Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/06D37F7C00A611F09BC9E77CC4F9AE02.roa
File:                     06D37F7C00A611F09BC9E77CC4F9AE02.roa (raw, json)
Hash identifier:          dBYa6IVA3dKgmsI/66O5sX/KiSGSIOPVZ5soRlTQs04=
Subject key identifier:   D6:20:6C:57:DD:B0:02:D3:BF:DE:F8:DF:46:BE:94:93:CD:BC:D3:33
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       24C3
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/06D37F7C00A611F09BC9E77CC4F9AE02.roa
Signing time:             Tue 18 Mar 2025 10:37:37 +0000
ROA not before:           Tue 18 Mar 2025 10:37:37 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     138241
IP address blocks:        43.226.224.0/24 maxlen: 24
                          43.226.225.0/24 maxlen: 24
                          43.226.226.0/24 maxlen: 24
                          43.226.227.0/24 maxlen: 24
                          103.11.63.0/24 maxlen: 24
                          103.151.26.0/24 maxlen: 24
                          113.203.208.0/24 maxlen: 24
                          113.203.209.0/24 maxlen: 24
                          113.203.210.0/24 maxlen: 24
                          113.203.211.0/24 maxlen: 24
                          113.203.212.0/24 maxlen: 24
                          113.203.213.0/24 maxlen: 24
                          113.203.214.0/24 maxlen: 24
                          113.203.215.0/24 maxlen: 24
                          113.203.216.0/24 maxlen: 24
                          113.203.217.0/24 maxlen: 24
                          113.203.218.0/24 maxlen: 24
                          113.203.219.0/24 maxlen: 24
                          113.203.220.0/24 maxlen: 24
                          113.203.222.0/24 maxlen: 24
                          113.203.223.0/24 maxlen: 24
                          113.203.224.0/24 maxlen: 24
                          113.203.225.0/24 maxlen: 24
                          113.203.226.0/24 maxlen: 24
                          113.203.227.0/24 maxlen: 24
                          113.203.229.0/24 maxlen: 24
                          113.203.230.0/24 maxlen: 24
                          113.203.231.0/24 maxlen: 24
                          113.203.233.0/24 maxlen: 24
                          113.203.241.0/24 maxlen: 24
                          113.203.242.0/24 maxlen: 24
                          113.203.243.0/24 maxlen: 24
                          113.203.244.0/24 maxlen: 24
                          113.203.245.0/24 maxlen: 24
                          113.203.246.0/24 maxlen: 24
                          113.203.248.0/24 maxlen: 24
                          113.203.252.0/24 maxlen: 24
                          113.203.253.0/24 maxlen: 24
                          113.203.254.0/24 maxlen: 24
                          113.203.255.0/24 maxlen: 24
                          115.167.6.0/24 maxlen: 24
                          115.167.15.0/24 maxlen: 24
                          115.167.16.0/22 maxlen: 24
                          115.167.20.0/22 maxlen: 22
                          115.167.28.0/24 maxlen: 24
                          115.167.29.0/24 maxlen: 24
                          115.167.30.0/24 maxlen: 24
                          115.167.31.0/24 maxlen: 24
                          115.167.48.0/24 maxlen: 24
                          115.167.50.0/24 maxlen: 24
                          115.167.56.0/22 maxlen: 24
                          115.167.60.0/23 maxlen: 24
                          115.167.62.0/23 maxlen: 24
                          115.167.64.0/24 maxlen: 24
                          115.167.73.0/24 maxlen: 24
                          115.167.78.0/24 maxlen: 24
                          115.167.101.0/24 maxlen: 24
                          115.167.102.0/24 maxlen: 24
                          115.167.103.0/24 maxlen: 24
                          115.167.117.0/24 maxlen: 24
                          115.167.118.0/24 maxlen: 24
                          115.167.119.0/24 maxlen: 24
                          115.167.123.0/24 maxlen: 24
                          115.167.124.0/24 maxlen: 24
                          115.167.125.0/24 maxlen: 24
                          175.110.64.0/22 maxlen: 24
                          175.110.80.0/24 maxlen: 24
                          175.110.81.0/24 maxlen: 24
                          175.110.82.0/24 maxlen: 24
                          175.110.83.0/24 maxlen: 24
                          175.110.89.0/24 maxlen: 24
                          175.110.90.0/24 maxlen: 24
                          175.110.91.0/24 maxlen: 24
                          175.110.97.0/24 maxlen: 24
                          175.110.98.0/24 maxlen: 24
                          175.110.101.0/24 maxlen: 24
                          175.110.104.0/24 maxlen: 24
                          175.110.105.0/24 maxlen: 24
                          175.110.106.0/24 maxlen: 24
                          175.110.107.0/24 maxlen: 24
                          175.110.108.0/24 maxlen: 24
                          175.110.109.0/24 maxlen: 24
                          175.110.110.0/24 maxlen: 24
                          175.110.111.0/24 maxlen: 24
                          180.178.142.0/24 maxlen: 24
                          180.178.144.0/24 maxlen: 24
                          180.178.146.0/24 maxlen: 24
                          180.178.147.0/24 maxlen: 24
                          180.178.148.0/24 maxlen: 24
                          180.178.149.0/24 maxlen: 24
                          180.178.150.0/24 maxlen: 24
                          180.178.160.0/24 maxlen: 24
                          180.178.161.0/24 maxlen: 24
                          180.178.162.0/24 maxlen: 24
                          180.178.163.0/24 maxlen: 24
                          180.178.164.0/24 maxlen: 24
                          180.178.165.0/24 maxlen: 24
                          180.178.166.0/24 maxlen: 24
                          180.178.167.0/24 maxlen: 24
                          180.178.168.0/24 maxlen: 24
                          180.178.169.0/24 maxlen: 24
                          180.178.170.0/24 maxlen: 24
                          180.178.171.0/24 maxlen: 24
                          180.178.176.0/22 maxlen: 22
                          180.178.180.0/24 maxlen: 24
                          180.178.181.0/24 maxlen: 24
                          180.178.182.0/24 maxlen: 24
                          180.178.183.0/24 maxlen: 24
                          180.178.184.0/22 maxlen: 22
                          180.178.185.0/24 maxlen: 24
                          180.178.186.0/24 maxlen: 24
                          180.178.187.0/24 maxlen: 24
                          180.178.188.0/24 maxlen: 24
                          180.178.189.0/24 maxlen: 24
                          180.178.190.0/24 maxlen: 24
                          180.178.191.0/24 maxlen: 24
                          202.92.20.0/24 maxlen: 24
                          202.92.26.0/24 maxlen: 24
                          223.29.225.0/24 maxlen: 24
                          223.29.226.0/24 maxlen: 24
                          223.29.228.0/24 maxlen: 24
                          223.29.229.0/24 maxlen: 24
                          223.29.230.0/24 maxlen: 24
                          223.29.231.0/24 maxlen: 24
                          223.29.237.0/24 maxlen: 24
                          223.29.239.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 19 Mar 2025 06:19:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9411 (0x24c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Mar 18 10:37:37 2025 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=67d94cf1-0e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7a:a2:c3:4d:61:db:08:79:8d:20:fd:b4:cf:
                    e9:1e:03:68:05:b2:ee:d6:09:e5:e8:01:3b:26:71:
                    4e:42:76:a0:68:1d:17:40:f9:33:99:a7:f5:02:fa:
                    9a:43:5e:fc:2a:3e:dc:3c:9f:a7:76:ca:87:cc:9c:
                    87:83:93:a6:c1:12:33:f3:ae:ac:54:14:9a:00:fd:
                    2f:0d:bd:34:4d:bd:81:ec:fd:06:dd:e8:b3:c3:f1:
                    ff:ef:6c:79:80:40:c0:11:ca:19:55:ab:79:7c:59:
                    07:0e:8a:ba:38:b1:ae:74:b7:d3:7c:a0:4a:ba:5d:
                    05:f9:52:69:0d:bf:68:77:40:ee:58:09:65:13:95:
                    b4:48:05:8e:05:6c:5f:9c:26:80:f4:22:0c:0f:bc:
                    26:1e:6b:c7:c2:d4:28:72:b4:26:aa:12:89:a3:c8:
                    55:c1:63:b7:06:bf:37:b6:23:2b:18:25:8a:6b:82:
                    cd:4b:e2:fc:7b:a9:05:70:76:a3:9c:d4:c4:4e:b0:
                    90:0d:54:eb:ca:5a:d7:a6:3f:51:f2:a5:2a:79:2a:
                    cd:05:d8:34:ba:a1:bb:35:e0:68:88:26:2b:b8:fc:
                    03:98:95:ba:3b:5a:1c:df:47:22:9b:97:7d:1e:25:
                    ba:40:8c:6a:db:6a:54:4e:b1:2b:30:25:f4:19:1e:
                    9b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:20:6C:57:DD:B0:02:D3:BF:DE:F8:DF:46:BE:94:93:CD:BC:D3:33
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/06D37F7C00A611F09BC9E77CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.224.0/22
                  103.11.63.0/24
                  103.151.26.0/24
                  113.203.208.0-113.203.220.255
                  113.203.222.0-113.203.227.255
                  113.203.229.0-113.203.231.255
                  113.203.233.0/24
                  113.203.241.0-113.203.246.255
                  113.203.248.0/24
                  113.203.252.0/22
                  115.167.6.0/24
                  115.167.15.0-115.167.23.255
                  115.167.28.0/22
                  115.167.48.0/24
                  115.167.50.0/24
                  115.167.56.0-115.167.64.255
                  115.167.73.0/24
                  115.167.78.0/24
                  115.167.101.0-115.167.103.255
                  115.167.117.0-115.167.119.255
                  115.167.123.0-115.167.125.255
                  175.110.64.0/22
                  175.110.80.0/22
                  175.110.89.0-175.110.91.255
                  175.110.97.0-175.110.98.255
                  175.110.101.0/24
                  175.110.104.0/21
                  180.178.142.0/24
                  180.178.144.0/24
                  180.178.146.0-180.178.150.255
                  180.178.160.0-180.178.171.255
                  180.178.176.0/20
                  202.92.20.0/24
                  202.92.26.0/24
                  223.29.225.0-223.29.226.255
                  223.29.228.0/22
                  223.29.237.0/24
                  223.29.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:55:5a:c4:e8:5a:ed:7d:63:b9:6e:7d:99:2b:9a:de:2d:95:
         e7:fe:77:06:b7:92:89:d4:65:c2:0f:43:2f:63:9d:7a:79:ce:
         26:4b:11:2f:fd:1a:77:4a:d5:ba:73:e9:02:0a:8a:93:ec:5d:
         a6:75:8d:1a:7a:19:94:b3:c0:e7:c9:a1:24:07:e2:cd:d4:d7:
         f2:73:6f:28:0f:b3:a2:be:3e:13:56:86:dd:63:9a:ce:a3:55:
         8c:33:8f:cb:dd:0d:23:ed:3d:19:7d:86:13:19:78:0b:c6:17:
         22:3a:58:32:3d:16:47:8e:24:0d:dc:9f:bb:ed:ed:83:d2:e4:
         d1:f6:a2:89:cb:c4:b6:9e:af:ba:7c:3b:7e:fa:ff:4c:eb:3f:
         87:99:8f:28:55:5c:9c:72:e9:17:ba:08:a9:58:c1:50:30:c0:
         27:d9:02:dd:6f:62:cf:c4:2c:c6:86:f9:51:a4:6f:d9:b0:8c:
         03:58:ed:b5:32:2a:66:8c:e9:05:5b:f8:c4:f3:d0:d7:97:07:
         ca:98:a4:b9:72:6b:e3:64:77:e7:54:bc:d8:af:7d:ff:bd:aa:
         fe:3b:a8:30:a4:ec:ce:64:d5:9a:a3:dd:70:cc:2c:31:5d:a4:
         2d:b3:c2:b9:e8:14:cb:fd:fb:38:0c:9a:28:fa:49:7b:1d:4b:
         f4:5c:ab:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:55:41 2025 by rpki-client