Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/B63260424A6111EFAECFDE7AC4F9AE02.roa
File:                     B63260424A6111EFAECFDE7AC4F9AE02.roa (raw, json)
Hash identifier:          v5GG9dagKpIz4qaW1x+b0lpm+kTIBFFcsBQt+ayiwgU=
Subject key identifier:   BA:D1:AC:A0:21:6C:81:A9:06:BA:6D:02:5A:8B:15:FE:16:2F:BE:2C
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       36CD
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/B63260424A6111EFAECFDE7AC4F9AE02.roa
Signing time:             Thu 25 Jul 2024 08:41:40 +0000
ROA not before:           Thu 25 Jul 2024 08:41:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     38710
IP address blocks:        111.88.72.0/21 maxlen: 21
                          111.88.72.0/23 maxlen: 24
                          111.88.74.0/23 maxlen: 24
                          111.88.76.0/22 maxlen: 23
                          111.88.78.0/24 maxlen: 24
                          111.88.96.0/19 maxlen: 19
                          111.88.144.0/20 maxlen: 23
                          111.88.164.0/22 maxlen: 23
                          111.88.168.0/22 maxlen: 24
                          111.88.184.0/22 maxlen: 23
                          111.88.188.0/22 maxlen: 23
                          111.88.233.0/24 maxlen: 24
                          111.88.238.0/24 maxlen: 24
                          111.88.239.0/24 maxlen: 24
                          111.88.244.0/22 maxlen: 22
                          111.88.248.0/21 maxlen: 21
                          111.88.248.0/22 maxlen: 22
                          111.88.248.0/23 maxlen: 23
                          111.88.249.0/24 maxlen: 24
                          111.88.250.0/24 maxlen: 24
                          111.88.255.0/24 maxlen: 24
                          115.186.10.0/23 maxlen: 23
                          115.186.12.0/23 maxlen: 23
                          115.186.14.0/24 maxlen: 24
                          115.186.16.0/24 maxlen: 24
                          115.186.17.0/24 maxlen: 24
                          115.186.21.0/24 maxlen: 24
                          115.186.23.0/24 maxlen: 24
                          115.186.24.0/23 maxlen: 23
                          115.186.25.0/24 maxlen: 24
                          115.186.30.0/23 maxlen: 24
                          115.186.32.0/20 maxlen: 22
                          115.186.32.0/24 maxlen: 24
                          115.186.33.0/24 maxlen: 24
                          115.186.34.0/24 maxlen: 24
                          115.186.35.0/24 maxlen: 24
                          115.186.36.0/22 maxlen: 23
                          115.186.36.0/23 maxlen: 24
                          115.186.40.0/24 maxlen: 24
                          115.186.42.0/24 maxlen: 24
                          115.186.43.0/24 maxlen: 24
                          115.186.44.0/24 maxlen: 24
                          115.186.45.0/24 maxlen: 24
                          115.186.46.0/24 maxlen: 24
                          115.186.47.0/24 maxlen: 24
                          115.186.56.0/21 maxlen: 23
                          115.186.56.0/22 maxlen: 24
                          115.186.60.0/23 maxlen: 24
                          115.186.63.0/24 maxlen: 24
                          115.186.64.0/19 maxlen: 23
                          115.186.76.0/22 maxlen: 24
                          115.186.80.0/21 maxlen: 24
                          115.186.90.0/24 maxlen: 24
                          115.186.96.0/20 maxlen: 23
                          115.186.96.0/22 maxlen: 24
                          115.186.101.0/24 maxlen: 24
                          115.186.102.0/23 maxlen: 24
                          115.186.104.0/24 maxlen: 24
                          115.186.106.0/23 maxlen: 24
                          115.186.108.0/22 maxlen: 24
                          115.186.112.0/20 maxlen: 23
                          115.186.112.0/23 maxlen: 24
                          115.186.115.0/24 maxlen: 24
                          115.186.117.0/24 maxlen: 24
                          115.186.118.0/23 maxlen: 24
                          115.186.120.0/23 maxlen: 24
                          115.186.125.0/24 maxlen: 24
                          115.186.126.0/24 maxlen: 24
                          117.102.0.0/21 maxlen: 21
                          117.102.0.0/22 maxlen: 22
                          117.102.0.0/23 maxlen: 24
                          117.102.2.0/24 maxlen: 24
                          117.102.3.0/24 maxlen: 24
                          117.102.4.0/24 maxlen: 24
                          117.102.5.0/24 maxlen: 24
                          117.102.6.0/24 maxlen: 24
                          117.102.7.0/24 maxlen: 24
                          117.102.8.0/24 maxlen: 24
                          117.102.9.0/24 maxlen: 24
                          117.102.10.0/24 maxlen: 24
                          117.102.12.0/23 maxlen: 24
                          117.102.14.0/23 maxlen: 23
                          117.102.16.0/24 maxlen: 24
                          117.102.17.0/24 maxlen: 24
                          117.102.18.0/23 maxlen: 24
                          117.102.20.0/22 maxlen: 23
                          117.102.21.0/24 maxlen: 24
                          117.102.24.0/22 maxlen: 22
                          117.102.24.0/23 maxlen: 24
                          117.102.26.0/24 maxlen: 24
                          117.102.28.0/24 maxlen: 24
                          117.102.30.0/24 maxlen: 24
                          117.102.31.0/24 maxlen: 24
                          117.102.32.0/24 maxlen: 24
                          117.102.33.0/24 maxlen: 24
                          117.102.34.0/24 maxlen: 24
                          117.102.35.0/24 maxlen: 24
                          117.102.36.0/24 maxlen: 24
                          117.102.37.0/24 maxlen: 24
                          117.102.38.0/24 maxlen: 24
                          117.102.39.0/24 maxlen: 24
                          117.102.40.0/24 maxlen: 24
                          117.102.41.0/24 maxlen: 24
                          117.102.42.0/24 maxlen: 24
                          117.102.43.0/24 maxlen: 24
                          117.102.44.0/24 maxlen: 24
                          117.102.45.0/24 maxlen: 24
                          117.102.46.0/24 maxlen: 24
                          117.102.47.0/24 maxlen: 24
                          203.81.192.0/21 maxlen: 22
                          203.81.192.0/24 maxlen: 24
                          203.81.193.0/24 maxlen: 24
                          203.81.194.0/24 maxlen: 24
                          203.81.195.0/24 maxlen: 24
                          203.81.196.0/24 maxlen: 24
                          203.81.197.0/24 maxlen: 24
                          203.81.198.0/23 maxlen: 24
                          203.81.208.0/20 maxlen: 23
                          203.81.208.0/22 maxlen: 24
                          203.81.213.0/24 maxlen: 24
                          203.81.215.0/24 maxlen: 24
                          203.81.224.0/20 maxlen: 23
                          203.81.230.0/24 maxlen: 24
                          203.81.239.0/24 maxlen: 24
                          2406:7000::/32 maxlen: 32
                          2406:7000::/48 maxlen: 48
                          2406:7000:1::/48 maxlen: 48
                          2406:7000:2::/48 maxlen: 48
                          2406:7000:3::/48 maxlen: 48
                          2406:7000:4::/48 maxlen: 48
                          2406:7000:5::/48 maxlen: 48
                          2406:7000:6::/48 maxlen: 48
                          2406:7000:7::/48 maxlen: 48
                          2406:7000:8::/48 maxlen: 48
                          2406:7000:9::/48 maxlen: 48
                          2406:7000:a::/48 maxlen: 48
                          2406:7000:b::/48 maxlen: 48
                          2406:7000:c::/48 maxlen: 48
                          2406:7000:d::/48 maxlen: 48
                          2406:7000:e::/48 maxlen: 48
                          2406:7000:f::/48 maxlen: 48
                          2406:7000:10::/48 maxlen: 48
                          2406:7000:11::/48 maxlen: 48
                          2406:7000:12::/48 maxlen: 48
                          2406:7000:13::/48 maxlen: 48
                          2406:7000:14::/48 maxlen: 48
                          2406:7000:15::/48 maxlen: 48
                          2406:7000:16::/48 maxlen: 48
                          2406:7000:17::/48 maxlen: 48
                          2406:7000:18::/48 maxlen: 48
                          2406:7000:19::/48 maxlen: 48
                          2406:7000:1a::/48 maxlen: 48
                          2406:7000:1b::/48 maxlen: 48
                          2406:7000:1c::/48 maxlen: 48
                          2406:7000:1d::/48 maxlen: 48
                          2406:7000:1e::/48 maxlen: 48
                          2406:7000:1f::/48 maxlen: 48
                          2406:7000:20::/48 maxlen: 48
                          2406:7000:21::/48 maxlen: 48
                          2406:7000:22::/48 maxlen: 48
                          2406:7000:23::/48 maxlen: 48
                          2406:7000:24::/48 maxlen: 48
                          2406:7000:25::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 04 Oct 2024 14:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14029 (0x36cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Jul 25 08:41:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66a20fc4-c776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:18:e8:e9:a1:e1:0c:f2:f8:40:a2:bf:16:55:
                    4d:68:36:ff:3c:28:ed:25:e1:75:76:29:7d:ed:1a:
                    8b:a2:7c:0c:5a:07:ab:00:34:39:2a:57:a0:97:1d:
                    c0:81:c6:b3:4b:29:d8:3e:f6:b0:e9:0f:5b:b2:48:
                    2c:3e:a4:5b:fc:e9:8d:57:c5:27:e5:fd:36:90:9f:
                    90:d2:66:3c:e9:b8:8d:2e:d5:e0:0b:65:a0:85:d4:
                    f5:b2:b3:e3:5d:d7:b0:1f:95:8e:eb:06:42:78:8b:
                    ec:ec:f6:83:da:f9:bf:07:da:ae:5c:8f:25:45:c5:
                    32:ae:6a:ab:2c:ac:4b:6c:98:6c:37:87:17:d0:19:
                    90:57:fd:94:ef:10:58:14:58:f3:13:4a:63:3f:ff:
                    1f:91:77:5f:d7:d8:e6:9c:3c:13:05:47:7d:ba:34:
                    b8:e3:c3:fe:cb:7b:3b:8a:22:1c:be:5b:ac:67:d3:
                    79:13:37:c3:e5:88:97:d6:13:26:1b:ba:15:4a:43:
                    09:bb:6f:96:ff:15:43:58:ea:dc:57:cb:56:be:99:
                    b9:16:e6:8d:39:1b:0c:62:3a:73:03:01:ab:17:50:
                    53:c9:0d:80:89:77:8b:18:e6:79:ae:5d:d2:59:d4:
                    b5:02:a6:42:53:03:2d:4d:c5:1f:a1:4e:36:1f:aa:
                    3c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D1:AC:A0:21:6C:81:A9:06:BA:6D:02:5A:8B:15:FE:16:2F:BE:2C
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/B63260424A6111EFAECFDE7AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.88.72.0/21
                  111.88.96.0/19
                  111.88.144.0/20
                  111.88.164.0-111.88.171.255
                  111.88.184.0/21
                  111.88.233.0/24
                  111.88.238.0/23
                  111.88.244.0-111.88.255.255
                  115.186.10.0-115.186.14.255
                  115.186.16.0/23
                  115.186.21.0/24
                  115.186.23.0-115.186.25.255
                  115.186.30.0-115.186.47.255
                  115.186.56.0-115.186.127.255
                  117.102.0.0-117.102.10.255
                  117.102.12.0-117.102.28.255
                  117.102.30.0-117.102.47.255
                  203.81.192.0/21
                  203.81.208.0-203.81.239.255
                IPv6:
                  2406:7000::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:22:2a:6b:2b:af:5d:31:95:57:28:d2:c8:13:2b:1a:41:0b:
         d2:76:a8:67:f9:74:ce:28:e5:78:43:8b:2f:81:b0:56:77:6d:
         d8:99:99:f6:dd:70:6f:d2:6b:0d:2c:09:8e:27:74:ae:f5:14:
         98:1d:70:aa:4d:47:1d:9b:41:ea:f9:eb:49:3c:0d:01:80:6c:
         4c:fc:a1:8b:3c:92:be:d4:87:d9:9b:c6:25:3f:9f:e9:3d:33:
         92:a7:fe:db:8d:a2:e9:13:cb:27:cd:30:47:40:13:83:a5:80:
         f0:62:fc:8b:6a:de:99:b6:a8:4b:22:a9:18:c7:32:81:5b:66:
         1c:f4:bb:cd:5e:7c:c4:d5:ce:6f:ef:8e:d9:9b:cc:1e:0e:15:
         68:f1:98:f7:c0:43:f6:74:f3:fa:8c:a1:49:a9:ef:93:12:4b:
         4c:ed:e8:72:ad:68:0e:68:6f:6c:2c:90:57:ef:3c:22:ca:94:
         63:8a:c5:d6:da:f2:28:1b:99:d1:11:f2:80:bd:05:c8:2d:c7:
         eb:70:6a:e1:3d:b9:18:e5:5d:51:37:e6:7a:d5:17:15:3d:cd:
         79:fb:cd:93:a7:8c:1e:12:dd:28:e3:e1:14:6c:6a:a5:58:f0:
         9b:9b:d0:fe:97:4e:26:85:12:8f:5a:db:bf:1e:aa:0e:6c:0b:
         c3:fc:83:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 18:58:30 2024 by rpki-client on console-ams.rpki-client.org