Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/7069C1486FC511EAA442FE7AC4F9AE02.roa
File:                     7069C1486FC511EAA442FE7AC4F9AE02.roa (raw, json)
Hash identifier:          vzAvjoNVKbImsSv3skF8XDDaiy6Kwft4LeOvpWh+Y6k=
Subject key identifier:   7C:B4:AD:B6:89:C2:61:7C:0D:1A:E5:E0:F1:81:95:E5:E9:F6:E8:74
Certificate issuer:       /CN=A91E3E27/serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B
Certificate serial:       09AA
Authority key identifier: A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/7069C1486FC511EAA442FE7AC4F9AE02.roa
Signing time:             Thu 30 May 2024 21:27:52 +0000
ROA not before:           Thu 30 May 2024 21:27:52 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     9229
IP address blocks:        103.13.188.0/22 maxlen: 22
                          103.13.188.0/24 maxlen: 24
                          103.13.189.0/24 maxlen: 24
                          103.13.190.0/24 maxlen: 24
                          175.176.224.0/24 maxlen: 24
                          175.176.225.0/24 maxlen: 24
                          175.176.226.0/24 maxlen: 24
                          175.176.227.0/24 maxlen: 24
                          175.176.228.0/24 maxlen: 24
                          175.176.229.0/24 maxlen: 24
                          175.176.230.0/24 maxlen: 24
                          175.176.231.0/24 maxlen: 24
                          175.176.232.0/24 maxlen: 24
                          175.176.233.0/24 maxlen: 24
                          175.176.234.0/24 maxlen: 24
                          175.176.235.0/24 maxlen: 24
                          175.176.236.0/24 maxlen: 24
                          175.176.237.0/24 maxlen: 24
                          175.176.238.0/24 maxlen: 24
                          175.176.239.0/24 maxlen: 24
                          175.176.240.0/24 maxlen: 24
                          175.176.241.0/24 maxlen: 24
                          175.176.242.0/24 maxlen: 24
                          175.176.243.0/24 maxlen: 24
                          175.176.245.0/24 maxlen: 24
                          175.176.247.0/24 maxlen: 24
                          175.176.248.0/24 maxlen: 24
                          175.176.249.0/24 maxlen: 24
                          175.176.250.0/24 maxlen: 24
                          175.176.251.0/24 maxlen: 24
                          175.176.252.0/24 maxlen: 24
                          175.176.253.0/24 maxlen: 24
                          175.176.254.0/24 maxlen: 24
                          175.176.255.0/24 maxlen: 24
                          202.174.128.0/19 maxlen: 19
                          202.174.129.0/24 maxlen: 24
                          202.174.130.0/24 maxlen: 24
                          202.174.131.0/24 maxlen: 24
                          202.174.132.0/24 maxlen: 24
                          202.174.133.0/24 maxlen: 24
                          202.174.134.0/24 maxlen: 24
                          202.174.135.0/24 maxlen: 24
                          202.174.136.0/24 maxlen: 24
                          202.174.137.0/24 maxlen: 24
                          202.174.138.0/24 maxlen: 24
                          202.174.139.0/24 maxlen: 24
                          202.174.140.0/24 maxlen: 24
                          202.174.141.0/24 maxlen: 24
                          202.174.142.0/24 maxlen: 24
                          202.174.143.0/24 maxlen: 24
                          202.174.144.0/24 maxlen: 24
                          202.174.145.0/24 maxlen: 24
                          202.174.146.0/24 maxlen: 24
                          202.174.147.0/24 maxlen: 24
                          202.174.148.0/24 maxlen: 24
                          202.174.149.0/24 maxlen: 24
                          202.174.150.0/24 maxlen: 24
                          202.174.151.0/24 maxlen: 24
                          202.174.152.0/24 maxlen: 24
                          202.174.153.0/24 maxlen: 24
                          202.174.154.0/24 maxlen: 24
                          202.174.155.0/24 maxlen: 24
                          202.174.156.0/24 maxlen: 24
                          202.174.157.0/24 maxlen: 24
                          202.174.158.0/24 maxlen: 24
                          202.174.159.0/24 maxlen: 24
                          203.88.64.0/19 maxlen: 19
                          203.88.64.0/24 maxlen: 24
                          203.88.65.0/24 maxlen: 24
                          203.88.66.0/24 maxlen: 24
                          203.88.67.0/24 maxlen: 24
                          203.88.68.0/24 maxlen: 24
                          203.88.69.0/24 maxlen: 24
                          203.88.70.0/24 maxlen: 24
                          203.88.71.0/24 maxlen: 24
                          203.88.72.0/24 maxlen: 24
                          203.88.73.0/24 maxlen: 24
                          203.88.74.0/24 maxlen: 24
                          203.88.75.0/24 maxlen: 24
                          203.88.76.0/24 maxlen: 24
                          203.88.77.0/24 maxlen: 24
                          203.88.78.0/24 maxlen: 24
                          203.88.79.0/24 maxlen: 24
                          203.88.80.0/24 maxlen: 24
                          203.88.81.0/24 maxlen: 24
                          203.88.82.0/24 maxlen: 24
                          203.88.83.0/24 maxlen: 24
                          203.88.84.0/24 maxlen: 24
                          203.88.85.0/24 maxlen: 24
                          203.88.86.0/24 maxlen: 24
                          203.88.87.0/24 maxlen: 24
                          203.88.88.0/24 maxlen: 24
                          203.88.89.0/24 maxlen: 24
                          203.88.90.0/24 maxlen: 24
                          203.88.91.0/24 maxlen: 24
                          203.88.92.0/24 maxlen: 24
                          203.88.93.0/24 maxlen: 24
                          203.88.94.0/24 maxlen: 24
                          203.88.95.0/24 maxlen: 24
                          210.89.64.0/19 maxlen: 19
                          210.89.64.0/24 maxlen: 24
                          210.89.65.0/24 maxlen: 24
                          210.89.66.0/24 maxlen: 24
                          210.89.67.0/24 maxlen: 24
                          210.89.68.0/24 maxlen: 24
                          210.89.69.0/24 maxlen: 24
                          210.89.70.0/24 maxlen: 24
                          210.89.71.0/24 maxlen: 24
                          210.89.72.0/24 maxlen: 24
                          210.89.73.0/24 maxlen: 24
                          210.89.74.0/24 maxlen: 24
                          210.89.75.0/24 maxlen: 24
                          210.89.76.0/24 maxlen: 24
                          210.89.77.0/24 maxlen: 24
                          210.89.78.0/24 maxlen: 24
                          210.89.79.0/24 maxlen: 24
                          210.89.80.0/24 maxlen: 24
                          210.89.81.0/24 maxlen: 24
                          210.89.82.0/24 maxlen: 24
                          210.89.83.0/24 maxlen: 24
                          210.89.84.0/24 maxlen: 24
                          210.89.85.0/24 maxlen: 24
                          210.89.86.0/24 maxlen: 24
                          210.89.87.0/24 maxlen: 24
                          210.89.88.0/24 maxlen: 24
                          210.89.89.0/24 maxlen: 24
                          210.89.90.0/24 maxlen: 24
                          210.89.91.0/24 maxlen: 24
                          210.89.92.0/24 maxlen: 24
                          210.89.93.0/24 maxlen: 24
                          210.89.94.0/24 maxlen: 24
                          210.89.95.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 10 Oct 2024 04:05:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2474 (0x9aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3E27/serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B
        Validity
            Not Before: May 30 21:27:52 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6658ef58-705e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a0:90:c3:b9:0e:60:66:9a:e3:7e:d0:26:ee:
                    6f:1c:f3:c8:75:cd:bc:38:f6:9a:ed:1e:b6:c8:88:
                    2d:b3:9a:fd:2b:84:06:41:f4:ad:80:ab:73:bc:b9:
                    53:06:23:1b:ec:f4:ba:b7:c6:ea:35:97:f6:80:bb:
                    6c:ae:4c:75:f6:39:c7:15:48:f3:df:73:b5:00:52:
                    4a:8e:0f:25:75:f0:0c:6b:3f:f6:e6:93:84:7a:00:
                    93:75:19:e8:ce:ce:08:2e:fc:87:b7:a3:f4:cd:13:
                    5b:2d:ad:d9:53:61:2b:60:3c:9f:e7:56:1f:dd:e9:
                    1a:55:6c:2e:0c:79:10:e6:7c:56:8c:3c:5f:ef:4d:
                    b8:ac:c5:34:a1:8a:52:01:e7:75:50:68:9f:61:9c:
                    1f:03:12:3e:b0:e8:44:17:f2:97:06:38:ca:3d:b5:
                    70:f3:30:cb:44:d5:b0:9e:e0:b5:55:2b:6c:eb:5a:
                    26:8c:4b:ec:96:91:71:aa:bd:24:f0:36:2c:1a:23:
                    d4:69:f9:4a:0e:c9:84:f3:02:46:17:88:77:d9:cc:
                    4a:63:32:6e:d9:cc:09:82:ac:c2:c6:7c:1e:3f:8f:
                    87:38:4a:0d:63:9a:e9:76:b5:ab:0c:8b:7b:9a:01:
                    b3:b3:ec:fd:40:8c:8a:e0:f6:3c:04:92:89:5b:4d:
                    34:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B4:AD:B6:89:C2:61:7C:0D:1A:E5:E0:F1:81:95:E5:E9:F6:E8:74
            X509v3 Authority Key Identifier:
                keyid:A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/7069C1486FC511EAA442FE7AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.188.0/22
                  175.176.224.0-175.176.243.255
                  175.176.245.0/24
                  175.176.247.0-175.176.255.255
                  202.174.128.0/19
                  203.88.64.0/19
                  210.89.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         37:34:d3:f1:3a:6b:e1:e0:d7:ed:d8:50:b2:e4:59:ab:7b:37:
         80:a4:49:98:64:90:b7:3a:9d:e8:f8:b8:f7:e4:e8:c4:86:87:
         da:25:87:7b:88:a1:0e:f6:bd:e4:70:90:18:9d:3a:f6:fa:6a:
         bc:e7:1a:d4:e1:74:63:17:2b:65:30:32:f3:15:73:8c:77:95:
         be:39:cf:83:91:ba:89:d0:fd:b4:80:4e:51:9b:8d:2a:1d:20:
         91:6f:33:62:bd:73:ec:75:84:18:9c:ed:c3:22:08:bc:8d:84:
         15:b9:3a:d1:62:50:79:02:e2:68:04:9f:50:e3:6f:e7:08:71:
         e9:2d:8f:6d:7f:10:85:8d:1a:f6:f8:bb:a4:36:3c:c1:28:46:
         22:8b:8f:8a:d5:27:74:b9:b7:95:71:89:be:14:75:23:d5:97:
         2d:36:94:e5:ea:5a:e4:b0:80:0f:24:f1:c7:2b:32:d4:df:7d:
         81:6e:1d:04:4b:26:ca:43:6a:a7:2a:c2:b6:09:9a:fa:36:fb:
         b4:cb:cc:2d:6d:42:78:b0:1c:d9:78:28:e3:7a:86:96:44:94:
         32:14:d4:49:7b:40:18:5d:72:9e:23:26:a5:52:95:fe:7d:50:
         dd:d2:52:69:16:ca:ff:ab:3b:ac:4a:e7:28:d0:7f:51:74:cb:
         bf:0a:5b:5e
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgICCaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTNFMjcxMTAvBgNVBAUTKEEyNzJBQ0FGRThGQUE0RjJBOTcwMEE2RkMxMTQyNTkw
OEM3NDNENEIwHhcNMjQwNTMwMjEyNzUyWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjU4ZWY1OC03MDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxqCQw7kOYGaa437QJu5vHPPIdc28OPaa7R62yIgts5r9K4QGQfStgKtzvLlT
BiMb7PS6t8bqNZf2gLtsrkx19jnHFUjz33O1AFJKjg8ldfAMaz/25pOEegCTdRno
zs4ILvyHt6P0zRNbLa3ZU2ErYDyf51Yf3ekaVWwuDHkQ5nxWjDxf7024rMU0oYpS
Aed1UGifYZwfAxI+sOhEF/KXBjjKPbVw8zDLRNWwnuC1VSts61omjEvslpFxqr0k
8DYsGiPUaflKDsmE8wJGF4h32cxKYzJu2cwJgqzCxnweP4+HOEoNY5rpdrWrDIt7
mgGzs+z9QIyK4PY8BJKJW000uwIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFHy0rbaJ
wmF8DRrl4PGBleXp9uh0MB8GA1UdIwQYMBaAFKJyrK/o+qTyqXAKb8EUJZCMdD1L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0UyNy9GMzg4ODc2NjZG
M0ExMUVBOTg0MDEzM0RDNEY5QUUwMi9vbktzci1qNnBQS3BjQXB2d1JRbGtJeDBQ
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29uS3NyLWo2cFBLcGNBcHZ3UlFsa0l4MFBVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTNFMjcvRjM4ODg3NjY2RjNBMTFFQTk4NDAxMzNEQzRGOUFFMDIvNzA2OUMxNDg2
RkM1MTFFQUE0NDJGRTdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUgYIKwYBBQUHAQcBAf8E
QzBBMD8EAgABMDkDBAJnDbwwDAMEBa+w4AMEAq+w8AMEAK+w9TALAwQAr7D3AwMA
r7ADBAXKroADBAXLWEADBAXSWUAwDQYJKoZIhvcNAQELBQADggEBADc00/E6a+Hg
1+3YULLkWat7N4CkSZhkkLc6nej4uPfk6MSGh9olh3uIoQ72veRwkBidOvb6arzn
GtThdGMXK2UwMvMVc4x3lb45z4ORuonQ/bSATlGbjSodIJFvM2K9c+x1hBic7cMi
CLyNhBW5OtFiUHkC4mgEn1Djb+cIcektj21/EIWNGvb4u6Q2PMEoRiKLj4rVJ3S5
t5Vxib4UdSPVly02lOXqWuSwgA8k8ccrMtTffYFuHQRLJspDaqcqwrYJmvo2+7TL
zC1tQniwHNl4KON6hpZElDIU1El7QBhdcp4jJqVSlf59UN3SUmkWyv+rO6xK5yjQ
f1F0y78KW14=
-----END CERTIFICATE-----
Generated at Thu Oct 10 07:48:30 2024 by rpki-client on console-fra.rpki-client.org