Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9ECD5980322C11F0BBD7DA6AC4F9AE02.roa
File:                     9ECD5980322C11F0BBD7DA6AC4F9AE02.roa (raw, json)
Hash identifier:          7giGXAmaaz2yfQBbgF5f7+MI4DBKPlaMHA9V8ph9hIk=
Subject key identifier:   32:FD:3B:78:E5:79:FA:12:10:BB:37:7A:03:55:48:4A:3D:34:61:1D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       BB7A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9ECD5980322C11F0BBD7DA6AC4F9AE02.roa
Signing time:             Wed 21 May 2025 08:07:13 +0000
ROA not before:           Wed 21 May 2025 08:07:13 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     133676
IP address blocks:        36.50.82.0/24 maxlen: 24
                          43.225.74.0/24 maxlen: 24
                          43.230.196.0/22 maxlen: 24
                          43.239.132.0/22 maxlen: 24
                          43.240.4.0/24 maxlen: 24
                          43.240.5.0/24 maxlen: 24
                          43.240.6.0/24 maxlen: 24
                          43.240.7.0/24 maxlen: 24
                          43.250.252.0/22 maxlen: 24
                          45.64.8.0/24 maxlen: 24
                          45.64.9.0/24 maxlen: 24
                          45.64.10.0/24 maxlen: 24
                          45.64.11.0/24 maxlen: 24
                          45.248.24.0/24 maxlen: 24
                          45.248.25.0/24 maxlen: 24
                          45.248.26.0/23 maxlen: 24
                          103.42.88.0/22 maxlen: 24
                          103.47.12.0/23 maxlen: 24
                          103.47.14.0/24 maxlen: 24
                          103.47.15.0/24 maxlen: 24
                          103.47.72.0/23 maxlen: 24
                          103.47.74.0/23 maxlen: 24
                          103.47.172.0/23 maxlen: 24
                          103.47.174.0/23 maxlen: 24
                          103.49.232.0/23 maxlen: 24
                          103.54.24.0/23 maxlen: 24
                          103.54.26.0/24 maxlen: 24
                          103.62.147.0/24 maxlen: 24
                          103.80.34.0/23 maxlen: 24
                          103.82.72.0/22 maxlen: 24
                          103.85.118.0/23 maxlen: 24
                          103.87.204.0/22 maxlen: 24
                          103.93.172.0/22 maxlen: 24
                          103.93.212.0/23 maxlen: 24
                          103.98.53.0/24 maxlen: 24
                          103.101.116.0/24 maxlen: 24
                          103.101.117.0/24 maxlen: 24
                          103.101.118.0/23 maxlen: 24
                          103.103.163.0/24 maxlen: 24
                          103.105.228.0/23 maxlen: 24
                          103.105.230.0/23 maxlen: 24
                          103.109.180.0/23 maxlen: 24
                          103.109.182.0/23 maxlen: 24
                          103.114.188.0/23 maxlen: 24
                          103.118.180.0/22 maxlen: 24
                          103.148.66.0/23 maxlen: 24
                          103.153.208.0/23 maxlen: 24
                          103.173.218.0/24 maxlen: 24
                          103.177.202.0/23 maxlen: 24
                          103.178.58.0/24 maxlen: 24
                          103.178.59.0/24 maxlen: 24
                          103.181.90.0/23 maxlen: 24
                          103.182.44.0/23 maxlen: 24
                          103.182.160.0/23 maxlen: 24
                          103.184.184.0/23 maxlen: 24
                          103.189.146.0/24 maxlen: 24
                          103.189.147.0/24 maxlen: 24
                          103.191.182.0/23 maxlen: 24
                          103.191.234.0/23 maxlen: 24
                          103.195.26.0/23 maxlen: 24
                          103.204.168.0/22 maxlen: 24
                          103.211.56.0/23 maxlen: 24
                          103.211.58.0/24 maxlen: 24
                          103.211.190.0/23 maxlen: 24
                          103.212.136.0/23 maxlen: 24
                          103.212.138.0/23 maxlen: 24
                          103.213.6.0/23 maxlen: 24
                          103.225.204.0/24 maxlen: 24
                          103.225.205.0/24 maxlen: 24
                          103.225.206.0/23 maxlen: 24
                          103.226.200.0/22 maxlen: 24
                          103.227.95.0/24 maxlen: 24
                          103.248.120.0/24 maxlen: 24
                          103.248.121.0/24 maxlen: 24
                          103.248.122.0/24 maxlen: 24
                          103.248.123.0/24 maxlen: 24
                          139.5.16.0/23 maxlen: 24
                          139.5.18.0/23 maxlen: 24
                          2405:5540::/32 maxlen: 32
Validation:               Failed, certificate revoked on Mon 02 Jun 2025 06:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47994 (0xbb7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 21 08:07:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=682d89b1-1889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2d:5d:4a:0f:77:37:6d:9b:34:8a:0e:77:cb:
                    01:f5:8c:7e:b1:50:82:ba:55:2c:c6:49:2c:84:28:
                    40:7d:0d:ee:59:48:c6:d9:25:6f:a9:0c:54:f8:cd:
                    21:95:c6:94:01:dd:1d:dd:b6:d3:e0:16:1b:ac:a9:
                    ce:99:4f:94:88:d1:be:f5:bb:12:80:8f:eb:f3:a3:
                    78:d3:52:b5:aa:55:38:b4:40:16:b2:ff:59:24:96:
                    c0:64:ba:9c:aa:37:e2:53:b8:1b:02:c0:39:c6:25:
                    a0:d8:17:db:6d:8c:0b:63:50:51:14:42:5c:9e:1d:
                    54:2b:cf:70:d6:8e:d6:d7:63:25:10:bc:e9:e3:d7:
                    f6:8e:b8:12:10:f6:2a:df:fc:0d:2e:eb:7a:2b:1b:
                    a0:12:ea:da:4a:f3:3a:ae:3f:ab:26:61:7f:49:80:
                    82:70:20:09:bd:7b:4f:99:61:70:03:1c:12:8c:a1:
                    40:df:16:1a:d5:9b:b7:0d:62:0c:50:06:7c:00:63:
                    13:34:32:a8:04:3f:a9:e6:39:ad:dd:51:76:96:c8:
                    a2:4c:25:c7:26:40:39:7d:77:f4:40:cf:4f:2f:14:
                    67:d4:4a:bf:0a:22:f9:82:92:e8:ca:c2:84:cd:0e:
                    bc:c7:2e:a2:82:aa:5e:3b:ba:6d:6f:6a:ad:cd:22:
                    11:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FD:3B:78:E5:79:FA:12:10:BB:37:7A:03:55:48:4A:3D:34:61:1D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9ECD5980322C11F0BBD7DA6AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.82.0/24
                  43.225.74.0/24
                  43.230.196.0/22
                  43.239.132.0/22
                  43.240.4.0/22
                  43.250.252.0/22
                  45.64.8.0/22
                  45.248.24.0/22
                  103.42.88.0/22
                  103.47.12.0/22
                  103.47.72.0/22
                  103.47.172.0/22
                  103.49.232.0/23
                  103.54.24.0-103.54.26.255
                  103.62.147.0/24
                  103.80.34.0/23
                  103.82.72.0/22
                  103.85.118.0/23
                  103.87.204.0/22
                  103.93.172.0/22
                  103.93.212.0/23
                  103.98.53.0/24
                  103.101.116.0/22
                  103.103.163.0/24
                  103.105.228.0/22
                  103.109.180.0/22
                  103.114.188.0/23
                  103.118.180.0/22
                  103.148.66.0/23
                  103.153.208.0/23
                  103.173.218.0/24
                  103.177.202.0/23
                  103.178.58.0/23
                  103.181.90.0/23
                  103.182.44.0/23
                  103.182.160.0/23
                  103.184.184.0/23
                  103.189.146.0/23
                  103.191.182.0/23
                  103.191.234.0/23
                  103.195.26.0/23
                  103.204.168.0/22
                  103.211.56.0-103.211.58.255
                  103.211.190.0/23
                  103.212.136.0/22
                  103.213.6.0/23
                  103.225.204.0/22
                  103.226.200.0/22
                  103.227.95.0/24
                  103.248.120.0/22
                  139.5.16.0/22
                IPv6:
                  2405:5540::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:8d:12:fa:6f:7c:e8:11:95:74:26:74:5f:7a:7f:79:f1:ca:
         63:d2:8f:69:a1:cf:60:27:04:b3:dc:de:73:30:39:1f:de:3d:
         c3:7f:fb:d1:75:c0:7c:a2:3d:7d:cc:b7:c6:ff:af:0f:80:ad:
         dc:d8:86:d0:7e:ac:25:97:7a:dd:a7:4f:05:e2:e3:c1:c1:bf:
         0b:d8:d7:45:b9:a6:ab:69:4d:2f:78:70:97:4d:25:6e:bd:68:
         55:77:84:15:bd:2c:98:a8:f3:85:df:11:2f:09:69:b1:cf:d8:
         1e:8c:a8:be:d4:67:38:a0:d0:48:76:a6:f0:2d:82:4c:14:bf:
         58:aa:6c:22:56:33:89:96:57:d5:a2:87:da:38:0e:60:7d:2a:
         70:78:31:b6:d3:dc:14:66:5c:1d:c4:a6:76:fd:c7:89:3d:9e:
         9b:61:f1:ea:27:d9:51:3a:f1:be:39:5b:37:a3:9b:80:3d:de:
         5e:98:ad:4b:50:9c:4d:78:65:23:4d:5d:a7:6e:ba:e9:55:c3:
         08:58:66:9c:08:55:86:87:85:01:6b:9e:ab:bd:5d:ca:ec:25:
         dc:95:d4:d2:0e:6b:91:cb:cd:db:1a:2a:f7:77:80:a0:ce:0a:
         b3:8f:c7:19:ac:ca:4b:79:cb:86:fd:e5:3e:f9:20:f9:75:5d:
         f7:4c:86:89
-----BEGIN CERTIFICATE-----
MIIGxzCCBa+gAwIBAgIDALt6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUyMTA4MDcxM1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjgyZDg5YjEtMTg4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALItXUoPdzdtmzSKDnfLAfWMfrFQgrpVLMZJLIQoQH0N7llIxtklb6kMVPjN
IZXGlAHdHd220+AWG6ypzplPlIjRvvW7EoCP6/OjeNNStapVOLRAFrL/WSSWwGS6
nKo34lO4GwLAOcYloNgX222MC2NQURRCXJ4dVCvPcNaO1tdjJRC86ePX9o64EhD2
Kt/8DS7reisboBLq2krzOq4/qyZhf0mAgnAgCb17T5lhcAMcEoyhQN8WGtWbtw1i
DFAGfABjEzQyqAQ/qeY5rd1RdpbIokwlxyZAOX139EDPTy8UZ9RKvwoi+YKS6MrC
hM0OvMcuooKqXju6bW9qrc0iEXkCAwEAAaOCA+owggPmMB0GA1UdDgQWBBQy/Tt4
5Xn6EhC7N3oDVUhKPTRhHTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlFQ0Q1OTgw
MzIyQzExRjBCQkQ3REE2QUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIIBcgYIKwYBBQUHAQcB
Af8EggFhMIIBXTCCAUoEAgABMIIBQgMEACQyUgMEACvhSgMEAivmxAMEAivvhAME
AivwBAMEAiv6/AMEAi1ACAMEAi34GAMEAmcqWAMEAmcvDAMEAmcvSAMEAmcvrAME
AWcx6DAMAwQDZzYYAwQAZzYaAwQAZz6TAwQBZ1AiAwQCZ1JIAwQBZ1V2AwQCZ1fM
AwQCZ12sAwQBZ13UAwQAZ2I1AwQCZ2V0AwQAZ2ejAwQCZ2nkAwQCZ220AwQBZ3K8
AwQCZ3a0AwQBZ5RCAwQBZ5nQAwQAZ63aAwQBZ7HKAwQBZ7I6AwQBZ7VaAwQBZ7Ys
AwQBZ7agAwQBZ7i4AwQBZ72SAwQBZ7+2AwQBZ7/qAwQBZ8MaAwQCZ8yoMAwDBANn
0zgDBABn0zoDBAFn074DBAJn1IgDBAFn1QYDBAJn4cwDBAJn4sgDBABn418DBAJn
+HgDBAKLBRAwDQQCAAIwBwMFACQFVUAwDQYJKoZIhvcNAQELBQADggEBAHuNEvpv
fOgRlXQmdF96f3nxymPSj2mhz2AnBLPc3nMwOR/ePcN/+9F1wHyiPX3Mt8b/rw+A
rdzYhtB+rCWXet2nTwXi48HBvwvY10W5pqtpTS94cJdNJW69aFV3hBW9LJio84Xf
ES8JabHP2B6MqL7UZzig0Eh2pvAtgkwUv1iqbCJWM4mWV9Wih9o4DmB9KnB4MbbT
3BRmXB3Epnb9x4k9npth8eon2VE68b45Wzejm4A93l6YrUtQnE14ZSNNXaduuulV
wwhYZpwIVYaHhQFrnqu9XcrsJdyV1NIOa5HLzdsaKvd3gKDOCrOPxxmsykt5y4b9
5T75IPl1XfdMhok=
-----END CERTIFICATE-----
Generated at Mon Jun 9 21:14:54 2025 by rpki-client