Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/23C20980B47611EBA2AD6B4AC4F9AE02.roa
File:                     23C20980B47611EBA2AD6B4AC4F9AE02.roa (raw, json)
Hash identifier:          joR12bh0XpGu478p1fa9DbCkZx48QwES24qinVGjAvg=
Subject key identifier:   7E:FD:4E:CF:9E:92:98:22:7B:C6:6C:B2:38:B1:67:C3:87:F3:0A:3B
Certificate issuer:       /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial:       09F3
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/23C20980B47611EBA2AD6B4AC4F9AE02.roa
Signing time:             Tue 13 Jun 2023 03:11:55 +0000
ROA not before:           Tue 13 Jun 2023 03:11:55 +0000
ROA not after:            Fri 01 Mar 2024 00:00:00 +0000
asID:                     38322
IP address blocks:        42.152.0.0/14 maxlen: 14
                          42.153.4.0/24 maxlen: 24
                          42.153.5.0/24 maxlen: 24
                          42.153.6.0/24 maxlen: 24
                          42.153.7.0/24 maxlen: 24
                          42.153.8.0/24 maxlen: 24
                          42.153.9.0/24 maxlen: 24
                          42.153.10.0/24 maxlen: 24
                          42.153.11.0/24 maxlen: 24
                          42.153.16.0/24 maxlen: 24
                          42.153.19.0/24 maxlen: 24
                          42.153.20.0/24 maxlen: 24
                          42.153.21.0/24 maxlen: 24
                          42.153.22.0/24 maxlen: 24
                          42.153.23.0/24 maxlen: 24
                          42.153.24.0/24 maxlen: 24
                          42.153.25.0/24 maxlen: 24
                          42.153.26.0/24 maxlen: 24
                          42.153.28.0/24 maxlen: 24
                          42.153.29.0/24 maxlen: 24
                          42.153.32.0/24 maxlen: 24
                          42.153.33.0/24 maxlen: 24
                          42.153.34.0/24 maxlen: 24
                          42.153.35.0/24 maxlen: 24
                          42.153.36.0/24 maxlen: 24
                          42.153.37.0/24 maxlen: 24
                          42.153.38.0/24 maxlen: 24
                          42.153.39.0/24 maxlen: 24
                          42.153.40.0/24 maxlen: 24
                          42.153.41.0/24 maxlen: 24
                          42.153.42.0/24 maxlen: 24
                          42.153.43.0/24 maxlen: 24
                          42.153.44.0/24 maxlen: 24
                          42.153.45.0/24 maxlen: 24
                          42.153.46.0/24 maxlen: 24
                          42.153.47.0/24 maxlen: 24
                          42.153.48.0/24 maxlen: 24
                          42.153.49.0/24 maxlen: 24
                          42.153.50.0/24 maxlen: 24
                          42.153.51.0/24 maxlen: 24
                          42.153.52.0/24 maxlen: 24
                          42.153.53.0/24 maxlen: 24
                          42.153.54.0/24 maxlen: 24
                          42.153.55.0/24 maxlen: 24
                          42.153.56.0/24 maxlen: 24
                          42.153.57.0/24 maxlen: 24
                          42.153.58.0/24 maxlen: 24
                          42.153.59.0/24 maxlen: 24
                          42.153.60.0/24 maxlen: 24
                          42.153.61.0/24 maxlen: 24
                          42.153.62.0/24 maxlen: 24
                          42.153.63.0/24 maxlen: 24
                          42.153.89.0/24 maxlen: 24
                          42.153.95.0/24 maxlen: 24
                          42.153.96.0/24 maxlen: 24
                          42.153.128.0/24 maxlen: 24
                          42.153.129.0/24 maxlen: 24
                          42.153.130.0/24 maxlen: 24
                          42.153.131.0/24 maxlen: 24
                          42.153.132.0/24 maxlen: 24
                          42.153.133.0/24 maxlen: 24
                          42.153.134.0/24 maxlen: 24
                          42.153.135.0/24 maxlen: 24
                          42.153.136.0/24 maxlen: 24
                          42.153.137.0/24 maxlen: 24
                          42.153.138.0/24 maxlen: 24
                          42.153.139.0/24 maxlen: 24
                          42.153.140.0/24 maxlen: 24
                          42.153.141.0/24 maxlen: 24
                          42.153.142.0/24 maxlen: 24
                          42.153.143.0/24 maxlen: 24
                          42.153.144.0/24 maxlen: 24
                          42.153.145.0/24 maxlen: 24
                          42.153.146.0/24 maxlen: 24
                          42.153.147.0/24 maxlen: 24
                          42.153.148.0/24 maxlen: 24
                          42.153.149.0/24 maxlen: 24
                          42.153.150.0/24 maxlen: 24
                          42.153.151.0/24 maxlen: 24
                          42.153.152.0/24 maxlen: 24
                          42.153.153.0/24 maxlen: 24
                          42.153.154.0/24 maxlen: 24
                          42.153.155.0/24 maxlen: 24
                          42.153.156.0/24 maxlen: 24
                          42.153.157.0/24 maxlen: 24
                          42.153.158.0/24 maxlen: 24
                          42.153.159.0/24 maxlen: 24
                          120.139.0.0/24 maxlen: 24
                          120.139.1.0/24 maxlen: 24
                          120.140.0.0/17 maxlen: 17
                          120.140.2.0/23 maxlen: 23
                          120.140.4.0/23 maxlen: 23
                          120.140.6.0/23 maxlen: 23
                          120.140.8.0/23 maxlen: 23
                          120.140.10.0/23 maxlen: 23
                          120.140.12.0/23 maxlen: 23
                          120.140.14.0/23 maxlen: 23
                          120.140.16.0/23 maxlen: 23
                          120.140.18.0/23 maxlen: 23
                          120.140.20.0/23 maxlen: 23
                          120.140.22.0/23 maxlen: 23
                          120.140.24.0/23 maxlen: 23
                          120.140.26.0/23 maxlen: 23
                          120.140.28.0/23 maxlen: 23
                          120.140.30.0/23 maxlen: 23
                          120.140.32.0/23 maxlen: 23
                          120.140.34.0/23 maxlen: 23
                          120.140.36.0/23 maxlen: 23
                          120.140.38.0/23 maxlen: 23
                          120.140.40.0/23 maxlen: 23
                          120.140.42.0/23 maxlen: 23
                          120.140.44.0/23 maxlen: 23
                          120.140.46.0/23 maxlen: 23
                          120.140.48.0/23 maxlen: 23
                          120.140.50.0/23 maxlen: 23
                          120.140.52.0/23 maxlen: 23
                          120.140.56.0/23 maxlen: 23
                          120.140.58.0/23 maxlen: 23
                          120.140.62.0/23 maxlen: 23
                          120.140.64.0/23 maxlen: 23
                          120.140.66.0/23 maxlen: 23
                          120.140.68.0/23 maxlen: 23
                          120.140.72.0/23 maxlen: 23
                          120.140.74.0/23 maxlen: 23
                          122.255.96.0/19 maxlen: 19
                          2401:3c00::/46 maxlen: 46
                          2401:3c00:4::/46 maxlen: 46
                          2401:3c00:8::/46 maxlen: 46
                          2401:3c00:c::/46 maxlen: 46
                          2401:3c00:10::/46 maxlen: 46
                          2401:3c00:14::/46 maxlen: 46
                          2401:3c00:18::/46 maxlen: 46
                          2401:3c00:40::/46 maxlen: 46
                          2401:3c00:44::/46 maxlen: 46
                          2401:3c00:48::/46 maxlen: 46
                          2401:3c00:4c::/46 maxlen: 46
                          2401:3c00:50::/46 maxlen: 46
                          2401:3c00:54::/46 maxlen: 46
                          2401:3c00:58::/46 maxlen: 46
                          2401:3c00:a4::/48 maxlen: 48
                          2401:3c00:a5::/48 maxlen: 48
                          2401:3c00:a6::/48 maxlen: 48
                          2401:3c00:a7::/48 maxlen: 48
                          2401:3c00:a8::/48 maxlen: 48
                          2401:3c00:a9::/48 maxlen: 48
                          2401:3c00:c0::/46 maxlen: 46
                          2401:3c00:c8::/46 maxlen: 46
                          2401:3c00:cc::/46 maxlen: 46
                          2401:3c00:d8::/48 maxlen: 48
                          2401:3c00:d9::/48 maxlen: 48
                          2401:3c00:da::/48 maxlen: 48
                          2401:3c00:db::/48 maxlen: 48
                          2401:3c00:dc::/48 maxlen: 48
                          2401:3c00:100::/43 maxlen: 43
                          2401:3c00:120::/43 maxlen: 43
                          2401:3c00:180::/43 maxlen: 43
                          2401:3c00:1a0::/43 maxlen: 43
                          2401:3c00:200::/42 maxlen: 42
                          2401:3c00:200::/48 maxlen: 48
                          2401:3c00:201::/48 maxlen: 48
                          2401:3c00:241::/48 maxlen: 48
                          2401:3c00:242::/48 maxlen: 48
                          2401:3c00:243::/48 maxlen: 48
                          2401:3c00:244::/48 maxlen: 48
                          2401:3c00:245::/48 maxlen: 48
                          2401:3c00:246::/48 maxlen: 48
                          2401:3c00:247::/48 maxlen: 48
                          2401:3c00:248::/48 maxlen: 48
                          2401:3c00:249::/48 maxlen: 48
                          2401:3c00:24a::/48 maxlen: 48
                          2401:3c00:24b::/48 maxlen: 48
                          2401:3c00:24c::/48 maxlen: 48
                          2401:3c00:24d::/48 maxlen: 48
                          2401:3c00:24e::/48 maxlen: 48
                          2401:3c00:24f::/48 maxlen: 48
                          2401:3c00:250::/48 maxlen: 48
                          2401:3c00:251::/48 maxlen: 48
                          2401:3c00:252::/48 maxlen: 48
                          2401:3c00:253::/48 maxlen: 48
                          2401:3c00:254::/48 maxlen: 48
                          2401:3c00:255::/48 maxlen: 48
                          2401:3c00:256::/48 maxlen: 48
                          2401:3c00:257::/48 maxlen: 48
                          2401:3c00:258::/48 maxlen: 48
                          2401:3c00:259::/48 maxlen: 48
                          2401:3c00:25a::/48 maxlen: 48
                          2401:3c00:25c::/48 maxlen: 48
                          2401:3c00:25d::/48 maxlen: 48
                          2401:3c00:25f::/48 maxlen: 48
                          2401:3c00:260::/48 maxlen: 48
                          2401:3c00:261::/48 maxlen: 48
                          2401:3c00:262::/48 maxlen: 48
                          2401:3c00:280::/48 maxlen: 48
                          2401:3c00:281::/48 maxlen: 48
                          2401:3c00:290::/48 maxlen: 48
                          2401:3c00:291::/48 maxlen: 48
                          2401:3c00:292::/48 maxlen: 48
                          2401:3c00:293::/48 maxlen: 48
                          2401:3c00:294::/48 maxlen: 48
                          2401:3c00:295::/48 maxlen: 48
                          2401:3c00:2a0::/48 maxlen: 48
                          2401:3c00:2a1::/48 maxlen: 48
                          2401:3c00:2a2::/48 maxlen: 48
                          2401:3c00:2a3::/48 maxlen: 48
                          2401:3c00:2a4::/48 maxlen: 48
                          2401:3c00:2a5::/48 maxlen: 48
                          2401:3c00:2b0::/48 maxlen: 48
                          2401:3c00:2b1::/48 maxlen: 48
                          2401:3c00:2b2::/48 maxlen: 48
                          2401:3c00:2b3::/48 maxlen: 48
                          2401:3c00:2b4::/48 maxlen: 48
                          2401:3c00:2b5::/48 maxlen: 48
                          2401:3c00:2c0::/42 maxlen: 42

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2547 (0x9f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
        Validity
            Not Before: Jun 13 03:11:55 2023 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=6487de7b-99fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:01:37:f8:b8:2a:01:99:75:3e:7d:99:94:
                    0e:01:f2:58:11:ac:5d:37:d7:10:90:72:21:40:78:
                    e6:05:3b:f7:d9:11:15:16:17:92:1a:21:ca:03:e2:
                    09:51:7b:6b:8c:14:8e:1a:ee:b7:9f:e2:39:05:69:
                    8d:65:cb:46:08:89:59:8c:35:d9:13:c3:0c:c1:40:
                    f2:85:5e:fb:7b:a3:f9:32:da:2a:d8:87:81:74:46:
                    16:f6:75:07:c8:3d:ca:95:05:cd:d4:5b:32:90:b7:
                    f8:58:9e:2c:fd:c5:89:36:a3:02:48:05:3b:1e:90:
                    c2:4d:49:32:3e:40:25:aa:6b:a9:bc:d5:30:96:74:
                    7e:3d:ea:cd:77:db:03:bb:10:94:3e:20:4b:fb:ab:
                    7f:33:8c:4a:9f:1b:42:3f:99:0f:68:58:e6:d9:60:
                    d5:13:fe:0d:e8:55:73:4b:38:9d:5d:8e:a4:79:23:
                    f8:f7:48:32:d6:8a:f4:32:18:07:ea:5f:59:d9:32:
                    95:cc:e4:6e:be:5e:87:19:af:61:15:1d:dd:72:c0:
                    26:b7:87:fb:ab:1d:aa:d9:86:89:d3:82:99:27:e9:
                    df:a8:7b:6d:0b:c3:2c:95:f5:59:cb:d7:72:61:64:
                    c9:f1:83:91:a8:c6:1a:03:c7:9d:24:9e:5a:e9:c1:
                    2e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:FD:4E:CF:9E:92:98:22:7B:C6:6C:B2:38:B1:67:C3:87:F3:0A:3B
            X509v3 Authority Key Identifier:
                keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/23C20980B47611EBA2AD6B4AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.152.0.0/14
                  120.139.0.0/23
                  120.140.0.0/17
                  122.255.96.0/19
                IPv6:
                  2401:3c00::-2401:3c00:1b:ffff:ffff:ffff:ffff:ffff
                  2401:3c00:40::-2401:3c00:5b:ffff:ffff:ffff:ffff:ffff
                  2401:3c00:a4::-2401:3c00:a9:ffff:ffff:ffff:ffff:ffff
                  2401:3c00:c0::/46
                  2401:3c00:c8::/45
                  2401:3c00:d8::-2401:3c00:dc:ffff:ffff:ffff:ffff:ffff
                  2401:3c00:100::/42
                  2401:3c00:180::/42
                  2401:3c00:200::/42
                  2401:3c00:241::-2401:3c00:25a:ffff:ffff:ffff:ffff:ffff
                  2401:3c00:25c::/47
                  2401:3c00:25f::-2401:3c00:262:ffff:ffff:ffff:ffff:ffff
                  2401:3c00:280::/47
                  2401:3c00:290::-2401:3c00:295:ffff:ffff:ffff:ffff:ffff
                  2401:3c00:2a0::-2401:3c00:2a5:ffff:ffff:ffff:ffff:ffff
                  2401:3c00:2b0::-2401:3c00:2b5:ffff:ffff:ffff:ffff:ffff
                  2401:3c00:2c0::/42

    Signature Algorithm: sha256WithRSAEncryption
         21:f5:1a:85:22:24:17:ea:80:3f:d4:13:f6:81:78:db:0e:77:
         0e:be:16:56:3b:8d:a8:b7:33:ff:53:e1:43:91:2e:71:fa:37:
         10:7e:67:1d:89:ab:3f:3f:e6:f7:42:7f:14:d3:39:2e:01:ea:
         c8:28:76:b9:3d:31:4e:6d:ac:24:5f:48:fe:7e:e7:23:4b:c5:
         78:b2:09:9e:f7:e0:e0:49:af:49:69:cb:48:09:f8:47:fc:82:
         49:9d:94:ca:ba:be:61:0a:fb:74:50:7a:69:08:1f:d2:2d:55:
         8a:fb:de:03:df:4b:39:f6:49:cc:9e:e3:0a:b5:8a:6a:be:68:
         79:5d:64:aa:3c:8a:38:e8:2f:85:df:9a:91:2e:5e:06:78:b6:
         f2:df:4a:9d:e1:bd:73:a1:d5:80:75:0f:c7:35:c4:7b:0e:0b:
         4e:3e:61:01:a6:23:d9:82:5b:f1:00:a6:73:c4:be:e5:6e:cf:
         57:b6:78:f1:0b:8c:ef:f3:57:eb:c1:58:5b:80:2b:4c:a2:31:
         2a:74:3f:63:47:e7:86:51:54:60:1c:ca:f4:1c:b1:ae:bf:7e:
         bf:70:2e:e6:78:ba:3e:7c:89:5e:08:70:87:e0:8f:9b:11:da:
         9a:4f:f0:54:e5:e7:d5:cb:26:a8:25:25:07:e6:36:8c:f5:21:
         4f:08:2c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 24 05:07:03 2023 by rpki-client on console-ams.rpki-client.org