Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/87B1639C2BBF11EEA91C5A43C4F9AE02.roa
File:                     87B1639C2BBF11EEA91C5A43C4F9AE02.roa (raw, json)
Hash identifier:          LQL87LSixNWaVzm1xNTJdN4ORp/2IOrrT0LXSySs9zs=
Subject key identifier:   CE:F5:6A:86:CC:94:82:A1:B8:59:3D:DE:4C:6F:9C:95:56:27:A6:98
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3702
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/87B1639C2BBF11EEA91C5A43C4F9AE02.roa
Signing time:             Wed 26 Jul 2023 14:20:11 +0000
ROA not before:           Wed 26 Jul 2023 14:20:11 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     17552
IP address blocks:        27.145.0.0/17 maxlen: 24
                          27.145.128.0/18 maxlen: 24
                          27.145.192.0/18 maxlen: 24
                          58.8.0.0/17 maxlen: 24
                          58.8.128.0/17 maxlen: 24
                          58.9.0.0/17 maxlen: 24
                          58.9.128.0/17 maxlen: 24
                          58.10.0.0/17 maxlen: 24
                          58.10.128.0/17 maxlen: 24
                          58.11.0.0/17 maxlen: 24
                          58.11.128.0/17 maxlen: 24
                          61.90.0.0/17 maxlen: 24
                          61.91.128.0/21 maxlen: 24
                          61.91.144.0/21 maxlen: 24
                          61.91.190.0/24 maxlen: 24
                          61.91.191.0/24 maxlen: 24
                          61.91.192.0/24 maxlen: 24
                          61.91.193.0/24 maxlen: 24
                          61.91.201.0/24 maxlen: 24
                          61.91.214.0/24 maxlen: 24
                          110.168.0.0/18 maxlen: 24
                          110.168.64.0/18 maxlen: 24
                          110.168.128.0/18 maxlen: 24
                          110.168.192.0/18 maxlen: 24
                          110.169.0.0/16 maxlen: 16
                          110.169.0.0/17 maxlen: 24
                          110.169.128.0/18 maxlen: 24
                          110.169.192.0/18 maxlen: 24
                          110.171.0.0/18 maxlen: 24
                          110.171.64.0/18 maxlen: 24
                          110.171.128.0/18 maxlen: 24
                          110.171.192.0/18 maxlen: 24
                          114.109.0.0/18 maxlen: 24
                          114.109.64.0/18 maxlen: 24
                          114.109.128.0/18 maxlen: 24
                          114.109.192.0/18 maxlen: 24
                          115.87.0.0/18 maxlen: 24
                          115.87.64.0/18 maxlen: 24
                          115.87.128.0/18 maxlen: 24
                          115.87.192.0/18 maxlen: 24
                          119.46.255.0/24 maxlen: 24
                          119.76.0.0/17 maxlen: 24
                          119.76.128.0/18 maxlen: 24
                          119.76.192.0/18 maxlen: 24
                          124.120.0.0/18 maxlen: 24
                          124.120.64.0/18 maxlen: 24
                          124.120.128.0/18 maxlen: 24
                          124.120.192.0/18 maxlen: 24
                          124.121.0.0/18 maxlen: 24
                          124.121.64.0/18 maxlen: 24
                          124.121.128.0/18 maxlen: 24
                          124.121.192.0/18 maxlen: 24
                          124.122.0.0/18 maxlen: 24
                          124.122.64.0/18 maxlen: 24
                          124.122.128.0/18 maxlen: 24
                          124.122.192.0/18 maxlen: 24
                          171.96.0.0/18 maxlen: 24
                          171.96.64.0/18 maxlen: 24
                          171.96.128.0/18 maxlen: 24
                          171.96.192.0/18 maxlen: 24
                          171.97.0.0/18 maxlen: 24
                          171.97.64.0/18 maxlen: 24
                          171.97.128.0/18 maxlen: 24
                          171.97.192.0/18 maxlen: 24
                          171.98.0.0/18 maxlen: 24
                          171.98.64.0/18 maxlen: 24
                          171.98.128.0/18 maxlen: 24
                          171.98.192.0/18 maxlen: 24
                          171.99.0.0/16 maxlen: 16
                          171.99.0.0/17 maxlen: 24
                          171.99.128.0/18 maxlen: 24
                          171.99.192.0/18 maxlen: 24
                          171.100.0.0/18 maxlen: 24
                          171.100.64.0/18 maxlen: 24
                          171.100.128.0/18 maxlen: 24
                          171.100.192.0/18 maxlen: 24
                          171.101.0.0/18 maxlen: 24
                          171.101.64.0/18 maxlen: 24
                          171.101.128.0/18 maxlen: 24
                          171.101.192.0/18 maxlen: 24
                          182.17.0.0/18 maxlen: 24
                          182.17.64.0/18 maxlen: 24
                          182.17.128.0/18 maxlen: 24
                          182.17.192.0/18 maxlen: 24
                          202.176.64.0/18 maxlen: 18
                          202.176.64.0/19 maxlen: 24
                          202.176.96.0/19 maxlen: 24
                          202.176.128.0/18 maxlen: 18
                          202.176.128.0/19 maxlen: 19
                          202.176.183.0/24 maxlen: 24
                          202.176.184.0/24 maxlen: 24
                          2001:fb1::/32 maxlen: 32
                          2001:fb1::/44 maxlen: 48
                          2001:fb1:10::/44 maxlen: 48
                          2001:fb1:20::/44 maxlen: 48
                          2001:fb1:30::/44 maxlen: 48
                          2001:fb1:40::/44 maxlen: 48
                          2001:fb1:50::/44 maxlen: 48
                          2001:fb1:60::/44 maxlen: 48
                          2001:fb1:70::/44 maxlen: 48
                          2001:fb1:80::/44 maxlen: 48
                          2001:fb1:90::/44 maxlen: 48
                          2001:fb1:a0::/44 maxlen: 48
                          2001:fb1:b0::/44 maxlen: 48
                          2001:fb1:c0::/44 maxlen: 48
                          2001:fb1:d0::/44 maxlen: 48
                          2001:fb1:e0::/44 maxlen: 48
                          2001:fb1:f0::/44 maxlen: 48
                          2001:fb1:100::/44 maxlen: 48
                          2001:fb1:110::/44 maxlen: 48
                          2001:fb1:120::/44 maxlen: 48
                          2001:fb1:130::/44 maxlen: 48
                          2001:fb1:140::/44 maxlen: 48
                          2001:fb1:150::/44 maxlen: 48
                          2001:fb1:160::/44 maxlen: 48
                          2001:fb1:170::/44 maxlen: 48
                          2001:fb1:180::/44 maxlen: 48
                          2001:fb1:fc0::/48 maxlen: 48
                          2001:fb1:fd0::/48 maxlen: 48
                          2001:fb1:fe0::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 26 Jul 2023 15:39:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14082 (0x3702)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 26 14:20:11 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c12b9b-2b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8e:10:21:8d:95:8c:7e:4d:66:5b:e6:7e:4e:
                    0b:34:63:83:08:d5:5d:01:5d:da:c9:ec:01:4d:1a:
                    6c:1d:a3:1f:63:ac:8e:58:58:a7:77:8b:74:eb:dc:
                    c6:45:f7:53:59:57:12:80:fc:01:1d:e1:c6:79:17:
                    e6:da:64:8a:4e:0c:89:e9:3c:a8:29:ec:8f:6a:87:
                    40:22:34:7c:18:67:34:56:aa:db:d1:7c:44:f7:86:
                    65:9b:22:07:b1:4a:d8:b2:03:9f:8e:4b:e2:ff:04:
                    c2:00:05:03:fe:14:7a:53:29:41:38:a1:80:b6:a3:
                    6c:2d:0d:4f:d1:d1:fe:53:cc:63:cc:02:6f:cb:34:
                    e2:04:ac:2b:b6:47:0d:cb:df:48:c4:b3:f7:91:e0:
                    86:9d:92:e4:6a:48:55:2a:17:7d:40:6a:52:2d:9e:
                    33:a5:7c:92:95:bd:dc:c2:95:17:ba:48:28:cf:c5:
                    0a:00:34:c7:bc:f0:39:27:c0:0d:9f:76:6f:8a:b4:
                    71:66:2b:d0:a7:fa:7f:4d:93:1e:33:57:d7:42:d4:
                    04:20:57:2f:05:62:55:b0:e6:cb:07:5c:e2:23:3b:
                    7f:96:ae:47:ce:79:4c:02:76:86:85:1c:fb:e6:2c:
                    39:c2:4a:b0:e6:2f:67:f1:b7:57:86:b5:41:74:df:
                    96:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F5:6A:86:CC:94:82:A1:B8:59:3D:DE:4C:6F:9C:95:56:27:A6:98
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/87B1639C2BBF11EEA91C5A43C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.145.0.0/16
                  58.8.0.0/14
                  61.90.0.0/17
                  61.91.128.0/21
                  61.91.144.0/21
                  61.91.190.0-61.91.193.255
                  61.91.201.0/24
                  61.91.214.0/24
                  110.168.0.0/15
                  110.171.0.0/16
                  114.109.0.0/16
                  115.87.0.0/16
                  119.46.255.0/24
                  119.76.0.0/16
                  124.120.0.0-124.122.255.255
                  171.96.0.0-171.101.255.255
                  182.17.0.0/16
                  202.176.64.0-202.176.191.255
                IPv6:
                  2001:fb1::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:a8:76:45:aa:f0:2e:35:67:76:98:ca:c2:00:7a:42:db:2a:
         ed:93:5f:a7:c5:5a:8e:dd:28:71:d8:b0:a2:76:69:0c:50:35:
         03:19:bb:21:42:f2:ee:f0:91:ca:f9:43:30:9a:9b:73:cf:ea:
         34:0a:cb:41:75:22:b1:e0:7f:9b:c1:5b:cb:05:43:cc:6c:cb:
         4c:e8:e0:c1:ef:a3:03:db:3e:fa:14:f6:55:8c:d3:db:b3:f5:
         83:72:92:ee:ba:5e:ac:76:40:b8:90:15:b1:f6:ba:bb:e0:3a:
         c1:30:f0:29:38:a7:0f:69:14:cb:70:d8:ca:c8:d5:dd:7f:b1:
         27:0f:bb:5f:2c:dc:f9:a3:be:98:e8:c5:f6:87:0d:f0:dc:41:
         da:4d:77:cc:00:53:d3:8d:54:f6:f9:e5:e9:65:01:3d:5d:6f:
         f5:ac:00:98:04:90:ac:ae:4b:ec:fd:8c:88:23:8b:1c:5a:b1:
         da:ab:2e:d8:b6:5e:37:8b:16:0b:b0:b2:48:90:92:14:18:bb:
         3e:10:af:8e:9a:d4:ae:12:46:83:5d:b3:06:c4:91:90:cf:b6:
         2c:49:9c:63:2e:bb:1b:d0:e1:b9:54:60:4a:f8:40:00:ab:9a:
         79:ce:89:a5:3d:6c:96:af:05:1c:0a:87:5e:41:cc:ee:31:0e:
         60:ca:88:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org