Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/538B227C2BA311EEB031D06FC4F9AE02.roa
File:                     538B227C2BA311EEB031D06FC4F9AE02.roa (raw, json)
Hash identifier:          JQHT2p1QViDx/uGFjPZgI6zRA4YSVcpxxycQplFD8bY=
Subject key identifier:   78:76:8F:07:C1:5D:8D:7F:C0:BD:F2:22:FB:BE:C1:56:B9:09:57:B9
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       36F8
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/538B227C2BA311EEB031D06FC4F9AE02.roa
Signing time:             Wed 26 Jul 2023 11:01:34 +0000
ROA not before:           Wed 26 Jul 2023 11:01:34 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     17552
IP address blocks:        27.145.0.0/17 maxlen: 24
                          27.145.128.0/18 maxlen: 24
                          27.145.192.0/18 maxlen: 24
                          58.8.0.0/17 maxlen: 24
                          58.8.128.0/17 maxlen: 24
                          58.9.0.0/17 maxlen: 24
                          58.9.128.0/17 maxlen: 24
                          58.10.0.0/17 maxlen: 24
                          58.10.128.0/17 maxlen: 24
                          58.11.0.0/17 maxlen: 24
                          58.11.128.0/17 maxlen: 24
                          61.90.0.0/17 maxlen: 24
                          61.91.128.0/21 maxlen: 24
                          61.91.144.0/21 maxlen: 24
                          61.91.190.0/24 maxlen: 24
                          61.91.191.0/24 maxlen: 24
                          61.91.192.0/24 maxlen: 24
                          61.91.193.0/24 maxlen: 24
                          61.91.201.0/24 maxlen: 24
                          61.91.214.0/24 maxlen: 24
                          110.168.0.0/18 maxlen: 24
                          110.168.64.0/18 maxlen: 24
                          110.168.128.0/18 maxlen: 24
                          110.168.192.0/18 maxlen: 24
                          110.169.0.0/18 maxlen: 24
                          110.169.64.0/18 maxlen: 24
                          110.169.128.0/18 maxlen: 24
                          110.169.192.0/18 maxlen: 24
                          110.171.0.0/18 maxlen: 24
                          110.171.64.0/18 maxlen: 24
                          110.171.128.0/18 maxlen: 24
                          110.171.192.0/18 maxlen: 24
                          114.109.0.0/18 maxlen: 24
                          114.109.64.0/18 maxlen: 24
                          114.109.128.0/18 maxlen: 24
                          114.109.192.0/18 maxlen: 24
                          115.87.0.0/18 maxlen: 24
                          115.87.64.0/18 maxlen: 24
                          115.87.128.0/18 maxlen: 24
                          115.87.192.0/18 maxlen: 24
                          119.46.255.0/24 maxlen: 24
                          119.76.0.0/17 maxlen: 24
                          119.76.128.0/18 maxlen: 24
                          119.76.192.0/18 maxlen: 24
                          124.120.0.0/18 maxlen: 24
                          124.120.64.0/18 maxlen: 24
                          124.120.128.0/18 maxlen: 24
                          124.120.192.0/18 maxlen: 24
                          124.121.0.0/18 maxlen: 24
                          124.121.64.0/18 maxlen: 24
                          124.121.128.0/18 maxlen: 24
                          124.121.192.0/18 maxlen: 24
                          124.122.0.0/18 maxlen: 24
                          124.122.64.0/18 maxlen: 24
                          124.122.128.0/18 maxlen: 24
                          124.122.192.0/18 maxlen: 24
                          171.96.0.0/18 maxlen: 24
                          171.96.64.0/18 maxlen: 24
                          171.96.128.0/18 maxlen: 24
                          171.96.192.0/18 maxlen: 24
                          171.97.0.0/18 maxlen: 24
                          171.97.64.0/18 maxlen: 24
                          171.97.128.0/18 maxlen: 24
                          171.97.192.0/18 maxlen: 24
                          171.98.0.0/18 maxlen: 24
                          171.98.64.0/18 maxlen: 24
                          171.98.128.0/18 maxlen: 24
                          171.98.192.0/18 maxlen: 24
                          171.99.0.0/18 maxlen: 24
                          171.99.64.0/18 maxlen: 24
                          171.99.128.0/18 maxlen: 24
                          171.99.192.0/18 maxlen: 24
                          171.100.0.0/18 maxlen: 24
                          171.100.64.0/18 maxlen: 24
                          171.100.128.0/18 maxlen: 24
                          171.100.192.0/18 maxlen: 24
                          171.101.0.0/18 maxlen: 24
                          171.101.64.0/18 maxlen: 24
                          171.101.128.0/18 maxlen: 24
                          171.101.192.0/18 maxlen: 24
                          182.17.0.0/18 maxlen: 24
                          182.17.64.0/18 maxlen: 24
                          182.17.128.0/18 maxlen: 24
                          182.17.192.0/18 maxlen: 24
                          202.176.64.0/18 maxlen: 18
                          202.176.64.0/19 maxlen: 24
                          202.176.96.0/19 maxlen: 24
                          202.176.128.0/18 maxlen: 18
                          202.176.128.0/19 maxlen: 19
                          202.176.183.0/24 maxlen: 24
                          202.176.184.0/24 maxlen: 24
                          2001:fb1::/32 maxlen: 32
                          2001:fb1::/44 maxlen: 48
                          2001:fb1:10::/44 maxlen: 48
                          2001:fb1:20::/44 maxlen: 48
                          2001:fb1:30::/44 maxlen: 48
                          2001:fb1:40::/44 maxlen: 48
                          2001:fb1:50::/44 maxlen: 48
                          2001:fb1:60::/44 maxlen: 48
                          2001:fb1:70::/44 maxlen: 48
                          2001:fb1:80::/44 maxlen: 48
                          2001:fb1:90::/44 maxlen: 48
                          2001:fb1:a0::/44 maxlen: 48
                          2001:fb1:b0::/44 maxlen: 48
                          2001:fb1:c0::/44 maxlen: 48
                          2001:fb1:d0::/44 maxlen: 48
                          2001:fb1:e0::/44 maxlen: 48
                          2001:fb1:f0::/44 maxlen: 48
                          2001:fb1:100::/44 maxlen: 48
                          2001:fb1:110::/44 maxlen: 48
                          2001:fb1:120::/44 maxlen: 48
                          2001:fb1:130::/44 maxlen: 48
                          2001:fb1:140::/44 maxlen: 48
                          2001:fb1:150::/44 maxlen: 48
                          2001:fb1:160::/44 maxlen: 48
                          2001:fb1:170::/44 maxlen: 48
                          2001:fb1:180::/44 maxlen: 48
                          2001:fb1:fc0::/48 maxlen: 48
                          2001:fb1:fd0::/48 maxlen: 48
                          2001:fb1:fe0::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 26 Jul 2023 14:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14072 (0x36f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 26 11:01:34 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c0fd0e-6424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:75:82:8e:98:e0:0b:2a:67:05:62:6c:6b:d4:
                    48:88:a8:ea:af:b8:12:d6:f5:65:ec:51:7b:b1:c9:
                    2b:fb:c7:c6:6a:f4:38:27:da:1e:6e:0d:10:10:7e:
                    f3:94:63:92:2e:86:56:81:eb:13:10:7b:78:a2:60:
                    84:17:78:26:2f:96:9d:44:54:9b:9a:cf:de:ea:52:
                    f9:11:02:f6:1d:78:38:df:ae:de:e1:e5:f0:50:ff:
                    01:3b:0e:73:ba:cc:ac:d2:39:2d:e1:d0:a3:8d:7d:
                    71:5a:dd:b2:5a:5a:8c:b3:74:50:9c:a6:47:23:08:
                    ad:7d:53:51:35:86:b0:7c:f2:41:b6:ef:29:4b:25:
                    46:f2:aa:17:30:bc:c4:97:61:87:b7:4b:d2:aa:a5:
                    b5:b1:7e:c9:5e:53:a8:50:eb:d2:d7:d2:88:ee:bb:
                    b1:7b:a5:6e:40:90:58:09:d8:c3:e6:ef:98:68:cd:
                    50:07:3f:9a:8c:ec:8d:8d:d4:e0:cc:bd:b4:88:ea:
                    a1:3a:f9:76:a3:e9:4c:66:3a:8f:61:aa:db:89:c3:
                    47:d0:e5:61:94:1c:e3:3d:f3:8b:de:3a:1b:32:e5:
                    03:99:e2:d5:e0:62:09:be:e4:12:3a:51:a7:99:33:
                    78:11:21:fc:61:01:a6:7c:ff:80:7b:11:6d:de:29:
                    22:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:76:8F:07:C1:5D:8D:7F:C0:BD:F2:22:FB:BE:C1:56:B9:09:57:B9
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/538B227C2BA311EEB031D06FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.145.0.0/16
                  58.8.0.0/14
                  61.90.0.0/17
                  61.91.128.0/21
                  61.91.144.0/21
                  61.91.190.0-61.91.193.255
                  61.91.201.0/24
                  61.91.214.0/24
                  110.168.0.0/15
                  110.171.0.0/16
                  114.109.0.0/16
                  115.87.0.0/16
                  119.46.255.0/24
                  119.76.0.0/16
                  124.120.0.0-124.122.255.255
                  171.96.0.0-171.101.255.255
                  182.17.0.0/16
                  202.176.64.0-202.176.191.255
                IPv6:
                  2001:fb1::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:a7:b4:9c:42:88:92:99:fe:20:a6:e1:be:f5:ec:23:55:a7:
         21:b5:c2:e7:fa:d5:d1:1d:e8:41:71:d7:52:b6:68:bc:54:9f:
         a2:c4:45:29:be:01:aa:13:37:73:e9:c7:0c:b1:91:87:80:41:
         ec:68:06:09:89:c2:b7:12:a5:6b:df:fe:15:d3:05:e5:1d:53:
         0b:d8:63:a4:d9:c9:ca:f7:f9:85:f9:4a:8e:73:5f:75:8f:07:
         64:8d:d3:a3:d9:95:48:9b:03:ef:d4:54:31:0e:17:d0:65:d0:
         3f:b4:af:e9:d2:51:c8:30:83:71:17:e1:b9:06:c2:9d:08:ab:
         27:44:3b:5d:68:b5:5e:1c:1b:c4:fc:19:f9:8a:68:01:15:58:
         bb:a5:0d:cc:03:38:97:19:3b:a9:72:2c:a1:fc:34:d2:d7:14:
         c3:0c:93:3e:24:c4:fd:79:de:03:d5:ae:9d:ad:0c:44:b8:aa:
         e4:62:89:24:64:e2:90:de:90:27:3e:ee:1c:08:4c:79:21:ff:
         07:6f:bf:7c:2b:14:cb:23:e7:21:ea:39:c7:9c:1a:e5:e6:31:
         ed:ee:2d:bd:6f:14:e2:0e:b2:cd:54:d1:d3:c4:d5:96:4f:23:
         c3:79:34:ef:dd:df:04:38:35:60:40:94:e1:b8:9e:ea:b1:45:
         e8:13:b7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org