Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/B2722372066811EEA8B04D80C4F9AE02.roa
File:                     B2722372066811EEA8B04D80C4F9AE02.roa (raw, json)
Hash identifier:          I/Rt2MVQB4DcOv8mWA8Ot7aTA0k+QM9Y2lAhNRsBXOE=
Subject key identifier:   83:E4:66:7D:58:BC:6D:EC:63:00:BD:EF:73:B7:F0:2C:B1:8B:66:7B
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       1D2F
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/B2722372066811EEA8B04D80C4F9AE02.roa
Signing time:             Tue 02 Jan 2024 16:54:30 +0000
ROA not before:           Tue 02 Jan 2024 16:54:30 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     4134
IP address blocks:        1.1.4.0/22 maxlen: 22
                          1.1.16.0/20 maxlen: 20
                          1.2.9.0/24 maxlen: 24
                          1.2.10.0/24 maxlen: 24
                          1.2.11.0/24 maxlen: 24
                          1.2.12.0/22 maxlen: 22
                          1.3.0.0/16 maxlen: 16
                          1.10.64.0/18 maxlen: 18
                          1.180.0.0/14 maxlen: 14
                          27.54.72.0/21 maxlen: 21
                          39.0.64.0/18 maxlen: 18
                          39.0.128.0/17 maxlen: 17
                          42.0.16.0/21 maxlen: 21
                          42.99.64.0/19 maxlen: 19
                          42.123.0.0/19 maxlen: 19
                          42.187.0.0/18 maxlen: 18
                          42.194.64.0/18 maxlen: 18
                          101.99.96.0/19 maxlen: 19
                          101.102.64.0/19 maxlen: 19
                          101.102.104.0/21 maxlen: 21
                          101.128.16.0/20 maxlen: 20
                          101.128.32.0/19 maxlen: 19
                          101.234.96.0/19 maxlen: 19
                          101.251.32.0/19 maxlen: 19
                          106.0.64.0/18 maxlen: 18
                          110.94.0.0/15 maxlen: 15
                          114.79.64.0/18 maxlen: 18
                          115.166.64.0/19 maxlen: 19
                          120.88.8.0/21 maxlen: 21
                          121.56.0.0/15 maxlen: 15
                          121.59.0.0/23 maxlen: 23
                          124.76.0.0/14 maxlen: 14
                          124.112.0.0/15 maxlen: 15
                          124.117.0.0/16 maxlen: 16
                          124.224.0.0/16 maxlen: 16
                          124.225.0.0/16 maxlen: 16
                          124.234.0.0/15 maxlen: 15
                          125.76.128.0/17 maxlen: 17
                          125.80.0.0/13 maxlen: 13
                          125.104.0.0/13 maxlen: 13
                          150.121.0.0/16 maxlen: 16
                          202.67.0.0/22 maxlen: 24
                          202.73.128.0/22 maxlen: 24
                          202.86.252.0/22 maxlen: 22
                          202.96.112.0/20 maxlen: 20
                          202.98.128.0/19 maxlen: 19
                          202.150.224.0/19 maxlen: 19
                          202.166.224.0/19 maxlen: 19
                          202.191.72.0/21 maxlen: 24
                          203.22.78.0/24 maxlen: 24
                          203.24.186.0/23 maxlen: 23
                          203.33.67.0/24 maxlen: 24
                          203.33.68.0/24 maxlen: 24
                          203.33.73.0/24 maxlen: 24
                          203.33.79.0/24 maxlen: 24
                          203.33.100.0/24 maxlen: 24
                          203.33.122.0/24 maxlen: 24
                          203.33.129.0/24 maxlen: 24
                          203.33.131.0/24 maxlen: 24
                          203.86.96.0/19 maxlen: 19
                          203.144.96.0/19 maxlen: 19
                          218.0.0.0/16 maxlen: 16
                          218.2.0.0/16 maxlen: 16
                          218.6.0.0/17 maxlen: 17
                          218.14.0.0/15 maxlen: 15
                          218.20.0.0/16 maxlen: 16
                          218.21.0.0/19 maxlen: 19
                          218.21.32.0/20 maxlen: 20
                          218.21.48.0/20 maxlen: 20
                          218.21.64.0/18 maxlen: 18
                          218.62.128.0/17 maxlen: 19
                          218.64.0.0/16 maxlen: 16
                          218.92.0.0/16 maxlen: 16
                          218.100.128.0/17 maxlen: 17
                          240e:108:4020::/43 maxlen: 48
                          240e:108:4200::/43 maxlen: 48
                          240e:108:4220::/43 maxlen: 48
                          240e:108:4240::/43 maxlen: 48
                          240e:108:4260::/43 maxlen: 48
                          240e:108:4280::/43 maxlen: 48
                          240e:108:42a0::/43 maxlen: 48
                          240e:108:42c0::/43 maxlen: 48
                          240e:108:42e0::/43 maxlen: 48
                          240e:108:4300::/43 maxlen: 48
                          240e:108:4320::/43 maxlen: 48
                          240e:108:4380::/43 maxlen: 48
                          240e:108:43a0::/43 maxlen: 48
                          240e:108:4800::/43 maxlen: 48
                          240e:108:4880::/43 maxlen: 48
                          240e:108:48a0::/43 maxlen: 48
                          240e:108:48c0::/43 maxlen: 48
                          240e:108:48e0::/43 maxlen: 48
                          240e:108:4900::/43 maxlen: 48
                          240e:108:4940::/43 maxlen: 48
                          240e:108:4980::/43 maxlen: 48
                          240e:108:49a0::/43 maxlen: 48
                          240e:108:49c0::/43 maxlen: 48
                          240e:108:49e0::/43 maxlen: 48
                          240e:108:4a00::/43 maxlen: 48
                          240e:108:4a20::/43 maxlen: 48
                          240e:108:4a40::/43 maxlen: 48
                          240e:108:4a60::/43 maxlen: 48
                          240e:108:4a80::/43 maxlen: 48
                          240e:108:4aa0::/43 maxlen: 48
                          240e:108:4ac0::/43 maxlen: 48
                          240e:108:4ae0::/43 maxlen: 48
                          240e:108:4b00::/43 maxlen: 48
                          240e:108:4b20::/43 maxlen: 48
                          240e:108:4b80::/43 maxlen: 48
                          240e:108:4ba0::/43 maxlen: 48

Validation:               Failed, certificate revoked on Thu 16 May 2024 06:56:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7471 (0x1d2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Jan  2 16:54:30 2024 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65943fc6-0a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a0:9b:ed:4a:b9:92:bf:c6:05:01:b0:3a:6b:
                    9b:d4:a5:7f:fd:d9:94:4d:c4:2b:74:fd:53:12:c8:
                    5b:b1:a6:55:87:49:c1:00:01:46:ea:99:be:c8:b8:
                    4b:c2:a1:1b:da:a4:9c:09:88:b2:00:2f:39:07:f0:
                    ac:df:c5:61:67:ca:6c:40:56:6c:c6:32:85:1a:a3:
                    4b:4c:96:db:d4:a5:a5:35:ce:50:b5:c4:32:a6:e3:
                    7c:89:88:bb:fa:03:17:66:16:72:08:6c:e5:b0:58:
                    3e:fa:92:be:52:a9:34:d0:33:be:81:8d:43:19:08:
                    db:94:ea:e0:d6:1a:b6:de:5a:05:51:34:16:42:b2:
                    65:09:27:c5:df:23:cc:49:50:01:2c:d9:83:2d:75:
                    db:ee:c5:1c:7c:7c:03:41:df:ee:75:65:8d:c1:58:
                    b8:f1:3c:da:79:e0:a0:16:50:7c:a6:bc:b0:4a:20:
                    b9:4e:bc:1e:f3:f5:e8:f4:05:b7:6f:33:f7:64:b0:
                    ad:28:94:3d:79:1c:d0:dc:6c:61:24:e1:15:ee:56:
                    47:0c:79:b9:c7:c7:88:21:29:a8:c9:d5:8d:9d:72:
                    64:85:9e:73:2d:b1:eb:31:e7:ea:04:91:ea:04:c2:
                    c0:84:03:2c:24:36:1e:c6:f6:ef:87:b1:94:4a:31:
                    b6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E4:66:7D:58:BC:6D:EC:63:00:BD:EF:73:B7:F0:2C:B1:8B:66:7B
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/B2722372066811EEA8B04D80C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.1.4.0/22
                  1.1.16.0/20
                  1.2.9.0-1.2.15.255
                  1.3.0.0/16
                  1.10.64.0/18
                  1.180.0.0/14
                  27.54.72.0/21
                  39.0.64.0-39.0.255.255
                  42.0.16.0/21
                  42.99.64.0/19
                  42.123.0.0/19
                  42.187.0.0/18
                  42.194.64.0/18
                  101.99.96.0/19
                  101.102.64.0/19
                  101.102.104.0/21
                  101.128.16.0-101.128.63.255
                  101.234.96.0/19
                  101.251.32.0/19
                  106.0.64.0/18
                  110.94.0.0/15
                  114.79.64.0/18
                  115.166.64.0/19
                  120.88.8.0/21
                  121.56.0.0/15
                  121.59.0.0/23
                  124.76.0.0/14
                  124.112.0.0/15
                  124.117.0.0/16
                  124.224.0.0/15
                  124.234.0.0/15
                  125.76.128.0/17
                  125.80.0.0/13
                  125.104.0.0/13
                  150.121.0.0/16
                  202.67.0.0/22
                  202.73.128.0/22
                  202.86.252.0/22
                  202.96.112.0/20
                  202.98.128.0/19
                  202.150.224.0/19
                  202.166.224.0/19
                  202.191.72.0/21
                  203.22.78.0/24
                  203.24.186.0/23
                  203.33.67.0-203.33.68.255
                  203.33.73.0/24
                  203.33.79.0/24
                  203.33.100.0/24
                  203.33.122.0/24
                  203.33.129.0/24
                  203.33.131.0/24
                  203.86.96.0/19
                  203.144.96.0/19
                  218.0.0.0/16
                  218.2.0.0/16
                  218.6.0.0/17
                  218.14.0.0/15
                  218.20.0.0-218.21.127.255
                  218.62.128.0/17
                  218.64.0.0/16
                  218.92.0.0/16
                  218.100.128.0/17
                IPv6:
                  240e:108:4020::/43
                  240e:108:4200::-240e:108:433f:ffff:ffff:ffff:ffff:ffff
                  240e:108:4380::/42
                  240e:108:4800::/43
                  240e:108:4880::-240e:108:491f:ffff:ffff:ffff:ffff:ffff
                  240e:108:4940::/43
                  240e:108:4980::-240e:108:4b3f:ffff:ffff:ffff:ffff:ffff
                  240e:108:4b80::/42

    Signature Algorithm: sha256WithRSAEncryption
         8a:e9:c0:0c:33:2b:90:5e:33:e3:d7:b3:fe:e8:e4:d9:7d:1f:
         3f:d8:b3:90:56:b3:36:9a:c4:12:92:15:46:8e:98:fb:ba:ba:
         2c:66:d1:d5:80:56:05:8f:74:b3:12:a1:d8:5b:6e:28:a3:79:
         93:70:14:9f:3a:67:f8:96:e6:7f:a5:c7:64:6f:0a:27:b9:6c:
         63:8f:1e:b4:2f:7a:fe:1b:d4:8e:25:2d:35:66:f5:69:4f:66:
         b7:88:7d:48:fd:45:69:49:a6:2d:11:67:95:f1:8e:78:c8:68:
         87:c6:9e:c4:e8:4a:eb:63:6a:f7:c9:f9:07:59:ae:da:a5:98:
         5c:ba:d5:b7:2a:fc:c3:2f:60:ed:44:a9:c5:a5:59:dc:8d:6e:
         fb:2b:c0:2a:23:80:4d:22:39:c7:d5:80:05:e9:a7:59:b1:ad:
         52:20:6c:5e:ae:e1:76:77:40:21:fa:b0:50:35:3a:be:ce:3f:
         23:56:d1:12:3a:b5:a6:94:d2:1f:37:1e:6d:eb:2f:1b:76:a5:
         4c:f2:75:f2:d8:53:17:c3:cc:b9:09:92:c6:02:d4:4c:1c:cd:
         c2:39:e7:31:58:00:df:17:89:56:5e:b8:82:a2:d0:33:fa:d2:
         0e:32:6a:45:4b:77:b0:17:e1:6e:15:ba:01:04:41:5d:93:72:
         06:40:f5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 08:57:55 2024 by rpki-client on console-fra.rpki-client.org