Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8D32FA8095C511EF8B19CB47C4F9AE02.roa
File:                     8D32FA8095C511EF8B19CB47C4F9AE02.roa (raw, json)
Hash identifier:          Em19fWzcH/NYuK10gOUwn2PXWCvjgfAyGXtJsa7Cq3E=
Subject key identifier:   6E:17:07:39:0C:7E:92:FC:91:7C:CB:B4:D1:73:13:BA:D3:54:2B:97
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       1A1E
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8D32FA8095C511EF8B19CB47C4F9AE02.roa
Signing time:             Wed 30 Oct 2024 03:54:44 +0000
ROA not before:           Wed 30 Oct 2024 03:54:44 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     55154
IP address blocks:        103.151.27.0/24 maxlen: 24
                          113.203.208.0/24 maxlen: 24
                          113.203.210.0/24 maxlen: 24
                          113.203.213.0/24 maxlen: 24
                          113.203.217.0/24 maxlen: 24
                          113.203.220.0/24 maxlen: 24
                          113.203.227.0/24 maxlen: 24
                          113.203.243.0/24 maxlen: 24
                          113.203.248.0/24 maxlen: 24
                          115.167.3.0/24 maxlen: 24
                          115.167.5.0/24 maxlen: 24
                          115.167.28.0/24 maxlen: 24
                          115.167.64.0/24 maxlen: 24
                          115.167.66.0/24 maxlen: 24
                          115.167.73.0/24 maxlen: 24
                          115.167.78.0/24 maxlen: 24
                          115.167.101.0/24 maxlen: 24
                          115.167.103.0/24 maxlen: 24
                          175.110.64.0/22 maxlen: 24
                          180.178.148.0/24 maxlen: 24
                          180.178.160.0/24 maxlen: 24
                          180.178.166.0/24 maxlen: 24
                          180.178.169.0/24 maxlen: 24
                          180.178.171.0/24 maxlen: 24
                          180.178.189.0/24 maxlen: 24
                          180.178.191.0/24 maxlen: 24
                          223.29.231.0/24 maxlen: 24
                          223.29.237.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 30 Oct 2024 07:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6686 (0x1a1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Oct 30 03:54:44 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6721ae04-7897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5b:ba:1a:8c:86:be:e9:76:b7:ea:d4:c0:78:
                    dc:be:14:e1:25:5c:87:65:77:d7:a9:82:b2:d7:08:
                    f0:06:63:a7:76:7d:7a:bd:aa:73:8e:35:80:d6:cd:
                    8d:58:cb:0f:3a:b0:dd:cb:f3:64:7e:f8:2d:ff:cf:
                    d6:73:c0:dc:80:f1:91:60:35:15:66:12:df:76:3f:
                    f4:7c:89:72:2b:9f:21:59:7c:75:c7:77:24:54:c2:
                    e2:19:43:01:52:17:cf:d6:92:d2:b1:92:89:2a:29:
                    b6:ae:45:65:96:4d:5e:bb:5b:b1:2b:d6:58:b2:27:
                    27:41:84:3b:ac:7b:ed:e0:50:7e:8c:c6:4b:b5:e4:
                    2e:5e:2a:c3:c6:f5:59:b1:c1:16:a1:18:33:dd:33:
                    3a:ab:8c:48:cf:b7:da:e2:b8:fd:44:30:a3:96:3c:
                    c6:3d:08:8c:ca:a0:02:98:03:2a:85:42:ca:7d:6a:
                    4c:28:0f:d1:62:0e:07:1e:43:82:05:fb:8f:0c:c2:
                    c1:dc:ea:f5:69:76:aa:c9:2b:33:27:7f:be:4f:20:
                    96:4a:52:30:d2:c1:1a:7e:bc:af:86:9f:be:e8:68:
                    7b:fa:7b:88:12:72:fd:3d:5e:3f:21:36:f8:ae:5d:
                    9d:7b:2e:8f:f3:a5:56:9a:65:3b:37:c2:e1:6f:70:
                    4f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:17:07:39:0C:7E:92:FC:91:7C:CB:B4:D1:73:13:BA:D3:54:2B:97
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8D32FA8095C511EF8B19CB47C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.27.0/24
                  113.203.208.0/24
                  113.203.210.0/24
                  113.203.213.0/24
                  113.203.217.0/24
                  113.203.220.0/24
                  113.203.227.0/24
                  113.203.243.0/24
                  113.203.248.0/24
                  115.167.3.0/24
                  115.167.5.0/24
                  115.167.28.0/24
                  115.167.64.0/24
                  115.167.66.0/24
                  115.167.73.0/24
                  115.167.78.0/24
                  115.167.101.0/24
                  115.167.103.0/24
                  175.110.64.0/22
                  180.178.148.0/24
                  180.178.160.0/24
                  180.178.166.0/24
                  180.178.169.0/24
                  180.178.171.0/24
                  180.178.189.0/24
                  180.178.191.0/24
                  223.29.231.0/24
                  223.29.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:2a:77:e0:6e:41:fd:dc:83:ea:fa:cc:d6:54:ec:b8:a9:03:
         90:e4:c1:2b:45:f6:94:a8:8c:ff:c0:34:9e:63:de:5a:be:49:
         6a:a5:cd:98:bf:7c:ba:ec:19:2f:a3:9b:1a:d0:ae:c4:38:2f:
         24:d7:b8:af:f9:8b:cd:ec:8e:44:30:f9:90:f7:da:9c:98:1f:
         67:24:80:19:87:4f:40:bd:8c:85:f5:70:e9:85:d7:9c:ef:cc:
         ca:76:ae:ba:9d:27:27:7e:e6:76:a2:fc:c5:e7:76:cf:f9:ec:
         84:1c:29:15:11:7e:d8:23:77:43:33:7f:d1:fa:f7:81:29:8a:
         58:f0:27:85:9f:f9:b8:01:23:9e:27:b6:91:54:2e:3a:4c:d2:
         6c:a1:7c:90:f4:f4:90:4d:35:24:d7:08:12:f0:a9:cf:d2:46:
         18:79:c5:fd:65:69:a2:af:98:a0:59:dc:d3:4f:61:70:be:e9:
         4a:51:a8:e0:18:00:65:17:3a:4a:78:f3:49:de:33:8b:a3:88:
         5c:46:24:4d:13:e6:6c:5f:7b:64:b7:65:08:08:3a:39:fa:b3:
         7f:4f:fd:4d:6b:83:e3:ed:ad:84:d1:bc:8f:a6:f8:77:2d:f5:
         22:a4:6c:ff:23:9b:43:9d:42:71:a3:5a:de:f2:d3:b3:d7:51:
         f9:da:e9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:12:11 2025 by rpki-client