Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F35288B26D7B11EE9A08AF3FC4F9AE02.roa
File:                     F35288B26D7B11EE9A08AF3FC4F9AE02.roa (raw, json)
Hash identifier:          m5vf/jJSgs2nRygSPEvD7rzZYxTaUwLOvj7a37OaY4M=
Subject key identifier:   55:41:1E:67:62:0B:79:4A:68:CC:77:8E:6C:B6:BB:33:C9:DE:48:3C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7C2E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F35288B26D7B11EE9A08AF3FC4F9AE02.roa
Signing time:             Wed 18 Oct 2023 06:02:43 +0000
ROA not before:           Wed 18 Oct 2023 06:02:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     55352
IP address blocks:        36.255.180.0/22 maxlen: 22
                          36.255.180.0/24 maxlen: 24
                          36.255.181.0/24 maxlen: 24
                          36.255.182.0/24 maxlen: 24
                          36.255.183.0/24 maxlen: 24
                          36.255.184.0/22 maxlen: 22
                          36.255.184.0/24 maxlen: 24
                          36.255.185.0/24 maxlen: 24
                          36.255.186.0/24 maxlen: 24
                          36.255.187.0/24 maxlen: 24
                          43.231.132.0/22 maxlen: 24
                          43.231.212.0/22 maxlen: 24
                          43.231.236.0/22 maxlen: 24
                          43.231.252.0/22 maxlen: 24
                          43.247.136.0/22 maxlen: 24
                          45.112.8.0/22 maxlen: 24
                          45.112.56.0/22 maxlen: 24
                          45.114.80.0/22 maxlen: 24
                          45.115.56.0/24 maxlen: 24
                          45.115.57.0/24 maxlen: 24
                          45.115.58.0/24 maxlen: 24
                          45.115.59.0/24 maxlen: 24
                          45.126.144.0/22 maxlen: 24
                          45.251.12.0/24 maxlen: 24
                          45.251.13.0/24 maxlen: 24
                          45.251.14.0/24 maxlen: 24
                          45.251.15.0/24 maxlen: 24
                          59.152.56.0/22 maxlen: 24
                          59.153.0.0/22 maxlen: 24
                          59.153.120.0/22 maxlen: 24
                          103.8.164.0/22 maxlen: 24
                          103.29.156.0/22 maxlen: 24
                          103.57.172.0/22 maxlen: 22
                          103.57.172.0/24 maxlen: 24
                          103.57.173.0/24 maxlen: 24
                          103.57.174.0/24 maxlen: 24
                          103.57.175.0/24 maxlen: 24
                          103.60.208.0/22 maxlen: 24
                          103.75.60.0/23 maxlen: 24
                          103.83.216.0/22 maxlen: 22
                          103.83.216.0/24 maxlen: 24
                          103.83.217.0/24 maxlen: 24
                          103.83.218.0/24 maxlen: 24
                          103.83.219.0/24 maxlen: 24
                          103.102.92.0/22 maxlen: 24
                          103.114.2.0/23 maxlen: 23
                          103.114.3.0/24 maxlen: 24
                          103.119.188.0/22 maxlen: 24
                          103.156.212.0/23 maxlen: 24
                          103.171.108.0/24 maxlen: 24
                          103.176.240.0/23 maxlen: 24
                          103.179.212.0/23 maxlen: 24
                          103.197.224.0/22 maxlen: 24
                          103.198.164.0/22 maxlen: 24
                          103.200.100.0/22 maxlen: 22
                          103.200.100.0/24 maxlen: 24
                          103.200.101.0/24 maxlen: 24
                          103.200.102.0/24 maxlen: 24
                          103.200.103.0/24 maxlen: 24
                          103.200.104.0/22 maxlen: 24
                          103.200.212.0/22 maxlen: 22
                          103.200.212.0/24 maxlen: 24
                          103.200.213.0/24 maxlen: 24
                          103.200.214.0/24 maxlen: 24
                          103.200.215.0/24 maxlen: 24
                          103.204.160.0/22 maxlen: 24
                          103.205.172.0/22 maxlen: 24
                          103.220.40.0/22 maxlen: 24
                          103.221.248.0/22 maxlen: 24
                          103.226.140.0/22 maxlen: 24
                          103.226.144.0/22 maxlen: 24
                          103.226.188.0/22 maxlen: 24
                          103.226.204.0/22 maxlen: 24
                          103.226.236.0/22 maxlen: 24
                          103.226.240.0/22 maxlen: 24
                          103.234.240.0/22 maxlen: 22
                          103.234.240.0/24 maxlen: 24
                          103.234.241.0/24 maxlen: 24
                          103.234.242.0/24 maxlen: 24
                          103.234.243.0/24 maxlen: 24
                          103.239.171.0/24 maxlen: 24
                          103.249.132.0/22 maxlen: 24
                          111.125.217.0/24 maxlen: 24
                          111.125.218.0/23 maxlen: 24
                          111.125.224.0/24 maxlen: 24
                          111.125.226.0/24 maxlen: 24
                          111.125.228.0/24 maxlen: 24
                          111.125.233.0/24 maxlen: 24
                          111.125.236.0/24 maxlen: 24
                          111.125.241.0/24 maxlen: 24
                          111.125.242.0/24 maxlen: 24
                          111.125.249.0/24 maxlen: 24
                          111.125.252.0/22 maxlen: 24
                          124.66.172.0/22 maxlen: 24
                          137.59.204.0/22 maxlen: 22
                          137.59.204.0/24 maxlen: 24
                          137.59.205.0/24 maxlen: 24
                          137.59.206.0/24 maxlen: 24
                          137.59.207.0/24 maxlen: 24
                          175.100.176.0/20 maxlen: 24
                          202.168.144.0/22 maxlen: 24
                          2406:9e00:20::/48 maxlen: 48
                          2406:9e00:21::/48 maxlen: 48
                          2406:9e00:22::/48 maxlen: 48
                          2406:9e00:23::/48 maxlen: 48
                          2406:9e00:24::/48 maxlen: 48
                          2406:9e00:25::/48 maxlen: 48
                          2406:9e00:26::/48 maxlen: 48
                          2406:9e00:27::/48 maxlen: 48
                          2406:9e00:28::/48 maxlen: 48
                          2406:9e00:29::/48 maxlen: 48
                          2406:9e00:2a::/48 maxlen: 48
                          2406:9e00:2b::/48 maxlen: 48
                          2406:9e00:2c::/48 maxlen: 48
                          2406:9e00:2d::/48 maxlen: 48
                          2406:9e00:2e::/48 maxlen: 48
                          2406:9e00:2f::/48 maxlen: 48
                          2406:9e00:30::/48 maxlen: 48
                          2406:9e00:31::/48 maxlen: 48
                          2406:9e00:32::/48 maxlen: 48
                          2406:9e00:33::/48 maxlen: 48
                          2406:9e00:34::/48 maxlen: 48
                          2406:9e00:35::/48 maxlen: 48
                          2406:9e00:36::/48 maxlen: 48
                          2406:9e00:37::/48 maxlen: 48
                          2406:9e00:38::/48 maxlen: 48
                          2406:9e00:39::/48 maxlen: 48
                          2406:9e00:3a::/48 maxlen: 48
                          2406:9e00:3b::/48 maxlen: 48
                          2406:9e00:3c::/48 maxlen: 48
                          2406:9e00:3d::/48 maxlen: 48
                          2406:9e00:3e::/48 maxlen: 48
                          2406:9e00:3f::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 12 Jan 2024 06:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31790 (0x7c2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Oct 18 06:02:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=652f7502-d500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:03:52:44:32:0a:28:61:01:5d:f6:cd:26:18:
                    70:2f:9d:80:89:6a:46:fb:c5:57:a8:ed:3a:eb:92:
                    9b:1f:4e:c0:1a:00:ce:eb:65:48:fa:42:45:86:e2:
                    11:9e:f8:fe:a2:13:56:54:a7:9e:da:d0:bf:76:22:
                    be:74:f3:ef:7d:c5:8c:4c:f8:a8:a3:ac:07:82:01:
                    9c:7f:dd:a2:1a:ce:71:82:ec:89:73:8a:aa:88:0d:
                    1d:ce:f6:a9:c0:29:da:79:12:7e:93:2c:7b:5b:18:
                    04:60:a1:7f:e6:9f:77:24:57:03:82:14:9f:9c:10:
                    3a:19:19:69:e4:bb:a6:c2:f0:23:4c:47:40:18:6b:
                    ba:31:2f:56:6d:95:d5:e9:21:c3:bd:a4:28:d8:85:
                    0a:10:f5:7d:e3:2b:ec:eb:fc:a4:92:0f:77:78:87:
                    9e:ee:56:5f:45:ff:01:b1:a0:1b:b9:c5:95:ea:38:
                    69:a6:61:59:58:68:c8:9f:08:0a:da:fd:59:dd:39:
                    a4:28:54:79:f7:4c:96:1f:94:20:f5:c2:6f:61:1b:
                    2a:a5:a0:3b:6b:25:11:26:25:0e:d4:ec:12:59:65:
                    e3:eb:46:82:04:14:62:72:1b:5e:0e:e9:eb:cf:ca:
                    5d:5c:02:1b:db:0b:24:e0:4d:eb:6a:5c:b8:56:9f:
                    19:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:41:1E:67:62:0B:79:4A:68:CC:77:8E:6C:B6:BB:33:C9:DE:48:3C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F35288B26D7B11EE9A08AF3FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.255.180.0-36.255.187.255
                  43.231.132.0/22
                  43.231.212.0/22
                  43.231.236.0/22
                  43.231.252.0/22
                  43.247.136.0/22
                  45.112.8.0/22
                  45.112.56.0/22
                  45.114.80.0/22
                  45.115.56.0/22
                  45.126.144.0/22
                  45.251.12.0/22
                  59.152.56.0/22
                  59.153.0.0/22
                  59.153.120.0/22
                  103.8.164.0/22
                  103.29.156.0/22
                  103.57.172.0/22
                  103.60.208.0/22
                  103.75.60.0/23
                  103.83.216.0/22
                  103.102.92.0/22
                  103.114.2.0/23
                  103.119.188.0/22
                  103.156.212.0/23
                  103.171.108.0/24
                  103.176.240.0/23
                  103.179.212.0/23
                  103.197.224.0/22
                  103.198.164.0/22
                  103.200.100.0-103.200.107.255
                  103.200.212.0/22
                  103.204.160.0/22
                  103.205.172.0/22
                  103.220.40.0/22
                  103.221.248.0/22
                  103.226.140.0-103.226.147.255
                  103.226.188.0/22
                  103.226.204.0/22
                  103.226.236.0-103.226.243.255
                  103.234.240.0/22
                  103.239.171.0/24
                  103.249.132.0/22
                  111.125.217.0-111.125.219.255
                  111.125.224.0/24
                  111.125.226.0/24
                  111.125.228.0/24
                  111.125.233.0/24
                  111.125.236.0/24
                  111.125.241.0-111.125.242.255
                  111.125.249.0/24
                  111.125.252.0/22
                  124.66.172.0/22
                  137.59.204.0/22
                  175.100.176.0/20
                  202.168.144.0/22
                IPv6:
                  2406:9e00:20::/43

    Signature Algorithm: sha256WithRSAEncryption
         5f:80:1c:5a:90:27:8b:c7:f2:70:de:1d:6f:a3:1d:66:0f:03:
         b3:4b:ae:1a:8f:7a:46:76:0e:ba:26:81:59:6d:c0:ee:6d:ad:
         f2:f9:7c:fe:56:8b:2d:11:c2:d4:fc:d9:d1:13:a4:7d:5e:98:
         ba:12:1b:7c:18:24:06:79:e7:2c:cf:96:95:3b:99:d7:0b:ef:
         22:cb:34:bc:52:5e:c3:4e:f8:27:eb:8b:4c:ad:de:9e:f6:03:
         2a:ff:ee:df:7d:e6:cd:64:aa:a8:73:6e:2e:3d:8d:a8:4a:b8:
         47:bf:68:51:02:07:63:24:0b:02:d5:e4:0c:32:38:41:e0:28:
         a7:1a:3b:49:d0:5d:b9:ed:24:b5:46:c7:ad:6b:8d:20:70:02:
         9a:12:ea:1f:87:65:70:0b:2e:e6:dd:96:bf:aa:ea:fd:10:d5:
         bb:78:22:6d:23:31:eb:fe:0a:4c:01:a9:58:19:02:7d:de:18:
         fe:c9:89:99:b9:d8:b5:a7:4c:e7:8c:a4:e5:0e:f6:c8:f8:17:
         c7:66:f2:45:b5:01:69:73:70:46:c4:3c:99:13:f0:6d:90:16:
         8f:9e:64:58:37:f5:fb:64:18:81:1b:ba:e5:cb:aa:91:7f:41:
         64:40:08:54:82:40:92:22:ce:5a:1e:eb:94:2e:27:03:df:f3:
         fd:e8:d3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 07:39:35 2024 by rpki-client on console-fra.rpki-client.org