Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1F4D93203DDF11EE962F8871C4F9AE02.roa
File:                     1F4D93203DDF11EE962F8871C4F9AE02.roa (raw, json)
Hash identifier:          sdMysWf/HIeGF0a9Flx5NKI0stdAqsXOoCs4ZNNKm9E=
Subject key identifier:   D1:80:76:73:CE:5D:1B:BD:FC:4C:4E:EA:61:C8:54:7F:DA:17:41:26
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7B76
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1F4D93203DDF11EE962F8871C4F9AE02.roa
Signing time:             Mon 09 Oct 2023 06:44:48 +0000
ROA not before:           Mon 09 Oct 2023 06:44:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     55352
IP address blocks:        36.255.180.0/22 maxlen: 22
                          36.255.180.0/24 maxlen: 24
                          36.255.181.0/24 maxlen: 24
                          36.255.182.0/24 maxlen: 24
                          36.255.183.0/24 maxlen: 24
                          36.255.184.0/22 maxlen: 22
                          36.255.184.0/24 maxlen: 24
                          36.255.185.0/24 maxlen: 24
                          36.255.186.0/24 maxlen: 24
                          36.255.187.0/24 maxlen: 24
                          43.231.132.0/22 maxlen: 24
                          43.231.212.0/22 maxlen: 24
                          43.231.236.0/22 maxlen: 24
                          43.231.252.0/22 maxlen: 24
                          43.247.136.0/22 maxlen: 24
                          45.112.8.0/22 maxlen: 24
                          45.112.56.0/22 maxlen: 24
                          45.114.80.0/22 maxlen: 24
                          45.115.56.0/24 maxlen: 24
                          45.115.57.0/24 maxlen: 24
                          45.115.58.0/24 maxlen: 24
                          45.115.59.0/24 maxlen: 24
                          45.126.144.0/22 maxlen: 24
                          45.251.12.0/24 maxlen: 24
                          45.251.13.0/24 maxlen: 24
                          45.251.14.0/24 maxlen: 24
                          45.251.15.0/24 maxlen: 24
                          59.152.56.0/22 maxlen: 24
                          59.153.0.0/22 maxlen: 24
                          59.153.120.0/22 maxlen: 24
                          103.8.164.0/22 maxlen: 24
                          103.29.156.0/22 maxlen: 24
                          103.57.172.0/22 maxlen: 22
                          103.57.172.0/24 maxlen: 24
                          103.57.173.0/24 maxlen: 24
                          103.57.174.0/24 maxlen: 24
                          103.57.175.0/24 maxlen: 24
                          103.60.208.0/22 maxlen: 24
                          103.75.60.0/23 maxlen: 24
                          103.83.216.0/22 maxlen: 22
                          103.83.216.0/24 maxlen: 24
                          103.83.217.0/24 maxlen: 24
                          103.83.218.0/24 maxlen: 24
                          103.83.219.0/24 maxlen: 24
                          103.102.92.0/22 maxlen: 24
                          103.111.112.0/22 maxlen: 24
                          103.114.2.0/23 maxlen: 23
                          103.114.3.0/24 maxlen: 24
                          103.119.188.0/22 maxlen: 24
                          103.156.212.0/23 maxlen: 24
                          103.171.108.0/24 maxlen: 24
                          103.176.240.0/23 maxlen: 24
                          103.179.212.0/23 maxlen: 24
                          103.197.224.0/22 maxlen: 24
                          103.198.164.0/22 maxlen: 24
                          103.200.100.0/22 maxlen: 22
                          103.200.100.0/24 maxlen: 24
                          103.200.101.0/24 maxlen: 24
                          103.200.102.0/24 maxlen: 24
                          103.200.103.0/24 maxlen: 24
                          103.200.104.0/22 maxlen: 24
                          103.200.212.0/22 maxlen: 22
                          103.200.212.0/24 maxlen: 24
                          103.200.213.0/24 maxlen: 24
                          103.200.214.0/24 maxlen: 24
                          103.200.215.0/24 maxlen: 24
                          103.204.160.0/22 maxlen: 24
                          103.205.172.0/22 maxlen: 24
                          103.220.40.0/22 maxlen: 24
                          103.221.248.0/22 maxlen: 24
                          103.226.140.0/22 maxlen: 24
                          103.226.144.0/22 maxlen: 24
                          103.226.188.0/22 maxlen: 24
                          103.226.204.0/22 maxlen: 24
                          103.226.236.0/22 maxlen: 24
                          103.226.240.0/22 maxlen: 24
                          103.234.240.0/22 maxlen: 22
                          103.234.240.0/24 maxlen: 24
                          103.234.241.0/24 maxlen: 24
                          103.234.242.0/24 maxlen: 24
                          103.234.243.0/24 maxlen: 24
                          103.239.171.0/24 maxlen: 24
                          103.249.132.0/22 maxlen: 24
                          111.125.217.0/24 maxlen: 24
                          111.125.218.0/23 maxlen: 24
                          111.125.224.0/24 maxlen: 24
                          111.125.226.0/24 maxlen: 24
                          111.125.228.0/24 maxlen: 24
                          111.125.233.0/24 maxlen: 24
                          111.125.236.0/24 maxlen: 24
                          111.125.241.0/24 maxlen: 24
                          111.125.242.0/24 maxlen: 24
                          111.125.249.0/24 maxlen: 24
                          111.125.252.0/22 maxlen: 24
                          124.66.172.0/22 maxlen: 24
                          137.59.204.0/22 maxlen: 22
                          137.59.204.0/24 maxlen: 24
                          137.59.205.0/24 maxlen: 24
                          137.59.206.0/24 maxlen: 24
                          137.59.207.0/24 maxlen: 24
                          175.100.176.0/20 maxlen: 24
                          202.168.144.0/22 maxlen: 24
                          2406:9e00:20::/48 maxlen: 48
                          2406:9e00:21::/48 maxlen: 48
                          2406:9e00:22::/48 maxlen: 48
                          2406:9e00:23::/48 maxlen: 48
                          2406:9e00:24::/48 maxlen: 48
                          2406:9e00:25::/48 maxlen: 48
                          2406:9e00:26::/48 maxlen: 48
                          2406:9e00:27::/48 maxlen: 48
                          2406:9e00:28::/48 maxlen: 48
                          2406:9e00:29::/48 maxlen: 48
                          2406:9e00:2a::/48 maxlen: 48
                          2406:9e00:2b::/48 maxlen: 48
                          2406:9e00:2c::/48 maxlen: 48
                          2406:9e00:2d::/48 maxlen: 48
                          2406:9e00:2e::/48 maxlen: 48
                          2406:9e00:2f::/48 maxlen: 48
                          2406:9e00:30::/48 maxlen: 48
                          2406:9e00:31::/48 maxlen: 48
                          2406:9e00:32::/48 maxlen: 48
                          2406:9e00:33::/48 maxlen: 48
                          2406:9e00:34::/48 maxlen: 48
                          2406:9e00:35::/48 maxlen: 48
                          2406:9e00:36::/48 maxlen: 48
                          2406:9e00:37::/48 maxlen: 48
                          2406:9e00:38::/48 maxlen: 48
                          2406:9e00:39::/48 maxlen: 48
                          2406:9e00:3a::/48 maxlen: 48
                          2406:9e00:3b::/48 maxlen: 48
                          2406:9e00:3c::/48 maxlen: 48
                          2406:9e00:3d::/48 maxlen: 48
                          2406:9e00:3e::/48 maxlen: 48
                          2406:9e00:3f::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31606 (0x7b76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Oct  9 06:44:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6523a160-65d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e8:cd:7a:f5:f0:4e:fb:50:84:a7:cb:11:8f:
                    72:6c:2a:ea:74:28:7e:0b:f9:d9:79:d8:eb:42:d9:
                    bb:42:01:45:da:b6:a7:c3:5f:94:79:27:6a:c1:d4:
                    12:b4:53:ad:8f:a1:d2:b4:4b:8a:62:ad:a7:d8:56:
                    21:c8:4c:ed:94:34:1f:2a:ad:05:ec:38:5c:dc:55:
                    ec:3b:6d:06:50:42:c9:fa:6f:9e:40:e7:54:ed:8f:
                    09:b1:c9:fb:d4:c5:4b:84:81:c0:92:68:54:27:d3:
                    4f:53:2e:2e:78:e3:1f:ef:7b:5e:9b:74:61:e8:f7:
                    45:13:bf:5d:03:34:a9:bf:19:ff:9f:e5:d8:2c:c9:
                    f7:15:ed:33:83:f5:39:21:ea:d6:eb:a2:f9:b8:bc:
                    cf:74:20:15:e5:91:0c:d0:da:0d:e1:36:27:b3:b5:
                    ea:a8:c6:5a:de:a7:0d:74:21:4c:25:64:a7:bf:81:
                    c4:9d:b4:b4:c1:45:63:09:e9:39:81:c6:fe:de:a9:
                    81:c9:10:41:a2:53:5b:41:67:70:39:17:c4:20:66:
                    2c:e1:8c:23:25:70:7b:8e:5e:51:04:ea:1a:56:1a:
                    6c:71:ed:2c:83:50:67:e5:bc:4c:42:64:f6:19:41:
                    1f:df:0b:96:cf:24:32:eb:04:c4:3a:dd:7d:10:85:
                    2b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:80:76:73:CE:5D:1B:BD:FC:4C:4E:EA:61:C8:54:7F:DA:17:41:26
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1F4D93203DDF11EE962F8871C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.255.180.0-36.255.187.255
                  43.231.132.0/22
                  43.231.212.0/22
                  43.231.236.0/22
                  43.231.252.0/22
                  43.247.136.0/22
                  45.112.8.0/22
                  45.112.56.0/22
                  45.114.80.0/22
                  45.115.56.0/22
                  45.126.144.0/22
                  45.251.12.0/22
                  59.152.56.0/22
                  59.153.0.0/22
                  59.153.120.0/22
                  103.8.164.0/22
                  103.29.156.0/22
                  103.57.172.0/22
                  103.60.208.0/22
                  103.75.60.0/23
                  103.83.216.0/22
                  103.102.92.0/22
                  103.111.112.0/22
                  103.114.2.0/23
                  103.119.188.0/22
                  103.156.212.0/23
                  103.171.108.0/24
                  103.176.240.0/23
                  103.179.212.0/23
                  103.197.224.0/22
                  103.198.164.0/22
                  103.200.100.0-103.200.107.255
                  103.200.212.0/22
                  103.204.160.0/22
                  103.205.172.0/22
                  103.220.40.0/22
                  103.221.248.0/22
                  103.226.140.0-103.226.147.255
                  103.226.188.0/22
                  103.226.204.0/22
                  103.226.236.0-103.226.243.255
                  103.234.240.0/22
                  103.239.171.0/24
                  103.249.132.0/22
                  111.125.217.0-111.125.219.255
                  111.125.224.0/24
                  111.125.226.0/24
                  111.125.228.0/24
                  111.125.233.0/24
                  111.125.236.0/24
                  111.125.241.0-111.125.242.255
                  111.125.249.0/24
                  111.125.252.0/22
                  124.66.172.0/22
                  137.59.204.0/22
                  175.100.176.0/20
                  202.168.144.0/22
                IPv6:
                  2406:9e00:20::/43

    Signature Algorithm: sha256WithRSAEncryption
         0d:92:be:ff:d3:3e:0e:05:e3:99:88:5d:e8:85:85:a9:70:cc:
         e6:4d:23:f0:02:6f:c2:55:d6:fd:62:70:50:81:4a:87:d1:28:
         33:a7:c6:5b:81:38:97:1e:58:a8:32:76:75:5f:8e:17:5f:81:
         af:8b:a5:1d:68:56:44:9b:bf:3e:e3:5d:83:f4:b7:b4:f9:d3:
         82:e7:49:60:a4:f6:02:b1:be:c3:c1:5d:c4:b0:50:31:eb:cb:
         8e:30:75:59:be:b6:ee:09:40:b4:e5:93:70:14:2f:d1:1f:5a:
         bd:16:a1:b9:9d:c1:11:c8:b9:2e:db:d9:f3:09:05:60:20:ef:
         4f:f3:46:8b:3f:82:34:50:78:8b:de:7c:08:42:4a:1e:59:bf:
         61:e8:07:5c:e8:95:80:7b:e6:d5:97:02:ac:40:fb:e7:2d:c6:
         33:4f:3f:06:d9:fb:db:3c:20:0c:f5:74:81:f8:d6:10:30:c2:
         7c:bc:db:6d:84:35:15:3e:7f:74:0a:37:a1:01:d1:a5:0c:96:
         7f:e0:e3:6c:6a:0b:ff:fe:50:58:41:54:80:6d:b0:13:e1:fc:
         c3:b8:ee:2d:3f:3d:37:71:56:94:68:d3:f0:b2:e9:44:7d:99:
         62:a8:ab:8b:84:31:82:8c:57:97:c3:1f:7f:ee:ab:c0:3d:5a:
         e6:2b:c8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 18 06:33:35 2023 by rpki-client on console-fra.rpki-client.org