Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94A7/F70588781D8D11E2AD4A04EC08B02CD2/87ED74E42A5F11EC9088405DC4F9AE02.roa
File:                     87ED74E42A5F11EC9088405DC4F9AE02.roa (raw, json)
Hash identifier:          cFackoJoDQQY1gxJ3OcvOrcULm7qHtz44f1vTqA+h9s=
Subject key identifier:   E6:68:2E:FF:94:E2:FF:99:97:0A:4E:95:A5:61:26:D7:60:61:8D:48
Certificate issuer:       /CN=A91D94A7/serialNumber=07992EECF623A0C7B8DA4ADA75454FA3F716A570
Certificate serial:       3710
Authority key identifier: 07:99:2E:EC:F6:23:A0:C7:B8:DA:4A:DA:75:45:4F:A3:F7:16:A5:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5ku7PYjoMe42kradUVPo_cWpXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D94A7/F70588781D8D11E2AD4A04EC08B02CD2/87ED74E42A5F11EC9088405DC4F9AE02.roa
Signing time:             Mon 28 Oct 2024 06:53:36 +0000
ROA not before:           Mon 28 Oct 2024 06:53:36 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     24309
IP address blocks:        49.204.64.0/19 maxlen: 19
                          49.204.112.0/22 maxlen: 22
                          49.204.116.0/22 maxlen: 22
                          49.204.120.0/22 maxlen: 22
                          49.204.124.0/22 maxlen: 22
                          49.204.128.0/22 maxlen: 22
                          49.204.132.0/22 maxlen: 22
                          49.204.136.0/22 maxlen: 22
                          49.204.140.0/22 maxlen: 22
                          49.204.224.0/21 maxlen: 23
                          49.204.236.0/22 maxlen: 23
                          49.204.240.0/20 maxlen: 20
                          49.205.32.0/21 maxlen: 21
                          49.205.68.0/22 maxlen: 22
                          49.205.68.0/24 maxlen: 24
                          49.205.69.0/24 maxlen: 24
                          49.205.70.0/24 maxlen: 24
                          49.205.71.0/24 maxlen: 24
                          49.205.72.0/24 maxlen: 24
                          49.205.73.0/24 maxlen: 24
                          49.205.74.0/24 maxlen: 24
                          49.205.75.0/24 maxlen: 24
                          49.205.76.0/22 maxlen: 22
                          49.205.77.0/24 maxlen: 24
                          49.205.80.0/21 maxlen: 22
                          49.205.92.0/23 maxlen: 24
                          49.205.128.0/19 maxlen: 19
                          49.205.128.0/21 maxlen: 22
                          49.205.136.0/21 maxlen: 22
                          49.205.144.0/21 maxlen: 22
                          49.205.152.0/21 maxlen: 22
                          49.205.192.0/21 maxlen: 22
                          49.205.200.0/21 maxlen: 22
                          49.205.208.0/22 maxlen: 23
                          49.205.216.0/22 maxlen: 22
                          49.205.220.0/22 maxlen: 22
                          49.206.0.0/21 maxlen: 21
                          49.206.8.0/21 maxlen: 21
                          49.206.16.0/21 maxlen: 21
                          49.206.24.0/21 maxlen: 21
                          49.206.96.0/20 maxlen: 21
                          49.206.124.0/22 maxlen: 22
                          49.206.128.0/19 maxlen: 19
                          49.206.128.0/21 maxlen: 24
                          49.206.148.0/22 maxlen: 24
                          49.206.200.0/23 maxlen: 24
                          49.206.202.0/23 maxlen: 23
                          49.206.224.0/23 maxlen: 23
                          49.206.226.0/24 maxlen: 24
                          49.206.227.0/24 maxlen: 24
                          49.206.228.0/22 maxlen: 22
                          49.206.232.0/22 maxlen: 22
                          49.206.236.0/24 maxlen: 24
                          49.206.240.0/21 maxlen: 21
                          49.206.248.0/24 maxlen: 24
                          49.206.249.0/24 maxlen: 24
                          49.206.251.0/24 maxlen: 24
                          49.206.252.0/23 maxlen: 23
                          49.206.254.0/24 maxlen: 24
                          49.206.255.0/24 maxlen: 24
                          49.207.32.0/24 maxlen: 24
                          49.207.33.0/24 maxlen: 24
                          49.207.35.0/24 maxlen: 24
                          49.207.36.0/24 maxlen: 24
                          49.207.37.0/24 maxlen: 24
                          49.207.38.0/24 maxlen: 24
                          49.207.39.0/24 maxlen: 24
                          49.207.41.0/24 maxlen: 24
                          49.207.48.0/20 maxlen: 21
                          49.207.128.0/20 maxlen: 20
                          49.207.128.0/22 maxlen: 22
                          49.207.132.0/22 maxlen: 22
                          49.207.136.0/22 maxlen: 22
                          49.207.140.0/22 maxlen: 22
                          49.207.176.0/20 maxlen: 20
                          49.207.176.0/22 maxlen: 22
                          49.207.176.0/24 maxlen: 24
                          49.207.177.0/24 maxlen: 24
                          49.207.178.0/24 maxlen: 24
                          49.207.179.0/24 maxlen: 24
                          49.207.180.0/22 maxlen: 22
                          49.207.180.0/24 maxlen: 24
                          49.207.181.0/24 maxlen: 24
                          49.207.182.0/24 maxlen: 24
                          49.207.183.0/24 maxlen: 24
                          49.207.184.0/22 maxlen: 22
                          49.207.188.0/22 maxlen: 22
                          49.207.192.0/19 maxlen: 22
                          49.207.224.0/19 maxlen: 21
                          103.16.200.0/23 maxlen: 23
                          103.16.200.0/24 maxlen: 24
                          103.16.202.0/23 maxlen: 23
                          103.16.202.0/24 maxlen: 24
                          123.176.34.0/24 maxlen: 24
                          124.123.0.0/21 maxlen: 24
                          124.123.27.0/24 maxlen: 24
                          124.123.64.0/22 maxlen: 22
                          124.123.68.0/22 maxlen: 23
                          124.123.80.0/22 maxlen: 22
                          124.123.104.0/22 maxlen: 22
                          124.123.127.0/24 maxlen: 24
                          183.82.16.0/22 maxlen: 22
                          183.82.20.0/22 maxlen: 22
                          183.82.24.0/21 maxlen: 22
                          183.82.32.0/21 maxlen: 22
                          183.82.32.0/24 maxlen: 24
                          183.82.33.0/24 maxlen: 24
                          183.82.34.0/24 maxlen: 24
                          183.82.36.0/23 maxlen: 23
                          183.82.176.0/22 maxlen: 22
                          183.82.180.0/22 maxlen: 22
                          183.82.184.0/22 maxlen: 23
                          183.82.188.0/22 maxlen: 22
                          183.82.204.0/22 maxlen: 22
                          183.82.240.0/21 maxlen: 24
                          183.82.248.0/23 maxlen: 24
                          183.83.48.0/22 maxlen: 22
                          183.83.48.0/24 maxlen: 24
                          183.83.49.0/24 maxlen: 24
                          183.83.50.0/24 maxlen: 24
                          183.83.51.0/24 maxlen: 24
                          183.83.52.0/23 maxlen: 23
                          183.83.96.0/19 maxlen: 19
                          183.83.112.0/20 maxlen: 20
                          183.83.112.0/24 maxlen: 24
                          183.83.152.0/22 maxlen: 22
                          183.83.152.0/23 maxlen: 23
                          183.83.152.0/24 maxlen: 24
                          183.83.184.0/22 maxlen: 22
                          183.83.188.0/22 maxlen: 22
                          183.83.242.0/23 maxlen: 24
                          183.83.252.0/22 maxlen: 23

Validation:               Failed, certificate revoked on Fri 15 Nov 2024 01:05:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14096 (0x3710)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D94A7/serialNumber=07992EECF623A0C7B8DA4ADA75454FA3F716A570
        Validity
            Not Before: Oct 28 06:53:36 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=671f34f0-da49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:db:59:a5:a4:27:3e:a9:01:a2:a1:9b:7d:d3:
                    9c:8f:00:b0:d5:24:af:6e:ee:b4:03:01:94:8e:ec:
                    b0:95:0a:77:79:15:2c:fd:77:8d:a7:be:34:31:f3:
                    05:7a:5d:55:91:75:13:07:60:7f:7e:6a:e1:b0:a4:
                    3c:58:0c:8d:89:78:a1:15:66:a3:a8:a5:d9:a8:78:
                    3e:34:77:0b:16:b0:5c:d0:f0:e2:ed:e8:8c:4a:23:
                    ce:0f:8e:3e:db:c2:07:d6:40:80:17:36:1c:69:41:
                    02:9b:6f:2b:db:a2:82:c2:50:37:75:67:d1:29:c1:
                    ef:26:a2:1c:a7:83:ab:ce:62:f0:3d:a0:39:2e:69:
                    a5:24:4d:1f:c9:d8:d9:53:8b:cd:7d:fb:4b:40:00:
                    c4:53:f8:e2:a2:08:8e:95:ea:5e:5e:c0:85:c7:92:
                    e3:f6:2c:4f:46:8f:4d:86:a8:c6:ab:81:64:0a:a8:
                    46:87:71:c6:56:88:7b:02:08:f7:48:bf:5a:89:2f:
                    01:25:7e:6d:90:43:15:01:29:a3:87:ae:15:d7:d4:
                    25:e9:5d:f4:be:50:89:8e:4f:31:dd:a4:31:10:ed:
                    7a:28:d3:55:78:af:84:c5:73:2e:8f:f2:f6:d7:75:
                    c1:bb:37:ca:79:de:52:83:a2:f9:a4:1e:86:12:65:
                    b0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:68:2E:FF:94:E2:FF:99:97:0A:4E:95:A5:61:26:D7:60:61:8D:48
            X509v3 Authority Key Identifier:
                keyid:07:99:2E:EC:F6:23:A0:C7:B8:DA:4A:DA:75:45:4F:A3:F7:16:A5:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D94A7/F70588781D8D11E2AD4A04EC08B02CD2/B5ku7PYjoMe42kradUVPo_cWpXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5ku7PYjoMe42kradUVPo_cWpXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94A7/F70588781D8D11E2AD4A04EC08B02CD2/87ED74E42A5F11EC9088405DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.204.64.0/19
                  49.204.112.0-49.204.143.255
                  49.204.224.0/21
                  49.204.236.0-49.204.255.255
                  49.205.32.0/21
                  49.205.68.0-49.205.87.255
                  49.205.92.0/23
                  49.205.128.0/19
                  49.205.192.0-49.205.211.255
                  49.205.216.0/21
                  49.206.0.0/19
                  49.206.96.0/20
                  49.206.124.0-49.206.159.255
                  49.206.200.0/22
                  49.206.224.0-49.206.236.255
                  49.206.240.0-49.206.249.255
                  49.206.251.0-49.206.255.255
                  49.207.32.0/23
                  49.207.35.0-49.207.39.255
                  49.207.41.0/24
                  49.207.48.0/20
                  49.207.128.0/20
                  49.207.176.0-49.207.255.255
                  103.16.200.0/22
                  123.176.34.0/24
                  124.123.0.0/21
                  124.123.27.0/24
                  124.123.64.0/21
                  124.123.80.0/22
                  124.123.104.0/22
                  124.123.127.0/24
                  183.82.16.0-183.82.39.255
                  183.82.176.0/20
                  183.82.204.0/22
                  183.82.240.0-183.82.249.255
                  183.83.48.0-183.83.53.255
                  183.83.96.0/19
                  183.83.152.0/22
                  183.83.184.0/21
                  183.83.242.0/23
                  183.83.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:d1:99:0c:b1:c1:c8:69:e4:be:53:76:05:1c:98:8a:97:83:
         2f:f0:dd:23:3d:97:ca:a7:01:2d:94:4b:1c:20:ef:4c:56:ad:
         4f:38:dd:69:9e:a5:9a:b4:f8:f8:ce:28:f3:1b:52:40:51:52:
         2a:4b:05:00:d8:3f:17:e2:40:25:aa:ea:b5:1b:65:0f:3a:11:
         5a:1a:87:7a:85:04:38:17:29:f0:7d:dd:a4:e4:09:37:19:a9:
         58:a8:0b:c9:c5:b7:7d:57:99:8c:de:cf:b5:56:a1:7b:31:62:
         13:2d:a0:6f:2c:39:a1:48:41:7c:54:08:73:35:fd:25:74:5c:
         8d:d8:a3:7f:70:4a:c1:a0:6c:63:60:74:aa:6d:c4:53:5a:6c:
         66:2b:ff:2d:c0:72:8b:52:91:79:7f:fe:17:ac:75:c9:12:f2:
         62:6b:35:56:e7:16:bc:22:a9:0e:3c:bc:63:45:2a:14:cd:36:
         1d:cd:d2:b1:78:0b:cb:24:35:01:03:42:1f:33:0a:a0:d6:b0:
         4b:67:47:82:90:be:f6:f7:e5:6a:09:37:df:2e:9c:28:2c:af:
         3c:b8:a8:c7:bb:63:11:da:4a:b6:9c:e7:86:75:fd:48:b5:20:
         e0:75:77:fa:2a:77:ad:17:f0:5e:85:7f:0a:34:52:75:21:51:
         92:54:ea:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 04:32:59 2024 by rpki-client on console-ams.rpki-client.org