Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/E67C0B5CD52A11ED99D55E2EC4F9AE02.roa
File:                     E67C0B5CD52A11ED99D55E2EC4F9AE02.roa (raw, json)
Hash identifier:          eCT0QHsl4gl456jDTqHQkY1aUUyHoSC11mIaZ6quQUQ=
Subject key identifier:   B0:D5:1C:87:9B:54:71:9A:15:52:9B:51:BE:EA:EC:4F:78:7B:7D:51
Certificate issuer:       /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Certificate serial:       0750
Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/E67C0B5CD52A11ED99D55E2EC4F9AE02.roa
Signing time:             Wed 20 Sep 2023 08:52:32 +0000
ROA not before:           Wed 20 Sep 2023 08:52:32 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     10122
IP address blocks:        103.139.72.0/24 maxlen: 24
                          103.139.73.0/24 maxlen: 24
                          164.90.64.0/24 maxlen: 24
                          164.90.65.0/24 maxlen: 24
                          164.90.66.0/24 maxlen: 24
                          164.90.67.0/24 maxlen: 24
                          164.90.68.0/24 maxlen: 24
                          164.90.69.0/24 maxlen: 24
                          164.90.70.0/24 maxlen: 24
                          164.90.72.0/24 maxlen: 24
                          164.90.73.0/24 maxlen: 24
                          164.90.74.0/24 maxlen: 24
                          164.90.76.0/24 maxlen: 24
                          164.90.77.0/24 maxlen: 24
                          164.90.78.0/24 maxlen: 24
                          164.90.79.0/24 maxlen: 24
                          164.90.80.0/24 maxlen: 24
                          164.90.81.0/24 maxlen: 24
                          164.90.82.0/24 maxlen: 24
                          164.90.83.0/24 maxlen: 24
                          164.90.84.0/24 maxlen: 24
                          164.90.85.0/24 maxlen: 24
                          164.90.86.0/24 maxlen: 24
                          164.90.87.0/24 maxlen: 24
                          164.90.88.0/24 maxlen: 24
                          164.90.89.0/24 maxlen: 24
                          164.90.90.0/24 maxlen: 24
                          164.90.91.0/24 maxlen: 24
                          164.90.92.0/24 maxlen: 24
                          164.90.93.0/24 maxlen: 24
                          164.90.94.0/24 maxlen: 24
                          164.90.95.0/24 maxlen: 24
                          164.90.96.0/24 maxlen: 24
                          164.90.97.0/24 maxlen: 24
                          164.90.98.0/24 maxlen: 24
                          164.90.100.0/24 maxlen: 24
                          164.90.101.0/24 maxlen: 24
                          164.90.102.0/24 maxlen: 24
                          164.90.104.0/24 maxlen: 24
                          164.90.105.0/24 maxlen: 24
                          164.90.106.0/24 maxlen: 24
                          164.90.107.0/24 maxlen: 24
                          164.90.108.0/24 maxlen: 24
                          164.90.109.0/24 maxlen: 24
                          164.90.110.0/24 maxlen: 24
                          164.90.111.0/24 maxlen: 24
                          164.90.113.0/24 maxlen: 24
                          164.90.114.0/24 maxlen: 24
                          164.90.115.0/24 maxlen: 24
                          164.90.116.0/24 maxlen: 24
                          164.90.117.0/24 maxlen: 24
                          164.90.121.0/24 maxlen: 24
                          164.90.122.0/24 maxlen: 24
                          164.90.125.0/24 maxlen: 24
                          164.90.126.0/24 maxlen: 24
                          164.90.127.0/24 maxlen: 24
                          202.63.32.0/24 maxlen: 24
                          202.63.33.0/24 maxlen: 24
                          202.63.34.0/24 maxlen: 24
                          202.63.35.0/24 maxlen: 24
                          202.63.37.0/24 maxlen: 24
                          202.63.38.0/24 maxlen: 24
                          202.63.39.0/24 maxlen: 24
                          202.63.40.0/24 maxlen: 24
                          202.63.41.0/24 maxlen: 24
                          202.63.42.0/24 maxlen: 24
                          202.63.43.0/24 maxlen: 24
                          202.63.44.0/24 maxlen: 24
                          202.63.45.0/24 maxlen: 24
                          202.63.46.0/24 maxlen: 24
                          202.63.47.0/24 maxlen: 24
                          202.63.48.0/24 maxlen: 24
                          202.63.49.0/24 maxlen: 24
                          202.63.50.0/24 maxlen: 24
                          202.63.51.0/24 maxlen: 24
                          202.63.52.0/24 maxlen: 24
                          202.63.53.0/24 maxlen: 24
                          202.63.54.0/24 maxlen: 24
                          202.63.55.0/24 maxlen: 24
                          202.63.56.0/24 maxlen: 24
                          202.63.57.0/24 maxlen: 24
                          202.63.58.0/24 maxlen: 24
                          202.63.59.0/24 maxlen: 24
                          202.63.60.0/24 maxlen: 24
                          202.63.61.0/24 maxlen: 24
                          202.63.62.0/24 maxlen: 24
                          202.63.63.0/24 maxlen: 24
                          202.168.96.0/24 maxlen: 24
                          202.168.97.0/24 maxlen: 24
                          202.168.99.0/24 maxlen: 24
                          202.168.100.0/24 maxlen: 24
                          202.168.101.0/24 maxlen: 24
                          202.168.102.0/24 maxlen: 24
                          202.168.103.0/24 maxlen: 24
                          202.168.104.0/24 maxlen: 24
                          202.168.105.0/24 maxlen: 24
                          202.168.106.0/24 maxlen: 24
                          202.168.107.0/24 maxlen: 24
                          202.168.108.0/24 maxlen: 24
                          202.168.109.0/24 maxlen: 24
                          202.168.110.0/24 maxlen: 24
                          202.168.112.0/24 maxlen: 24
                          202.168.113.0/24 maxlen: 24
                          202.168.114.0/24 maxlen: 24
                          202.168.115.0/24 maxlen: 24
                          202.168.116.0/24 maxlen: 24
                          202.168.117.0/24 maxlen: 24
                          202.168.118.0/24 maxlen: 24
                          202.168.119.0/24 maxlen: 24
                          202.168.120.0/24 maxlen: 24
                          202.168.121.0/24 maxlen: 24
                          202.168.122.0/24 maxlen: 24
                          202.168.123.0/24 maxlen: 24
                          202.168.124.0/23 maxlen: 23
                          202.168.124.0/24 maxlen: 24
                          202.168.125.0/24 maxlen: 24
                          202.168.126.0/24 maxlen: 24
                          202.168.127.0/24 maxlen: 24
                          2404:efc0:155::/48 maxlen: 48
                          2404:efc0:235::/48 maxlen: 48
                          2404:efc0:236::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 23 Oct 2023 02:21:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1872 (0x750)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
        Validity
            Not Before: Sep 20 08:52:32 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=650ab2cf-5116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:09:32:b7:fe:8b:f9:df:16:79:aa:f1:af:e9:
                    b9:36:bd:d8:5a:8d:25:b0:41:20:5c:d1:2a:c2:1b:
                    54:1e:55:99:27:f7:26:6e:dc:37:72:ac:b2:73:d9:
                    3a:68:2e:be:23:ea:46:50:87:a2:bb:63:bf:d3:1e:
                    f3:34:80:48:7e:aa:2c:52:ad:79:39:96:b8:9e:1d:
                    59:ab:90:de:2e:be:e5:2c:3f:9d:18:ff:37:60:a7:
                    e4:b2:af:19:1b:b0:61:1b:43:23:e2:15:38:48:84:
                    36:20:2d:bd:1b:9e:0d:ae:42:4b:4c:cf:e6:67:cf:
                    75:17:25:80:19:35:03:13:04:3b:cb:77:e1:6d:c3:
                    bf:72:48:97:ce:62:8f:87:cb:6b:10:a6:23:87:9e:
                    75:f8:3a:5b:22:36:8d:8b:56:d9:97:6c:f4:10:c2:
                    fb:12:cf:69:ad:0a:b7:c0:6b:5a:68:98:63:63:a5:
                    43:e8:a5:4e:87:96:71:41:3d:39:75:39:7d:f3:62:
                    f4:db:a2:bf:85:26:05:76:dc:50:19:af:cf:41:ba:
                    b2:66:12:ba:51:2b:cc:78:c9:97:9e:9b:66:96:b6:
                    59:e4:3b:0f:14:3d:3f:fa:d1:6a:03:bf:26:df:4d:
                    b4:74:0f:b1:ce:e6:f8:8b:e9:84:66:7a:cc:b2:a6:
                    7b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D5:1C:87:9B:54:71:9A:15:52:9B:51:BE:EA:EC:4F:78:7B:7D:51
            X509v3 Authority Key Identifier:
                keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/E67C0B5CD52A11ED99D55E2EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.72.0/23
                  164.90.64.0-164.90.70.255
                  164.90.72.0-164.90.74.255
                  164.90.76.0-164.90.98.255
                  164.90.100.0-164.90.102.255
                  164.90.104.0/21
                  164.90.113.0-164.90.117.255
                  164.90.121.0-164.90.122.255
                  164.90.125.0-164.90.127.255
                  202.63.32.0/22
                  202.63.37.0-202.63.63.255
                  202.168.96.0/23
                  202.168.99.0-202.168.110.255
                  202.168.112.0/20
                IPv6:
                  2404:efc0:155::/48
                  2404:efc0:235::-2404:efc0:236:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         7f:04:78:d1:fe:a7:25:d4:fa:98:bc:cc:ce:d5:16:ed:14:24:
         2b:9e:81:0a:39:60:e8:f9:7a:0f:f4:3f:cc:90:48:8b:1e:c8:
         4d:ae:ad:ed:5e:76:41:36:b9:20:8b:8c:58:03:56:8e:80:4b:
         df:fe:71:e4:1d:85:3f:09:be:20:12:c2:eb:a7:b0:91:58:53:
         2e:ae:29:11:0d:5c:33:bd:3f:c1:e4:55:4f:b6:e8:63:19:5e:
         e0:77:c5:a9:1d:17:74:cc:70:29:67:24:6a:3f:bc:b0:b8:78:
         6a:b5:00:49:d8:e3:55:9a:57:22:9e:13:bc:6f:78:c3:f6:b8:
         63:a5:a3:d8:74:fc:89:4f:ea:d4:94:f6:73:4d:59:47:f1:75:
         90:6f:4f:43:52:a4:46:56:3a:f9:6e:19:2b:56:67:f8:00:7a:
         db:ff:8c:53:07:3a:ba:ba:35:81:aa:46:67:29:80:a5:6e:79:
         1c:4e:3c:49:51:f9:51:66:56:11:73:27:03:33:07:2e:a5:1d:
         bf:b1:0c:d2:ef:2d:37:84:42:88:0c:88:38:1c:8d:08:c7:0c:
         b9:49:6f:d9:2b:7f:93:35:16:84:bf:fd:0c:a5:1c:5f:79:1e:
         b0:be:5a:8b:75:18:8a:be:1a:81:af:2c:6b:d2:74:36:b5:a6:
         c7:68:f1:b4
-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgICB1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REY5M0ExMTAvBgNVBAUTKDA3QTFDMDg1NDVDQUNDNjVFMDg4MkQ0OUU5RjJGOENG
RDJCRTgyNjAwHhcNMjMwOTIwMDg1MjMyWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTBhYjJjZi01MTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAywkyt/6L+d8Wearxr+m5Nr3YWo0lsEEgXNEqwhtUHlWZJ/cmbtw3cqyyc9k6
aC6+I+pGUIeiu2O/0x7zNIBIfqosUq15OZa4nh1Zq5DeLr7lLD+dGP83YKfksq8Z
G7BhG0Mj4hU4SIQ2IC29G54NrkJLTM/mZ891FyWAGTUDEwQ7y3fhbcO/ckiXzmKP
h8trEKYjh551+DpbIjaNi1bZl2z0EML7Es9prQq3wGtaaJhjY6VD6KVOh5ZxQT05
dTl982L026K/hSYFdtxQGa/PQbqyZhK6USvMeMmXnptmlrZZ5DsPFD0/+tFqA78m
3020dA+xzub4i+mEZnrMsqZ7MwIDAQABo4IDVTCCA1EwHQYDVR0OBBYEFLDVHIeb
VHGaFVKbUb7q7E94e31RMB8GA1UdIwQYMBaAFAehwIVFysxl4IgtSeny+M/SvoJg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GRjUxRTU5RUU1
RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pHWGdpQzFKNmZMNHo5Sy1n
bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0I2SEFoVVhLekdYZ2lDMUo2Zkw0ejlLLWdtQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REY5M0EvRkY1MUU1OUVFNUYzMTFFQUIzQTkxNTYxQzRGOUFFMDIvRTY3QzBCNUNE
NTJBMTFFRDk5RDU1RTJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgd4GCCsGAQUFBwEHAQH/
BIHOMIHLMIGjBAIAATCBnAMEAWeLSDAMAwQGpFpAAwQApFpGMAwDBAOkWkgDBACk
WkowDAMEAqRaTAMEAKRaYjAMAwQCpFpkAwQApFpmAwQDpFpoMAwDBACkWnEDBAGk
WnQwDAMEAKRaeQMEAKRaejAMAwQApFp9AwQHpFoAAwQCyj8gMAwDBADKPyUDBAbK
PwADBAHKqGAwDAMEAMqoYwMEAMqobgMEBMqocDAjBAIAAjAdAwcAJATvwAFVMBID
BwAkBO/AAjUDBwAkBO/AAjYwDQYJKoZIhvcNAQELBQADggEBAH8EeNH+pyXU+pi8
zM7VFu0UJCuegQo5YOj5eg/0P8yQSIseyE2ure1edkE2uSCLjFgDVo6AS9/+ceQd
hT8JviASwuunsJFYUy6uKRENXDO9P8HkVU+26GMZXuB3xakdF3TMcClnJGo/vLC4
eGq1AEnY41WaVyKeE7xveMP2uGOlo9h0/IlP6tSU9nNNWUfxdZBvT0NSpEZWOvlu
GStWZ/gAetv/jFMHOrq6NYGqRmcpgKVueRxOPElR+VFmVhFzJwMzBy6lHb+xDNLv
LTeEQogMiDgcjQjHDLlJb9krf5M1FoS//QylHF95HrC+Wot1GIq+GoGvLGvSdDa1
psdo8bQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:31 2024 by rpki-client on console-ams.rpki-client.org