Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A68E5A46048911F0AD467158C4F9AE02.roa
File:                     A68E5A46048911F0AD467158C4F9AE02.roa (raw, json)
Hash identifier:          OGTt+AY/aXMxykvoiE6o+OyBeGTOmSOisXQFPI3fEsQ=
Subject key identifier:   F7:C8:9C:62:7C:43:03:8B:B8:EA:BE:97:32:11:E7:FF:D3:45:36:6A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       AB9C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A68E5A46048911F0AD467158C4F9AE02.roa
Signing time:             Wed 19 Mar 2025 06:16:10 +0000
ROA not before:           Wed 19 Mar 2025 06:16:10 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     133661
IP address blocks:        45.248.156.0/22 maxlen: 24
                          45.248.160.0/22 maxlen: 24
                          101.0.32.0/22 maxlen: 24
                          101.0.37.0/24 maxlen: 24
                          101.0.38.0/24 maxlen: 24
                          101.0.41.0/24 maxlen: 24
                          101.0.42.0/24 maxlen: 24
                          101.0.45.0/24 maxlen: 24
                          101.0.49.0/24 maxlen: 24
                          101.0.50.0/24 maxlen: 24
                          101.0.53.0/24 maxlen: 24
                          101.0.54.0/23 maxlen: 24
                          101.0.57.0/24 maxlen: 24
                          103.40.196.0/22 maxlen: 24
                          103.41.20.0/22 maxlen: 24
                          103.41.24.0/22 maxlen: 24
                          103.41.36.0/22 maxlen: 24
                          103.66.204.0/22 maxlen: 24
                          103.66.208.0/22 maxlen: 24
                          103.72.168.0/22 maxlen: 24
                          103.72.220.0/22 maxlen: 24
                          103.73.148.0/24 maxlen: 24
                          103.73.149.0/24 maxlen: 24
                          103.73.150.0/24 maxlen: 24
                          103.110.248.0/24 maxlen: 24
                          103.110.249.0/24 maxlen: 24
                          103.110.250.0/24 maxlen: 24
                          103.110.251.0/24 maxlen: 24
                          103.114.64.0/24 maxlen: 24
                          103.114.65.0/24 maxlen: 24
                          103.114.66.0/24 maxlen: 24
                          103.114.67.0/24 maxlen: 24
                          103.142.198.0/24 maxlen: 24
                          103.165.72.0/23 maxlen: 24
                          103.165.76.0/24 maxlen: 24
                          103.166.215.0/24 maxlen: 24
                          103.167.154.0/23 maxlen: 24
                          103.167.182.0/23 maxlen: 24
                          103.167.212.0/23 maxlen: 24
                          103.168.0.0/23 maxlen: 24
                          103.168.33.0/24 maxlen: 24
                          103.169.242.0/23 maxlen: 24
                          103.170.36.0/23 maxlen: 24
                          103.174.92.0/23 maxlen: 24
                          103.178.64.0/23 maxlen: 24
                          103.178.203.0/24 maxlen: 24
                          103.179.10.0/23 maxlen: 24
                          103.179.100.0/23 maxlen: 24
                          103.179.102.0/23 maxlen: 24
                          103.179.120.0/24 maxlen: 24
                          103.179.224.0/24 maxlen: 24
                          103.179.226.0/24 maxlen: 24
                          103.180.168.0/24 maxlen: 24
                          103.180.174.0/24 maxlen: 24
                          103.180.212.0/23 maxlen: 24
                          103.180.214.0/23 maxlen: 24
                          103.180.238.0/23 maxlen: 24
                          103.181.56.0/23 maxlen: 24
                          103.181.110.0/23 maxlen: 24
                          103.181.151.0/24 maxlen: 24
                          103.181.152.0/23 maxlen: 24
                          103.181.154.0/23 maxlen: 24
                          103.181.174.0/23 maxlen: 24
                          103.183.30.0/23 maxlen: 24
                          103.183.32.0/23 maxlen: 24
                          103.183.34.0/23 maxlen: 24
                          103.183.216.0/23 maxlen: 24
                          103.187.84.0/23 maxlen: 24
                          103.187.96.0/23 maxlen: 24
                          103.187.102.0/23 maxlen: 24
                          103.187.130.0/23 maxlen: 24
                          103.187.158.0/23 maxlen: 24
                          103.187.170.0/23 maxlen: 24
                          103.217.116.0/22 maxlen: 24
                          103.217.120.0/22 maxlen: 24
                          103.223.8.0/22 maxlen: 24
                          103.223.12.0/22 maxlen: 24
                          114.134.24.0/22 maxlen: 24
                          163.47.212.0/22 maxlen: 24
                          175.176.184.0/22 maxlen: 24
                          180.188.224.0/24 maxlen: 24
                          180.188.232.0/24 maxlen: 24
                          180.188.236.0/23 maxlen: 24
                          180.188.241.0/24 maxlen: 24
                          180.188.242.0/23 maxlen: 24
                          180.188.246.0/23 maxlen: 24
                          180.188.248.0/24 maxlen: 24
                          180.188.249.0/24 maxlen: 24
                          180.188.250.0/24 maxlen: 24
                          180.188.251.0/24 maxlen: 24
                          180.188.252.0/22 maxlen: 24
                          202.14.120.0/22 maxlen: 24
                          203.76.178.0/24 maxlen: 24
                          203.76.180.0/24 maxlen: 24
                          203.76.181.0/24 maxlen: 24
                          203.76.188.0/24 maxlen: 24
                          203.76.190.0/24 maxlen: 24
                          203.76.191.0/24 maxlen: 24
                          203.115.68.0/24 maxlen: 24
                          203.115.73.0/24 maxlen: 24
                          203.115.84.0/23 maxlen: 24
                          203.115.91.0/24 maxlen: 24
                          210.89.39.0/24 maxlen: 24
                          210.89.58.0/23 maxlen: 24
                          210.89.61.0/24 maxlen: 24
                          210.89.62.0/23 maxlen: 24
                          223.130.28.0/22 maxlen: 24
                          2001:df0:e400::/48 maxlen: 48
                          2001:df2:e200::/48 maxlen: 48
                          2001:df2:e600::/48 maxlen: 48
                          2400:7b20::/32 maxlen: 32
                          2401:a880::/32 maxlen: 48
                          2404:7c80::/32 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43932 (0xab9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2
        Validity
            Not Before: Mar 19 06:16:10 2025 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=67da612a-ce2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8e:3c:b2:d7:07:d8:55:34:98:19:2f:1d:7a:
                    e2:2a:09:5b:2d:09:6f:8b:ba:77:53:24:e6:34:83:
                    7a:30:77:14:b3:c6:07:49:92:75:37:30:0a:2c:3c:
                    d4:63:fa:50:d2:e2:fd:06:c4:9a:d4:33:11:17:bd:
                    7c:cd:43:ca:43:78:61:23:f3:c6:74:9f:20:6c:99:
                    ec:99:1f:82:41:56:fb:32:96:f9:55:47:ae:ad:c4:
                    e6:48:f5:e3:37:67:52:86:87:e7:4c:d8:55:24:e3:
                    96:c8:1e:bc:39:32:f5:0a:e4:c7:b3:82:12:9d:27:
                    7d:98:af:03:f5:03:39:f7:69:4f:fd:0b:97:24:ff:
                    aa:25:b6:81:1e:ae:14:fc:dd:c3:84:56:72:41:62:
                    cf:25:ad:f9:b4:46:d3:2f:0e:4c:4b:4b:69:f9:84:
                    1e:a4:ae:f4:a5:92:a3:43:59:62:8e:9d:fa:78:4c:
                    a9:29:16:2a:37:38:4f:cf:fc:9f:99:6b:a4:16:3d:
                    f2:c2:9d:64:ee:76:dd:8e:1f:77:a9:cd:05:5e:f8:
                    38:4d:14:12:94:bb:77:c0:15:ae:78:f7:ce:dc:fa:
                    10:04:6c:08:3c:96:b9:66:3d:e4:e7:f3:50:45:4a:
                    d6:11:3b:de:d3:34:1e:74:13:36:44:28:d1:39:05:
                    60:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C8:9C:62:7C:43:03:8B:B8:EA:BE:97:32:11:E7:FF:D3:45:36:6A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A68E5A46048911F0AD467158C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.248.156.0-45.248.163.255
                  101.0.32.0/22
                  101.0.37.0-101.0.38.255
                  101.0.41.0-101.0.42.255
                  101.0.45.0/24
                  101.0.49.0-101.0.50.255
                  101.0.53.0-101.0.55.255
                  101.0.57.0/24
                  103.40.196.0/22
                  103.41.20.0-103.41.27.255
                  103.41.36.0/22
                  103.66.204.0-103.66.211.255
                  103.72.168.0/22
                  103.72.220.0/22
                  103.73.148.0-103.73.150.255
                  103.110.248.0/22
                  103.114.64.0/22
                  103.142.198.0/24
                  103.165.72.0/23
                  103.165.76.0/24
                  103.166.215.0/24
                  103.167.154.0/23
                  103.167.182.0/23
                  103.167.212.0/23
                  103.168.0.0/23
                  103.168.33.0/24
                  103.169.242.0/23
                  103.170.36.0/23
                  103.174.92.0/23
                  103.178.64.0/23
                  103.178.203.0/24
                  103.179.10.0/23
                  103.179.100.0/22
                  103.179.120.0/24
                  103.179.224.0/24
                  103.179.226.0/24
                  103.180.168.0/24
                  103.180.174.0/24
                  103.180.212.0/22
                  103.180.238.0/23
                  103.181.56.0/23
                  103.181.110.0/23
                  103.181.151.0-103.181.155.255
                  103.181.174.0/23
                  103.183.30.0-103.183.35.255
                  103.183.216.0/23
                  103.187.84.0/23
                  103.187.96.0/23
                  103.187.102.0/23
                  103.187.130.0/23
                  103.187.158.0/23
                  103.187.170.0/23
                  103.217.116.0-103.217.123.255
                  103.223.8.0/21
                  114.134.24.0/22
                  163.47.212.0/22
                  175.176.184.0/22
                  180.188.224.0/24
                  180.188.232.0/24
                  180.188.236.0/23
                  180.188.241.0-180.188.243.255
                  180.188.246.0-180.188.255.255
                  202.14.120.0/22
                  203.76.178.0/24
                  203.76.180.0/23
                  203.76.188.0/24
                  203.76.190.0/23
                  203.115.68.0/24
                  203.115.73.0/24
                  203.115.84.0/23
                  203.115.91.0/24
                  210.89.39.0/24
                  210.89.58.0/23
                  210.89.61.0-210.89.63.255
                  223.130.28.0/22
                IPv6:
                  2001:df0:e400::/48
                  2001:df2:e200::/48
                  2001:df2:e600::/48
                  2400:7b20::/32
                  2401:a880::/32
                  2404:7c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:18:9e:02:43:26:8b:4b:17:0a:f4:4b:79:9b:e7:f1:d3:dc:
         3c:48:49:2a:ff:c7:77:c6:eb:1a:a7:ac:34:c3:3e:0d:82:2c:
         dd:e9:59:7c:cc:f7:65:d4:ec:53:65:c6:59:28:16:24:23:20:
         9f:76:df:10:0c:15:44:ad:17:89:95:aa:fc:b9:6f:8a:2a:d5:
         60:a1:e2:97:4a:0e:8e:17:9a:c6:b7:6f:93:f3:4f:a8:56:a0:
         89:99:75:e8:07:db:bc:ab:7b:36:0e:4f:9f:04:2e:c8:6f:c4:
         9a:31:76:7f:95:6d:f1:79:b0:d0:a4:71:3a:6d:94:58:80:c4:
         4c:55:c0:d7:f0:2c:4c:02:23:52:b1:e7:6f:c6:a7:6e:9c:a8:
         22:26:47:a5:b0:ed:d7:32:1f:e9:35:c2:fd:55:bb:4a:af:0c:
         00:b4:a1:37:b4:93:6a:3c:09:cf:27:27:97:37:71:d3:e0:6c:
         56:98:c4:d6:e7:d3:b7:c5:03:39:84:6e:bf:01:39:96:c9:f0:
         70:6e:ea:30:b3:d1:26:14:04:60:f8:03:f3:b2:76:40:2e:3d:
         4c:54:f2:6a:73:b1:45:3b:b1:ef:8f:ed:6f:4a:06:32:46:ca:
         25:ec:3b:e2:99:ba:93:a0:f8:38:62:15:6e:4e:a2:ce:4b:a9:
         37:99:ca:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:41 2025 by rpki-client