Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/66730DECB46211EBB275A110C4F9AE02.roa
File:                     66730DECB46211EBB275A110C4F9AE02.roa (raw, json)
Hash identifier:          c+mL/u0c/IoeoWUqgT/pZMx1T/V/nSIL354nS7fMH8Q=
Subject key identifier:   68:CF:41:B7:95:5A:78:BC:F7:1B:1B:BE:56:E3:EE:EC:76:3F:F6:62
Certificate issuer:       /CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
Certificate serial:       04FB
Authority key identifier: E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/66730DECB46211EBB275A110C4F9AE02.roa
Signing time:             Tue 18 Jul 2023 03:03:30 +0000
ROA not before:           Tue 18 Jul 2023 03:03:30 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     38186
IP address blocks:        27.126.176.0/20 maxlen: 20
                          27.126.176.0/24 maxlen: 24
                          27.126.177.0/24 maxlen: 24
                          27.126.178.0/24 maxlen: 24
                          27.126.179.0/24 maxlen: 24
                          27.126.180.0/24 maxlen: 24
                          27.126.181.0/24 maxlen: 24
                          27.126.182.0/24 maxlen: 24
                          27.126.183.0/24 maxlen: 24
                          27.126.184.0/24 maxlen: 24
                          27.126.185.0/24 maxlen: 24
                          27.126.186.0/24 maxlen: 24
                          27.126.187.0/24 maxlen: 24
                          27.126.188.0/24 maxlen: 24
                          27.126.189.0/24 maxlen: 24
                          27.126.190.0/24 maxlen: 24
                          27.126.191.0/24 maxlen: 24
                          103.237.72.0/22 maxlen: 22
                          103.237.72.0/24 maxlen: 24
                          103.237.73.0/24 maxlen: 24
                          103.237.74.0/24 maxlen: 24
                          103.237.75.0/24 maxlen: 24
                          115.126.0.0/24 maxlen: 24
                          115.126.1.0/24 maxlen: 24
                          115.126.2.0/24 maxlen: 24
                          115.126.10.0/24 maxlen: 24
                          115.126.11.0/24 maxlen: 24
                          115.126.19.0/24 maxlen: 24
                          115.126.23.0/24 maxlen: 24
                          115.126.24.0/24 maxlen: 24
                          115.126.25.0/24 maxlen: 24
                          115.126.26.0/24 maxlen: 24
                          115.126.27.0/24 maxlen: 24
                          115.126.32.0/24 maxlen: 24
                          115.126.33.0/24 maxlen: 24
                          115.126.34.0/24 maxlen: 24
                          115.126.35.0/24 maxlen: 24
                          115.126.37.0/24 maxlen: 24
                          115.126.38.0/24 maxlen: 24
                          115.126.39.0/24 maxlen: 24
                          115.126.41.0/24 maxlen: 24
                          115.126.45.0/24 maxlen: 24
                          115.126.48.0/24 maxlen: 24
                          115.126.49.0/24 maxlen: 24
                          115.126.50.0/24 maxlen: 24
                          115.126.61.0/24 maxlen: 24
                          115.126.71.0/24 maxlen: 24
                          115.126.73.0/24 maxlen: 24
                          115.126.76.0/24 maxlen: 24
                          115.126.77.0/24 maxlen: 24
                          115.126.78.0/24 maxlen: 24
                          115.126.79.0/24 maxlen: 24
                          115.126.82.0/24 maxlen: 24
                          115.126.87.0/24 maxlen: 24
                          115.126.89.0/24 maxlen: 24
                          115.126.90.0/24 maxlen: 24
                          115.126.97.0/24 maxlen: 24
                          115.126.100.0/24 maxlen: 24
                          115.126.101.0/24 maxlen: 24
                          115.126.104.0/24 maxlen: 24
                          115.126.106.0/24 maxlen: 24
                          115.126.110.0/24 maxlen: 24
                          115.126.111.0/24 maxlen: 24
                          115.126.112.0/24 maxlen: 24
                          115.126.113.0/24 maxlen: 24
                          115.126.114.0/24 maxlen: 24
                          115.126.115.0/24 maxlen: 24
                          115.126.116.0/24 maxlen: 24
                          115.126.118.0/24 maxlen: 24
                          116.212.112.0/20 maxlen: 20
                          116.212.112.0/24 maxlen: 24
                          116.212.113.0/24 maxlen: 24
                          116.212.114.0/24 maxlen: 24
                          116.212.115.0/24 maxlen: 24
                          116.212.116.0/24 maxlen: 24
                          116.212.117.0/24 maxlen: 24
                          116.212.118.0/24 maxlen: 24
                          116.212.119.0/24 maxlen: 24
                          116.212.120.0/24 maxlen: 24
                          116.212.121.0/24 maxlen: 24
                          116.212.122.0/24 maxlen: 24
                          116.212.123.0/24 maxlen: 24
                          116.212.124.0/24 maxlen: 24
                          116.212.125.0/24 maxlen: 24
                          116.212.126.0/24 maxlen: 24
                          116.212.127.0/24 maxlen: 24
                          118.99.2.0/24 maxlen: 24
                          118.99.3.0/24 maxlen: 24
                          118.99.5.0/24 maxlen: 24
                          118.99.7.0/24 maxlen: 24
                          118.99.10.0/24 maxlen: 24
                          118.99.12.0/24 maxlen: 24
                          118.99.15.0/24 maxlen: 24
                          118.99.21.0/24 maxlen: 24
                          118.99.23.0/24 maxlen: 24
                          118.99.25.0/24 maxlen: 24
                          118.99.26.0/24 maxlen: 24
                          118.99.31.0/24 maxlen: 24
                          118.99.32.0/24 maxlen: 24
                          118.99.34.0/24 maxlen: 24
                          118.99.40.0/24 maxlen: 24
                          118.99.42.0/24 maxlen: 24
                          118.99.47.0/24 maxlen: 24
                          118.99.50.0/24 maxlen: 24
                          118.99.52.0/24 maxlen: 24
                          118.99.58.0/24 maxlen: 24
                          118.102.8.0/21 maxlen: 21
                          118.102.8.0/24 maxlen: 24
                          118.102.9.0/24 maxlen: 24
                          118.102.10.0/24 maxlen: 24
                          118.102.11.0/24 maxlen: 24
                          118.102.12.0/24 maxlen: 24
                          118.102.13.0/24 maxlen: 24
                          118.102.14.0/24 maxlen: 24
                          118.102.15.0/24 maxlen: 24
                          119.47.80.0/21 maxlen: 21
                          119.47.80.0/24 maxlen: 24
                          119.47.81.0/24 maxlen: 24
                          119.47.82.0/24 maxlen: 24
                          119.47.83.0/24 maxlen: 24
                          119.47.84.0/24 maxlen: 24
                          119.47.85.0/24 maxlen: 24
                          119.47.86.0/24 maxlen: 24
                          119.47.87.0/24 maxlen: 24
                          163.53.216.0/22 maxlen: 22
                          163.53.216.0/24 maxlen: 24
                          163.53.217.0/24 maxlen: 24
                          163.53.218.0/24 maxlen: 24
                          163.53.219.0/24 maxlen: 24
                          202.59.152.0/21 maxlen: 21
                          202.59.152.0/24 maxlen: 24
                          202.59.153.0/24 maxlen: 24
                          202.59.154.0/24 maxlen: 24
                          202.59.155.0/24 maxlen: 24
                          202.59.156.0/24 maxlen: 24
                          202.59.157.0/24 maxlen: 24
                          202.59.158.0/24 maxlen: 24
                          202.59.159.0/24 maxlen: 24
                          2404:ee00::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1275 (0x4fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164D60/serialNumber=E0BA228EAF9812F067D2FF3BF806895698C93977
        Validity
            Not Before: Jul 18 03:03:30 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64b60101-dab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:16:a8:e6:aa:bd:ab:db:1a:1d:6c:0a:44:fd:
                    a7:21:2a:3c:e9:d8:ce:ef:a3:3d:6d:0e:ad:99:03:
                    76:a0:75:62:38:26:29:b8:11:34:f0:c0:4e:7f:03:
                    07:67:d4:e7:43:f4:f5:e7:a0:69:c9:34:eb:f2:5a:
                    82:bd:92:67:2d:1b:14:2c:67:c7:ba:ea:ce:b8:ac:
                    20:ce:15:24:01:f6:a7:38:25:a9:fc:85:a9:29:df:
                    10:47:ab:ae:c7:b8:c1:57:9d:2b:08:0a:e3:7f:b0:
                    98:f4:c7:15:0e:2e:db:b6:a3:52:a9:40:ac:17:c8:
                    c3:f0:ce:b9:fc:e3:54:c8:13:d7:a1:2d:7a:28:c9:
                    af:9d:59:68:b7:e7:71:7c:c1:ad:1d:5a:e6:c8:ef:
                    4f:50:bc:d6:93:30:d6:49:9d:a6:47:c5:34:5f:4b:
                    85:c3:09:12:d6:20:33:03:00:ec:d1:ff:ed:03:e9:
                    9c:68:30:ba:0b:c8:a9:62:8a:42:88:c1:48:58:2f:
                    ab:b0:f3:c2:d1:74:c4:b6:26:66:c1:b5:0a:c6:82:
                    cd:90:3b:a1:27:d8:34:29:a3:14:77:1b:90:9c:af:
                    e1:ec:98:4a:d5:76:d2:ef:5c:6a:80:50:75:c5:f2:
                    bd:68:a0:27:1c:30:c5:d5:dc:ab:67:cf:09:2f:02:
                    96:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CF:41:B7:95:5A:78:BC:F7:1B:1B:BE:56:E3:EE:EC:76:3F:F6:62
            X509v3 Authority Key Identifier:
                keyid:E0:BA:22:8E:AF:98:12:F0:67:D2:FF:3B:F8:06:89:56:98:C9:39:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/4Loijq-YEvBn0v87-AaJVpjJOXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Loijq-YEvBn0v87-AaJVpjJOXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164D60/9E0DE392B45F11EBB61B760CC4F9AE02/66730DECB46211EBB275A110C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.126.176.0/20
                  103.237.72.0/22
                  115.126.0.0-115.126.2.255
                  115.126.10.0/23
                  115.126.19.0/24
                  115.126.23.0-115.126.27.255
                  115.126.32.0/22
                  115.126.37.0-115.126.39.255
                  115.126.41.0/24
                  115.126.45.0/24
                  115.126.48.0-115.126.50.255
                  115.126.61.0/24
                  115.126.71.0/24
                  115.126.73.0/24
                  115.126.76.0/22
                  115.126.82.0/24
                  115.126.87.0/24
                  115.126.89.0-115.126.90.255
                  115.126.97.0/24
                  115.126.100.0/23
                  115.126.104.0/24
                  115.126.106.0/24
                  115.126.110.0-115.126.116.255
                  115.126.118.0/24
                  116.212.112.0/20
                  118.99.2.0/23
                  118.99.5.0/24
                  118.99.7.0/24
                  118.99.10.0/24
                  118.99.12.0/24
                  118.99.15.0/24
                  118.99.21.0/24
                  118.99.23.0/24
                  118.99.25.0-118.99.26.255
                  118.99.31.0-118.99.32.255
                  118.99.34.0/24
                  118.99.40.0/24
                  118.99.42.0/24
                  118.99.47.0/24
                  118.99.50.0/24
                  118.99.52.0/24
                  118.99.58.0/24
                  118.102.8.0/21
                  119.47.80.0/21
                  163.53.216.0/22
                  202.59.152.0/21
                IPv6:
                  2404:ee00::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:f8:b1:65:7d:f3:fd:b4:a7:de:b2:b4:63:20:0a:c7:bd:b9:
         34:d3:2e:96:b8:e7:b6:09:bd:5e:78:ef:87:d3:e8:6f:0a:33:
         c1:65:18:34:b4:62:50:47:12:64:a1:26:fc:7c:27:d0:2d:86:
         99:5b:c5:67:d8:11:2e:fb:6b:62:d6:78:75:6d:b8:65:77:0b:
         09:2d:9d:27:3f:11:5c:22:64:0c:ae:e7:ea:f8:f6:b5:62:33:
         0d:86:be:bc:93:62:32:d5:43:c9:aa:9b:d2:04:fe:da:29:23:
         e0:7e:49:95:d8:ad:d9:2f:d8:1c:ff:14:b2:97:7a:98:a5:0e:
         bb:92:8f:6e:e5:ed:17:a0:60:37:ac:37:46:14:5e:59:35:b3:
         fe:7b:19:05:ab:fb:f6:72:62:ea:b3:94:1b:5e:fd:af:f9:5d:
         ce:32:d7:07:10:32:00:e6:36:ea:25:87:d3:84:9d:f0:0b:5f:
         8d:1f:d0:93:f4:0b:4a:80:45:e1:b6:66:1a:bc:b1:72:75:65:
         7d:e7:ad:4c:46:0a:ed:ce:de:5b:29:32:ab:d7:59:44:fb:77:
         22:72:2d:7c:ee:42:f4:e2:7b:5a:79:8c:a3:41:14:cc:8c:f9:
         52:d6:63:d7:07:e6:47:80:c2:cc:7c:b3:4e:de:bf:b1:86:4e:
         dd:35:21:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:45 2023 by rpki-client on console-fra.rpki-client.org