Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/58507BEC663311EF9C44864AC4F9AE02.roa
File:                     58507BEC663311EF9C44864AC4F9AE02.roa (raw, json)
Hash identifier:          e7mUqgQS4Cx26Oj/+BIZXwi6txbhIfXuXDFOJO0YuQk=
Subject key identifier:   44:46:0C:E4:8A:19:40:94:79:FB:27:07:F4:AF:D0:7A:4E:BD:A8:A7
Certificate issuer:       /CN=A91BF28F/serialNumber=86CD8B4218A9B9A1BCE2FAC5EE6DC785B00A931D
Certificate serial:       018D
Authority key identifier: 86:CD:8B:42:18:A9:B9:A1:BC:E2:FA:C5:EE:6D:C7:85:B0:0A:93:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/58507BEC663311EF9C44864AC4F9AE02.roa
Signing time:             Thu 29 Aug 2024 18:20:19 +0000
ROA not before:           Thu 29 Aug 2024 18:20:19 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     150385
IP address blocks:        103.24.88.0/23 maxlen: 23
                          103.24.88.0/24 maxlen: 24
                          103.24.89.0/24 maxlen: 24
                          2400:baa0::/32 maxlen: 32
                          2400:baa0:1::/48 maxlen: 48
                          2400:baa0:2::/48 maxlen: 48
                          2400:baa0:3::/48 maxlen: 48
                          2400:baa0:1000::/48 maxlen: 48
                          2400:baa0:1001::/48 maxlen: 48
                          2400:baa0:1002::/48 maxlen: 48
                          2400:baa0:1003::/48 maxlen: 48
                          2400:baa0:1004::/48 maxlen: 48
                          2400:baa0:1005::/48 maxlen: 48
                          2400:baa0:1006::/48 maxlen: 48
                          2400:baa0:1007::/48 maxlen: 48
                          2400:baa0:1008::/48 maxlen: 48
                          2400:baa0:1009::/48 maxlen: 48
                          2400:baa0:1111::/48 maxlen: 48
                          2400:baa0:2000::/48 maxlen: 48
                          2400:baa0:2001::/48 maxlen: 48
                          2400:baa0:2002::/48 maxlen: 48
                          2400:baa0:2003::/48 maxlen: 48
                          2400:baa0:2004::/48 maxlen: 48
                          2400:baa0:2005::/48 maxlen: 48
                          2400:baa0:2006::/48 maxlen: 48
                          2400:baa0:2007::/48 maxlen: 48
                          2400:baa0:2008::/48 maxlen: 48
                          2400:baa0:2009::/48 maxlen: 48
                          2400:baa0:2222::/48 maxlen: 48
                          2400:baa0:3000::/48 maxlen: 48
                          2400:baa0:3001::/48 maxlen: 48
                          2400:baa0:3002::/48 maxlen: 48
                          2400:baa0:3003::/48 maxlen: 48
                          2400:baa0:3004::/48 maxlen: 48
                          2400:baa0:3005::/48 maxlen: 48
                          2400:baa0:3006::/48 maxlen: 48
                          2400:baa0:3007::/48 maxlen: 48
                          2400:baa0:3008::/48 maxlen: 48
                          2400:baa0:3009::/48 maxlen: 48
                          2400:baa0:3333::/48 maxlen: 48
                          2400:baa0:4000::/48 maxlen: 48
                          2400:baa0:4001::/48 maxlen: 48
                          2400:baa0:4002::/48 maxlen: 48
                          2400:baa0:4003::/48 maxlen: 48
                          2400:baa0:4004::/48 maxlen: 48
                          2400:baa0:4005::/48 maxlen: 48
                          2400:baa0:4006::/48 maxlen: 48
                          2400:baa0:4007::/48 maxlen: 48
                          2400:baa0:4008::/48 maxlen: 48
                          2400:baa0:4009::/48 maxlen: 48
                          2400:baa0:4444::/48 maxlen: 48
                          2400:baa0:5000::/48 maxlen: 48
                          2400:baa0:5001::/48 maxlen: 48
                          2400:baa0:5002::/48 maxlen: 48
                          2400:baa0:5003::/48 maxlen: 48
                          2400:baa0:5004::/48 maxlen: 48
                          2400:baa0:5005::/48 maxlen: 48
                          2400:baa0:5006::/48 maxlen: 48
                          2400:baa0:5007::/48 maxlen: 48
                          2400:baa0:5008::/48 maxlen: 48
                          2400:baa0:5009::/48 maxlen: 48
                          2400:baa0:5555::/48 maxlen: 48
                          2400:baa0:6000::/48 maxlen: 48
                          2400:baa0:6001::/48 maxlen: 48
                          2400:baa0:6002::/48 maxlen: 48
                          2400:baa0:6003::/48 maxlen: 48
                          2400:baa0:6004::/48 maxlen: 48
                          2400:baa0:6005::/48 maxlen: 48
                          2400:baa0:6006::/48 maxlen: 48
                          2400:baa0:6007::/48 maxlen: 48
                          2400:baa0:6008::/48 maxlen: 48
                          2400:baa0:6009::/48 maxlen: 48
                          2400:baa0:6666::/48 maxlen: 48
                          2400:baa0:7000::/48 maxlen: 48
                          2400:baa0:7001::/48 maxlen: 48
                          2400:baa0:7002::/48 maxlen: 48
                          2400:baa0:7003::/48 maxlen: 48
                          2400:baa0:7004::/48 maxlen: 48
                          2400:baa0:7005::/48 maxlen: 48
                          2400:baa0:7006::/48 maxlen: 48
                          2400:baa0:7007::/48 maxlen: 48
                          2400:baa0:7008::/48 maxlen: 48
                          2400:baa0:7009::/48 maxlen: 48
                          2400:baa0:7777::/48 maxlen: 48
                          2400:baa0:8000::/48 maxlen: 48
                          2400:baa0:8001::/48 maxlen: 48
                          2400:baa0:8002::/48 maxlen: 48
                          2400:baa0:8003::/48 maxlen: 48
                          2400:baa0:8004::/48 maxlen: 48
                          2400:baa0:8005::/48 maxlen: 48
                          2400:baa0:8006::/48 maxlen: 48
                          2400:baa0:8007::/48 maxlen: 48
                          2400:baa0:8008::/48 maxlen: 48
                          2400:baa0:8009::/48 maxlen: 48
                          2400:baa0:8888::/48 maxlen: 48
                          2400:baa0:9000::/48 maxlen: 48
                          2400:baa0:9001::/48 maxlen: 48
                          2400:baa0:9002::/48 maxlen: 48
                          2400:baa0:9003::/48 maxlen: 48
                          2400:baa0:9004::/48 maxlen: 48
                          2400:baa0:9005::/48 maxlen: 48
                          2400:baa0:9006::/48 maxlen: 48
                          2400:baa0:9007::/48 maxlen: 48
                          2400:baa0:9008::/48 maxlen: 48
                          2400:baa0:9009::/48 maxlen: 48
                          2400:baa0:9999::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 04 Sep 2024 09:11:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397 (0x18d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF28F/serialNumber=86CD8B4218A9B9A1BCE2FAC5EE6DC785B00A931D
        Validity
            Not Before: Aug 29 18:20:19 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=66d0bbe2-88a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:f2:b8:ed:96:f6:59:bf:50:82:72:7e:76:
                    79:cc:b0:60:56:d0:83:1a:2d:54:aa:e8:85:53:18:
                    02:d0:7a:c4:1f:84:ef:3b:aa:3c:27:6b:7c:94:e3:
                    fd:95:0c:47:d7:8e:ea:17:36:56:24:f6:97:6e:9c:
                    79:ad:ba:b3:9c:23:84:53:69:6d:f0:87:0f:a7:4c:
                    04:31:7a:b2:e0:51:70:f8:2e:7f:ee:ae:2a:d9:a7:
                    be:6c:06:c4:06:63:18:99:fa:34:51:e7:20:da:cc:
                    3d:1f:3b:56:f2:c4:67:27:ba:47:d0:10:20:da:9e:
                    b1:3e:05:3d:42:28:48:77:27:cb:7f:74:56:44:57:
                    d4:ee:0f:30:2c:b7:36:68:85:6f:9f:7e:40:27:26:
                    9a:13:7f:7f:01:e5:0e:c6:3d:78:8a:5e:f0:a8:17:
                    5d:8f:bd:10:15:c4:1f:af:6a:e4:9d:4b:04:4c:68:
                    5b:8c:1b:23:2d:1d:b4:a2:fb:06:31:61:5e:ee:16:
                    92:38:5a:e3:48:22:8d:98:0b:ce:c8:69:a0:d5:2e:
                    e9:7b:00:18:b3:86:87:7c:4b:52:f4:ca:78:4c:86:
                    3f:82:a0:62:7c:fb:b5:11:a9:a7:e4:74:fc:83:af:
                    2e:bd:b2:37:7d:04:02:c6:4d:5f:79:3f:f4:dd:fb:
                    5f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:46:0C:E4:8A:19:40:94:79:FB:27:07:F4:AF:D0:7A:4E:BD:A8:A7
            X509v3 Authority Key Identifier:
                keyid:86:CD:8B:42:18:A9:B9:A1:BC:E2:FA:C5:EE:6D:C7:85:B0:0A:93:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/hs2LQhipuaG84vrF7m3HhbAKkx0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hs2LQhipuaG84vrF7m3HhbAKkx0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF28F/7DDC5A2E554711EDB47B332BC4F9AE02/58507BEC663311EF9C44864AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.88.0/23
                IPv6:
                  2400:baa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:08:77:4d:a1:c8:24:0e:09:8f:9a:43:96:7c:58:1a:b2:d3:
         aa:2f:ef:13:37:83:d3:07:56:79:f3:fa:8b:ba:d6:e0:55:ba:
         e6:97:2f:14:e7:ed:2c:b4:33:f3:0a:6c:a7:34:90:d9:5e:e1:
         e7:67:30:a1:75:24:c3:19:2d:e7:fe:2c:3c:9e:22:82:d4:a3:
         03:83:61:51:ce:c1:4a:82:d4:b4:24:0d:37:96:b9:82:f7:01:
         bf:02:06:24:21:61:ea:8b:fd:e1:32:04:67:e7:ac:74:73:f4:
         3c:64:f9:15:35:a9:1c:e0:cc:b9:75:bb:07:5c:bb:14:1f:09:
         d8:ac:be:3b:c8:0c:b0:67:12:25:e0:8b:6d:06:cf:2d:d0:a3:
         5d:4a:24:af:53:7a:f2:68:43:a2:83:65:0c:21:59:e3:bd:08:
         6a:7d:c1:ae:a0:58:0b:94:4e:df:e7:30:c3:93:8e:4b:8e:9c:
         df:96:70:52:b4:1f:2e:f8:52:97:f9:90:23:bb:b5:2d:ae:63:
         f5:35:51:b0:f3:f8:68:f0:a6:0b:90:30:99:e8:76:5e:a1:05:
         93:cb:9f:df:dc:55:6b:3b:1f:9e:00:23:df:a0:a2:5b:27:5c:
         0d:c8:06:a9:29:4b:24:25:9b:59:92:d6:2c:90:60:38:88:6c:
         9c:cb:30:ab
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYyOEYxMTAvBgNVBAUTKDg2Q0Q4QjQyMThBOUI5QTFCQ0UyRkFDNUVFNkRDNzg1
QjAwQTkzMUQwHhcNMjQwODI5MTgyMDE5WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQwYmJlMi04OGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvWHyuO2W9lm/UIJyfnZ5zLBgVtCDGi1UquiFUxgC0HrEH4TvO6o8J2t8lOP9
lQxH147qFzZWJPaXbpx5rbqznCOEU2lt8IcPp0wEMXqy4FFw+C5/7q4q2ae+bAbE
BmMYmfo0Uecg2sw9HztW8sRnJ7pH0BAg2p6xPgU9QihIdyfLf3RWRFfU7g8wLLc2
aIVvn35AJyaaE39/AeUOxj14il7wqBddj70QFcQfr2rknUsETGhbjBsjLR20ovsG
MWFe7haSOFrjSCKNmAvOyGmg1S7pewAYs4aHfEtS9Mp4TIY/gqBifPu1Eamn5HT8
g68uvbI3fQQCxk1feT/03ftf5wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFERGDOSK
GUCUefsnB/Sv0HpOvainMB8GA1UdIwQYMBaAFIbNi0IYqbmhvOL6xe5tx4WwCpMd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI4Ri83RERDNUEyRTU1
NDcxMUVEQjQ3QjMzMkJDNEY5QUUwMi9oczJMUWhpcHVhRzg0dnJGN20zSGhiQUtr
eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hzMkxRaGlwdWFHODR2ckY3bTNIaGJBS2t4MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkYyOEYvN0REQzVBMkU1NTQ3MTFFREI0N0IzMzJCQzRGOUFFMDIvNTg1MDdCRUM2
NjMzMTFFRjlDNDQ4NjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnGFgwDQQCAAIwBwMFACQAuqAwDQYJKoZIhvcNAQELBQAD
ggEBAEAId02hyCQOCY+aQ5Z8WBqy06ov7xM3g9MHVnnz+ou61uBVuuaXLxTn7Sy0
M/MKbKc0kNle4ednMKF1JMMZLef+LDyeIoLUowODYVHOwUqC1LQkDTeWuYL3Ab8C
BiQhYeqL/eEyBGfnrHRz9Dxk+RU1qRzgzLl1uwdcuxQfCdisvjvIDLBnEiXgi20G
zy3Qo11KJK9TevJoQ6KDZQwhWeO9CGp9wa6gWAuUTt/nMMOTjkuOnN+WcFK0Hy74
Upf5kCO7tS2uY/U1UbDz+GjwpguQMJnodl6hBZPLn9/cVWs7H54AI9+golsnXA3I
BqkpSyQlm1mS1iyQYDiIbJzLMKs=
-----END CERTIFICATE-----
Generated at Wed Sep 4 10:11:23 2024 by rpki-client on console-fra.rpki-client.org