Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FC36699A316911F08CDC4B82C4F9AE02.roa
File:                     FC36699A316911F08CDC4B82C4F9AE02.roa (raw, json)
Hash identifier:          HaMbRTr5WCodT5TqePsrLCJ8tg6zjxNJrReVI0fcF4w=
Subject key identifier:   84:CE:D5:A0:3C:96:83:64:C9:DC:75:28:FD:29:FE:73:88:20:77:46
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       BB06
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FC36699A316911F08CDC4B82C4F9AE02.roa
Signing time:             Thu 15 May 2025 08:52:52 +0000
ROA not before:           Thu 15 May 2025 08:52:52 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     17665
IP address blocks:        36.255.88.0/22 maxlen: 24
                          43.230.40.0/22 maxlen: 24
                          45.117.72.0/22 maxlen: 24
                          45.118.104.0/22 maxlen: 24
                          59.152.120.0/22 maxlen: 24
                          103.10.224.0/22 maxlen: 24
                          103.27.48.0/22 maxlen: 24
                          103.38.68.0/23 maxlen: 24
                          103.38.128.0/22 maxlen: 24
                          103.57.140.0/22 maxlen: 24
                          103.58.152.0/22 maxlen: 24
                          103.59.204.0/22 maxlen: 24
                          103.86.68.0/23 maxlen: 24
                          103.88.57.0/24 maxlen: 24
                          103.88.58.0/24 maxlen: 24
                          103.88.59.0/24 maxlen: 24
                          103.92.112.0/24 maxlen: 24
                          103.92.113.0/24 maxlen: 24
                          103.92.114.0/24 maxlen: 24
                          103.92.115.0/24 maxlen: 24
                          103.99.196.0/23 maxlen: 24
                          103.99.198.0/23 maxlen: 24
                          103.115.129.0/24 maxlen: 24
                          103.115.130.0/24 maxlen: 24
                          103.135.64.0/24 maxlen: 24
                          103.135.65.0/24 maxlen: 24
                          103.136.172.0/22 maxlen: 24
                          103.142.114.0/23 maxlen: 24
                          103.144.188.0/23 maxlen: 24
                          103.147.1.0/24 maxlen: 24
                          103.158.170.0/23 maxlen: 24
                          103.159.98.0/24 maxlen: 24
                          103.161.40.0/23 maxlen: 24
                          103.162.74.0/23 maxlen: 24
                          103.164.46.0/23 maxlen: 24
                          103.165.28.0/23 maxlen: 24
                          103.168.177.0/24 maxlen: 24
                          103.168.232.0/23 maxlen: 24
                          103.171.9.0/24 maxlen: 24
                          103.171.208.0/24 maxlen: 24
                          103.175.30.0/24 maxlen: 24
                          103.175.31.0/24 maxlen: 24
                          103.176.176.0/24 maxlen: 24
                          103.176.194.0/23 maxlen: 24
                          103.177.174.0/23 maxlen: 24
                          103.178.74.0/24 maxlen: 24
                          103.178.168.0/23 maxlen: 24
                          103.179.122.0/24 maxlen: 24
                          103.182.130.0/23 maxlen: 24
                          103.184.40.0/24 maxlen: 24
                          103.184.41.0/24 maxlen: 24
                          103.186.121.0/24 maxlen: 24
                          103.186.176.0/24 maxlen: 24
                          103.199.192.0/22 maxlen: 24
                          103.203.36.0/22 maxlen: 24
                          103.206.8.0/24 maxlen: 24
                          103.206.9.0/24 maxlen: 24
                          103.206.10.0/24 maxlen: 24
                          103.206.11.0/24 maxlen: 24
                          103.209.68.0/22 maxlen: 22
                          103.209.68.0/24 maxlen: 24
                          103.209.69.0/24 maxlen: 24
                          103.209.70.0/24 maxlen: 24
                          103.209.71.0/24 maxlen: 24
                          103.215.164.0/22 maxlen: 24
                          103.244.224.0/24 maxlen: 24
                          103.245.103.0/24 maxlen: 24
                          103.251.52.0/22 maxlen: 24
                          111.223.24.0/22 maxlen: 24
                          157.119.44.0/22 maxlen: 24
                          162.12.246.0/23 maxlen: 24
                          202.148.60.0/22 maxlen: 24
                          203.189.248.0/22 maxlen: 24
                          203.192.192.0/20 maxlen: 24
                          203.192.208.0/22 maxlen: 24
                          203.192.212.0/24 maxlen: 24
                          203.192.213.0/24 maxlen: 24
                          203.192.214.0/24 maxlen: 24
                          203.192.215.0/24 maxlen: 24
                          203.192.216.0/24 maxlen: 24
                          203.192.217.0/24 maxlen: 24
                          203.192.218.0/24 maxlen: 24
                          203.192.219.0/24 maxlen: 24
                          203.192.220.0/22 maxlen: 24
                          203.192.224.0/23 maxlen: 24
                          203.192.226.0/24 maxlen: 24
                          203.192.227.0/24 maxlen: 24
                          203.192.228.0/22 maxlen: 24
                          203.192.232.0/22 maxlen: 24
                          203.192.236.0/24 maxlen: 24
                          203.192.237.0/24 maxlen: 24
                          203.192.238.0/23 maxlen: 24
                          203.192.240.0/20 maxlen: 20
                          203.192.240.0/24 maxlen: 24
                          203.192.241.0/24 maxlen: 24
                          203.192.242.0/24 maxlen: 24
                          203.192.243.0/24 maxlen: 24
                          203.192.244.0/24 maxlen: 24
                          203.192.245.0/24 maxlen: 24
                          203.192.246.0/24 maxlen: 24
                          203.192.247.0/24 maxlen: 24
                          203.192.248.0/24 maxlen: 24
                          203.192.249.0/24 maxlen: 24
                          203.192.250.0/24 maxlen: 24
                          203.192.251.0/24 maxlen: 24
                          203.192.252.0/24 maxlen: 24
                          203.192.253.0/24 maxlen: 24
                          203.192.254.0/24 maxlen: 24
                          203.192.255.0/24 maxlen: 24
                          203.194.96.0/24 maxlen: 24
                          203.194.97.0/24 maxlen: 24
                          203.194.98.0/24 maxlen: 24
                          203.194.99.0/24 maxlen: 24
                          203.194.100.0/24 maxlen: 24
                          203.194.101.0/24 maxlen: 24
                          203.194.102.0/24 maxlen: 24
                          203.194.103.0/24 maxlen: 24
                          203.194.104.0/24 maxlen: 24
                          203.194.105.0/24 maxlen: 24
                          203.194.106.0/24 maxlen: 24
                          203.194.107.0/24 maxlen: 24
                          203.194.108.0/24 maxlen: 24
                          203.194.109.0/24 maxlen: 24
                          203.194.110.0/24 maxlen: 24
                          203.194.111.0/24 maxlen: 24
                          2001:df1:9980::/48 maxlen: 48
                          2001:df1:9980:1::/64 maxlen: 64
                          2001:df1:9980:2::/64 maxlen: 64
                          2001:df1:9980:3::/64 maxlen: 64
                          2001:df1:9980:4::/64 maxlen: 64
                          2001:df1:9980:5::/64 maxlen: 64
                          2001:df2:4c0::/48 maxlen: 48
                          2404:ba00::/32 maxlen: 48
Validation:               Failed, certificate revoked on Thu 22 May 2025 07:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47878 (0xbb06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 15 08:52:52 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6825ab64-71e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:69:84:37:5f:2c:6a:0f:11:51:af:13:90:5d:
                    f1:bf:e2:7f:4a:e3:70:02:5a:bd:4b:11:d7:94:8b:
                    54:cd:3d:1b:c3:b9:da:e3:a8:03:90:1d:18:bb:5e:
                    cc:93:0a:51:ab:4f:37:98:c6:43:d1:c4:91:a4:01:
                    0a:58:95:af:c0:77:22:76:81:35:5c:3a:a2:6a:39:
                    68:d1:c7:bf:7b:3b:0a:4d:ca:a6:ac:ee:0c:00:25:
                    0a:8b:dd:d4:c9:4c:e3:f1:e5:d3:ee:7f:c2:33:00:
                    da:8b:95:d7:9d:44:8c:37:ec:f8:9f:b6:a9:c4:22:
                    e9:0f:57:73:cf:4e:30:89:c7:85:02:37:79:c2:23:
                    80:bf:27:71:3e:4b:05:14:1f:db:0a:75:2f:35:f5:
                    d1:09:82:14:84:3b:ac:9d:f0:7b:55:4c:a2:6d:ba:
                    42:ef:49:bb:9a:cb:c9:49:47:1a:be:b8:3e:88:e4:
                    9e:dc:1b:8b:da:4c:b9:52:99:ac:53:d4:26:07:9e:
                    dd:41:1e:1b:00:fc:f4:f3:21:f1:d7:2d:ba:2b:10:
                    d3:be:b2:47:0c:b1:cc:f2:73:a7:a9:aa:19:3f:50:
                    52:8b:25:17:ea:8b:b8:24:d9:c5:c0:a2:2f:a3:a0:
                    b6:e9:5e:d2:68:71:62:b4:63:13:8c:e8:be:76:52:
                    c7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CE:D5:A0:3C:96:83:64:C9:DC:75:28:FD:29:FE:73:88:20:77:46
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FC36699A316911F08CDC4B82C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.255.88.0/22
                  43.230.40.0/22
                  45.117.72.0/22
                  45.118.104.0/22
                  59.152.120.0/22
                  103.10.224.0/22
                  103.27.48.0/22
                  103.38.68.0/23
                  103.38.128.0/22
                  103.57.140.0/22
                  103.58.152.0/22
                  103.59.204.0/22
                  103.86.68.0/23
                  103.88.57.0-103.88.59.255
                  103.92.112.0/22
                  103.99.196.0/22
                  103.115.129.0-103.115.130.255
                  103.135.64.0/23
                  103.136.172.0/22
                  103.142.114.0/23
                  103.144.188.0/23
                  103.147.1.0/24
                  103.158.170.0/23
                  103.159.98.0/24
                  103.161.40.0/23
                  103.162.74.0/23
                  103.164.46.0/23
                  103.165.28.0/23
                  103.168.177.0/24
                  103.168.232.0/23
                  103.171.9.0/24
                  103.171.208.0/24
                  103.175.30.0/23
                  103.176.176.0/24
                  103.176.194.0/23
                  103.177.174.0/23
                  103.178.74.0/24
                  103.178.168.0/23
                  103.179.122.0/24
                  103.182.130.0/23
                  103.184.40.0/23
                  103.186.121.0/24
                  103.186.176.0/24
                  103.199.192.0/22
                  103.203.36.0/22
                  103.206.8.0/22
                  103.209.68.0/22
                  103.215.164.0/22
                  103.244.224.0/24
                  103.245.103.0/24
                  103.251.52.0/22
                  111.223.24.0/22
                  157.119.44.0/22
                  162.12.246.0/23
                  202.148.60.0/22
                  203.189.248.0/22
                  203.192.192.0/18
                  203.194.96.0/20
                IPv6:
                  2001:df1:9980::/48
                  2001:df2:4c0::/48
                  2404:ba00::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:b6:80:4e:f8:00:b7:0b:ea:8a:a1:3c:1b:05:b5:16:f5:49:
         b9:e7:10:4c:3d:fa:11:b7:e2:cd:94:12:ac:03:b8:ea:07:ce:
         a0:87:66:3e:e2:97:78:c4:4c:ba:ef:84:62:ce:3e:3a:64:fa:
         f7:f7:0d:ae:b3:7f:43:50:aa:81:09:51:b4:78:4b:01:f4:31:
         23:0a:1c:c4:86:98:3b:b9:ba:e5:4f:a2:80:14:6a:8a:52:5d:
         91:c2:11:4c:db:62:a8:e9:f2:fa:24:8f:2b:ab:87:92:6c:df:
         67:46:94:70:a8:f1:72:b1:64:a8:0b:79:da:9d:07:48:94:dd:
         9e:f2:56:c2:8b:84:61:4b:69:19:2e:ca:12:8f:36:dd:74:4e:
         75:05:27:ad:ef:d0:83:f6:4f:70:66:db:53:67:b3:45:e0:9a:
         aa:02:00:ba:23:03:a3:7c:ec:b6:3c:19:90:16:53:11:e3:a1:
         74:eb:74:6d:fe:c1:df:22:8a:1c:59:51:51:fb:58:1e:cb:21:
         28:a8:47:4d:63:42:82:aa:4d:9e:cc:08:f1:66:a2:1e:39:4e:
         0f:db:f0:56:ea:21:4a:6d:a5:61:56:48:48:cd:1c:f1:19:69:
         62:28:a2:e2:e0:90:73:bd:57:ff:24:04:4b:32:d3:96:f5:6d:
         66:a7:e0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:47:25 2025 by rpki-client