Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/B1325C78215811EF9296694BC4F9AE02.roa
File:                     B1325C78215811EF9296694BC4F9AE02.roa (raw, json)
Hash identifier:          XWQFGVA1IsozIfSjp4v7jDZb4YaqYNw0dwiBcEAwfyc=
Subject key identifier:   EA:AF:AB:EB:D6:8E:9C:13:81:CB:F5:80:BE:9F:5F:86:78:80:9E:A6
Certificate issuer:       /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Certificate serial:       33FB
Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/B1325C78215811EF9296694BC4F9AE02.roa
Signing time:             Mon 03 Jun 2024 03:23:49 +0000
ROA not before:           Mon 03 Jun 2024 03:23:49 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     45143
IP address blocks:        14.100.128.0/17 maxlen: 17
                          14.100.133.0/24 maxlen: 24
                          14.100.137.0/24 maxlen: 24
                          111.65.31.0/24 maxlen: 24
                          111.65.32.0/24 maxlen: 24
                          111.65.33.0/24 maxlen: 24
                          111.65.34.0/24 maxlen: 24
                          111.65.35.0/24 maxlen: 24
                          111.65.36.0/24 maxlen: 24
                          111.65.37.0/24 maxlen: 24
                          111.65.38.0/24 maxlen: 24
                          111.65.39.0/24 maxlen: 24
                          111.65.40.0/24 maxlen: 24
                          111.65.41.0/24 maxlen: 24
                          111.65.42.0/24 maxlen: 24
                          111.65.43.0/24 maxlen: 24
                          111.65.44.0/24 maxlen: 24
                          111.65.45.0/24 maxlen: 24
                          111.65.46.0/24 maxlen: 24
                          111.65.47.0/24 maxlen: 24
                          111.65.48.0/24 maxlen: 24
                          111.65.49.0/24 maxlen: 24
                          111.65.50.0/24 maxlen: 24
                          111.65.51.0/24 maxlen: 24
                          111.65.52.0/24 maxlen: 24
                          111.65.53.0/24 maxlen: 24
                          111.65.54.0/24 maxlen: 24
                          111.65.55.0/24 maxlen: 24
                          111.65.56.0/24 maxlen: 24
                          111.65.57.0/24 maxlen: 24
                          111.65.58.0/24 maxlen: 24
                          111.65.59.0/24 maxlen: 24
                          111.65.60.0/24 maxlen: 24
                          111.65.61.0/24 maxlen: 24
                          111.65.62.0/24 maxlen: 24
                          111.65.63.0/24 maxlen: 24
                          111.65.64.0/24 maxlen: 24
                          111.65.65.0/24 maxlen: 24
                          111.65.66.0/24 maxlen: 24
                          111.65.67.0/24 maxlen: 24
                          111.65.68.0/24 maxlen: 24
                          111.65.69.0/24 maxlen: 24
                          111.65.70.0/24 maxlen: 24
                          111.65.71.0/24 maxlen: 24
                          111.65.72.0/24 maxlen: 24
                          111.65.73.0/24 maxlen: 24
                          111.65.74.0/24 maxlen: 24
                          111.65.75.0/24 maxlen: 24
                          111.65.76.0/24 maxlen: 24
                          111.65.77.0/24 maxlen: 24
                          111.65.78.0/24 maxlen: 24
                          111.65.79.0/24 maxlen: 24
                          119.234.0.0/16 maxlen: 17
                          119.234.0.0/17 maxlen: 18
                          119.234.0.0/18 maxlen: 19
                          119.234.0.0/19 maxlen: 21
                          119.234.0.0/21 maxlen: 22
                          119.234.0.0/23 maxlen: 24
                          119.234.3.0/24 maxlen: 24
                          119.234.4.0/24 maxlen: 24
                          119.234.5.0/24 maxlen: 24
                          119.234.6.0/24 maxlen: 24
                          119.234.7.0/24 maxlen: 24
                          119.234.8.0/24 maxlen: 24
                          119.234.9.0/24 maxlen: 24
                          119.234.10.0/23 maxlen: 24
                          119.234.12.0/22 maxlen: 23
                          119.234.12.0/23 maxlen: 24
                          119.234.14.0/24 maxlen: 24
                          119.234.22.0/23 maxlen: 23
                          119.234.24.0/24 maxlen: 24
                          119.234.30.0/23 maxlen: 23
                          119.234.32.0/21 maxlen: 21
                          119.234.38.0/23 maxlen: 23
                          119.234.40.0/21 maxlen: 21
                          119.234.46.0/23 maxlen: 23
                          119.234.64.0/19 maxlen: 19
                          119.234.64.0/20 maxlen: 21
                          119.234.70.0/23 maxlen: 23
                          119.234.72.0/24 maxlen: 24
                          119.234.78.0/23 maxlen: 23
                          119.234.100.0/22 maxlen: 24
                          119.234.104.0/21 maxlen: 24
                          119.234.112.0/20 maxlen: 24
                          119.234.128.0/18 maxlen: 18
                          119.234.128.0/19 maxlen: 19
                          119.234.128.0/20 maxlen: 22
                          119.234.128.0/21 maxlen: 24
                          119.234.136.0/22 maxlen: 24
                          180.255.128.0/17 maxlen: 17
                          180.255.129.0/24 maxlen: 24
                          180.255.254.0/24 maxlen: 24
                          180.255.255.0/24 maxlen: 24
                          202.78.56.0/24 maxlen: 24
                          202.78.57.0/24 maxlen: 24
                          202.78.58.0/24 maxlen: 24
                          2400:1c00:1::/48 maxlen: 48
                          2400:1c00:2::/48 maxlen: 48
                          2400:1c00:3::/48 maxlen: 48
                          2400:1c00:4::/48 maxlen: 48
                          2400:1c00:b::/48 maxlen: 48
                          2400:1c00:c::/48 maxlen: 48
                          2400:1c00:1a::/48 maxlen: 48
                          2400:1c00:1b::/48 maxlen: 48
                          2400:1c00:1c::/48 maxlen: 48
                          2400:1c00:1e::/48 maxlen: 48
                          2400:1c00:1f::/48 maxlen: 48
                          2400:1c00:20::/44 maxlen: 44
                          2400:1c00:30::/44 maxlen: 44
                          2400:1c00:40::/44 maxlen: 44
                          2400:1c00:50::/44 maxlen: 44
                          2400:1c00:64::/48 maxlen: 48
                          2400:1c00:66::/48 maxlen: 48
                          2400:1c00:70::/44 maxlen: 44
                          2400:1c00:80::/43 maxlen: 43
                          2400:1c00:a0::/43 maxlen: 43
                          2400:1c00:f0::/44 maxlen: 44
                          2400:1c00:100::/44 maxlen: 44
                          2400:1c00:110::/44 maxlen: 44
                          2400:1c00:120::/44 maxlen: 44
                          2400:1c00:130::/44 maxlen: 44
                          2400:1c00:140::/44 maxlen: 44
                          2400:1c00:150::/44 maxlen: 44
                          2400:1c00:160::/44 maxlen: 44
                          2400:1c00:190::/44 maxlen: 44
                          2400:1c00:1a0::/44 maxlen: 44
                          2400:1c00:1b0::/44 maxlen: 44
                          2400:1c00:1d0::/44 maxlen: 44
                          2400:1c00:1e0::/44 maxlen: 44
                          2400:1c00:220::/44 maxlen: 44
                          2400:1c00:230::/44 maxlen: 44
                          2400:1c00:310::/45 maxlen: 45
                          2400:1c00:318::/45 maxlen: 45

Validation:               Failed, certificate revoked on Mon 03 Jun 2024 06:52:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13307 (0x33fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
        Validity
            Not Before: Jun  3 03:23:49 2024 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=665d3744-7562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f8:cb:2e:22:45:c3:2d:ef:39:77:82:0c:6d:
                    a2:12:5d:25:48:43:9a:58:d3:d4:b7:81:be:f9:4b:
                    bb:32:ae:a9:cb:00:b7:26:18:65:6d:9e:45:b1:68:
                    68:d5:9d:30:e7:45:b9:5e:fc:b5:8d:9a:ca:b9:60:
                    bc:21:0a:2f:90:b8:a6:ca:bf:35:a5:d8:33:9f:c9:
                    6f:75:e7:42:63:b0:a3:3f:e8:1e:35:f8:89:f0:a8:
                    0f:45:49:03:bd:31:3a:6a:b5:a3:65:1d:ed:23:46:
                    09:8c:14:8c:fd:ae:ca:31:7c:98:97:db:dc:88:55:
                    80:08:ca:9f:d4:42:3d:2b:78:e9:07:dc:4b:03:04:
                    25:84:da:73:70:d6:7b:5a:62:da:33:06:1b:03:e0:
                    02:45:41:cc:3a:44:84:89:da:4e:98:4c:a9:8e:ae:
                    88:3c:2d:58:8e:68:82:ed:ea:c4:57:39:46:39:4a:
                    23:4d:18:cf:70:a0:8b:ea:98:0e:bf:d7:fa:68:b9:
                    e1:6a:91:b7:dc:e9:ed:02:a3:b5:9a:93:a0:04:3b:
                    c2:50:c4:75:c5:02:2f:84:76:2a:30:ee:41:78:da:
                    33:01:31:b4:9e:7f:4c:3d:87:76:24:75:b1:a4:50:
                    01:1a:96:5e:2f:1a:6b:cf:76:d2:b0:47:8f:f4:ed:
                    a9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AF:AB:EB:D6:8E:9C:13:81:CB:F5:80:BE:9F:5F:86:78:80:9E:A6
            X509v3 Authority Key Identifier:
                keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/B1325C78215811EF9296694BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.100.128.0/17
                  111.65.31.0-111.65.79.255
                  119.234.0.0/16
                  180.255.128.0/17
                  202.78.56.0-202.78.58.255
                IPv6:
                  2400:1c00:1::-2400:1c00:4:ffff:ffff:ffff:ffff:ffff
                  2400:1c00:b::-2400:1c00:c:ffff:ffff:ffff:ffff:ffff
                  2400:1c00:1a::-2400:1c00:1c:ffff:ffff:ffff:ffff:ffff
                  2400:1c00:1e::-2400:1c00:5f:ffff:ffff:ffff:ffff:ffff
                  2400:1c00:64::/48
                  2400:1c00:66::/48
                  2400:1c00:70::-2400:1c00:bf:ffff:ffff:ffff:ffff:ffff
                  2400:1c00:f0::-2400:1c00:16f:ffff:ffff:ffff:ffff:ffff
                  2400:1c00:190::-2400:1c00:1bf:ffff:ffff:ffff:ffff:ffff
                  2400:1c00:1d0::-2400:1c00:1ef:ffff:ffff:ffff:ffff:ffff
                  2400:1c00:220::/43
                  2400:1c00:310::/44

    Signature Algorithm: sha256WithRSAEncryption
         6f:9f:74:27:89:17:c7:f2:87:b5:5c:ba:71:5c:dc:14:03:7d:
         da:be:7a:28:85:7f:08:c8:e8:93:be:95:b8:1f:b4:4e:05:3e:
         b2:1d:3c:df:dd:34:cd:d0:13:c9:e2:a6:6c:f5:93:81:49:9e:
         49:54:b4:4d:5b:14:d3:bf:02:dc:2b:86:d5:82:35:15:2f:8b:
         98:92:01:5b:64:bd:67:e5:25:6c:5b:8e:cf:8a:9f:2f:aa:7f:
         a5:5a:fd:0d:67:0d:33:9d:c8:0b:25:cd:7d:b4:11:4c:d4:b7:
         d8:71:b8:5d:bb:c9:bd:1a:f9:97:8a:19:56:a7:35:a7:1b:40:
         c3:80:39:42:44:ef:cc:a2:ad:d7:53:7a:98:ab:87:c9:61:0d:
         af:98:bc:96:1c:8a:87:f5:af:36:95:43:ea:ad:49:49:72:51:
         b9:bd:36:b5:ee:ac:6e:2b:7d:66:c0:bf:8e:7a:29:5c:fa:97:
         0a:f6:0a:59:f7:3a:e0:3e:77:42:29:9f:ba:96:84:27:e7:11:
         98:e8:37:1a:94:44:1c:d8:a5:2a:ae:81:5c:73:d7:ba:69:a6:
         58:39:21:4e:94:c4:9b:90:ed:eb:01:0b:6b:7e:59:ef:fb:b7:
         33:63:74:0d:56:1b:e8:0d:59:0f:38:5a:48:bd:bc:2a:b1:09:
         aa:05:6d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:55 2024 by rpki-client on console-ams.rpki-client.org