Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/6636CE209C5C11ED970BEA4FC4F9AE02.roa
File:                     6636CE209C5C11ED970BEA4FC4F9AE02.roa (raw, json)
Hash identifier:          Y1WRDi15nlHc8L0wqpcp5xuL9LtLGOROeTJ5sk2ByLc=
Subject key identifier:   A4:51:62:90:5C:79:83:4A:DF:9E:E9:F2:91:38:33:CC:5A:B9:37:FF
Certificate issuer:       /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial:       3392
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/6636CE209C5C11ED970BEA4FC4F9AE02.roa
Signing time:             Wed 25 Jan 2023 03:00:19 +0000
ROA not before:           Wed 25 Jan 2023 03:00:19 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     9506
IP address blocks:        14.100.0.0/17 maxlen: 17
                          42.60.0.0/16 maxlen: 17
                          42.61.128.0/17 maxlen: 17
                          42.61.129.0/24 maxlen: 24
                          42.61.130.0/23 maxlen: 23
                          42.61.132.0/22 maxlen: 22
                          42.61.136.0/21 maxlen: 21
                          42.61.144.0/20 maxlen: 20
                          42.61.160.0/21 maxlen: 21
                          42.61.168.0/21 maxlen: 21
                          42.61.176.0/21 maxlen: 21
                          42.61.176.0/23 maxlen: 23
                          42.61.176.0/24 maxlen: 24
                          42.61.184.0/22 maxlen: 22
                          42.61.188.0/22 maxlen: 22
                          42.61.192.0/20 maxlen: 20
                          42.61.208.0/22 maxlen: 22
                          42.61.212.0/22 maxlen: 22
                          42.61.216.0/21 maxlen: 21
                          42.61.224.0/20 maxlen: 20
                          42.61.228.0/23 maxlen: 23
                          42.61.240.0/22 maxlen: 22
                          42.61.244.0/22 maxlen: 22
                          42.61.248.0/22 maxlen: 22
                          42.61.252.0/22 maxlen: 22
                          101.78.64.0/18 maxlen: 18
                          115.66.0.0/16 maxlen: 17
                          115.66.33.0/24 maxlen: 24
                          116.14.0.0/15 maxlen: 15
                          116.14.0.0/16 maxlen: 16
                          116.14.0.0/17 maxlen: 17
                          116.14.128.0/17 maxlen: 17
                          116.15.0.0/16 maxlen: 16
                          116.15.8.0/21 maxlen: 21
                          116.15.16.0/21 maxlen: 21
                          116.15.32.0/22 maxlen: 22
                          116.15.36.0/23 maxlen: 23
                          116.15.38.0/23 maxlen: 23
                          116.15.40.0/21 maxlen: 21
                          116.15.48.0/21 maxlen: 21
                          116.15.49.0/24 maxlen: 24
                          116.15.50.0/24 maxlen: 24
                          116.15.51.0/24 maxlen: 24
                          116.15.52.0/23 maxlen: 23
                          116.15.54.0/24 maxlen: 24
                          116.15.56.0/24 maxlen: 24
                          116.15.57.0/24 maxlen: 24
                          116.15.58.0/24 maxlen: 24
                          116.15.59.0/24 maxlen: 24
                          116.15.60.0/22 maxlen: 22
                          116.15.64.0/23 maxlen: 23
                          116.15.66.0/23 maxlen: 23
                          116.15.68.0/23 maxlen: 23
                          116.15.70.0/23 maxlen: 23
                          116.15.72.0/21 maxlen: 21
                          116.15.80.0/23 maxlen: 23
                          116.15.82.0/24 maxlen: 24
                          116.15.84.0/23 maxlen: 23
                          116.15.86.0/24 maxlen: 24
                          116.15.88.0/23 maxlen: 23
                          116.15.90.0/23 maxlen: 23
                          116.15.92.0/23 maxlen: 23
                          116.15.94.0/24 maxlen: 24
                          116.15.95.0/24 maxlen: 24
                          116.15.96.0/20 maxlen: 20
                          116.15.96.0/22 maxlen: 22
                          116.15.98.0/24 maxlen: 24
                          116.15.100.0/24 maxlen: 24
                          116.15.101.0/24 maxlen: 24
                          116.15.102.0/23 maxlen: 23
                          116.15.104.0/24 maxlen: 24
                          116.15.105.0/24 maxlen: 24
                          116.15.106.0/24 maxlen: 24
                          116.15.107.0/24 maxlen: 24
                          116.15.108.0/23 maxlen: 23
                          116.15.108.0/24 maxlen: 24
                          116.15.110.0/24 maxlen: 24
                          116.15.111.0/24 maxlen: 24
                          116.15.112.0/21 maxlen: 21
                          116.15.120.0/22 maxlen: 22
                          116.15.124.0/23 maxlen: 23
                          116.15.126.0/23 maxlen: 23
                          116.15.128.0/23 maxlen: 23
                          116.15.130.0/23 maxlen: 23
                          116.15.132.0/23 maxlen: 23
                          116.15.134.0/23 maxlen: 23
                          116.15.136.0/22 maxlen: 22
                          116.15.140.0/23 maxlen: 23
                          116.15.142.0/24 maxlen: 24
                          116.15.143.0/24 maxlen: 24
                          116.15.144.0/23 maxlen: 23
                          116.15.146.0/23 maxlen: 24
                          116.15.148.0/24 maxlen: 24
                          116.15.149.0/24 maxlen: 24
                          116.15.150.0/24 maxlen: 24
                          116.15.151.0/24 maxlen: 24
                          116.15.152.0/23 maxlen: 23
                          116.15.153.0/24 maxlen: 24
                          116.15.156.0/24 maxlen: 24
                          116.15.157.0/24 maxlen: 24
                          116.15.158.0/24 maxlen: 24
                          116.15.160.0/24 maxlen: 24
                          116.15.161.0/24 maxlen: 24
                          116.15.162.0/24 maxlen: 24
                          116.15.163.0/24 maxlen: 24
                          116.15.164.0/24 maxlen: 24
                          116.15.165.0/24 maxlen: 24
                          116.15.166.0/24 maxlen: 24
                          116.15.167.0/24 maxlen: 24
                          116.15.168.0/22 maxlen: 22
                          116.15.168.0/24 maxlen: 24
                          116.15.169.0/24 maxlen: 24
                          116.15.170.0/24 maxlen: 24
                          116.15.171.0/24 maxlen: 24
                          116.15.172.0/23 maxlen: 24
                          116.15.174.0/24 maxlen: 24
                          116.15.175.0/24 maxlen: 24
                          116.15.176.0/24 maxlen: 24
                          116.15.177.0/24 maxlen: 24
                          116.15.178.0/23 maxlen: 23
                          116.15.178.0/24 maxlen: 24
                          116.15.180.0/24 maxlen: 24
                          116.15.181.0/24 maxlen: 24
                          116.15.182.0/23 maxlen: 23
                          116.15.184.0/23 maxlen: 23
                          116.15.186.0/24 maxlen: 24
                          116.15.187.0/24 maxlen: 24
                          116.15.188.0/24 maxlen: 24
                          116.15.190.0/23 maxlen: 23
                          116.15.192.0/23 maxlen: 23
                          116.15.192.0/24 maxlen: 24
                          116.15.194.0/24 maxlen: 24
                          116.15.195.0/24 maxlen: 24
                          116.15.196.0/24 maxlen: 24
                          116.15.198.0/23 maxlen: 23
                          116.15.200.0/24 maxlen: 24
                          116.15.201.0/24 maxlen: 24
                          116.15.202.0/24 maxlen: 24
                          116.15.203.0/24 maxlen: 24
                          116.15.204.0/23 maxlen: 23
                          116.15.206.0/23 maxlen: 23
                          116.15.208.0/24 maxlen: 24
                          116.15.209.0/24 maxlen: 24
                          116.15.210.0/24 maxlen: 24
                          116.15.211.0/24 maxlen: 24
                          116.15.212.0/24 maxlen: 24
                          116.15.213.0/24 maxlen: 24
                          116.15.214.0/24 maxlen: 24
                          116.15.215.0/24 maxlen: 24
                          116.15.216.0/24 maxlen: 24
                          116.15.217.0/24 maxlen: 24
                          116.15.218.0/23 maxlen: 23
                          116.15.220.0/23 maxlen: 23
                          116.15.222.0/23 maxlen: 23
                          116.15.223.0/24 maxlen: 24
                          116.15.224.0/23 maxlen: 23
                          116.15.226.0/23 maxlen: 23
                          116.15.228.0/22 maxlen: 22
                          116.15.232.0/23 maxlen: 23
                          116.15.234.0/23 maxlen: 23
                          116.15.236.0/22 maxlen: 22
                          116.15.240.0/21 maxlen: 21
                          116.15.248.0/21 maxlen: 21
                          118.200.0.0/16 maxlen: 16
                          118.201.192.0/18 maxlen: 18
                          118.201.224.0/19 maxlen: 19
                          119.74.0.0/16 maxlen: 16
                          119.74.226.0/24 maxlen: 24
                          119.74.232.0/22 maxlen: 22
                          121.6.0.0/16 maxlen: 16
                          121.6.0.0/17 maxlen: 17
                          121.6.128.0/17 maxlen: 17
                          121.7.0.0/16 maxlen: 16
                          121.7.0.0/17 maxlen: 17
                          121.7.128.0/17 maxlen: 17
                          180.255.64.0/18 maxlen: 18
                          219.74.0.0/16 maxlen: 16
                          219.74.0.0/17 maxlen: 17
                          219.74.128.0/17 maxlen: 17
                          219.74.211.0/24 maxlen: 24
                          219.75.0.0/17 maxlen: 17
                          220.255.0.0/22 maxlen: 22
                          220.255.0.0/24 maxlen: 24
                          220.255.1.0/24 maxlen: 24
                          220.255.2.0/24 maxlen: 24
                          220.255.3.0/24 maxlen: 24
                          220.255.4.0/22 maxlen: 22
                          220.255.4.0/24 maxlen: 24
                          220.255.5.0/24 maxlen: 24
                          220.255.6.0/24 maxlen: 24
                          220.255.7.0/24 maxlen: 24
                          220.255.16.0/20 maxlen: 20
                          220.255.32.0/19 maxlen: 19
                          220.255.64.0/18 maxlen: 18
                          220.255.128.0/17 maxlen: 17
                          220.255.221.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13202 (0x3392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
        Validity
            Not Before: Jan 25 03:00:19 2023 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=63d09b42-f20e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:17:e8:1d:92:3c:8f:dc:64:32:be:69:cf:79:
                    d7:d9:a0:1c:78:b9:4f:7f:c1:d7:59:76:f3:13:b8:
                    cc:eb:d6:63:2d:66:50:0a:7f:13:e3:ba:5b:b7:86:
                    73:aa:47:c5:65:0e:0c:67:be:3a:be:a0:6f:f7:60:
                    ad:9e:6b:02:95:c2:b8:c9:81:03:c4:d0:cc:be:05:
                    af:03:eb:1c:54:e5:3e:5d:15:05:93:22:da:b8:c7:
                    64:64:79:6c:16:10:aa:b7:fd:e2:10:b2:ed:96:bd:
                    cb:f4:8f:e5:c1:fb:d7:17:ce:fc:2c:d4:a3:f7:0f:
                    f7:14:f3:9b:e7:f6:76:ab:96:ea:2f:bb:f6:26:40:
                    fd:81:6a:2a:d6:69:45:86:d4:ca:6c:88:98:46:a2:
                    ca:ba:1b:dc:1d:19:8a:d2:c7:77:a2:ee:d4:2b:9d:
                    d1:8e:a8:53:20:9f:f7:e7:d4:05:c4:e9:b9:61:ba:
                    40:b1:87:b8:b2:0f:fb:b2:21:16:00:fe:62:a3:95:
                    68:60:c8:81:65:e7:89:06:d4:8e:b7:19:79:98:27:
                    87:4f:e1:df:fd:e3:82:ec:e2:c1:e5:06:c2:33:37:
                    c0:7c:50:38:ed:5f:54:b9:4a:85:af:85:85:d4:78:
                    c5:2d:a9:d5:ff:f9:cc:d8:b1:ea:46:9e:23:ed:7e:
                    f6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:51:62:90:5C:79:83:4A:DF:9E:E9:F2:91:38:33:CC:5A:B9:37:FF
            X509v3 Authority Key Identifier:
                keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/6636CE209C5C11ED970BEA4FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.100.0.0/17
                  42.60.0.0/16
                  42.61.128.0/17
                  101.78.64.0/18
                  115.66.0.0/16
                  116.14.0.0/15
                  118.200.0.0/16
                  118.201.192.0/18
                  119.74.0.0/16
                  121.6.0.0/15
                  180.255.64.0/18
                  219.74.0.0-219.75.127.255
                  220.255.0.0/21
                  220.255.16.0-220.255.255.255

    Signature Algorithm: sha256WithRSAEncryption
         9f:c4:0e:cf:3b:ee:96:e0:0f:21:4b:02:ee:9d:50:b2:fe:83:
         fe:e7:07:4f:11:10:65:af:e5:18:29:59:6b:7e:d2:71:00:4e:
         c8:33:ff:ad:d2:b8:ba:1e:89:ab:6d:1d:d0:4f:2b:0c:ab:bc:
         fd:f7:29:59:0e:15:f6:1e:2f:60:a7:b8:8f:55:f6:98:b4:e5:
         4e:d0:2b:34:06:ad:5b:84:62:2e:35:2a:4e:29:70:d4:74:ef:
         33:53:2a:cf:ba:50:52:c7:6a:53:2f:05:95:26:b4:50:9f:9a:
         08:31:16:47:98:ed:3f:f0:34:78:9b:2a:6d:88:49:cb:ea:36:
         77:ed:5e:f6:1d:85:2f:6f:56:b5:19:8b:2a:3f:fa:db:41:fa:
         84:26:5c:14:13:d2:02:96:92:67:4e:31:36:98:22:e4:38:ef:
         44:19:3d:ce:8d:75:b5:80:16:07:69:17:f8:f3:c7:26:25:75:
         7e:12:0d:69:0a:87:ee:e0:ad:67:e2:b2:a7:b0:01:91:ee:4d:
         f1:d3:ab:48:88:15:af:97:a9:31:a0:fc:21:83:c5:f6:0a:75:
         4d:d9:1e:79:34:31:dc:35:39:91:42:6b:48:28:6d:f4:e1:d1:
         7b:fb:e1:05:a4:fd:ca:c8:af:7d:ab:5e:3e:d4:81:48:45:ee:
         4a:31:48:a2
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgICM5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUY4OUMxMTAvBgNVBAUTKEFGOEYwQ0ZCNDdGQkZDQzdDNDkzM0M0NzNDREIzNjQ0
MkI1MDUxQ0UwHhcNMjMwMTI1MDMwMDE5WhcNMjMxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2QwOWI0Mi1mMjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxBfoHZI8j9xkMr5pz3nX2aAceLlPf8HXWXbzE7jM69ZjLWZQCn8T47pbt4Zz
qkfFZQ4MZ746vqBv92CtnmsClcK4yYEDxNDMvgWvA+scVOU+XRUFkyLauMdkZHls
FhCqt/3iELLtlr3L9I/lwfvXF878LNSj9w/3FPOb5/Z2q5bqL7v2JkD9gWoq1mlF
htTKbIiYRqLKuhvcHRmK0sd3ou7UK53RjqhTIJ/359QFxOm5YbpAsYe4sg/7siEW
AP5io5VoYMiBZeeJBtSOtxl5mCeHT+Hf/eOC7OLB5QbCMzfAfFA47V9UuUqFr4WF
1HjFLanV//nM2LHqRp4j7X72CwIDAQABo4IC6jCCAuYwHQYDVR0OBBYEFKRRYpBc
eYNK357p8pE4M8xauTf/MB8GA1UdIwQYMBaAFK+PDPtH+/zHxJM8RzzbNkQrUFHO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy82OTA3QzNFMjFE
ODMxMUUyOUIzNUE1RDgwOEIwMkNEMi9yNDhNLTBmN19NZkVrenhIUE5zMlJDdFFV
YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3I0OE0tMGY3X01mRWt6eEhQTnMyUkN0UVVjNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUY4OUMvNjkwN0MzRTIxRDgzMTFFMjlCMzVBNUQ4MDhCMDJDRDIvNjYzNkNFMjA5
QzVDMTFFRDk3MEJFQTRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwdAYIKwYBBQUHAQcBAf8E
ZTBjMGEEAgABMFsDBAcOZAADAwAqPAMEByo9gAMEBmVOQAMDAHNCAwMBdA4DAwB2
yAMEBnbJwAMDAHdKAwMBeQYDBAa0/0AwCwMDAdtKAwQH20sAAwQD3P8AMAoDBATc
/xADAgDcMA0GCSqGSIb3DQEBCwUAA4IBAQCfxA7PO+6W4A8hSwLunVCy/oP+5wdP
ERBlr+UYKVlrftJxAE7IM/+t0ri6HomrbR3QTysMq7z99ylZDhX2Hi9gp7iPVfaY
tOVO0Cs0Bq1bhGIuNSpOKXDUdO8zUyrPulBSx2pTLwWVJrRQn5oIMRZHmO0/8DR4
myptiEnL6jZ37V72HYUvb1a1GYsqP/rbQfqEJlwUE9IClpJnTjE2mCLkOO9EGT3O
jXW1gBYHaRf488cmJXV+Eg1pCofu4K1n4rKnsAGR7k3x06tIiBWvl6kxoPwhg8X2
CnVN2R55NDHcNTmRQmtIKG304dF7++EFpP3KyK99q14+1IFIRe5KMUii
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:41 2023 by rpki-client on console-ams.rpki-client.org