Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/1896F3041AF011ED87286273C4F9AE02.roa
File:                     1896F3041AF011ED87286273C4F9AE02.roa (raw, json)
Hash identifier:          tyt3CX4+lM/72/r9z06o3XDT5wf8i2C/fqzxqY+MD7Q=
Subject key identifier:   E3:AB:49:D5:7D:C1:1D:CA:0E:C3:C5:24:7B:85:F3:2E:BE:6E:A0:78
Certificate issuer:       /CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
Certificate serial:       0655
Authority key identifier: 39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/1896F3041AF011ED87286273C4F9AE02.roa
Signing time:             Tue 11 Oct 2022 12:10:35 +0000
ROA not before:           Tue 11 Oct 2022 12:10:35 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     139341
IP address blocks:        43.132.64.0/23 maxlen: 24
                          43.132.69.0/24 maxlen: 24
                          43.132.70.0/23 maxlen: 24
                          43.132.72.0/23 maxlen: 23
                          43.132.74.0/24 maxlen: 24
                          43.132.75.0/24 maxlen: 24
                          43.132.76.0/22 maxlen: 24
                          43.132.80.0/23 maxlen: 24
                          43.132.82.0/24 maxlen: 24
                          43.132.85.0/24 maxlen: 24
                          43.132.86.0/24 maxlen: 24
                          43.132.87.0/24 maxlen: 24
                          43.132.88.0/24 maxlen: 24
                          43.132.89.0/24 maxlen: 24
                          43.132.90.0/23 maxlen: 24
                          43.132.92.0/24 maxlen: 24
                          43.132.93.0/24 maxlen: 24
                          43.152.0.0/24 maxlen: 24
                          43.152.1.0/24 maxlen: 24
                          43.152.2.0/24 maxlen: 24
                          43.152.3.0/24 maxlen: 24
                          43.152.4.0/24 maxlen: 24
                          43.152.5.0/24 maxlen: 24
                          43.152.6.0/24 maxlen: 24
                          43.152.7.0/24 maxlen: 24
                          43.152.8.0/24 maxlen: 24
                          43.152.9.0/24 maxlen: 24
                          43.152.10.0/24 maxlen: 24
                          43.152.11.0/24 maxlen: 24
                          43.152.12.0/24 maxlen: 24
                          43.152.13.0/24 maxlen: 24
                          43.152.14.0/23 maxlen: 24
                          43.152.16.0/23 maxlen: 24
                          43.152.18.0/24 maxlen: 24
                          43.152.19.0/24 maxlen: 24
                          43.152.20.0/24 maxlen: 24
                          43.152.21.0/24 maxlen: 24
                          43.152.22.0/24 maxlen: 24
                          43.152.23.0/24 maxlen: 24
                          43.152.24.0/23 maxlen: 24
                          43.152.26.0/23 maxlen: 24
                          43.152.28.0/23 maxlen: 24
                          43.152.30.0/23 maxlen: 24
                          43.152.32.0/22 maxlen: 24
                          43.152.36.0/23 maxlen: 24
                          43.152.38.0/23 maxlen: 24
                          43.152.40.0/24 maxlen: 24
                          43.152.41.0/24 maxlen: 24
                          43.152.42.0/23 maxlen: 23
                          43.152.44.0/23 maxlen: 24
                          43.152.46.0/24 maxlen: 24
                          43.152.47.0/24 maxlen: 24
                          43.152.48.0/24 maxlen: 24
                          43.152.49.0/24 maxlen: 24
                          43.152.50.0/24 maxlen: 24
                          43.152.51.0/24 maxlen: 24
                          43.152.52.0/24 maxlen: 24
                          43.152.53.0/24 maxlen: 24
                          43.152.54.0/24 maxlen: 24
                          43.152.55.0/24 maxlen: 24
                          43.152.56.0/24 maxlen: 24
                          43.152.57.0/24 maxlen: 24
                          43.152.58.0/23 maxlen: 23
                          43.152.60.0/24 maxlen: 24
                          43.152.61.0/24 maxlen: 24
                          43.152.62.0/24 maxlen: 24
                          43.152.63.0/24 maxlen: 24
                          43.152.128.0/18 maxlen: 18
                          43.152.128.0/23 maxlen: 23
                          43.152.130.0/23 maxlen: 23
                          43.152.132.0/23 maxlen: 23
                          43.152.134.0/23 maxlen: 23
                          43.152.136.0/24 maxlen: 24
                          43.152.137.0/24 maxlen: 24
                          43.152.138.0/24 maxlen: 24
                          43.152.139.0/24 maxlen: 24
                          43.152.140.0/23 maxlen: 24
                          43.152.142.0/23 maxlen: 24
                          43.152.144.0/24 maxlen: 24
                          43.152.145.0/24 maxlen: 24
                          43.152.146.0/24 maxlen: 24
                          43.152.147.0/24 maxlen: 24
                          43.152.148.0/24 maxlen: 24
                          43.152.149.0/24 maxlen: 24
                          43.152.150.0/23 maxlen: 24
                          43.152.152.0/23 maxlen: 24
                          43.152.154.0/23 maxlen: 24
                          43.152.156.0/22 maxlen: 24
                          43.152.160.0/21 maxlen: 24
                          43.152.168.0/23 maxlen: 24
                          43.152.170.0/23 maxlen: 24
                          43.152.172.0/23 maxlen: 24
                          43.152.174.0/24 maxlen: 24
                          43.152.175.0/24 maxlen: 24
                          43.152.176.0/23 maxlen: 24
                          43.152.178.0/23 maxlen: 24
                          43.152.180.0/22 maxlen: 24
                          43.152.184.0/23 maxlen: 24
                          43.152.186.0/23 maxlen: 24
                          43.152.188.0/23 maxlen: 24
                          43.152.190.0/23 maxlen: 24
                          43.159.64.0/24 maxlen: 24
                          43.159.65.0/24 maxlen: 24
                          43.159.66.0/23 maxlen: 24
                          43.159.68.0/23 maxlen: 24
                          43.159.70.0/23 maxlen: 24
                          43.159.72.0/23 maxlen: 24
                          43.159.74.0/24 maxlen: 24
                          43.159.75.0/24 maxlen: 24
                          43.159.77.0/24 maxlen: 24
                          43.159.79.0/24 maxlen: 24
                          43.159.80.0/24 maxlen: 24
                          43.159.81.0/24 maxlen: 24
                          43.159.82.0/24 maxlen: 24
                          43.159.83.0/24 maxlen: 24
                          43.159.84.0/24 maxlen: 24
                          43.159.85.0/24 maxlen: 24
                          43.159.91.0/24 maxlen: 24
                          43.159.92.0/24 maxlen: 24
                          43.159.93.0/24 maxlen: 24
                          43.159.94.0/24 maxlen: 24
                          43.159.95.0/24 maxlen: 24
                          43.159.96.0/20 maxlen: 24
                          43.159.112.0/21 maxlen: 24
                          43.159.120.0/24 maxlen: 24
                          43.159.121.0/24 maxlen: 24
                          43.159.122.0/24 maxlen: 24
                          43.159.123.0/24 maxlen: 24
                          43.159.124.0/24 maxlen: 24
                          43.159.125.0/24 maxlen: 24
                          43.159.126.0/24 maxlen: 24
                          43.159.127.0/24 maxlen: 24
                          43.175.0.0/16 maxlen: 16
                          101.33.6.0/23 maxlen: 24
                          240d:c010:15::/48 maxlen: 48
                          240d:c010:18::/48 maxlen: 48
                          240d:c010:19::/48 maxlen: 48
                          240d:c010:1a::/48 maxlen: 48
                          240d:c010:1b::/48 maxlen: 48
                          240d:c010:1c::/48 maxlen: 48
                          240d:c010:41::/48 maxlen: 48
                          240d:c010:42::/48 maxlen: 48
                          240d:c010:54::/47 maxlen: 48
                          240d:c010:56::/48 maxlen: 48
                          240d:c010:5a::/48 maxlen: 48
                          240d:c010:5a::/56 maxlen: 56
                          240d:c010:61::/48 maxlen: 48
                          240d:c010:62::/47 maxlen: 48
                          240d:c010:64::/47 maxlen: 48
                          240d:c010:69::/48 maxlen: 48
                          240d:c010:6b::/48 maxlen: 48
                          240d:c010:6f::/48 maxlen: 48
                          240d:c010:70::/44 maxlen: 48
                          240d:c010:80::/44 maxlen: 48
                          240d:c010:99::/48 maxlen: 48
                          240d:c010:9a::/48 maxlen: 48
                          240d:c010:9b::/48 maxlen: 48
                          240d:c010:9c::/48 maxlen: 48
                          240d:c010:a1::/48 maxlen: 48
                          240d:c010:ab::/48 maxlen: 48
                          240d:c010:ad::/48 maxlen: 48
                          240d:c010:b2::/48 maxlen: 48
                          240d:c010:bf::/48 maxlen: 48
                          240d:c010:c8::/48 maxlen: 48
                          240d:c010:cf::/48 maxlen: 48
                          240d:c010:d2::/48 maxlen: 48
                          240d:c010:d4::/48 maxlen: 48
                          240d:c010:d5::/48 maxlen: 48
                          240d:c010:f4::/48 maxlen: 48
                          240d:c010:f5::/48 maxlen: 48
                          240d:c010:f6::/48 maxlen: 48
                          240d:c010:fb::/48 maxlen: 48
                          240d:c010:ff00::/40 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1621 (0x655)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157D67/serialNumber=39C43967570087F583E425A9FE9B69B9506A59BD
        Validity
            Not Before: Oct 11 12:10:35 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=63455d3a-125e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6b:4a:84:a1:7f:64:fa:fd:38:ce:0e:69:ad:
                    b6:7c:aa:2b:10:12:bd:c7:52:43:53:86:63:48:ed:
                    94:6c:6f:01:54:a5:95:46:3d:53:f9:5e:c3:7d:38:
                    93:48:e5:4d:61:0e:c0:e8:40:c9:40:b6:b0:e3:19:
                    f0:75:b9:18:2b:c6:73:73:8a:ce:d3:7a:bb:35:a7:
                    d2:ed:bf:d4:82:61:d2:df:c6:90:9e:99:d8:22:5f:
                    5a:af:c7:da:99:6a:93:6a:e8:ca:03:df:7c:8c:b2:
                    51:a1:84:96:e4:8f:31:9a:21:ae:2e:3d:46:5b:06:
                    3a:61:d0:e0:e9:cf:cd:69:2f:d1:3f:95:d2:1f:c3:
                    69:a1:ae:7a:d7:ce:72:55:54:6c:1d:a6:5d:13:de:
                    60:ee:14:4f:89:ef:60:35:58:4a:4b:73:1a:7d:8d:
                    94:93:be:18:9d:77:0c:34:20:76:31:b4:fb:de:d3:
                    1b:0e:1b:e0:a9:12:67:61:d7:53:b6:22:c3:43:6a:
                    e1:31:e5:9d:fa:67:f9:aa:d9:e6:4b:e1:b2:4e:4f:
                    cf:46:c5:59:fd:f4:a0:12:b2:3c:0d:39:bf:89:64:
                    cd:ef:10:60:45:3e:8d:44:69:78:40:89:3f:3a:21:
                    08:c9:a5:09:7b:45:e0:ab:42:fc:0f:21:52:ee:16:
                    40:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AB:49:D5:7D:C1:1D:CA:0E:C3:C5:24:7B:85:F3:2E:BE:6E:A0:78
            X509v3 Authority Key Identifier:
                keyid:39:C4:39:67:57:00:87:F5:83:E4:25:A9:FE:9B:69:B9:50:6A:59:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OcQ5Z1cAh_WD5CWp_ptpuVBqWb0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/69E6C16A442A11EB9599AD38C4F9AE02/1896F3041AF011ED87286273C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.132.64.0/23
                  43.132.69.0-43.132.82.255
                  43.132.85.0-43.132.93.255
                  43.152.0.0/18
                  43.152.128.0/18
                  43.159.64.0-43.159.75.255
                  43.159.77.0/24
                  43.159.79.0-43.159.85.255
                  43.159.91.0-43.159.127.255
                  43.175.0.0/16
                  101.33.6.0/23
                IPv6:
                  240d:c010:15::/48
                  240d:c010:18::-240d:c010:1c:ffff:ffff:ffff:ffff:ffff
                  240d:c010:41::-240d:c010:42:ffff:ffff:ffff:ffff:ffff
                  240d:c010:54::-240d:c010:56:ffff:ffff:ffff:ffff:ffff
                  240d:c010:5a::/48
                  240d:c010:61::-240d:c010:65:ffff:ffff:ffff:ffff:ffff
                  240d:c010:69::/48
                  240d:c010:6b::/48
                  240d:c010:6f::-240d:c010:8f:ffff:ffff:ffff:ffff:ffff
                  240d:c010:99::-240d:c010:9c:ffff:ffff:ffff:ffff:ffff
                  240d:c010:a1::/48
                  240d:c010:ab::/48
                  240d:c010:ad::/48
                  240d:c010:b2::/48
                  240d:c010:bf::/48
                  240d:c010:c8::/48
                  240d:c010:cf::/48
                  240d:c010:d2::/48
                  240d:c010:d4::/47
                  240d:c010:f4::-240d:c010:f6:ffff:ffff:ffff:ffff:ffff
                  240d:c010:fb::/48
                  240d:c010:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         74:35:14:bb:c9:0a:f7:5b:61:ae:1f:e7:e0:3e:6f:f0:ef:08:
         82:17:61:ba:c5:fc:b6:94:81:a1:f4:25:0d:41:52:b5:de:b9:
         98:b9:3c:ee:ab:ee:aa:fc:60:41:46:f2:b1:a3:ee:17:89:a5:
         11:d3:1b:c7:7f:1c:b3:a8:e0:7f:18:a6:10:59:4e:da:ef:82:
         73:f4:51:92:2c:30:00:f3:d3:e6:b7:46:72:33:ac:8a:93:d4:
         17:86:bf:13:fe:f7:98:06:7a:ca:24:e3:00:79:a7:a8:32:9b:
         95:59:f3:41:5e:02:b2:5a:51:0d:63:a2:a9:43:2d:86:32:82:
         cd:d9:58:80:0a:64:22:00:7e:ab:9a:ca:43:d5:d9:25:67:9d:
         8d:9b:1c:60:b8:d1:c5:b4:8b:5f:f4:6d:6c:62:c8:70:b9:a8:
         2e:b6:74:73:5b:ba:bc:89:72:8f:d5:5b:2e:ed:56:07:5b:01:
         f1:4f:f0:70:d1:57:09:61:16:44:dc:e7:fe:95:eb:51:a9:de:
         8f:ea:e5:b6:62:5c:89:e7:2d:80:90:6b:e1:fd:e2:b0:76:5d:
         6f:26:da:2b:3f:b0:72:33:bd:2b:97:75:58:37:42:dd:6a:9e:
         56:00:5e:3e:6b:2b:98:0c:3f:a6:c6:31:d3:b2:80:33:24:e2:
         a7:4f:80:73
-----BEGIN CERTIFICATE-----
MIIG+DCCBeCgAwIBAgICBlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdENjcxMTAvBgNVBAUTKDM5QzQzOTY3NTcwMDg3RjU4M0U0MjVBOUZFOUI2OUI5
NTA2QTU5QkQwHhcNMjIxMDExMTIxMDM1WhcNMjMwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzQ1NWQzYS0xMjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6GtKhKF/ZPr9OM4Oaa22fKorEBK9x1JDU4ZjSO2UbG8BVKWVRj1T+V7DfTiT
SOVNYQ7A6EDJQLaw4xnwdbkYK8Zzc4rO03q7NafS7b/UgmHS38aQnpnYIl9ar8fa
mWqTaujKA998jLJRoYSW5I8xmiGuLj1GWwY6YdDg6c/NaS/RP5XSH8Npoa56185y
VVRsHaZdE95g7hRPie9gNVhKS3MafY2Uk74YnXcMNCB2MbT73tMbDhvgqRJnYddT
tiLDQ2rhMeWd+mf5qtnmS+GyTk/PRsVZ/fSgErI8DTm/iWTN7xBgRT6NRGl4QIk/
OiEIyaUJe0Xgq0L8DyFS7hZAWwIDAQABo4IEHDCCBBgwHQYDVR0OBBYEFOOrSdV9
wR3KDsPFJHuF8y6+bqB4MB8GA1UdIwQYMBaAFDnEOWdXAIf1g+Qlqf6bablQalm9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82OUU2QzE2QTQ0
MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9PY1E1WjFjQWhfV0Q1Q1dwX3B0cHVWQnFX
YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09jUTVaMWNBaF9XRDVDV3BfcHRwdVZCcVdiMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTdENjcvNjlFNkMxNkE0NDJBMTFFQjk1OTlBRDM4QzRGOUFFMDIvMTg5NkYzMDQx
QUYwMTFFRDg3Mjg2MjczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggGkBggrBgEFBQcBBwEB
/wSCAZMwggGPMG8EAgABMGkDBAErhEAwDAMEACuERQMEACuEUjAMAwQAK4RVAwQB
K4RcAwQGK5gAAwQGK5iAMAwDBAYrn0ADBAIrn0gDBAArn00wDAMEACufTwMEASuf
VDAMAwQAK59bAwQHK58AAwMAK68DBAFlIQYwggEaBAIAAjCCARIDBwAkDcAQABUw
EgMHAyQNwBAAGAMHACQNwBAAHDASAwcAJA3AEABBAwcAJA3AEABCMBIDBwIkDcAQ
AFQDBwAkDcAQAFYDBwAkDcAQAFowEgMHACQNwBAAYQMHASQNwBAAZAMHACQNwBAA
aQMHACQNwBAAazASAwcAJA3AEABvAwcEJA3AEACAMBIDBwAkDcAQAJkDBwAkDcAQ
AJwDBwAkDcAQAKEDBwAkDcAQAKsDBwAkDcAQAK0DBwAkDcAQALIDBwAkDcAQAL8D
BwAkDcAQAMgDBwAkDcAQAM8DBwAkDcAQANIDBwEkDcAQANQwEgMHAiQNwBAA9AMH
ACQNwBAA9gMHACQNwBAA+wMGACQNwBD/MA0GCSqGSIb3DQEBCwUAA4IBAQB0NRS7
yQr3W2GuH+fgPm/w7wiCF2G6xfy2lIGh9CUNQVK13rmYuTzuq+6q/GBBRvKxo+4X
iaUR0xvHfxyzqOB/GKYQWU7a74Jz9FGSLDAA89Pmt0ZyM6yKk9QXhr8T/veYBnrK
JOMAeaeoMpuVWfNBXgKyWlENY6KpQy2GMoLN2ViACmQiAH6rmspD1dklZ52Nmxxg
uNHFtItf9G1sYshwuagutnRzW7q8iXKP1Vsu7VYHWwHxT/Bw0VcJYRZE3Of+letR
qd6P6uW2YlyJ5y2AkGvh/eKwdl1vJtorP7ByM70rl3VYN0Ldap5WAF4+ayuYDD+m
xjHTsoAzJOKnT4Bz
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:40 2023 by rpki-client on console-ams.rpki-client.org