.24.188.0/24 maxlen: 24
                          103.24.189.0/24 maxlen: 24
                          103.24.190.0/24 maxlen: 24
                          103.24.191.0/24 maxlen: 24
                          103.57.236.0/24 maxlen: 24
                          103.57.237.0/24 maxlen: 24
                          103.57.238.0/24 maxlen: 24
                          103.57.239.0/24 maxlen: 24
                          103.57.240.0/24 maxlen: 24
                          103.57.241.0/24 maxlen: 24
                          103.57.242.0/24 maxlen: 24
                          103.57.243.0/24 maxlen: 24
                          103.57.244.0/24 maxlen: 24
                          103.57.245.0/24 maxlen: 24
                          103.57.246.0/24 maxlen: 24
                          103.57.247.0/24 maxlen: 24
                          103.70.208.0/24 maxlen: 24
                          103.70.209.0/24 maxlen: 24
                          103.70.210.0/24 maxlen: 24
                          103.70.211.0/24 maxlen: 24
                          103.225.176.0/24 maxlen: 24
                          103.225.177.0/24 maxlen: 24
                          103.225.178.0/24 maxlen: 24
                          103.225.179.0/24 maxlen: 24
                          103.244.4.0/24 maxlen: 24
                          103.244.5.0/24 maxlen: 24
                          103.244.6.0/24 maxlen: 24
                          103.244.7.0/24 maxlen: 24
                          150.107.10.0/24 maxlen: 24
                          150.107.11.0/24 maxlen: 24
                          150.129.124.0/24 maxlen: 24
                          150.129.125.0/24 maxlen: 24
                          150.129.126.0/24 maxlen: 24
                          150.129.127.0/24 maxlen: 24
                          202.142.64.0/24 maxlen: 24
                          202.142.65.0/24 maxlen: 24
                          202.142.66.0/24 maxlen: 24
                          202.142.67.0/24 maxlen: 24
                          202.142.68.0/24 maxlen: 24
                          202.142.69.0/24 maxlen: 24
                          202.142.70.0/24 maxlen: 24
                          202.142.71.0/24 maxlen: 24
                          202.142.72.0/24 maxlen: 24
                          202.142.73.0/24 maxlen: 24
                          202.142.74.0/24 maxlen: 24
                          202.142.75.0/24 maxlen: 24
                          202.142.76.0/24 maxlen: 24
                          202.142.77.0/24 maxlen: 24
                          202.142.78.0/24 maxlen: 24
                          202.142.79.0/24 maxlen: 24
                          202.142.81.0/24 maxlen: 24
                          202.142.83.0/24 maxlen: 24
                          202.142.85.0/24 maxlen: 24
                          202.142.86.0/24 maxlen: 24
                          202.142.87.0/24 maxlen: 24
                          202.142.89.0/24 maxlen: 24
                          202.142.90.0/24 maxlen: 24
                          202.142.91.0/24 maxlen: 24
                          202.142.92.0/24 maxlen: 24
                          202.142.93.0/24 maxlen: 24
                          202.142.95.0/24 maxlen: 24
                          202.142.96.0/24 maxlen: 24
                          202.142.97.0/24 maxlen: 24
                          202.142.98.0/24 maxlen: 24
                          202.142.99.0/24 maxlen: 24
                          202.142.100.0/24 maxlen: 24
                          202.142.101.0/24 maxlen: 24
                          202.142.102.0/24 maxlen: 24
                          202.142.103.0/24 maxlen: 24
                          202.142.104.0/24 maxlen: 24
                          202.142.105.0/24 maxlen: 24
                          202.142.106.0/24 maxlen: 24
                          202.142.107.0/24 maxlen: 24
                          202.142.110.0/24 maxlen: 24
                          202.142.112.0/24 maxlen: 24
                          202.142.113.0/24 maxlen: 24
                          202.142.114.0/24 maxlen: 24
                          202.142.115.0/24 maxlen: 24
                          202.142.118.0/24 maxlen: 24
                          202.142.119.0/24 maxlen: 24
                          202.142.120.0/24 maxlen: 24
                          202.142.123.0/24 maxlen: 24
                          202.142.124.0/24 maxlen: 24
                          202.142.125.0/24 maxlen: 24
                          202.142.126.0/24 maxlen: 24
                          202.142.127.0/24 maxlen: 24
                          2406:3c80::/48 maxlen: 48
                          2406:3c80:1::/48 maxlen: 48
                          2406:3c80:2::/48 maxlen: 48
                          2406:3c80:3::/48 maxlen: 48
                          2406:3c80:4::/48 maxlen: 48
                          2406:3c80:5::/48 maxlen: 48
                          2406:3c80:6::/48 maxlen: 48
                          2406:3c80:7::/48 maxlen: 48
                          2406:3c80:8::/48 maxlen: 48
                          2406:3c80:400::/48 maxlen: 48
                          2406:3c80:401::/48 maxlen: 48
                          2406:3c80:402::/48 maxlen: 48
                          2406:3c80:403::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 22 Nov 2023 17:27:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1746 (0x6d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
        Validity
            Not Before: Nov  3 05:50:40 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=65448a30-5553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a8:16:fc:e7:b3:6c:99:8d:e7:ae:be:5b:fd:
                    95:0e:bf:15:f7:ca:09:aa:79:01:a2:df:17:29:38:
                    ea:29:63:06:24:d5:c2:d0:90:1d:b5:cb:21:0e:b5:
                    f4:b3:d0:4a:6e:42:9c:5d:c3:95:94:57:61:3a:06:
                    36:00:22:f2:ea:dc:45:6b:9b:67:de:b4:76:d6:e5:
                    66:e9:17:16:b4:8b:5d:8b:67:9b:25:72:91:2b:a7:
                    7e:b4:19:65:23:30:d0:84:ef:0d:88:09:fe:07:95:
                    40:17:41:9a:29:a0:11:2d:ac:ab:0c:97:a2:bb:5f:
                    eb:44:ff:af:6a:1d:83:00:4d:af:92:79:1d:92:e9:
                    c1:77:a0:e9:0c:70:b3:54:33:2a:5f:e5:3a:95:2c:
                    c3:05:22:7e:cd:f9:51:4f:f1:87:51:98:c3:b2:68:
                    bf:74:55:75:48:b3:d2:06:ad:cc:e4:90:cf:0e:46:
                    53:51:fc:5c:73:26:7d:24:29:38:87:96:01:d0:18:
                    20:15:f1:ec:0d:0d:45:7e:ca:8c:d1:fd:79:3c:a2:
                    fb:d0:c5:d0:31:8a:35:59:08:3b:eb:ce:4a:61:bf:
                    58:03:50:b1:94:41:d1:3b:19:71:13:b9:5c:61:c9:
                    8b:5d:50:fb:b3:df:ae:34:7f:c4:02:47:c2:a9:40:
                    05:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:30:63:FC:A0:E9:1D:34:78:1F:44:9B:E2:97:D7:5A:BC:BC:3D:09
            X509v3 Authority Key Identifier:
                keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/C43CDF6C7A0C11EE9317F083C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.117.200.0/21
                  45.126.160.0/22
                  103.24.188.0/22
                  103.57.236.0-103.57.247.255
                  103.70.208.0/22
                  103.225.176.0/22
                  103.244.4.0/22
                  150.107.10.0/23
                  150.129.124.0/22
                  202.142.64.0/20
                  202.142.81.0/24
                  202.142.83.0/24
                  202.142.85.0-202.142.87.255
                  202.142.89.0-202.142.93.255
                  202.142.95.0-202.142.107.255
                  202.142.110.0/24
                  202.142.112.0/22
                  202.142.118.0-202.142.120.255
                  202.142.123.0-202.142.127.255
                IPv6:
                  2406:3c80::-2406:3c80:8:ffff:ffff:ffff:ffff:ffff
                  2406:3c80:400::/46

    Signature Algorithm: sha256WithRSAEncryption
         73:f6:3b:ce:4d:45:37:0c:cb:64:b9:b5:46:07:0c:9a:e1:3c:
         05:62:05:a9:7c:ad:2a:d6:35:09:7d:51:e7:31:f4:c9:72:ec:
         8f:4e:b7:4e:5a:12:a8:86:3c:33:dc:2c:ca:90:0a:c8:1a:32:
         26:1e:42:bc:42:c7:41:49:1c:22:5a:b6:56:2e:e5:bc:64:17:
         b9:3a:e9:62:04:70:b7:7b:9d:50:b9:3a:3b:e7:f1:09:f7:5b:
         63:c6:85:de:89:7b:2e:91:36:0c:91:5f:07:74:67:c5:9f:82:
         46:6a:7d:dd:08:d2:cc:8e:30:4a:06:53:ed:ab:62:cc:22:a2:
         a1:fa:cd:13:71:eb:5d:55:ce:53:34:87:cd:2d:91:6c:8a:bc:
         eb:ef:f8:9f:93:df:90:a2:23:fc:2d:ef:30:39:bf:f7:0e:f4:
         94:09:32:b8:7f:bc:b2:03:f4:b6:bd:6f:d4:5a:6a:22:ed:3d:
         27:30:c3:6c:d4:b6:84:26:53:03:a1:22:d7:ae:79:03:dd:72:
         af:52:84:9c:4c:44:e4:bd:bc:53:40:89:cf:37:c3:a2:8c:14:
         3b:32:9f:20:2f:49:3c:5b:98:cf:75:14:7e:4d:07:c0:18:c7:
         c2:6d:aa:46:33:10:29:a1:f5:e1:13:17:4f:7e:d4:2f:fd:74:
         5d:0a:a7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-ams.rpki-client.org