Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/23F7FB1860F311EE9EA57D4DC4F9AE02.roa
File:                     23F7FB1860F311EE9EA57D4DC4F9AE02.roa (raw, json)
Hash identifier:          Csvk1N+RqfogIlpzj8AP5afwrzHIzExQ9Ej0vU+cXsI=
Subject key identifier:   F7:B1:32:03:1F:18:8C:E0:34:02:43:C5:3E:D0:57:FB:52:19:12:66
Certificate issuer:       /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial:       34C5
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/23F7FB1860F311EE9EA57D4DC4F9AE02.roa
Signing time:             Mon 02 Oct 2023 07:22:39 +0000
ROA not before:           Mon 02 Oct 2023 07:22:39 +0000
ROA not after:            Wed 31 Jan 2024 00:00:00 +0000
asID:                     131090
IP address blocks:        61.7.128.0/24 maxlen: 24
                          61.7.129.0/24 maxlen: 24
                          61.7.130.0/24 maxlen: 24
                          61.7.131.0/24 maxlen: 24
                          61.7.132.0/24 maxlen: 24
                          61.7.133.0/24 maxlen: 24
                          61.7.134.0/24 maxlen: 24
                          61.7.135.0/24 maxlen: 24
                          61.7.136.0/24 maxlen: 24
                          61.7.137.0/24 maxlen: 24
                          61.7.138.0/24 maxlen: 24
                          61.7.139.0/24 maxlen: 24
                          61.7.140.0/24 maxlen: 24
                          61.7.141.0/24 maxlen: 24
                          61.7.142.0/23 maxlen: 23
                          61.7.142.0/24 maxlen: 24
                          61.7.143.0/24 maxlen: 24
                          61.7.144.0/20 maxlen: 24
                          61.7.160.0/21 maxlen: 24
                          61.7.168.0/24 maxlen: 24
                          61.7.169.0/24 maxlen: 24
                          61.7.170.0/24 maxlen: 24
                          61.7.171.0/24 maxlen: 24
                          61.7.172.0/24 maxlen: 24
                          61.7.173.0/24 maxlen: 24
                          61.7.174.0/24 maxlen: 24
                          61.7.175.0/24 maxlen: 24
                          61.7.176.0/24 maxlen: 24
                          61.7.177.0/24 maxlen: 24
                          61.7.178.0/24 maxlen: 24
                          61.7.179.0/24 maxlen: 24
                          61.7.180.0/24 maxlen: 24
                          61.7.181.0/24 maxlen: 24
                          61.7.182.0/24 maxlen: 24
                          61.7.183.0/24 maxlen: 24
                          61.7.184.0/24 maxlen: 24
                          61.7.185.0/24 maxlen: 24
                          61.7.186.0/24 maxlen: 24
                          61.7.187.0/24 maxlen: 24
                          61.7.188.0/24 maxlen: 24
                          61.7.189.0/24 maxlen: 24
                          61.7.190.0/24 maxlen: 24
                          61.7.191.0/24 maxlen: 24
                          103.10.228.0/22 maxlen: 22
                          103.10.228.0/24 maxlen: 24
                          103.10.229.0/24 maxlen: 24
                          103.10.230.0/24 maxlen: 24
                          103.10.231.0/24 maxlen: 24
                          110.77.128.0/17 maxlen: 24
                          110.78.128.0/21 maxlen: 24
                          110.78.136.0/24 maxlen: 24
                          110.78.137.0/24 maxlen: 24
                          110.78.138.0/24 maxlen: 24
                          110.78.139.0/24 maxlen: 24
                          110.78.140.0/24 maxlen: 24
                          110.78.141.0/24 maxlen: 24
                          110.78.142.0/24 maxlen: 24
                          110.78.143.0/24 maxlen: 24
                          110.78.144.0/24 maxlen: 24
                          110.78.145.0/24 maxlen: 24
                          110.78.146.0/24 maxlen: 24
                          110.78.147.0/24 maxlen: 24
                          110.78.148.0/24 maxlen: 24
                          110.78.149.0/24 maxlen: 24
                          110.78.150.0/24 maxlen: 24
                          110.78.151.0/24 maxlen: 24
                          110.78.152.0/24 maxlen: 24
                          110.78.153.0/24 maxlen: 24
                          110.78.154.0/24 maxlen: 24
                          110.78.155.0/24 maxlen: 24
                          110.78.156.0/24 maxlen: 24
                          110.78.157.0/24 maxlen: 24
                          110.78.158.0/24 maxlen: 24
                          110.78.159.0/24 maxlen: 24
                          110.78.160.0/21 maxlen: 21
                          110.78.160.0/24 maxlen: 24
                          110.78.161.0/24 maxlen: 24
                          110.78.162.0/24 maxlen: 24
                          110.78.163.0/24 maxlen: 24
                          110.78.164.0/24 maxlen: 24
                          110.78.165.0/24 maxlen: 24
                          110.78.166.0/24 maxlen: 24
                          110.78.167.0/24 maxlen: 24
                          110.78.168.0/24 maxlen: 24
                          110.78.169.0/24 maxlen: 24
                          110.78.170.0/24 maxlen: 24
                          110.78.171.0/24 maxlen: 24
                          110.78.172.0/24 maxlen: 24
                          110.78.173.0/24 maxlen: 24
                          110.78.174.0/24 maxlen: 24
                          110.78.175.0/24 maxlen: 24
                          110.78.176.0/24 maxlen: 24
                          110.78.177.0/24 maxlen: 24
                          110.78.178.0/24 maxlen: 24
                          110.78.179.0/24 maxlen: 24
                          110.78.180.0/24 maxlen: 24
                          110.78.181.0/24 maxlen: 24
                          110.78.182.0/24 maxlen: 24
                          110.78.183.0/24 maxlen: 24
                          110.78.184.0/24 maxlen: 24
                          110.78.185.0/24 maxlen: 24
                          110.78.186.0/24 maxlen: 24
                          110.78.187.0/24 maxlen: 24
                          110.78.188.0/24 maxlen: 24
                          110.78.189.0/24 maxlen: 24
                          110.78.190.0/24 maxlen: 24
                          110.78.191.0/24 maxlen: 24
                          116.58.224.0/24 maxlen: 24
                          116.58.225.0/24 maxlen: 24
                          116.58.226.0/24 maxlen: 24
                          116.58.227.0/24 maxlen: 24
                          116.58.228.0/24 maxlen: 24
                          116.58.229.0/24 maxlen: 24
                          116.58.230.0/24 maxlen: 24
                          116.58.231.0/24 maxlen: 24
                          116.58.232.0/24 maxlen: 24
                          116.58.233.0/24 maxlen: 24
                          116.58.234.0/24 maxlen: 24
                          116.58.235.0/24 maxlen: 24
                          116.58.236.0/24 maxlen: 24
                          116.58.237.0/24 maxlen: 24
                          116.58.238.0/24 maxlen: 24
                          116.58.239.0/24 maxlen: 24
                          116.58.240.0/24 maxlen: 24
                          116.58.241.0/24 maxlen: 24
                          116.58.242.0/24 maxlen: 24
                          116.58.243.0/24 maxlen: 24
                          116.58.244.0/24 maxlen: 24
                          116.58.245.0/24 maxlen: 24
                          116.58.246.0/24 maxlen: 24
                          116.58.247.0/24 maxlen: 24
                          116.58.248.0/24 maxlen: 24
                          116.58.249.0/24 maxlen: 24
                          116.58.250.0/24 maxlen: 24
                          116.58.251.0/24 maxlen: 24
                          116.58.252.0/24 maxlen: 24
                          116.58.253.0/24 maxlen: 24
                          116.58.254.0/24 maxlen: 24
                          116.58.255.0/24 maxlen: 24
                          119.42.64.0/18 maxlen: 24
                          2001:c38:b000::/36 maxlen: 36
                          2001:c38:b010::/47 maxlen: 47

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13509 (0x34c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
        Validity
            Not Before: Oct  2 07:22:39 2023 GMT
            Not After : Jan 31 00:00:00 2024 GMT
        Subject: CN=651a6fbf-0643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:74:74:7d:fb:4d:59:99:52:49:ff:54:c6:95:
                    7e:c8:59:87:fe:7a:c9:da:7f:20:a7:61:de:ca:b3:
                    0a:52:8e:bd:25:a0:77:45:c8:0e:72:db:81:de:72:
                    e0:9e:d6:da:4b:c2:d4:e0:e4:42:88:ad:b4:d8:d5:
                    3a:10:86:f1:80:40:6a:76:1d:22:a9:20:82:1b:06:
                    76:f4:91:7c:25:b4:22:b0:d8:aa:42:1c:08:78:7d:
                    fa:70:70:be:05:bc:63:86:da:a6:54:15:21:17:f4:
                    c5:a1:24:d9:df:e1:2a:36:4d:1a:af:76:91:69:05:
                    36:cb:49:d4:b8:7f:c3:19:bb:6e:80:2f:ac:bd:24:
                    c3:7f:d6:a3:aa:62:c3:cc:72:a7:89:37:0e:8a:a6:
                    6c:7f:b1:cc:50:a1:d7:25:79:be:0b:85:30:49:aa:
                    b7:f4:f9:5f:96:76:38:f6:6d:f3:7f:de:d0:9c:8c:
                    82:1a:f1:63:2b:1c:f3:b8:29:dc:66:5e:c1:98:4f:
                    87:24:24:b2:81:de:3a:3b:37:46:e0:9c:da:2a:6d:
                    b8:9c:c5:4f:bc:c0:8c:64:98:10:c0:2d:f2:57:68:
                    27:f4:35:40:51:8d:4c:b6:d4:2e:16:68:ce:6a:d7:
                    8b:b5:a6:a1:3c:3c:9c:c9:9d:7f:c3:29:13:b6:33:
                    18:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B1:32:03:1F:18:8C:E0:34:02:43:C5:3E:D0:57:FB:52:19:12:66
            X509v3 Authority Key Identifier:
                keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/23F7FB1860F311EE9EA57D4DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.7.128.0/18
                  103.10.228.0/22
                  110.77.128.0/17
                  110.78.128.0/18
                  116.58.224.0/19
                  119.42.64.0/18
                IPv6:
                  2001:c38:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         15:1a:13:75:0f:a1:cc:cc:48:67:d3:3e:db:43:44:08:2f:98:
         fe:59:1b:ec:01:eb:e2:23:34:9c:f6:df:bf:46:25:f7:a5:22:
         2a:04:06:31:f4:8b:9e:dd:f4:51:17:a4:23:ba:a9:d7:8c:89:
         b7:a1:4e:65:a4:bf:87:4c:7b:44:95:0f:9b:be:e3:39:48:1b:
         5f:76:d8:58:42:63:d0:16:52:4b:ba:b5:47:18:48:f0:8f:29:
         c7:e9:17:d1:28:d7:05:23:ff:ba:2f:f8:91:d3:07:68:0d:70:
         c7:66:fb:d6:c8:3f:a3:0b:29:e3:40:53:d0:4f:a4:a2:ac:b0:
         db:67:f6:17:d9:82:23:ec:6d:d0:12:c1:f1:e7:47:01:ae:2d:
         d6:1a:ae:55:2b:e3:c5:2f:cf:a5:c6:05:e0:a2:ea:6f:2e:c8:
         7f:84:a5:2e:06:1f:1a:5c:f0:33:f5:88:94:2d:33:66:3d:99:
         df:00:3b:ef:ad:9e:89:5f:ab:c9:65:a8:1a:0a:63:d6:d0:3b:
         f5:2d:8d:b8:7e:8d:4d:72:c3:69:dc:aa:de:bb:c7:8c:b1:e8:
         7d:c5:d8:de:90:aa:69:f0:a5:05:47:86:8a:0b:17:a1:49:c1:
         e6:7f:0b:44:ec:97:26:f1:d9:29:37:3a:1b:ed:de:c0:d3:cf:
         9b:a1:fd:19
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgICNMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz
M0E4ODc1MEUwHhcNMjMxMDAyMDcyMjM5WhcNMjQwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTFhNmZiZi0wNjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo3R0fftNWZlSSf9UxpV+yFmH/nrJ2n8gp2HeyrMKUo69JaB3RcgOctuB3nLg
ntbaS8LU4ORCiK202NU6EIbxgEBqdh0iqSCCGwZ29JF8JbQisNiqQhwIeH36cHC+
BbxjhtqmVBUhF/TFoSTZ3+EqNk0ar3aRaQU2y0nUuH/DGbtugC+svSTDf9ajqmLD
zHKniTcOiqZsf7HMUKHXJXm+C4UwSaq39PlflnY49m3zf97QnIyCGvFjKxzzuCnc
Zl7BmE+HJCSygd46OzdG4JzaKm24nMVPvMCMZJgQwC3yV2gn9DVAUY1MttQuFmjO
ateLtaahPDycyZ1/wykTtjMY+QIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFPexMgMf
GIzgNAJDxT7QV/tSGRJmMB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE
NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk
UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjU0NzUvQUI0NDc5NzIxRDc4MTFFMkFEQjZGMkM0MDhCMDJDRDIvMjNGN0ZCMTg2
MEYzMTFFRTlFQTU3RDREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTQYIKwYBBQUHAQcBAf8E
PjA8MCoEAgABMCQDBAY9B4ADBAJnCuQDBAduTYADBAZuToADBAV0OuADBAZ3KkAw
DgQCAAIwCAMGBCABDDiwMA0GCSqGSIb3DQEBCwUAA4IBAQAVGhN1D6HMzEhn0z7b
Q0QIL5j+WRvsAeviIzSc9t+/RiX3pSIqBAYx9Iue3fRRF6QjuqnXjIm3oU5lpL+H
THtElQ+bvuM5SBtfdthYQmPQFlJLurVHGEjwjynH6RfRKNcFI/+6L/iR0wdoDXDH
ZvvWyD+jCynjQFPQT6SirLDbZ/YX2YIj7G3QEsHx50cBri3WGq5VK+PFL8+lxgXg
oupvLsh/hKUuBh8aXPAz9YiULTNmPZnfADvvrZ6JX6vJZagaCmPW0Dv1LY24fo1N
csNp3Kreu8eMseh9xdjekKpp8KUFR4aKCxehScHmfwtE7Jcm8dkpNzob7d7A08+b
of0Z
-----END CERTIFICATE-----
Generated at Mon Oct 2 09:05:47 2023 by rpki-client on console-ams.rpki-client.org