Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/0BDA5F562BCB11EEBC4FF212C4F9AE02.roa
File:                     0BDA5F562BCB11EEBC4FF212C4F9AE02.roa (raw, json)
Hash identifier:          x6A8UKhzdPQaoxh7lIOmikzloYbmeGxzZ+NRA59dXqA=
Subject key identifier:   7B:23:B6:C0:03:5A:52:99:6B:77:B5:5C:93:32:E8:7A:3E:11:B7:C9
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3709
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/0BDA5F562BCB11EEBC4FF212C4F9AE02.roa
Signing time:             Wed 26 Jul 2023 15:42:37 +0000
ROA not before:           Wed 26 Jul 2023 15:42:37 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     17552
IP address blocks:        27.145.0.0/16 maxlen: 24
                          58.8.0.0/16 maxlen: 24
                          58.9.0.0/17 maxlen: 24
                          58.9.128.0/17 maxlen: 24
                          58.10.0.0/17 maxlen: 24
                          58.10.128.0/17 maxlen: 24
                          58.11.0.0/17 maxlen: 24
                          58.11.128.0/17 maxlen: 24
                          61.90.0.0/17 maxlen: 24
                          61.91.128.0/21 maxlen: 24
                          61.91.144.0/21 maxlen: 24
                          61.91.190.0/24 maxlen: 24
                          61.91.191.0/24 maxlen: 24
                          61.91.192.0/24 maxlen: 24
                          61.91.193.0/24 maxlen: 24
                          61.91.201.0/24 maxlen: 24
                          61.91.214.0/24 maxlen: 24
                          110.168.0.0/18 maxlen: 24
                          110.168.64.0/18 maxlen: 24
                          110.168.128.0/18 maxlen: 24
                          110.168.192.0/18 maxlen: 24
                          110.169.0.0/16 maxlen: 16
                          110.169.0.0/17 maxlen: 24
                          110.169.128.0/18 maxlen: 24
                          110.169.192.0/18 maxlen: 24
                          110.171.0.0/18 maxlen: 24
                          110.171.64.0/18 maxlen: 24
                          110.171.128.0/18 maxlen: 24
                          110.171.192.0/18 maxlen: 24
                          114.109.0.0/18 maxlen: 24
                          114.109.64.0/18 maxlen: 24
                          114.109.128.0/18 maxlen: 24
                          114.109.192.0/18 maxlen: 24
                          115.87.0.0/18 maxlen: 24
                          115.87.64.0/18 maxlen: 24
                          115.87.128.0/18 maxlen: 24
                          115.87.192.0/18 maxlen: 24
                          119.46.255.0/24 maxlen: 24
                          119.76.0.0/17 maxlen: 24
                          119.76.128.0/18 maxlen: 24
                          119.76.192.0/18 maxlen: 24
                          124.120.0.0/18 maxlen: 24
                          124.120.64.0/18 maxlen: 24
                          124.120.128.0/18 maxlen: 24
                          124.120.192.0/18 maxlen: 24
                          124.121.0.0/18 maxlen: 24
                          124.121.64.0/18 maxlen: 24
                          124.121.128.0/18 maxlen: 24
                          124.121.192.0/18 maxlen: 24
                          124.122.0.0/18 maxlen: 24
                          124.122.64.0/18 maxlen: 24
                          124.122.128.0/18 maxlen: 24
                          124.122.192.0/18 maxlen: 24
                          171.96.0.0/18 maxlen: 24
                          171.96.64.0/18 maxlen: 24
                          171.96.128.0/18 maxlen: 24
                          171.96.192.0/18 maxlen: 24
                          171.97.0.0/18 maxlen: 24
                          171.97.64.0/18 maxlen: 24
                          171.97.128.0/18 maxlen: 24
                          171.97.192.0/18 maxlen: 24
                          171.98.0.0/18 maxlen: 24
                          171.98.64.0/18 maxlen: 24
                          171.98.128.0/18 maxlen: 24
                          171.98.192.0/18 maxlen: 24
                          171.99.0.0/16 maxlen: 16
                          171.99.0.0/17 maxlen: 24
                          171.99.128.0/18 maxlen: 24
                          171.99.192.0/18 maxlen: 24
                          171.100.0.0/18 maxlen: 24
                          171.100.64.0/18 maxlen: 24
                          171.100.128.0/18 maxlen: 24
                          171.100.192.0/18 maxlen: 24
                          171.101.0.0/18 maxlen: 24
                          171.101.64.0/18 maxlen: 24
                          171.101.128.0/18 maxlen: 24
                          171.101.192.0/18 maxlen: 24
                          182.17.0.0/18 maxlen: 24
                          182.17.64.0/18 maxlen: 24
                          182.17.128.0/18 maxlen: 24
                          182.17.192.0/18 maxlen: 24
                          202.176.64.0/18 maxlen: 18
                          202.176.64.0/19 maxlen: 24
                          202.176.96.0/19 maxlen: 24
                          202.176.128.0/18 maxlen: 18
                          202.176.128.0/19 maxlen: 19
                          202.176.183.0/24 maxlen: 24
                          202.176.184.0/24 maxlen: 24
                          2001:fb1::/32 maxlen: 32
                          2001:fb1::/44 maxlen: 48
                          2001:fb1:10::/44 maxlen: 48
                          2001:fb1:20::/44 maxlen: 48
                          2001:fb1:30::/44 maxlen: 48
                          2001:fb1:40::/44 maxlen: 48
                          2001:fb1:50::/44 maxlen: 48
                          2001:fb1:60::/44 maxlen: 48
                          2001:fb1:70::/44 maxlen: 48
                          2001:fb1:80::/44 maxlen: 48
                          2001:fb1:90::/44 maxlen: 48
                          2001:fb1:a0::/44 maxlen: 48
                          2001:fb1:b0::/44 maxlen: 48
                          2001:fb1:c0::/44 maxlen: 48
                          2001:fb1:d0::/44 maxlen: 48
                          2001:fb1:e0::/44 maxlen: 48
                          2001:fb1:f0::/44 maxlen: 48
                          2001:fb1:100::/44 maxlen: 48
                          2001:fb1:110::/44 maxlen: 48
                          2001:fb1:120::/44 maxlen: 48
                          2001:fb1:130::/44 maxlen: 48
                          2001:fb1:140::/44 maxlen: 48
                          2001:fb1:150::/44 maxlen: 48
                          2001:fb1:160::/44 maxlen: 48
                          2001:fb1:170::/44 maxlen: 48
                          2001:fb1:180::/44 maxlen: 48
                          2001:fb1:fc0::/48 maxlen: 48
                          2001:fb1:fd0::/48 maxlen: 48
                          2001:fb1:fe0::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 27 Jul 2023 04:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14089 (0x3709)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 26 15:42:37 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c13eed-25d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4e:2e:5b:df:60:55:00:7d:e4:e5:8c:ce:92:
                    c7:d5:e4:ca:d2:5d:ee:17:35:69:9b:bb:12:16:57:
                    a2:e2:69:bf:29:64:df:6c:e2:4b:05:b8:5b:fb:a4:
                    0c:28:40:25:74:d7:9a:1e:6e:a5:5d:bb:46:89:8c:
                    ab:82:e5:90:27:8b:e9:25:f1:dd:ca:0b:6b:db:df:
                    3e:38:d5:20:2c:32:d7:b7:d5:90:41:7d:27:34:49:
                    99:83:9a:b1:4b:5b:39:fb:65:ad:71:49:9a:40:f5:
                    c8:3c:7f:ff:4d:7b:6f:4e:a1:c1:b1:c8:0c:ca:b2:
                    8c:dc:fe:e5:54:3b:9c:58:d0:40:8f:06:ed:d4:49:
                    c0:81:80:27:93:b4:8a:bd:bd:2e:13:3f:2d:9f:82:
                    84:6f:b6:b8:96:b2:08:9e:67:a6:79:fe:18:f5:be:
                    53:6b:96:ba:08:c4:6b:7c:35:d3:38:c5:22:4e:29:
                    4b:b5:7c:ab:72:c2:dc:8e:91:11:0f:96:2b:9b:cd:
                    74:8d:11:52:cd:d9:a9:29:4e:8a:94:a6:11:8a:43:
                    bf:4a:69:af:8a:65:2b:de:a5:7b:cc:50:97:7b:c5:
                    ef:c1:ea:69:3c:6d:c8:2f:30:e5:7c:c5:64:bf:d4:
                    00:3c:fd:da:b7:63:b6:e4:2e:74:1e:c8:cd:fc:b1:
                    0a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:23:B6:C0:03:5A:52:99:6B:77:B5:5C:93:32:E8:7A:3E:11:B7:C9
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/0BDA5F562BCB11EEBC4FF212C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.145.0.0/16
                  58.8.0.0/14
                  61.90.0.0/17
                  61.91.128.0/21
                  61.91.144.0/21
                  61.91.190.0-61.91.193.255
                  61.91.201.0/24
                  61.91.214.0/24
                  110.168.0.0/15
                  110.171.0.0/16
                  114.109.0.0/16
                  115.87.0.0/16
                  119.46.255.0/24
                  119.76.0.0/16
                  124.120.0.0-124.122.255.255
                  171.96.0.0-171.101.255.255
                  182.17.0.0/16
                  202.176.64.0-202.176.191.255
                IPv6:
                  2001:fb1::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:0d:f5:32:32:2e:ce:ce:8c:bb:15:9f:f5:a6:88:87:59:12:
         d9:7c:68:9c:1f:fa:d5:fb:b8:78:bd:b3:b0:29:9d:c7:2a:dc:
         ab:f4:4e:1f:04:65:83:d9:ff:58:af:5b:b1:6d:c1:90:70:ae:
         8d:29:a8:4d:f9:6a:64:2c:2b:23:d9:fc:9b:db:81:8d:df:4c:
         83:41:93:0c:f6:48:a9:16:80:12:e1:93:cb:b1:73:ee:b8:62:
         0d:e0:50:0e:bb:84:f9:54:48:6c:de:15:77:ae:b0:ed:a1:37:
         17:15:2b:b7:ad:41:fc:45:11:f0:02:72:63:36:ba:2f:25:01:
         f5:5f:3b:f7:72:22:b8:47:74:c2:e3:62:48:de:18:5d:8c:4c:
         3b:7f:36:ed:6e:ef:c7:6c:d3:eb:6e:ab:b1:64:d9:2b:85:de:
         c1:7b:23:97:f7:51:c1:14:d8:92:e7:ff:0f:e4:1e:99:2a:86:
         8d:16:b1:4a:f1:e4:7e:c9:be:ec:7e:8d:bd:eb:90:4e:e7:d7:
         bc:f1:42:64:9f:4e:31:0b:58:e1:74:2b:47:db:c7:4a:53:e1:
         7f:dd:46:e1:81:04:8d:35:88:57:7e:89:34:7f:bc:e8:20:c1:
         a0:f7:69:1a:50:a2:64:34:25:a3:90:75:86:ec:c0:64:f0:0d:
         69:1a:12:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:02 2024 by rpki-client on console-fra.rpki-client.org