Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/12DC0160F4E211EF9C6B0B6CC4F9AE02.roa
File:                     12DC0160F4E211EF9C6B0B6CC4F9AE02.roa (raw, json)
Hash identifier:          Oy5nBouscwc/+8Xy8JrppHnp/rpNWCodh2PyrURKM0U=
Subject key identifier:   49:D2:37:0E:BA:9D:46:33:99:52:4B:E7:5F:66:DD:6F:2B:91:6F:37
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2463
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/12DC0160F4E211EF9C6B0B6CC4F9AE02.roa
Signing time:             Tue 04 Mar 2025 06:41:45 +0000
ROA not before:           Tue 04 Mar 2025 06:41:45 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     138241
IP address blocks:        43.226.224.0/24 maxlen: 24
                          43.226.225.0/24 maxlen: 24
                          43.226.226.0/24 maxlen: 24
                          43.226.227.0/24 maxlen: 24
                          103.11.63.0/24 maxlen: 24
                          103.151.26.0/24 maxlen: 24
                          113.203.208.0/24 maxlen: 24
                          113.203.209.0/24 maxlen: 24
                          113.203.210.0/24 maxlen: 24
                          113.203.211.0/24 maxlen: 24
                          113.203.212.0/24 maxlen: 24
                          113.203.213.0/24 maxlen: 24
                          113.203.214.0/24 maxlen: 24
                          113.203.215.0/24 maxlen: 24
                          113.203.216.0/24 maxlen: 24
                          113.203.217.0/24 maxlen: 24
                          113.203.218.0/24 maxlen: 24
                          113.203.219.0/24 maxlen: 24
                          113.203.220.0/24 maxlen: 24
                          113.203.222.0/24 maxlen: 24
                          113.203.223.0/24 maxlen: 24
                          113.203.224.0/24 maxlen: 24
                          113.203.225.0/24 maxlen: 24
                          113.203.226.0/24 maxlen: 24
                          113.203.227.0/24 maxlen: 24
                          113.203.228.0/24 maxlen: 24
                          113.203.229.0/24 maxlen: 24
                          113.203.230.0/24 maxlen: 24
                          113.203.231.0/24 maxlen: 24
                          113.203.233.0/24 maxlen: 24
                          113.203.241.0/24 maxlen: 24
                          113.203.242.0/24 maxlen: 24
                          113.203.243.0/24 maxlen: 24
                          113.203.244.0/24 maxlen: 24
                          113.203.245.0/24 maxlen: 24
                          113.203.246.0/24 maxlen: 24
                          113.203.248.0/24 maxlen: 24
                          113.203.252.0/24 maxlen: 24
                          113.203.253.0/24 maxlen: 24
                          113.203.254.0/24 maxlen: 24
                          113.203.255.0/24 maxlen: 24
                          115.167.6.0/24 maxlen: 24
                          115.167.15.0/24 maxlen: 24
                          115.167.16.0/22 maxlen: 24
                          115.167.20.0/22 maxlen: 22
                          115.167.28.0/24 maxlen: 24
                          115.167.29.0/24 maxlen: 24
                          115.167.30.0/24 maxlen: 24
                          115.167.31.0/24 maxlen: 24
                          115.167.48.0/24 maxlen: 24
                          115.167.56.0/22 maxlen: 24
                          115.167.60.0/23 maxlen: 24
                          115.167.62.0/23 maxlen: 24
                          115.167.64.0/24 maxlen: 24
                          115.167.66.0/24 maxlen: 24
                          115.167.73.0/24 maxlen: 24
                          115.167.78.0/24 maxlen: 24
                          115.167.101.0/24 maxlen: 24
                          115.167.102.0/24 maxlen: 24
                          115.167.103.0/24 maxlen: 24
                          115.167.117.0/24 maxlen: 24
                          115.167.118.0/24 maxlen: 24
                          115.167.119.0/24 maxlen: 24
                          115.167.122.0/24 maxlen: 24
                          115.167.123.0/24 maxlen: 24
                          115.167.124.0/24 maxlen: 24
                          115.167.125.0/24 maxlen: 24
                          175.110.64.0/22 maxlen: 24
                          175.110.80.0/24 maxlen: 24
                          175.110.81.0/24 maxlen: 24
                          175.110.82.0/24 maxlen: 24
                          175.110.83.0/24 maxlen: 24
                          175.110.89.0/24 maxlen: 24
                          175.110.90.0/24 maxlen: 24
                          175.110.91.0/24 maxlen: 24
                          175.110.97.0/24 maxlen: 24
                          175.110.98.0/24 maxlen: 24
                          175.110.104.0/24 maxlen: 24
                          175.110.105.0/24 maxlen: 24
                          175.110.106.0/24 maxlen: 24
                          175.110.107.0/24 maxlen: 24
                          175.110.109.0/24 maxlen: 24
                          175.110.110.0/24 maxlen: 24
                          175.110.111.0/24 maxlen: 24
                          180.178.142.0/24 maxlen: 24
                          180.178.144.0/24 maxlen: 24
                          180.178.146.0/24 maxlen: 24
                          180.178.147.0/24 maxlen: 24
                          180.178.148.0/24 maxlen: 24
                          180.178.149.0/24 maxlen: 24
                          180.178.150.0/24 maxlen: 24
                          180.178.160.0/24 maxlen: 24
                          180.178.161.0/24 maxlen: 24
                          180.178.162.0/24 maxlen: 24
                          180.178.163.0/24 maxlen: 24
                          180.178.164.0/24 maxlen: 24
                          180.178.165.0/24 maxlen: 24
                          180.178.166.0/24 maxlen: 24
                          180.178.167.0/24 maxlen: 24
                          180.178.168.0/24 maxlen: 24
                          180.178.169.0/24 maxlen: 24
                          180.178.170.0/24 maxlen: 24
                          180.178.171.0/24 maxlen: 24
                          180.178.176.0/22 maxlen: 22
                          180.178.180.0/24 maxlen: 24
                          180.178.181.0/24 maxlen: 24
                          180.178.182.0/24 maxlen: 24
                          180.178.183.0/24 maxlen: 24
                          180.178.184.0/22 maxlen: 22
                          180.178.185.0/24 maxlen: 24
                          180.178.186.0/24 maxlen: 24
                          180.178.187.0/24 maxlen: 24
                          180.178.188.0/24 maxlen: 24
                          180.178.189.0/24 maxlen: 24
                          180.178.190.0/24 maxlen: 24
                          180.178.191.0/24 maxlen: 24
                          202.92.18.0/24 maxlen: 24
                          202.92.20.0/24 maxlen: 24
                          202.92.26.0/24 maxlen: 24
                          223.29.225.0/24 maxlen: 24
                          223.29.226.0/24 maxlen: 24
                          223.29.236.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 04 Mar 2025 06:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9315 (0x2463)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Mar  4 06:41:45 2025 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=67c6a0a9-e2ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cb:64:5a:ee:bb:89:bb:56:0d:d9:a3:a1:cf:
                    4e:e6:ed:e0:36:c6:03:4a:4b:f1:ce:00:18:e8:8d:
                    8d:be:e8:5b:85:cb:12:91:fb:e4:70:c7:81:a3:95:
                    11:41:d3:57:2b:fe:32:7f:16:f8:66:d7:4e:85:2b:
                    32:0a:62:71:01:2d:4c:2d:5c:6c:56:9f:b8:0e:db:
                    c0:e2:ee:a2:1c:1d:d3:a1:a7:0d:92:b0:af:04:23:
                    fe:f5:e4:c8:ac:f5:06:4e:26:3d:e6:96:cb:23:e3:
                    76:86:5e:92:f4:32:04:45:ed:c1:bc:91:63:c4:e8:
                    1e:fc:fc:a2:08:08:6b:0d:6f:51:0b:19:c1:a7:18:
                    b0:0b:e7:67:e9:89:5c:1d:9e:78:e4:64:53:f0:e1:
                    e7:bc:24:6d:1a:48:15:b5:32:6e:7e:a8:5b:87:96:
                    b9:4d:38:53:c7:7c:f9:40:21:ce:f8:ed:98:76:58:
                    1b:54:e6:c0:d1:47:38:50:6a:d6:91:d2:41:e9:bf:
                    1e:da:3f:4a:d7:82:4e:09:bb:de:f3:3b:44:ee:1d:
                    c1:4c:11:2a:11:dd:cd:26:af:2d:4f:ce:e2:15:b9:
                    b6:45:f9:73:8a:6a:d0:2c:35:5b:0f:0f:27:14:98:
                    6f:ea:99:1b:3e:ba:90:1f:c9:29:8b:90:6b:8a:f7:
                    92:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D2:37:0E:BA:9D:46:33:99:52:4B:E7:5F:66:DD:6F:2B:91:6F:37
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/12DC0160F4E211EF9C6B0B6CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.224.0/22
                  103.11.63.0/24
                  103.151.26.0/24
                  113.203.208.0-113.203.220.255
                  113.203.222.0-113.203.231.255
                  113.203.233.0/24
                  113.203.241.0-113.203.246.255
                  113.203.248.0/24
                  113.203.252.0/22
                  115.167.6.0/24
                  115.167.15.0-115.167.23.255
                  115.167.28.0/22
                  115.167.48.0/24
                  115.167.56.0-115.167.64.255
                  115.167.66.0/24
                  115.167.73.0/24
                  115.167.78.0/24
                  115.167.101.0-115.167.103.255
                  115.167.117.0-115.167.119.255
                  115.167.122.0-115.167.125.255
                  175.110.64.0/22
                  175.110.80.0/22
                  175.110.89.0-175.110.91.255
                  175.110.97.0-175.110.98.255
                  175.110.104.0/22
                  175.110.109.0-175.110.111.255
                  180.178.142.0/24
                  180.178.144.0/24
                  180.178.146.0-180.178.150.255
                  180.178.160.0-180.178.171.255
                  180.178.176.0/20
                  202.92.18.0/24
                  202.92.20.0/24
                  202.92.26.0/24
                  223.29.225.0-223.29.226.255
                  223.29.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:6b:88:6c:8d:2e:31:8e:ad:09:6d:05:d8:b5:9d:dc:e3:2d:
         ba:7b:65:b8:22:43:3c:d3:86:65:86:6c:0b:fd:2b:8c:dc:27:
         0c:bf:3e:3c:0c:2d:9a:af:e2:71:91:69:dd:63:12:33:28:d8:
         6e:54:55:c4:e3:7c:de:98:6e:c5:df:21:14:31:8a:f4:86:f2:
         57:6d:b3:62:70:c5:ac:5e:31:c1:b1:41:50:a3:54:73:31:7b:
         ce:68:25:d9:ca:55:57:af:6e:a2:fa:95:52:ec:71:74:dd:50:
         cc:0b:2a:86:7f:e2:3e:aa:7b:f4:c0:32:61:bb:6c:bb:20:b5:
         c7:40:a9:c2:23:76:dd:51:d1:46:75:65:32:14:f5:7d:24:53:
         3e:b4:2d:1d:46:0b:fb:3b:f8:a0:09:14:aa:76:39:ef:5a:9c:
         b6:f0:a4:05:5f:39:5b:98:1a:53:10:25:e5:1c:52:57:56:36:
         b3:ce:76:33:79:92:de:0f:2e:88:42:9b:2a:00:05:d7:da:ef:
         9e:96:c7:91:04:04:c5:a9:3c:3d:bb:af:9d:51:4e:89:61:7a:
         fb:e7:b0:f4:da:5f:39:92:b9:f9:c3:f0:b9:e0:7c:f9:ba:09:
         bc:c8:d1:80:8a:43:e4:37:c4:ba:f8:d9:18:91:11:32:09:d9:
         4c:fb:98:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:55:40 2025 by rpki-client