Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E03D7D340A3411F08F3BD52BC4F9AE02.roa
File:                     E03D7D340A3411F08F3BD52BC4F9AE02.roa (raw, json)
Hash identifier:          /qvm8IFE2uUQXzQiAf5gYz+kfrreUM1/65IVYw0CrX8=
Subject key identifier:   BA:EC:7B:B9:32:1F:A4:A0:C9:99:39:CE:5A:6D:80:6E:5C:FB:29:DA
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       2513
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E03D7D340A3411F08F3BD52BC4F9AE02.roa
Signing time:             Wed 26 Mar 2025 11:24:27 +0000
ROA not before:           Wed 26 Mar 2025 11:24:27 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     138241
IP address blocks:        103.11.63.0/24 maxlen: 24
                          103.151.26.0/24 maxlen: 24
                          113.203.208.0/24 maxlen: 24
                          113.203.209.0/24 maxlen: 24
                          113.203.210.0/24 maxlen: 24
                          113.203.211.0/24 maxlen: 24
                          113.203.212.0/24 maxlen: 24
                          113.203.213.0/24 maxlen: 24
                          113.203.214.0/24 maxlen: 24
                          113.203.215.0/24 maxlen: 24
                          113.203.216.0/24 maxlen: 24
                          113.203.217.0/24 maxlen: 24
                          113.203.218.0/24 maxlen: 24
                          113.203.219.0/24 maxlen: 24
                          113.203.220.0/24 maxlen: 24
                          113.203.222.0/24 maxlen: 24
                          113.203.223.0/24 maxlen: 24
                          113.203.227.0/24 maxlen: 24
                          113.203.229.0/24 maxlen: 24
                          113.203.230.0/24 maxlen: 24
                          113.203.231.0/24 maxlen: 24
                          113.203.241.0/24 maxlen: 24
                          113.203.242.0/24 maxlen: 24
                          113.203.243.0/24 maxlen: 24
                          113.203.244.0/24 maxlen: 24
                          113.203.245.0/24 maxlen: 24
                          113.203.246.0/24 maxlen: 24
                          113.203.248.0/24 maxlen: 24
                          113.203.252.0/24 maxlen: 24
                          113.203.253.0/24 maxlen: 24
                          113.203.254.0/24 maxlen: 24
                          113.203.255.0/24 maxlen: 24
                          115.167.6.0/24 maxlen: 24
                          115.167.15.0/24 maxlen: 24
                          115.167.16.0/22 maxlen: 24
                          115.167.28.0/24 maxlen: 24
                          115.167.29.0/24 maxlen: 24
                          115.167.30.0/24 maxlen: 24
                          115.167.31.0/24 maxlen: 24
                          115.167.57.0/24 maxlen: 24
                          115.167.58.0/24 maxlen: 24
                          115.167.59.0/24 maxlen: 24
                          115.167.60.0/23 maxlen: 24
                          115.167.64.0/24 maxlen: 24
                          115.167.73.0/24 maxlen: 24
                          115.167.78.0/24 maxlen: 24
                          115.167.101.0/24 maxlen: 24
                          115.167.102.0/24 maxlen: 24
                          115.167.103.0/24 maxlen: 24
                          115.167.117.0/24 maxlen: 24
                          115.167.118.0/24 maxlen: 24
                          115.167.119.0/24 maxlen: 24
                          115.167.123.0/24 maxlen: 24
                          115.167.124.0/24 maxlen: 24
                          115.167.125.0/24 maxlen: 24
                          175.110.64.0/22 maxlen: 24
                          175.110.89.0/24 maxlen: 24
                          175.110.90.0/24 maxlen: 24
                          175.110.91.0/24 maxlen: 24
                          175.110.97.0/24 maxlen: 24
                          175.110.98.0/24 maxlen: 24
                          175.110.101.0/24 maxlen: 24
                          175.110.104.0/24 maxlen: 24
                          175.110.105.0/24 maxlen: 24
                          175.110.106.0/24 maxlen: 24
                          175.110.107.0/24 maxlen: 24
                          175.110.108.0/24 maxlen: 24
                          175.110.109.0/24 maxlen: 24
                          175.110.110.0/24 maxlen: 24
                          175.110.111.0/24 maxlen: 24
                          180.178.142.0/24 maxlen: 24
                          180.178.144.0/24 maxlen: 24
                          180.178.146.0/24 maxlen: 24
                          180.178.147.0/24 maxlen: 24
                          180.178.148.0/24 maxlen: 24
                          180.178.149.0/24 maxlen: 24
                          180.178.150.0/24 maxlen: 24
                          180.178.160.0/24 maxlen: 24
                          180.178.161.0/24 maxlen: 24
                          180.178.162.0/24 maxlen: 24
                          180.178.163.0/24 maxlen: 24
                          180.178.164.0/24 maxlen: 24
                          180.178.165.0/24 maxlen: 24
                          180.178.166.0/24 maxlen: 24
                          180.178.167.0/24 maxlen: 24
                          180.178.168.0/24 maxlen: 24
                          180.178.169.0/24 maxlen: 24
                          180.178.170.0/24 maxlen: 24
                          180.178.171.0/24 maxlen: 24
                          180.178.176.0/22 maxlen: 22
                          180.178.180.0/24 maxlen: 24
                          180.178.181.0/24 maxlen: 24
                          180.178.182.0/24 maxlen: 24
                          180.178.183.0/24 maxlen: 24
                          180.178.184.0/22 maxlen: 22
                          180.178.185.0/24 maxlen: 24
                          180.178.186.0/24 maxlen: 24
                          180.178.187.0/24 maxlen: 24
                          180.178.188.0/24 maxlen: 24
                          180.178.189.0/24 maxlen: 24
                          180.178.190.0/24 maxlen: 24
                          180.178.191.0/24 maxlen: 24
                          202.92.26.0/24 maxlen: 24
                          223.29.228.0/24 maxlen: 24
                          223.29.229.0/24 maxlen: 24
                          223.29.231.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 03 Apr 2025 06:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9491 (0x2513)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Mar 26 11:24:27 2025 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=67e3e3ea-b3ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:47:36:5a:97:d5:d8:ec:50:9b:f3:51:63:a7:
                    8d:ff:9a:b1:0b:7c:18:23:b2:aa:ce:a1:47:23:ab:
                    79:b2:c0:bd:d6:cd:5e:b4:10:01:67:3a:fa:d1:bc:
                    31:7a:52:fc:82:ad:da:32:41:65:cb:65:27:17:53:
                    a5:c2:3c:fb:7e:b2:5a:be:00:d8:96:61:c4:16:3f:
                    51:f0:c7:5a:68:ad:3e:a0:75:ba:98:88:70:f9:93:
                    90:47:1e:56:8d:fe:df:43:44:ca:c5:ea:3b:37:53:
                    10:13:e5:95:e5:17:5d:1e:52:5e:ee:bf:e8:f9:1c:
                    f2:85:5b:cb:e1:5a:06:f8:ce:d5:a8:dc:c8:eb:a3:
                    92:c9:c5:27:4a:0a:c9:16:09:04:35:2b:7a:33:e7:
                    64:4b:17:8e:a1:1c:49:55:91:fc:aa:13:43:c1:94:
                    0b:e4:5e:e0:8a:5e:d3:bf:2a:c8:7a:91:94:a3:23:
                    61:9f:60:64:36:01:ed:0b:61:63:01:c4:36:85:6f:
                    37:8d:68:a7:3e:77:1e:67:f5:ee:d4:20:ac:e4:bc:
                    83:dd:14:39:f2:d5:00:23:2c:b2:38:90:5b:a7:f7:
                    ee:91:7e:27:e1:f0:92:dc:7a:f5:87:2e:32:dd:36:
                    f0:9b:8e:34:a0:b2:cd:91:b1:c7:7e:a0:25:75:df:
                    a9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EC:7B:B9:32:1F:A4:A0:C9:99:39:CE:5A:6D:80:6E:5C:FB:29:DA
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E03D7D340A3411F08F3BD52BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.63.0/24
                  103.151.26.0/24
                  113.203.208.0-113.203.220.255
                  113.203.222.0/23
                  113.203.227.0/24
                  113.203.229.0-113.203.231.255
                  113.203.241.0-113.203.246.255
                  113.203.248.0/24
                  113.203.252.0/22
                  115.167.6.0/24
                  115.167.15.0-115.167.19.255
                  115.167.28.0/22
                  115.167.57.0-115.167.61.255
                  115.167.64.0/24
                  115.167.73.0/24
                  115.167.78.0/24
                  115.167.101.0-115.167.103.255
                  115.167.117.0-115.167.119.255
                  115.167.123.0-115.167.125.255
                  175.110.64.0/22
                  175.110.89.0-175.110.91.255
                  175.110.97.0-175.110.98.255
                  175.110.101.0/24
                  175.110.104.0/21
                  180.178.142.0/24
                  180.178.144.0/24
                  180.178.146.0-180.178.150.255
                  180.178.160.0-180.178.171.255
                  180.178.176.0/20
                  202.92.26.0/24
                  223.29.228.0/23
                  223.29.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:d2:5d:d4:03:a8:82:fa:f0:34:f9:f4:0b:53:c4:94:07:5e:
         36:4a:fb:e4:92:22:5a:5a:27:e4:3f:ff:26:0d:72:0b:dc:33:
         8b:0f:51:9b:a2:dd:72:19:fd:d4:5f:a3:85:8a:ba:fe:8f:a3:
         7c:2d:94:04:fc:fb:15:47:32:08:14:1c:7d:36:21:48:dd:e4:
         a2:ad:3c:ed:e1:8d:a0:eb:29:ea:0c:a8:a6:b4:8a:2e:f8:89:
         5e:fd:0e:7b:72:3c:74:57:ba:69:1e:03:37:84:83:17:67:6a:
         5b:d9:37:c4:af:25:5d:d0:9c:2d:22:86:1c:e6:a4:f2:dd:9a:
         6c:59:42:e4:0d:72:e8:ea:64:5d:2e:87:0c:55:43:74:f7:be:
         02:b7:d3:25:a1:66:d9:b2:e9:7d:71:94:79:d3:92:93:ae:b9:
         57:86:aa:06:39:c4:9d:f0:7b:ed:35:e5:e4:62:46:1c:24:2b:
         50:32:83:22:26:91:b1:94:a6:0c:68:41:73:f1:25:e1:f8:a2:
         d4:78:a6:2a:cc:bd:59:40:88:91:8d:3d:ad:86:08:2c:89:41:
         66:05:5b:8e:ee:86:b3:7a:37:17:27:f0:3f:f4:4c:c2:e0:d9:
         3d:e4:35:53:af:63:10:07:6f:19:b0:22:78:3a:50:23:0f:dc:
         ac:90:5d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:02:38 2025 by rpki-client