Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94A7/F70588781D8D11E2AD4A04EC08B02CD2/AD09F7F2604411EFAFF5E379C4F9AE02.roa
File:                     AD09F7F2604411EFAFF5E379C4F9AE02.roa (raw, json)
Hash identifier:          eNXxT6q72nGjChIBS33+iYr1eI99hZNpSmQL4RuVcFg=
Subject key identifier:   51:00:40:A7:0B:EE:54:FF:7A:2B:59:9E:57:2F:35:9C:FC:FA:67:60
Certificate issuer:       /CN=A91D94A7/serialNumber=07992EECF623A0C7B8DA4ADA75454FA3F716A570
Certificate serial:       369D
Authority key identifier: 07:99:2E:EC:F6:23:A0:C7:B8:DA:4A:DA:75:45:4F:A3:F7:16:A5:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5ku7PYjoMe42kradUVPo_cWpXA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D94A7/F70588781D8D11E2AD4A04EC08B02CD2/AD09F7F2604411EFAFF5E379C4F9AE02.roa
Signing time:             Thu 22 Aug 2024 05:09:15 +0000
ROA not before:           Thu 22 Aug 2024 05:09:15 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     131269
IP address blocks:        49.204.0.0/19 maxlen: 20
                          49.204.32.0/19 maxlen: 19
                          49.204.45.0/24 maxlen: 24
                          49.204.96.0/20 maxlen: 20
                          49.204.96.0/22 maxlen: 22
                          49.204.100.0/22 maxlen: 22
                          49.204.104.0/22 maxlen: 22
                          49.204.108.0/22 maxlen: 22
                          49.204.112.0/20 maxlen: 20
                          49.204.128.0/20 maxlen: 20
                          49.204.143.0/24 maxlen: 24
                          49.204.144.0/20 maxlen: 20
                          49.204.160.0/19 maxlen: 24
                          49.204.166.0/24 maxlen: 24
                          49.204.192.0/20 maxlen: 20
                          49.204.192.0/23 maxlen: 23
                          49.204.194.0/23 maxlen: 23
                          49.204.196.0/23 maxlen: 23
                          49.204.198.0/23 maxlen: 23
                          49.204.200.0/23 maxlen: 23
                          49.204.202.0/24 maxlen: 24
                          49.204.203.0/24 maxlen: 24
                          49.204.204.0/23 maxlen: 23
                          49.204.206.0/23 maxlen: 23
                          49.204.208.0/20 maxlen: 22
                          49.204.232.0/21 maxlen: 22
                          49.205.0.0/19 maxlen: 19
                          49.205.0.0/21 maxlen: 21
                          49.205.32.0/19 maxlen: 19
                          49.205.66.0/23 maxlen: 23
                          49.205.88.0/23 maxlen: 24
                          49.205.90.0/23 maxlen: 24
                          49.205.96.0/20 maxlen: 20
                          49.205.96.0/22 maxlen: 23
                          49.205.100.0/22 maxlen: 23
                          49.205.104.0/22 maxlen: 24
                          49.205.108.0/22 maxlen: 23
                          49.205.128.0/19 maxlen: 19
                          49.205.160.0/22 maxlen: 22
                          49.205.160.0/24 maxlen: 24
                          49.205.161.0/24 maxlen: 24
                          49.205.162.0/24 maxlen: 24
                          49.205.163.0/24 maxlen: 24
                          49.205.164.0/23 maxlen: 23
                          49.205.166.0/24 maxlen: 24
                          49.205.167.0/24 maxlen: 24
                          49.205.168.0/24 maxlen: 24
                          49.205.208.0/23 maxlen: 23
                          49.205.210.0/23 maxlen: 23
                          49.205.214.0/24 maxlen: 24
                          49.205.215.0/24 maxlen: 24
                          49.206.112.0/21 maxlen: 22
                          49.206.128.0/19 maxlen: 19
                          49.206.160.0/19 maxlen: 19
                          49.206.160.0/22 maxlen: 22
                          49.206.164.0/22 maxlen: 22
                          49.206.168.0/22 maxlen: 22
                          49.206.172.0/22 maxlen: 22
                          49.206.176.0/22 maxlen: 22
                          49.206.180.0/22 maxlen: 22
                          49.206.184.0/22 maxlen: 22
                          49.206.188.0/22 maxlen: 22
                          49.207.16.0/20 maxlen: 20
                          49.207.44.0/24 maxlen: 24
                          49.207.64.0/18 maxlen: 18
                          49.207.192.0/18 maxlen: 18
                          124.123.24.0/24 maxlen: 24
                          124.123.25.0/24 maxlen: 24
                          124.123.26.0/24 maxlen: 24
                          124.123.60.0/22 maxlen: 22
                          124.123.60.0/24 maxlen: 24
                          124.123.61.0/24 maxlen: 24
                          124.123.62.0/24 maxlen: 24
                          124.123.63.0/24 maxlen: 24
                          124.123.94.0/24 maxlen: 24
                          124.123.95.0/24 maxlen: 24
                          124.123.124.0/23 maxlen: 23
                          124.123.126.0/24 maxlen: 24
                          124.123.127.0/24 maxlen: 24
                          124.123.128.0/19 maxlen: 19
                          124.123.216.0/21 maxlen: 22
                          124.123.224.0/19 maxlen: 19
                          124.123.224.0/21 maxlen: 21
                          124.123.232.0/21 maxlen: 21
                          124.123.240.0/21 maxlen: 21
                          124.123.248.0/21 maxlen: 21
                          183.82.1.0/24 maxlen: 24
                          183.82.2.0/24 maxlen: 24
                          183.82.3.0/24 maxlen: 24
                          183.82.4.0/24 maxlen: 24
                          183.82.5.0/24 maxlen: 24
                          183.82.6.0/24 maxlen: 24
                          183.82.7.0/24 maxlen: 24
                          183.82.8.0/24 maxlen: 24
                          183.82.9.0/24 maxlen: 24
                          183.82.10.0/24 maxlen: 24
                          183.82.11.0/24 maxlen: 24
                          183.82.12.0/24 maxlen: 24
                          183.82.13.0/24 maxlen: 24
                          183.82.14.0/24 maxlen: 24
                          183.82.15.0/24 maxlen: 24
                          183.82.64.0/19 maxlen: 19
                          183.82.160.0/20 maxlen: 20
                          183.82.176.0/22 maxlen: 22
                          183.82.204.0/22 maxlen: 22
                          183.82.208.0/20 maxlen: 20
                          183.82.224.0/20 maxlen: 20
                          183.82.250.0/23 maxlen: 24
                          183.83.0.0/19 maxlen: 19
                          183.83.33.0/24 maxlen: 24
                          183.83.35.0/24 maxlen: 24
                          183.83.48.0/24 maxlen: 24
                          183.83.96.0/19 maxlen: 19
                          183.83.148.0/22 maxlen: 22
                          183.83.156.0/22 maxlen: 22
                          183.83.184.0/21 maxlen: 21
                          183.83.240.0/22 maxlen: 24
                          183.83.247.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 15 Nov 2024 01:05:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13981 (0x369d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D94A7/serialNumber=07992EECF623A0C7B8DA4ADA75454FA3F716A570
        Validity
            Not Before: Aug 22 05:09:15 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=66c6c7fb-a0f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:15:fb:23:21:0c:e3:72:0c:87:b4:3c:9b:26:
                    70:5b:a7:34:4e:3b:da:f9:8f:44:a2:be:51:5d:4d:
                    ba:57:1e:9c:99:11:d8:92:02:92:30:c6:2c:08:47:
                    e0:66:e3:3a:04:34:b9:bb:42:f3:17:cd:f5:7f:1b:
                    7e:60:86:35:8c:b1:56:9f:ca:12:ef:cd:9e:43:3f:
                    8f:d6:93:97:d4:2f:7e:39:3b:2c:cb:4a:63:ec:45:
                    86:76:2e:f3:54:99:e3:c5:3d:2e:ee:6a:2f:16:33:
                    d0:f0:e5:c3:58:21:9a:b1:22:e6:78:e2:88:ae:d4:
                    2d:b3:5a:ec:b2:de:8e:80:6a:f9:a8:71:a4:ca:c5:
                    43:9a:4e:bf:26:38:be:b5:99:5e:01:ed:64:91:27:
                    b0:6e:64:86:e2:f3:47:42:a0:e1:c7:e9:44:77:d5:
                    a7:a4:a2:31:61:e3:23:2e:12:65:fc:06:42:0c:f2:
                    22:96:f0:1e:e3:2a:b2:af:62:8d:87:ea:06:8e:96:
                    78:18:9d:ad:e0:07:10:1a:d9:52:b8:2b:67:47:af:
                    38:86:4d:86:55:69:02:8a:3f:96:82:81:4d:19:b0:
                    b0:20:08:51:1e:41:89:41:da:f7:71:9a:40:a2:21:
                    b0:08:b8:5d:48:ac:31:6b:05:b4:b6:3f:2d:18:d6:
                    31:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:00:40:A7:0B:EE:54:FF:7A:2B:59:9E:57:2F:35:9C:FC:FA:67:60
            X509v3 Authority Key Identifier:
                keyid:07:99:2E:EC:F6:23:A0:C7:B8:DA:4A:DA:75:45:4F:A3:F7:16:A5:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D94A7/F70588781D8D11E2AD4A04EC08B02CD2/B5ku7PYjoMe42kradUVPo_cWpXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5ku7PYjoMe42kradUVPo_cWpXA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94A7/F70588781D8D11E2AD4A04EC08B02CD2/AD09F7F2604411EFAFF5E379C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.204.0.0/18
                  49.204.96.0-49.204.223.255
                  49.204.232.0/21
                  49.205.0.0/18
                  49.205.66.0/23
                  49.205.88.0/22
                  49.205.96.0/20
                  49.205.128.0-49.205.168.255
                  49.205.208.0/22
                  49.205.214.0/23
                  49.206.112.0/21
                  49.206.128.0/18
                  49.207.16.0/20
                  49.207.44.0/24
                  49.207.64.0/18
                  49.207.192.0/18
                  124.123.24.0-124.123.26.255
                  124.123.60.0/22
                  124.123.94.0/23
                  124.123.124.0-124.123.159.255
                  124.123.216.0-124.123.255.255
                  183.82.1.0-183.82.15.255
                  183.82.64.0/19
                  183.82.160.0-183.82.179.255
                  183.82.204.0-183.82.239.255
                  183.82.250.0/23
                  183.83.0.0/19
                  183.83.33.0/24
                  183.83.35.0/24
                  183.83.48.0/24
                  183.83.96.0/19
                  183.83.148.0/22
                  183.83.156.0/22
                  183.83.184.0/21
                  183.83.240.0/22
                  183.83.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:2c:4a:07:15:f2:5e:2a:fb:e3:9d:44:51:d6:1f:14:f3:64:
         49:f2:72:76:9f:ed:0e:cc:a2:1e:ee:bb:3a:e1:66:e9:10:d9:
         91:c7:52:9f:24:29:99:e6:12:a0:52:d6:62:a5:ac:02:a5:b0:
         58:75:df:aa:c0:53:62:1d:e0:72:60:5c:53:57:15:0c:f0:30:
         98:5e:6d:05:bd:7b:f7:c0:d6:c8:ac:6a:22:4d:49:b8:25:8d:
         62:4d:69:93:51:37:94:fd:41:fa:e5:a2:b5:8d:f5:be:81:18:
         de:06:05:72:45:38:3b:c0:b5:80:01:f7:0e:f4:89:e2:fe:ce:
         83:fa:45:49:2a:2a:6b:eb:08:61:c5:66:30:bb:1e:f9:94:29:
         73:00:51:79:56:6b:74:6a:e0:13:09:e0:8d:5c:7d:93:8f:3b:
         d4:e2:f6:79:7c:2e:44:11:6a:b4:cd:44:38:36:15:33:c0:2b:
         bb:5c:35:b4:1e:09:03:be:bc:58:50:d2:08:4c:2f:44:8e:33:
         d5:38:43:ce:34:3d:83:de:71:d9:e8:3b:10:0c:1c:e9:83:66:
         8e:79:d0:38:b2:41:6b:e3:2d:3e:6a:9d:14:ef:9f:01:cf:06:
         77:b0:09:8b:df:d5:2f:15:04:48:cb:92:c0:6a:ce:15:13:b9:
         e9:9c:b1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 03:17:28 2024 by rpki-client on console-fra.rpki-client.org