Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C68FADAE359311ECAD3DA415C4F9AE02.roa
File:                     C68FADAE359311ECAD3DA415C4F9AE02.roa (raw, json)
Hash identifier:          TGmujnufHeV1cTytAICt6TqGL03QXVDyDx/NU/ufIaA=
Subject key identifier:   2E:16:0E:12:04:2F:3B:6A:DE:0A:74:7E:13:45:C3:58:B3:B9:05:C9
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       78E6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C68FADAE359311ECAD3DA415C4F9AE02.roa
Signing time:             Tue 29 Aug 2023 08:54:15 +0000
ROA not before:           Tue 29 Aug 2023 08:54:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     45916
IP address blocks:        14.192.28.0/22 maxlen: 24
                          27.116.48.0/21 maxlen: 24
                          27.121.100.0/22 maxlen: 24
                          43.224.0.0/22 maxlen: 24
                          43.224.8.0/22 maxlen: 24
                          43.230.212.0/22 maxlen: 24
                          43.239.200.0/22 maxlen: 22
                          43.239.200.0/24 maxlen: 24
                          43.239.201.0/24 maxlen: 24
                          43.239.202.0/24 maxlen: 24
                          43.239.203.0/24 maxlen: 24
                          43.241.140.0/22 maxlen: 24
                          43.241.144.0/22 maxlen: 24
                          43.241.192.0/22 maxlen: 24
                          43.242.116.0/22 maxlen: 24
                          43.242.120.0/22 maxlen: 24
                          43.243.36.0/22 maxlen: 24
                          43.248.32.0/22 maxlen: 24
                          43.249.216.0/22 maxlen: 24
                          43.249.228.0/22 maxlen: 24
                          43.249.232.0/22 maxlen: 24
                          43.250.156.0/22 maxlen: 24
                          43.250.164.0/22 maxlen: 24
                          43.251.72.0/22 maxlen: 24
                          43.251.220.0/22 maxlen: 24
                          43.252.196.0/24 maxlen: 24
                          43.252.197.0/24 maxlen: 24
                          43.252.198.0/24 maxlen: 24
                          43.252.199.0/24 maxlen: 24
                          103.1.100.0/22 maxlen: 24
                          103.15.60.0/22 maxlen: 24
                          103.21.160.0/22 maxlen: 24
                          103.36.80.0/22 maxlen: 24
                          103.38.204.0/22 maxlen: 24
                          103.39.128.0/22 maxlen: 24
                          103.81.92.0/22 maxlen: 24
                          103.84.104.0/23 maxlen: 24
                          103.84.198.0/23 maxlen: 24
                          103.85.8.0/22 maxlen: 24
                          103.86.16.0/22 maxlen: 24
                          103.94.192.0/22 maxlen: 22
                          103.94.192.0/24 maxlen: 24
                          103.94.193.0/24 maxlen: 24
                          103.94.194.0/24 maxlen: 24
                          103.94.195.0/24 maxlen: 24
                          103.161.98.0/23 maxlen: 24
                          103.175.182.0/23 maxlen: 24
                          103.176.10.0/23 maxlen: 24
                          103.182.162.0/24 maxlen: 24
                          103.206.136.0/22 maxlen: 24
                          103.209.64.0/22 maxlen: 24
                          103.216.80.0/22 maxlen: 24
                          103.226.184.0/22 maxlen: 24
                          103.228.144.0/22 maxlen: 24
                          103.232.128.0/22 maxlen: 22
                          103.232.128.0/24 maxlen: 24
                          103.232.129.0/24 maxlen: 24
                          103.232.130.0/24 maxlen: 24
                          103.232.131.0/24 maxlen: 24
                          103.238.104.0/22 maxlen: 24
                          103.238.108.0/22 maxlen: 24
                          103.240.76.0/22 maxlen: 24
                          103.240.160.0/22 maxlen: 24
                          103.240.168.0/22 maxlen: 24
                          103.240.204.0/22 maxlen: 24
                          103.240.208.0/22 maxlen: 24
                          103.241.44.0/22 maxlen: 24
                          103.241.224.0/22 maxlen: 24
                          103.245.196.0/22 maxlen: 24
                          103.246.84.0/24 maxlen: 24
                          103.246.85.0/24 maxlen: 24
                          103.246.86.0/24 maxlen: 24
                          103.246.87.0/24 maxlen: 24
                          103.249.232.0/22 maxlen: 24
                          103.250.136.0/22 maxlen: 24
                          103.250.144.0/22 maxlen: 24
                          103.250.148.0/22 maxlen: 24
                          103.250.152.0/22 maxlen: 24
                          103.250.156.0/22 maxlen: 24
                          103.250.160.0/22 maxlen: 24
                          103.250.164.0/22 maxlen: 24
                          103.250.188.0/22 maxlen: 24
                          103.251.16.0/22 maxlen: 24
                          103.251.56.0/22 maxlen: 24
                          103.251.212.0/22 maxlen: 24
                          103.251.216.0/22 maxlen: 24
                          103.251.224.0/22 maxlen: 24
                          113.20.16.0/22 maxlen: 24
                          150.107.188.0/22 maxlen: 24
                          150.107.232.0/22 maxlen: 24
                          150.107.240.0/22 maxlen: 24
                          150.107.252.0/22 maxlen: 24
                          150.129.52.0/23 maxlen: 24
                          150.129.54.0/23 maxlen: 24
                          150.129.104.0/22 maxlen: 24
                          150.129.112.0/22 maxlen: 24
                          150.129.148.0/22 maxlen: 24
                          150.129.164.0/22 maxlen: 24
                          150.129.168.0/22 maxlen: 24
                          150.129.200.0/22 maxlen: 24
                          150.129.204.0/22 maxlen: 24
                          157.119.204.0/22 maxlen: 24
                          163.53.176.0/22 maxlen: 24
                          163.53.208.0/22 maxlen: 24
                          182.237.8.0/22 maxlen: 24
                          182.237.12.0/22 maxlen: 24
                          183.182.88.0/24 maxlen: 24
                          183.182.89.0/24 maxlen: 24
                          183.182.90.0/24 maxlen: 24
                          183.182.91.0/24 maxlen: 24
                          2402:a00::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30950 (0x78e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Aug 29 08:54:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=64edb237-4105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c6:a6:a0:2e:74:85:8a:b9:66:f3:67:0d:d7:
                    ea:1d:ea:32:57:f4:72:6d:e9:3a:00:99:0e:d8:cb:
                    4e:74:29:94:26:e4:b6:c0:eb:cd:67:00:b4:9c:63:
                    b3:e3:b2:1f:4a:47:95:1f:17:c7:a1:9a:4f:ec:82:
                    c6:ba:f2:3d:e5:74:58:20:bf:a5:12:b7:95:79:9f:
                    a4:35:7e:cd:e4:27:6e:d3:8f:b6:47:70:c5:71:85:
                    ec:12:7b:8f:80:b0:22:1c:56:22:94:a8:e6:22:5d:
                    77:ae:be:91:c1:64:2c:52:a7:c5:48:f9:c9:82:0e:
                    a1:a2:9c:52:1b:5a:8c:93:db:55:9d:a8:e9:f4:ea:
                    86:b8:f0:3c:77:91:84:5e:ad:c3:eb:9e:6e:bf:0e:
                    b7:5a:c4:4c:b5:f0:9b:df:79:6c:0a:8f:14:43:f6:
                    c3:1f:d6:db:0a:09:6c:21:47:2b:ad:0d:ed:48:48:
                    60:44:97:65:bf:f5:c2:38:99:59:a1:1f:d4:04:dd:
                    f9:40:1a:54:f8:2e:bb:45:59:c8:80:3b:09:de:ef:
                    4a:c3:07:6d:c0:2c:ee:b1:79:a1:55:f4:76:f7:20:
                    ce:3c:25:86:55:46:77:30:31:aa:89:4b:3e:a2:a5:
                    2b:e3:21:20:50:27:3a:4e:e2:11:03:54:88:76:70:
                    d7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:16:0E:12:04:2F:3B:6A:DE:0A:74:7E:13:45:C3:58:B3:B9:05:C9
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C68FADAE359311ECAD3DA415C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.28.0/22
                  27.116.48.0/21
                  27.121.100.0/22
                  43.224.0.0/22
                  43.224.8.0/22
                  43.230.212.0/22
                  43.239.200.0/22
                  43.241.140.0-43.241.147.255
                  43.241.192.0/22
                  43.242.116.0-43.242.123.255
                  43.243.36.0/22
                  43.248.32.0/22
                  43.249.216.0/22
                  43.249.228.0-43.249.235.255
                  43.250.156.0/22
                  43.250.164.0/22
                  43.251.72.0/22
                  43.251.220.0/22
                  43.252.196.0/22
                  103.1.100.0/22
                  103.15.60.0/22
                  103.21.160.0/22
                  103.36.80.0/22
                  103.38.204.0/22
                  103.39.128.0/22
                  103.81.92.0/22
                  103.84.104.0/23
                  103.84.198.0/23
                  103.85.8.0/22
                  103.86.16.0/22
                  103.94.192.0/22
                  103.161.98.0/23
                  103.175.182.0/23
                  103.176.10.0/23
                  103.182.162.0/24
                  103.206.136.0/22
                  103.209.64.0/22
                  103.216.80.0/22
                  103.226.184.0/22
                  103.228.144.0/22
                  103.232.128.0/22
                  103.238.104.0/21
                  103.240.76.0/22
                  103.240.160.0/22
                  103.240.168.0/22
                  103.240.204.0-103.240.211.255
                  103.241.44.0/22
                  103.241.224.0/22
                  103.245.196.0/22
                  103.246.84.0/22
                  103.249.232.0/22
                  103.250.136.0/22
                  103.250.144.0-103.250.167.255
                  103.250.188.0/22
                  103.251.16.0/22
                  103.251.56.0/22
                  103.251.212.0-103.251.219.255
                  103.251.224.0/22
                  113.20.16.0/22
                  150.107.188.0/22
                  150.107.232.0/22
                  150.107.240.0/22
                  150.107.252.0/22
                  150.129.52.0/22
                  150.129.104.0/22
                  150.129.112.0/22
                  150.129.148.0/22
                  150.129.164.0-150.129.171.255
                  150.129.200.0/21
                  157.119.204.0/22
                  163.53.176.0/22
                  163.53.208.0/22
                  182.237.8.0/21
                  183.182.88.0/22
                IPv6:
                  2402:a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:db:d9:d4:85:ee:17:25:65:63:1b:ae:93:93:17:43:fb:72:
         72:1a:47:e2:e0:b9:81:ca:d0:72:cc:68:e4:92:b0:0b:89:c9:
         88:15:ec:c3:25:ab:f3:69:5c:56:f2:82:e4:00:3a:1e:bd:11:
         0c:95:05:2f:db:2d:95:d9:55:1c:b4:a1:0a:f3:4b:ed:0d:5b:
         1c:8e:d2:1d:93:c1:27:f6:86:be:cc:51:18:d0:a0:fb:3c:5d:
         76:f4:24:d2:b9:d2:48:10:62:66:47:81:25:5d:11:5c:c4:95:
         63:2c:73:ab:19:a5:f4:ad:5f:82:f4:89:04:e1:de:db:ba:3d:
         04:26:81:0c:60:bf:27:18:2d:26:c7:98:d0:84:e1:9d:1b:60:
         3d:18:87:b1:94:98:0a:d4:bd:94:d1:0f:24:a4:8c:f6:26:7c:
         3f:41:6c:85:db:a5:49:a9:85:36:f6:f8:5d:ff:34:47:54:08:
         5a:1f:57:50:15:cf:44:4e:44:5c:b0:80:b2:0e:c9:8d:46:50:
         9a:54:9d:60:93:ad:fe:26:7d:d9:77:5f:68:bc:55:08:a1:67:
         c1:05:68:bc:b9:84:d9:79:b7:9c:67:e9:d9:3c:5f:ac:54:04:
         0f:f0:90:1a:52:eb:03:4b:30:9d:17:95:d0:7e:b2:a5:a3:ba:
         94:1c:c7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 08:35:15 2023 by rpki-client on console-fra.rpki-client.org