Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/CE2D52B2867A11EDA90A6D3AC4F9AE02.roa
File:                     CE2D52B2867A11EDA90A6D3AC4F9AE02.roa (raw, json)
Hash identifier:          9SD15yWg499b6JxtrARs5QCqHGQ+Zo7F0KxeFS1CviI=
Subject key identifier:   79:96:C4:C1:A6:02:C0:49:AC:32:50:B4:A3:39:8C:AD:10:50:B1:F7
Certificate issuer:       /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial:       040D
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/CE2D52B2867A11EDA90A6D3AC4F9AE02.roa
Signing time:             Sat 09 Dec 2023 01:53:53 +0000
ROA not before:           Sat 09 Dec 2023 01:53:53 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     55410
IP address blocks:        42.104.64.0/21 maxlen: 24
                          42.104.72.0/21 maxlen: 24
                          42.104.80.0/21 maxlen: 24
                          42.104.88.0/21 maxlen: 24
                          42.104.96.0/21 maxlen: 24
                          42.104.104.0/21 maxlen: 24
                          42.104.112.0/21 maxlen: 24
                          42.104.120.0/21 maxlen: 24
                          43.245.88.0/22 maxlen: 24
                          103.29.44.0/22 maxlen: 24
                          118.185.0.0/16 maxlen: 16
                          118.185.0.0/21 maxlen: 24
                          118.185.8.0/21 maxlen: 24
                          118.185.16.0/21 maxlen: 24
                          118.185.24.0/21 maxlen: 21
                          118.185.24.0/24 maxlen: 24
                          118.185.25.0/24 maxlen: 24
                          118.185.26.0/24 maxlen: 24
                          118.185.27.0/24 maxlen: 24
                          118.185.28.0/24 maxlen: 24
                          118.185.29.0/24 maxlen: 24
                          118.185.30.0/24 maxlen: 24
                          118.185.31.0/24 maxlen: 24
                          118.185.32.0/21 maxlen: 24
                          118.185.40.0/21 maxlen: 24
                          118.185.48.0/21 maxlen: 24
                          118.185.56.0/21 maxlen: 24
                          118.185.64.0/21 maxlen: 24
                          118.185.72.0/21 maxlen: 24
                          118.185.80.0/21 maxlen: 24
                          118.185.88.0/21 maxlen: 24
                          118.185.96.0/21 maxlen: 21
                          118.185.97.0/24 maxlen: 24
                          118.185.98.0/24 maxlen: 24
                          118.185.99.0/24 maxlen: 24
                          118.185.100.0/24 maxlen: 24
                          118.185.101.0/24 maxlen: 24
                          118.185.102.0/24 maxlen: 24
                          118.185.103.0/24 maxlen: 24
                          118.185.104.0/21 maxlen: 24
                          118.185.112.0/21 maxlen: 24
                          118.185.120.0/21 maxlen: 24
                          118.185.128.0/20 maxlen: 21
                          118.185.128.0/24 maxlen: 24
                          118.185.129.0/24 maxlen: 24
                          118.185.130.0/24 maxlen: 24
                          118.185.131.0/24 maxlen: 24
                          118.185.132.0/24 maxlen: 24
                          118.185.133.0/24 maxlen: 24
                          118.185.134.0/24 maxlen: 24
                          118.185.135.0/24 maxlen: 24
                          118.185.136.0/24 maxlen: 24
                          118.185.138.0/24 maxlen: 24
                          118.185.139.0/24 maxlen: 24
                          118.185.140.0/24 maxlen: 24
                          118.185.141.0/24 maxlen: 24
                          118.185.142.0/24 maxlen: 24
                          118.185.143.0/24 maxlen: 24
                          118.185.144.0/21 maxlen: 24
                          118.185.152.0/21 maxlen: 24
                          118.185.160.0/21 maxlen: 24
                          118.185.168.0/21 maxlen: 24
                          118.185.176.0/21 maxlen: 24
                          118.185.184.0/21 maxlen: 24
                          118.185.192.0/21 maxlen: 24
                          118.185.200.0/21 maxlen: 24
                          118.185.208.0/21 maxlen: 24
                          118.185.216.0/21 maxlen: 24
                          118.185.224.0/21 maxlen: 24
                          118.185.232.0/21 maxlen: 24
                          118.185.240.0/21 maxlen: 24
                          118.185.248.0/21 maxlen: 24
                          122.15.0.0/16 maxlen: 16
                          122.15.0.0/21 maxlen: 24
                          122.15.8.0/21 maxlen: 24
                          122.15.16.0/21 maxlen: 24
                          122.15.24.0/21 maxlen: 24
                          122.15.32.0/21 maxlen: 24
                          122.15.40.0/21 maxlen: 24
                          122.15.48.0/21 maxlen: 24
                          122.15.56.0/21 maxlen: 24
                          122.15.64.0/21 maxlen: 24
                          122.15.72.0/21 maxlen: 24
                          122.15.80.0/21 maxlen: 24
                          122.15.88.0/21 maxlen: 24
                          122.15.96.0/21 maxlen: 24
                          122.15.104.0/21 maxlen: 24
                          122.15.112.0/21 maxlen: 24
                          122.15.120.0/21 maxlen: 24
                          122.15.128.0/21 maxlen: 24
                          122.15.136.0/21 maxlen: 24
                          122.15.144.0/21 maxlen: 24
                          122.15.152.0/21 maxlen: 24
                          122.15.160.0/21 maxlen: 24
                          122.15.168.0/21 maxlen: 24
                          122.15.176.0/21 maxlen: 24
                          122.15.184.0/21 maxlen: 24
                          122.15.192.0/21 maxlen: 24
                          122.15.200.0/21 maxlen: 24
                          122.15.208.0/21 maxlen: 24
                          122.15.216.0/21 maxlen: 24
                          122.15.224.0/21 maxlen: 24
                          122.15.232.0/21 maxlen: 24
                          122.15.240.0/21 maxlen: 21
                          122.15.248.0/21 maxlen: 24
                          123.63.0.0/16 maxlen: 16
                          123.63.0.0/21 maxlen: 24
                          123.63.8.0/21 maxlen: 24
                          123.63.16.0/21 maxlen: 24
                          123.63.24.0/21 maxlen: 24
                          123.63.32.0/21 maxlen: 24
                          123.63.40.0/21 maxlen: 24
                          123.63.48.0/21 maxlen: 24
                          123.63.56.0/21 maxlen: 24
                          123.63.64.0/21 maxlen: 24
                          123.63.72.0/21 maxlen: 24
                          123.63.80.0/21 maxlen: 24
                          123.63.88.0/21 maxlen: 24
                          123.63.96.0/21 maxlen: 24
                          123.63.104.0/21 maxlen: 24
                          123.63.112.0/21 maxlen: 24
                          123.63.120.0/21 maxlen: 24
                          123.63.128.0/18 maxlen: 18
                          123.63.128.0/20 maxlen: 24
                          123.63.144.0/21 maxlen: 24
                          123.63.152.0/21 maxlen: 24
                          123.63.160.0/19 maxlen: 19
                          123.63.160.0/21 maxlen: 24
                          123.63.168.0/21 maxlen: 24
                          123.63.176.0/21 maxlen: 24
                          123.63.184.0/21 maxlen: 24
                          123.63.192.0/18 maxlen: 18
                          123.63.192.0/21 maxlen: 24
                          123.63.200.0/21 maxlen: 24
                          123.63.208.0/21 maxlen: 24
                          123.63.216.0/21 maxlen: 24
                          123.63.224.0/19 maxlen: 19
                          123.63.224.0/21 maxlen: 24
                          123.63.232.0/21 maxlen: 24
                          123.63.240.0/21 maxlen: 24
                          123.63.248.0/21 maxlen: 24
                          124.247.192.0/24 maxlen: 24
                          124.247.194.0/24 maxlen: 24
                          124.247.198.0/24 maxlen: 24
                          124.247.199.0/24 maxlen: 24
                          124.247.201.0/24 maxlen: 24
                          124.247.203.0/24 maxlen: 24
                          124.247.204.0/24 maxlen: 24
                          124.247.205.0/24 maxlen: 24
                          182.19.0.0/19 maxlen: 19
                          182.19.0.0/20 maxlen: 24
                          182.19.16.0/20 maxlen: 24
                          182.19.32.0/19 maxlen: 19
                          182.19.32.0/20 maxlen: 24
                          182.19.48.0/20 maxlen: 24
                          182.19.64.0/20 maxlen: 24
                          182.19.80.0/21 maxlen: 24
                          182.19.88.0/21 maxlen: 21
                          182.19.88.0/24 maxlen: 24
                          182.19.89.0/24 maxlen: 24
                          182.19.90.0/24 maxlen: 24
                          182.19.91.0/24 maxlen: 24
                          182.19.93.0/24 maxlen: 24
                          182.19.94.0/24 maxlen: 24
                          182.19.95.0/24 maxlen: 24
                          182.19.96.0/19 maxlen: 24
                          2400:5200:401::/48 maxlen: 48
                          2400:5200:402::/48 maxlen: 48
                          2400:5200:403::/48 maxlen: 48
                          2400:5200:404::/48 maxlen: 48
                          2400:5200:c00::/40 maxlen: 48
                          2400:5200:1000::/40 maxlen: 48
                          2400:5200:1400::/40 maxlen: 48
                          2400:5200:1800::/40 maxlen: 48
                          2400:5200:1c00::/40 maxlen: 48
                          2400:5200:2000::/36 maxlen: 48
                          2400:5200:3000::/36 maxlen: 48
                          2400:5200:4000::/36 maxlen: 48
                          2400:5200:5000::/36 maxlen: 48
                          2400:5200:6000::/36 maxlen: 48
                          2400:5200:7000::/36 maxlen: 48
                          2400:5200:8000::/36 maxlen: 48
                          2400:5200:9000::/36 maxlen: 48
                          2400:5200:a000::/36 maxlen: 48
                          2400:5200:b000::/36 maxlen: 48
                          2400:5200:c000::/36 maxlen: 48
                          2400:5200:d000::/36 maxlen: 48
                          2400:5200:e000::/36 maxlen: 48
                          2400:5200:f000::/36 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1037 (0x40d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
        Validity
            Not Before: Dec  9 01:53:53 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=6573c8b0-b149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9f:51:0f:bf:37:ea:6e:1e:2a:2d:6f:a7:7f:
                    68:49:e6:e4:86:d6:c9:92:dd:c9:db:3f:a9:b1:74:
                    d0:5b:b5:c8:f6:86:37:03:e9:bc:e7:f1:2f:b5:3e:
                    46:c5:30:b7:83:83:29:a3:5a:70:29:a2:7a:c1:11:
                    33:06:18:8e:6e:63:e7:29:e4:bb:89:94:28:08:a2:
                    f2:96:be:81:64:b9:e2:3b:7a:81:dd:74:e4:ca:85:
                    5c:e0:ca:03:ea:e2:35:e5:b3:6a:1d:ee:89:12:42:
                    67:f4:51:83:e4:8e:24:0a:3c:3c:2e:8d:33:ec:f0:
                    77:91:df:6e:ff:ec:a1:15:6e:a9:7f:8d:75:5c:61:
                    77:51:fd:b8:f6:97:e0:8b:2d:30:c8:5c:7e:8d:11:
                    6e:52:99:55:81:31:96:2f:eb:5b:25:31:57:16:90:
                    74:5b:cc:32:5e:7f:45:99:e4:47:e9:97:fe:53:78:
                    ff:aa:2f:c8:16:18:38:d6:ef:e5:54:91:3d:cc:79:
                    b9:84:85:52:2c:bc:3a:69:de:bc:1a:aa:5a:73:d3:
                    6a:42:b0:7c:08:af:5d:ab:69:7e:1c:ed:d2:97:95:
                    9a:98:f6:4f:93:e7:18:38:8d:4d:0e:df:03:5f:4a:
                    b3:ae:2d:5b:0e:58:00:7e:5e:75:09:f3:5d:93:8f:
                    37:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:96:C4:C1:A6:02:C0:49:AC:32:50:B4:A3:39:8C:AD:10:50:B1:F7
            X509v3 Authority Key Identifier:
                keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/CE2D52B2867A11EDA90A6D3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.104.64.0/18
                  43.245.88.0/22
                  103.29.44.0/22
                  118.185.0.0/16
                  122.15.0.0/16
                  123.63.0.0/16
                  124.247.192.0/24
                  124.247.194.0/24
                  124.247.198.0/23
                  124.247.201.0/24
                  124.247.203.0-124.247.205.255
                  182.19.0.0/17
                IPv6:
                  2400:5200:401::-2400:5200:404:ffff:ffff:ffff:ffff:ffff
                  2400:5200:c00::/40
                  2400:5200:1000::/40
                  2400:5200:1400::/40
                  2400:5200:1800::/40
                  2400:5200:1c00::/40
                  2400:5200:2000::-2400:5200:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         0b:61:e9:63:80:93:68:e3:f8:84:b1:53:21:df:16:48:52:76:
         a6:69:3e:8f:6e:26:a8:eb:33:59:68:5a:2e:b8:eb:a0:4a:ca:
         ce:13:ad:3c:da:fb:74:42:8c:e9:00:a8:be:d0:df:b9:51:5b:
         31:00:0a:25:2f:a7:e0:32:c2:f9:71:36:40:61:c8:dc:3a:40:
         8a:1a:f1:42:0c:3e:60:20:24:6f:c7:21:dc:64:de:5f:6b:22:
         35:c7:fa:45:e2:95:a4:11:31:e5:5e:f7:c6:1e:5c:de:58:1a:
         02:04:b8:b7:d0:cb:09:04:66:b1:53:fe:29:16:1a:52:80:ce:
         94:5a:8a:1d:7d:43:99:58:be:12:be:df:03:66:4a:00:23:22:
         29:5f:67:a9:de:18:46:e3:4c:69:3c:50:5d:48:c5:aa:26:e4:
         57:27:2f:49:d0:0a:cc:79:11:5c:73:79:fd:2e:e8:4a:ad:4e:
         65:c4:1e:ff:50:3d:bd:9e:c1:ba:9a:90:61:fe:da:52:0e:0e:
         a2:cf:3d:91:6c:95:b9:3e:15:9c:30:49:a7:86:48:38:38:55:
         42:5b:91:1d:c3:b8:d7:a2:a3:a6:83:46:6d:99:61:9c:9c:23:
         a9:ff:a6:cf:ea:c5:fb:fa:f5:f2:b3:81:5a:68:30:87:ab:bf:
         79:4e:9b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 11 17:08:49 2023 by rpki-client on console-ams.rpki-client.org