Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2441F8D0271C11F09CD53C0CC4F9AE02.roa
File:                     2441F8D0271C11F09CD53C0CC4F9AE02.roa (raw, json)
Hash identifier:          JPXUCvpzTsD5VxTk4uleJGGeTv4bGF4ceBxFPz5Fsjw=
Subject key identifier:   3F:75:E2:82:AA:80:E3:6F:6C:24:57:42:9C:C4:96:EE:59:D4:DE:85
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B088
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2441F8D0271C11F09CD53C0CC4F9AE02.roa
Signing time:             Mon 05 May 2025 05:46:05 +0000
ROA not before:           Mon 05 May 2025 05:46:05 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     133676
IP address blocks:        36.50.82.0/24 maxlen: 24
                          43.225.74.0/24 maxlen: 24
                          43.230.196.0/22 maxlen: 24
                          43.239.132.0/22 maxlen: 24
                          43.240.4.0/24 maxlen: 24
                          43.240.5.0/24 maxlen: 24
                          43.240.6.0/24 maxlen: 24
                          43.240.7.0/24 maxlen: 24
                          43.250.252.0/22 maxlen: 24
                          45.64.8.0/24 maxlen: 24
                          45.64.9.0/24 maxlen: 24
                          45.64.10.0/24 maxlen: 24
                          45.64.11.0/24 maxlen: 24
                          45.248.24.0/24 maxlen: 24
                          45.248.25.0/24 maxlen: 24
                          45.248.26.0/23 maxlen: 24
                          103.42.88.0/22 maxlen: 24
                          103.47.12.0/23 maxlen: 24
                          103.47.14.0/24 maxlen: 24
                          103.47.15.0/24 maxlen: 24
                          103.47.72.0/23 maxlen: 24
                          103.47.74.0/23 maxlen: 24
                          103.47.172.0/23 maxlen: 24
                          103.47.174.0/23 maxlen: 24
                          103.49.232.0/23 maxlen: 24
                          103.54.24.0/23 maxlen: 24
                          103.54.26.0/24 maxlen: 24
                          103.62.147.0/24 maxlen: 24
                          103.80.34.0/23 maxlen: 24
                          103.82.72.0/22 maxlen: 24
                          103.85.118.0/23 maxlen: 24
                          103.87.204.0/22 maxlen: 24
                          103.93.172.0/22 maxlen: 24
                          103.93.212.0/23 maxlen: 24
                          103.98.53.0/24 maxlen: 24
                          103.101.116.0/24 maxlen: 24
                          103.101.117.0/24 maxlen: 24
                          103.101.118.0/23 maxlen: 24
                          103.103.163.0/24 maxlen: 24
                          103.105.228.0/23 maxlen: 24
                          103.105.230.0/23 maxlen: 24
                          103.109.180.0/23 maxlen: 24
                          103.109.182.0/23 maxlen: 24
                          103.114.188.0/23 maxlen: 24
                          103.118.180.0/22 maxlen: 24
                          103.148.66.0/23 maxlen: 24
                          103.153.208.0/23 maxlen: 24
                          103.173.218.0/24 maxlen: 24
                          103.177.202.0/23 maxlen: 24
                          103.178.58.0/24 maxlen: 24
                          103.178.59.0/24 maxlen: 24
                          103.181.90.0/23 maxlen: 24
                          103.182.44.0/23 maxlen: 24
                          103.182.160.0/23 maxlen: 24
                          103.184.184.0/23 maxlen: 24
                          103.189.146.0/24 maxlen: 24
                          103.189.147.0/24 maxlen: 24
                          103.191.182.0/23 maxlen: 24
                          103.191.234.0/23 maxlen: 24
                          103.195.26.0/23 maxlen: 24
                          103.204.168.0/22 maxlen: 24
                          103.211.56.0/23 maxlen: 24
                          103.211.58.0/24 maxlen: 24
                          103.211.190.0/23 maxlen: 24
                          103.212.136.0/23 maxlen: 24
                          103.212.138.0/23 maxlen: 24
                          103.213.6.0/23 maxlen: 24
                          103.225.204.0/24 maxlen: 24
                          103.225.205.0/24 maxlen: 24
                          103.225.206.0/23 maxlen: 24
                          103.226.200.0/22 maxlen: 24
                          103.227.95.0/24 maxlen: 24
                          103.248.120.0/24 maxlen: 24
                          103.248.121.0/24 maxlen: 24
                          103.248.122.0/24 maxlen: 24
                          103.248.123.0/24 maxlen: 24
                          139.5.16.0/23 maxlen: 24
                          139.5.18.0/23 maxlen: 24
                          2405:5540::/32 maxlen: 32
Validation:               Failed, certificate revoked on Fri 16 May 2025 08:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45192 (0xb088)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  5 05:46:05 2025 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6818509d-640f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:de:1c:c7:10:fe:54:64:03:32:82:e0:9d:e5:
                    90:63:87:33:aa:31:4e:e7:1e:9c:16:8f:4d:06:96:
                    a9:4b:a5:f4:13:32:73:2a:98:8f:29:54:1a:12:e9:
                    e8:0e:6f:84:76:80:92:25:e7:d8:89:b6:9b:35:6f:
                    6f:93:f6:d2:06:dd:96:64:df:ec:8f:1e:eb:1a:a9:
                    c9:67:f5:8f:82:24:ad:47:50:26:e7:e9:58:6d:b4:
                    03:b5:d8:3d:07:15:67:f7:a7:16:22:b8:1d:f2:58:
                    63:43:c9:aa:b1:e7:2d:c6:23:c1:5d:58:7c:aa:3e:
                    d6:f2:5f:21:14:bc:fb:62:b6:7a:1f:36:e3:c0:e5:
                    92:89:71:63:21:3f:34:09:bb:28:b1:1d:64:e5:5f:
                    c7:24:18:96:43:92:f6:b9:89:a4:3d:e7:35:75:36:
                    04:63:4a:5e:29:14:8d:70:fe:1a:f1:05:08:22:ba:
                    a5:b6:91:f9:9e:c2:17:0b:02:86:8e:20:85:68:ed:
                    33:c6:0b:bb:95:c9:73:db:18:57:bf:a4:73:4c:13:
                    62:33:67:5b:e7:7f:36:bd:f5:9f:29:ab:f5:bb:d3:
                    c7:ad:84:01:e2:14:a1:fb:f5:bd:59:77:e5:96:e5:
                    5e:27:64:67:f9:65:a5:24:6d:20:4a:9f:10:f2:4b:
                    98:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:75:E2:82:AA:80:E3:6F:6C:24:57:42:9C:C4:96:EE:59:D4:DE:85
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2441F8D0271C11F09CD53C0CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.82.0/24
                  43.225.74.0/24
                  43.230.196.0/22
                  43.239.132.0/22
                  43.240.4.0/22
                  43.250.252.0/22
                  45.64.8.0/22
                  45.248.24.0/22
                  103.42.88.0/22
                  103.47.12.0/22
                  103.47.72.0/22
                  103.47.172.0/22
                  103.49.232.0/23
                  103.54.24.0-103.54.26.255
                  103.62.147.0/24
                  103.80.34.0/23
                  103.82.72.0/22
                  103.85.118.0/23
                  103.87.204.0/22
                  103.93.172.0/22
                  103.93.212.0/23
                  103.98.53.0/24
                  103.101.116.0/22
                  103.103.163.0/24
                  103.105.228.0/22
                  103.109.180.0/22
                  103.114.188.0/23
                  103.118.180.0/22
                  103.148.66.0/23
                  103.153.208.0/23
                  103.173.218.0/24
                  103.177.202.0/23
                  103.178.58.0/23
                  103.181.90.0/23
                  103.182.44.0/23
                  103.182.160.0/23
                  103.184.184.0/23
                  103.189.146.0/23
                  103.191.182.0/23
                  103.191.234.0/23
                  103.195.26.0/23
                  103.204.168.0/22
                  103.211.56.0-103.211.58.255
                  103.211.190.0/23
                  103.212.136.0/22
                  103.213.6.0/23
                  103.225.204.0/22
                  103.226.200.0/22
                  103.227.95.0/24
                  103.248.120.0/22
                  139.5.16.0/22
                IPv6:
                  2405:5540::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:b8:03:e9:37:34:bc:56:32:55:80:52:d6:49:fa:83:0d:28:
         ca:0e:c4:fe:21:da:85:83:21:84:76:ff:ba:ad:ec:70:ef:19:
         c9:f4:ec:3c:5f:1a:2f:a2:90:9f:40:55:a0:28:a6:bc:b5:10:
         bc:5a:04:92:b0:34:9d:3e:e7:4f:ad:9b:a8:73:a1:8a:a8:96:
         d0:0d:3b:a4:21:3c:45:f8:0d:23:de:25:bd:18:28:a0:3c:b9:
         8b:7b:7b:e0:35:7c:61:e0:3e:9f:78:54:ca:4c:7a:66:30:4e:
         86:06:5d:1d:9f:69:52:4b:b8:e5:49:5d:61:d5:43:f4:c5:64:
         f9:f5:64:b2:fe:33:ac:e0:72:7e:ad:8a:6f:26:95:6d:44:4f:
         90:bf:0c:89:33:7c:5b:75:81:a5:94:29:af:c1:f2:0d:24:77:
         14:72:3f:53:8b:fa:1c:64:2d:48:14:b6:43:3b:19:69:36:fe:
         99:52:74:be:75:87:cb:58:35:05:e0:ce:b1:8e:eb:94:2c:a4:
         99:60:37:95:03:4d:d9:70:2d:af:60:c2:b0:f6:81:f4:af:32:
         c5:fa:93:0a:ed:0b:c1:09:c7:e9:e0:94:0d:3b:5d:ed:2b:f4:
         5d:86:21:58:ce:17:9f:75:46:3f:7c:fb:61:c0:4e:2a:90:9b:
         d7:33:89:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:47:32 2025 by rpki-client