Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/DCA2E576714A11EEBDD9A571C4F9AE02.roa
File:                     DCA2E576714A11EEBDD9A571C4F9AE02.roa (raw, json)
Hash identifier:          wxoBtdDtrSqXiqwX9+ag+TTn906FmoMGbRflmtszRSM=
Subject key identifier:   AE:63:6F:B5:37:60:A8:39:94:E4:0E:13:E3:3C:4F:52:4F:33:42:6C
Certificate issuer:       /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Certificate serial:       0776
Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/DCA2E576714A11EEBDD9A571C4F9AE02.roa
Signing time:             Tue 07 Nov 2023 06:41:01 +0000
ROA not before:           Tue 07 Nov 2023 06:41:01 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     10122
IP address blocks:        103.139.72.0/24 maxlen: 24
                          103.139.73.0/24 maxlen: 24
                          164.90.64.0/24 maxlen: 24
                          164.90.65.0/24 maxlen: 24
                          164.90.66.0/24 maxlen: 24
                          164.90.67.0/24 maxlen: 24
                          164.90.68.0/24 maxlen: 24
                          164.90.69.0/24 maxlen: 24
                          164.90.70.0/24 maxlen: 24
                          164.90.72.0/24 maxlen: 24
                          164.90.73.0/24 maxlen: 24
                          164.90.74.0/24 maxlen: 24
                          164.90.76.0/24 maxlen: 24
                          164.90.77.0/24 maxlen: 24
                          164.90.78.0/24 maxlen: 24
                          164.90.79.0/24 maxlen: 24
                          164.90.80.0/24 maxlen: 24
                          164.90.81.0/24 maxlen: 24
                          164.90.82.0/24 maxlen: 24
                          164.90.83.0/24 maxlen: 24
                          164.90.84.0/24 maxlen: 24
                          164.90.85.0/24 maxlen: 24
                          164.90.86.0/24 maxlen: 24
                          164.90.87.0/24 maxlen: 24
                          164.90.88.0/24 maxlen: 24
                          164.90.89.0/24 maxlen: 24
                          164.90.90.0/24 maxlen: 24
                          164.90.91.0/24 maxlen: 24
                          164.90.92.0/24 maxlen: 24
                          164.90.93.0/24 maxlen: 24
                          164.90.94.0/24 maxlen: 24
                          164.90.95.0/24 maxlen: 24
                          164.90.96.0/24 maxlen: 24
                          164.90.97.0/24 maxlen: 24
                          164.90.98.0/24 maxlen: 24
                          164.90.100.0/24 maxlen: 24
                          164.90.101.0/24 maxlen: 24
                          164.90.102.0/24 maxlen: 24
                          164.90.104.0/24 maxlen: 24
                          164.90.105.0/24 maxlen: 24
                          164.90.106.0/24 maxlen: 24
                          164.90.107.0/24 maxlen: 24
                          164.90.108.0/24 maxlen: 24
                          164.90.109.0/24 maxlen: 24
                          164.90.110.0/24 maxlen: 24
                          164.90.111.0/24 maxlen: 24
                          164.90.113.0/24 maxlen: 24
                          164.90.114.0/24 maxlen: 24
                          164.90.115.0/24 maxlen: 24
                          164.90.116.0/24 maxlen: 24
                          164.90.117.0/24 maxlen: 24
                          164.90.121.0/24 maxlen: 24
                          164.90.122.0/24 maxlen: 24
                          164.90.125.0/24 maxlen: 24
                          164.90.126.0/24 maxlen: 24
                          164.90.127.0/24 maxlen: 24
                          202.63.32.0/24 maxlen: 24
                          202.63.33.0/24 maxlen: 24
                          202.63.34.0/24 maxlen: 24
                          202.63.35.0/24 maxlen: 24
                          202.63.36.0/24 maxlen: 24
                          202.63.37.0/24 maxlen: 24
                          202.63.38.0/24 maxlen: 24
                          202.63.39.0/24 maxlen: 24
                          202.63.40.0/24 maxlen: 24
                          202.63.41.0/24 maxlen: 24
                          202.63.42.0/24 maxlen: 24
                          202.63.43.0/24 maxlen: 24
                          202.63.44.0/24 maxlen: 24
                          202.63.45.0/24 maxlen: 24
                          202.63.46.0/24 maxlen: 24
                          202.63.47.0/24 maxlen: 24
                          202.63.48.0/24 maxlen: 24
                          202.63.49.0/24 maxlen: 24
                          202.63.50.0/24 maxlen: 24
                          202.63.51.0/24 maxlen: 24
                          202.63.52.0/24 maxlen: 24
                          202.63.53.0/24 maxlen: 24
                          202.63.54.0/24 maxlen: 24
                          202.63.55.0/24 maxlen: 24
                          202.63.56.0/24 maxlen: 24
                          202.63.57.0/24 maxlen: 24
                          202.63.58.0/24 maxlen: 24
                          202.63.59.0/24 maxlen: 24
                          202.63.60.0/24 maxlen: 24
                          202.63.61.0/24 maxlen: 24
                          202.63.62.0/24 maxlen: 24
                          202.63.63.0/24 maxlen: 24
                          202.168.96.0/24 maxlen: 24
                          202.168.97.0/24 maxlen: 24
                          202.168.99.0/24 maxlen: 24
                          202.168.100.0/24 maxlen: 24
                          202.168.101.0/24 maxlen: 24
                          202.168.102.0/24 maxlen: 24
                          202.168.103.0/24 maxlen: 24
                          202.168.104.0/24 maxlen: 24
                          202.168.105.0/24 maxlen: 24
                          202.168.106.0/24 maxlen: 24
                          202.168.107.0/24 maxlen: 24
                          202.168.108.0/24 maxlen: 24
                          202.168.109.0/24 maxlen: 24
                          202.168.110.0/24 maxlen: 24
                          202.168.112.0/24 maxlen: 24
                          202.168.113.0/24 maxlen: 24
                          202.168.114.0/24 maxlen: 24
                          202.168.115.0/24 maxlen: 24
                          202.168.116.0/24 maxlen: 24
                          202.168.117.0/24 maxlen: 24
                          202.168.118.0/24 maxlen: 24
                          202.168.119.0/24 maxlen: 24
                          202.168.120.0/24 maxlen: 24
                          202.168.121.0/24 maxlen: 24
                          202.168.122.0/24 maxlen: 24
                          202.168.123.0/24 maxlen: 24
                          202.168.124.0/23 maxlen: 23
                          202.168.124.0/24 maxlen: 24
                          202.168.125.0/24 maxlen: 24
                          202.168.126.0/24 maxlen: 24
                          202.168.127.0/24 maxlen: 24
                          2404:efc0:155::/48 maxlen: 48
                          2404:efc0:235::/48 maxlen: 48
                          2404:efc0:236::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 03 Apr 2024 08:29:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1910 (0x776)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
        Validity
            Not Before: Nov  7 06:41:01 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=6549dbfd-b01d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6b:98:e0:a2:7d:c5:2c:70:59:31:8b:14:28:
                    da:f0:aa:9f:09:b9:89:75:2d:bf:25:72:45:af:e1:
                    d7:1a:19:66:fb:d1:53:76:21:6d:78:51:eb:25:db:
                    28:06:ad:65:19:f9:6e:12:12:95:02:62:35:80:75:
                    c1:ab:1b:b3:81:a3:78:21:bd:03:7c:bd:bb:b4:21:
                    33:01:4d:88:93:93:bd:1e:da:96:fb:cd:9c:3b:9b:
                    be:7b:c8:07:45:87:1f:30:de:0b:d7:63:7e:95:0b:
                    72:bf:c5:12:6a:ee:04:26:cf:95:bd:46:cb:22:6d:
                    64:fc:d7:ba:9c:89:c8:b1:a5:d0:41:d0:58:bc:39:
                    6a:8e:54:8c:d3:d3:a0:4b:c3:12:92:af:af:c1:85:
                    90:41:54:f3:67:10:b4:9a:c1:a2:05:fe:ed:94:4c:
                    ed:46:26:89:eb:29:3b:30:ab:6b:3f:bf:9c:e3:19:
                    87:c3:a0:0f:df:9a:c7:13:dc:f9:42:a9:8e:29:48:
                    fb:59:a2:10:8e:d5:e8:86:a5:50:0d:bc:1e:46:ed:
                    63:fe:3e:06:7d:ad:57:90:e5:c9:ba:cc:7c:68:78:
                    fa:aa:f7:9d:50:7b:53:8f:c2:95:67:6b:ab:68:75:
                    b2:41:65:de:25:b8:24:6f:f9:e0:f5:c9:18:a6:f7:
                    dc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:63:6F:B5:37:60:A8:39:94:E4:0E:13:E3:3C:4F:52:4F:33:42:6C
            X509v3 Authority Key Identifier:
                keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/DCA2E576714A11EEBDD9A571C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.72.0/23
                  164.90.64.0-164.90.70.255
                  164.90.72.0-164.90.74.255
                  164.90.76.0-164.90.98.255
                  164.90.100.0-164.90.102.255
                  164.90.104.0/21
                  164.90.113.0-164.90.117.255
                  164.90.121.0-164.90.122.255
                  164.90.125.0-164.90.127.255
                  202.63.32.0/19
                  202.168.96.0/23
                  202.168.99.0-202.168.110.255
                  202.168.112.0/20
                IPv6:
                  2404:efc0:155::/48
                  2404:efc0:235::-2404:efc0:236:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         30:1c:44:2a:dd:b8:00:63:26:91:cc:df:10:c2:37:e8:0d:6f:
         2b:06:0f:f9:4f:3c:3c:8b:01:ba:74:ae:08:c8:db:23:17:07:
         83:d1:2c:98:61:d8:59:5e:7f:f3:fd:17:d5:29:7d:22:27:3e:
         99:4a:ba:1a:b2:ce:6b:51:e6:72:eb:b7:2d:29:bb:90:6a:7c:
         40:eb:ad:c5:9c:0c:04:7d:af:8c:e6:1a:46:a9:18:e4:03:d8:
         93:d4:5e:26:9c:37:cc:43:43:91:97:60:b9:f3:06:be:dc:f4:
         f0:15:3d:fc:4d:76:5d:35:71:6e:da:96:8d:74:25:02:40:10:
         83:d6:6d:3e:17:03:af:4b:29:60:48:4c:49:ed:9f:b7:86:9d:
         e6:66:ec:fc:e5:6e:bc:31:e8:76:d4:bb:e1:85:4b:45:c1:0a:
         36:d8:54:cf:71:7f:12:44:74:d9:be:91:fa:2e:ea:7b:3f:da:
         ae:ea:6e:61:69:04:f7:a5:aa:90:1b:f0:dd:bf:9a:83:4d:63:
         c6:c4:48:da:90:57:20:05:d7:4a:78:33:a3:6e:11:67:11:e6:
         ca:51:21:23:95:07:f5:67:cb:cb:40:26:f4:f4:8b:2f:54:e4:
         66:3f:4e:75:03:aa:75:d2:92:8d:72:c6:47:75:7e:25:a0:aa:
         fd:ee:5c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 11:52:06 2024 by rpki-client on console-fra.rpki-client.org