Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/BEBC086A862211EF9A00FA2BC4F9AE02.roa
File:                     BEBC086A862211EF9A00FA2BC4F9AE02.roa (raw, json)
Hash identifier:          4b/Ur3Keh5EEHC/1QFQwPV713DEIBMLvJafeQ/rB8wY=
Subject key identifier:   5D:2B:E6:E5:84:25:91:C0:8B:80:D8:B9:BE:9C:DE:34:CB:6E:6E:90
Certificate issuer:       /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial:       3679
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/BEBC086A862211EF9A00FA2BC4F9AE02.roa
Signing time:             Wed 09 Oct 2024 09:49:01 +0000
ROA not before:           Wed 09 Oct 2024 09:49:01 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     9255
IP address blocks:        116.12.224.0/24 maxlen: 24
                          118.201.12.0/22 maxlen: 22
                          118.201.16.0/20 maxlen: 20
                          118.201.81.0/24 maxlen: 24
                          118.201.157.0/24 maxlen: 24
                          203.125.128.0/24 maxlen: 24
                          203.125.199.0/24 maxlen: 24
                          203.126.8.0/24 maxlen: 24
                          203.126.130.0/24 maxlen: 24
                          203.126.133.0/24 maxlen: 24
                          203.126.134.0/24 maxlen: 24
                          203.126.137.0/24 maxlen: 24
                          203.126.147.0/24 maxlen: 24
                          203.127.2.0/24 maxlen: 24
                          203.127.3.0/24 maxlen: 24
                          203.127.10.0/24 maxlen: 24
                          203.127.31.0/24 maxlen: 24
                          203.127.104.0/24 maxlen: 24
                          203.127.111.0/24 maxlen: 24
                          203.127.135.0/24 maxlen: 24
                          203.127.146.0/24 maxlen: 24
                          203.127.148.0/24 maxlen: 24
                          203.127.200.0/24 maxlen: 24
                          203.127.201.0/24 maxlen: 24
                          203.127.202.0/24 maxlen: 24
                          2001:c20:405::/48 maxlen: 48
                          2001:c20:4849::/48 maxlen: 48
                          2001:c20:484a::/48 maxlen: 48
                          2001:c20:4851::/48 maxlen: 48
                          2001:c20:485e::/48 maxlen: 48
                          2001:c20:485f::/48 maxlen: 48
                          2001:c20:4861::/48 maxlen: 48
                          2001:c20:4865::/48 maxlen: 48
                          2001:c20:4866::/48 maxlen: 48
                          2001:c20:4868::/48 maxlen: 48
                          2001:c20:486a::/48 maxlen: 48
                          2001:c20:486c::/48 maxlen: 48
                          2001:c20:486e::/48 maxlen: 48
                          2001:c20:4871::/48 maxlen: 48
                          2001:c20:4874::/48 maxlen: 48
                          2001:c20:4875::/48 maxlen: 48
                          2001:c20:4878::/48 maxlen: 48
                          2001:c20:4879::/48 maxlen: 48
                          2001:c20:487b::/48 maxlen: 48
                          2001:c20:487e::/48 maxlen: 48
                          2001:c20:4883::/48 maxlen: 48
                          2001:c20:4884::/48 maxlen: 48
                          2001:c20:4885::/48 maxlen: 48
                          2001:c20:4886::/48 maxlen: 48
                          2001:c20:4887::/48 maxlen: 48
                          2001:c20:488b::/48 maxlen: 48
                          2001:c20:488c::/48 maxlen: 48
                          2001:c20:488d::/48 maxlen: 48
                          2001:c20:488e::/48 maxlen: 48
                          2001:c20:488f::/48 maxlen: 48
                          2001:c20:4890::/48 maxlen: 48
                          2001:c20:4891::/48 maxlen: 48
                          2001:c20:4892::/48 maxlen: 48
                          2001:c20:4893::/48 maxlen: 48
                          2001:c20:4894::/48 maxlen: 48
                          2001:c20:4895::/48 maxlen: 48
                          2001:c20:4896::/48 maxlen: 48
                          2001:c20:4898::/48 maxlen: 48
                          2001:c20:489a::/48 maxlen: 48
                          2001:c20:48a0::/48 maxlen: 48
                          2001:c20:48a1::/48 maxlen: 48
                          2001:c20:48a2::/48 maxlen: 48
                          2001:c20:48a3::/48 maxlen: 48
                          2001:c20:48a4::/48 maxlen: 48
                          2001:c20:48a6::/48 maxlen: 48
                          2001:c20:48aa::/48 maxlen: 48
                          2001:c20:48ab::/48 maxlen: 48
                          2001:c20:48ad::/48 maxlen: 48
                          2001:c20:48ae::/48 maxlen: 48
                          2001:c20:48af::/48 maxlen: 48
                          2001:c20:48b0::/48 maxlen: 48
                          2001:c20:48b1::/48 maxlen: 48
                          2001:c20:48b2::/48 maxlen: 48
                          2001:c20:48b5::/48 maxlen: 48
                          2001:c20:48b6::/48 maxlen: 48
                          2001:c20:48b7::/48 maxlen: 48
                          2001:c20:48b8::/48 maxlen: 48
                          2001:c20:48b9::/48 maxlen: 48
                          2001:c20:48ba::/48 maxlen: 48
                          2001:c20:5009::/48 maxlen: 48
                          2001:c20:8409::/48 maxlen: 48
                          2001:c20:c80a::/48 maxlen: 48
                          2001:c20:c80d::/48 maxlen: 48
                          2001:c20:c80e::/48 maxlen: 48
                          2001:c20:c80f::/48 maxlen: 48
                          2001:c20:c811::/48 maxlen: 48
                          2001:c20:c814::/48 maxlen: 48
                          2001:c20:c815::/48 maxlen: 48
                          2001:c20:c819::/48 maxlen: 48
                          2001:c20:c824::/48 maxlen: 48
                          2001:c20:c825::/48 maxlen: 48
                          2001:c20:c826::/48 maxlen: 48
                          2001:c20:c827::/48 maxlen: 48
                          2001:c20:c831::/48 maxlen: 48
                          2001:c20:c833::/48 maxlen: 48
                          2001:c20:c835::/48 maxlen: 48
                          2001:c20:c837::/48 maxlen: 48
                          2001:c20:c839::/48 maxlen: 48
                          2001:c20:c83f::/48 maxlen: 48
                          2001:c20:c840::/48 maxlen: 48
                          2001:c20:c842::/48 maxlen: 48
                          2001:c20:c847::/48 maxlen: 48
                          2001:c20:c84c::/48 maxlen: 48
                          2001:c20:c84d::/48 maxlen: 48
                          2001:c20:c84e::/48 maxlen: 48
                          2001:c20:c854::/48 maxlen: 48
                          2001:c20:c855::/48 maxlen: 48
                          2001:c20:c856::/48 maxlen: 48
                          2001:c20:e808::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 10 Oct 2024 08:09:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13945 (0x3679)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
        Validity
            Not Before: Oct  9 09:49:01 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=6706518d-dea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:df:e1:3f:0d:5f:f4:85:b4:30:27:40:56:ca:
                    0f:d1:a4:e0:7f:08:6c:21:ef:73:94:ff:e1:16:b6:
                    ce:3a:ba:75:a0:59:63:8a:22:40:fb:70:d5:8f:98:
                    b1:8a:f9:cd:23:b1:36:e3:88:3b:ed:ad:9a:ed:08:
                    b4:d1:31:1d:8a:c0:b7:9d:c0:0b:bc:cd:cb:c6:e0:
                    32:2b:3f:86:1e:e2:08:c7:dd:1d:90:4f:be:fd:52:
                    ae:45:5c:37:54:fb:2d:ae:bd:5e:b8:c5:26:71:47:
                    ab:af:c1:54:de:cf:b4:9c:a0:9e:3e:7f:a1:f7:f6:
                    18:b9:40:fb:75:24:45:a3:fe:cd:53:f7:59:94:89:
                    d7:f5:1a:12:65:80:1a:67:a6:17:dc:4c:40:66:54:
                    8a:5e:f9:dd:04:1a:7c:03:70:fc:ba:9a:21:30:97:
                    b8:dc:c7:90:89:6d:5e:8a:4f:b7:43:80:fd:80:bc:
                    c4:b6:68:84:37:cd:9c:53:ce:aa:dc:f5:32:05:0b:
                    8f:1a:54:86:fb:6e:28:ef:8a:78:2a:fe:78:23:a7:
                    33:27:ee:9a:55:ac:33:7f:d9:77:79:cf:cf:d7:65:
                    c3:19:cf:58:37:6a:17:94:fe:a5:67:0c:87:47:bf:
                    67:12:18:2b:63:48:0f:b6:c7:3b:8c:65:f8:e2:aa:
                    71:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:2B:E6:E5:84:25:91:C0:8B:80:D8:B9:BE:9C:DE:34:CB:6E:6E:90
            X509v3 Authority Key Identifier:
                keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/BEBC086A862211EF9A00FA2BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.12.224.0/24
                  118.201.12.0-118.201.31.255
                  118.201.81.0/24
                  118.201.157.0/24
                  203.125.128.0/24
                  203.125.199.0/24
                  203.126.8.0/24
                  203.126.130.0/24
                  203.126.133.0-203.126.134.255
                  203.126.137.0/24
                  203.126.147.0/24
                  203.127.2.0/23
                  203.127.10.0/24
                  203.127.31.0/24
                  203.127.104.0/24
                  203.127.111.0/24
                  203.127.135.0/24
                  203.127.146.0/24
                  203.127.148.0/24
                  203.127.200.0-203.127.202.255
                IPv6:
                  2001:c20:405::/48
                  2001:c20:4849::-2001:c20:484a:ffff:ffff:ffff:ffff:ffff
                  2001:c20:4851::/48
                  2001:c20:485e::/47
                  2001:c20:4861::/48
                  2001:c20:4865::-2001:c20:4866:ffff:ffff:ffff:ffff:ffff
                  2001:c20:4868::/48
                  2001:c20:486a::/48
                  2001:c20:486c::/48
                  2001:c20:486e::/48
                  2001:c20:4871::/48
                  2001:c20:4874::/47
                  2001:c20:4878::/47
                  2001:c20:487b::/48
                  2001:c20:487e::/48
                  2001:c20:4883::-2001:c20:4887:ffff:ffff:ffff:ffff:ffff
                  2001:c20:488b::-2001:c20:4896:ffff:ffff:ffff:ffff:ffff
                  2001:c20:4898::/48
                  2001:c20:489a::/48
                  2001:c20:48a0::-2001:c20:48a4:ffff:ffff:ffff:ffff:ffff
                  2001:c20:48a6::/48
                  2001:c20:48aa::/47
                  2001:c20:48ad::-2001:c20:48b2:ffff:ffff:ffff:ffff:ffff
                  2001:c20:48b5::-2001:c20:48ba:ffff:ffff:ffff:ffff:ffff
                  2001:c20:5009::/48
                  2001:c20:8409::/48
                  2001:c20:c80a::/48
                  2001:c20:c80d::-2001:c20:c80f:ffff:ffff:ffff:ffff:ffff
                  2001:c20:c811::/48
                  2001:c20:c814::/47
                  2001:c20:c819::/48
                  2001:c20:c824::/46
                  2001:c20:c831::/48
                  2001:c20:c833::/48
                  2001:c20:c835::/48
                  2001:c20:c837::/48
                  2001:c20:c839::/48
                  2001:c20:c83f::-2001:c20:c840:ffff:ffff:ffff:ffff:ffff
                  2001:c20:c842::/48
                  2001:c20:c847::/48
                  2001:c20:c84c::-2001:c20:c84e:ffff:ffff:ffff:ffff:ffff
                  2001:c20:c854::-2001:c20:c856:ffff:ffff:ffff:ffff:ffff
                  2001:c20:e808::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:cc:6a:e6:30:46:40:c1:85:18:c0:c9:73:0e:37:c9:39:34:
         eb:d8:25:37:0a:86:d6:58:a0:0f:4d:0a:b6:ff:b8:81:e0:79:
         8e:42:8f:78:a3:36:2e:08:46:da:0c:22:ff:8e:6b:fe:06:80:
         0e:39:94:bf:91:3b:e0:dd:a0:20:da:a2:8e:4b:9c:06:79:8a:
         93:2f:4e:ea:8f:4f:b8:80:ad:df:c8:c5:46:9b:02:1e:10:00:
         2a:87:b8:7a:10:0a:07:39:a8:bd:2b:0a:cb:52:28:f2:48:b2:
         cb:c9:b5:5b:d6:cf:ba:96:4f:f4:cb:da:be:ab:58:d5:b0:fe:
         fb:6c:69:d1:b7:e0:46:18:22:92:3e:19:af:1b:4b:8e:7f:52:
         2d:ec:19:ae:3f:6d:eb:09:d3:cd:55:d8:dd:a7:ed:75:c9:22:
         50:58:a3:48:ba:8d:8f:4c:ef:d1:4c:08:4b:07:91:db:b9:5d:
         be:1f:a5:be:02:dd:53:06:21:8d:f6:43:db:f9:83:0a:d3:e8:
         0b:55:c4:66:ec:ae:8e:53:d7:37:d1:69:f7:4b:10:f4:7e:8b:
         14:87:6e:08:64:2f:f2:b5:83:46:0e:de:83:6d:ad:87:1f:17:
         8b:3c:b7:aa:cc:43:34:bd:28:1a:e2:a7:01:be:17:65:0d:b6:
         56:2c:4a:98
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 10 09:30:00 2024 by rpki-client on console-fra.rpki-client.org