Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0D858BFA248211EEAFBB505CC4F9AE02.roa
File:                     0D858BFA248211EEAFBB505CC4F9AE02.roa (raw, json)
Hash identifier:          t4yvneWOTC17Ye1rk/+PFBrNIeLSer643NAl167fz5w=
Subject key identifier:   05:04:35:DC:35:13:38:EC:20:8A:FC:72:1C:94:88:0F:6E:05:E5:CD
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0C70
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0D858BFA248211EEAFBB505CC4F9AE02.roa
Signing time:             Tue 18 Jul 2023 07:56:15 +0000
ROA not before:           Tue 18 Jul 2023 07:56:15 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     136030
IP address blocks:        103.151.26.0/24 maxlen: 24
                          113.203.241.0/24 maxlen: 24
                          115.167.50.0/24 maxlen: 24
                          115.167.64.0/24 maxlen: 24
                          115.167.65.0/24 maxlen: 24
                          115.167.66.0/24 maxlen: 24
                          115.167.67.0/24 maxlen: 24
                          115.167.76.0/24 maxlen: 24
                          115.167.124.0/24 maxlen: 24
                          115.167.125.0/24 maxlen: 24
                          180.178.130.0/24 maxlen: 24
                          180.178.131.0/24 maxlen: 24
                          180.178.143.0/24 maxlen: 24
                          180.178.144.0/24 maxlen: 24
                          180.178.169.0/24 maxlen: 24
                          223.29.225.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Apr 2024 07:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3184 (0xc70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jul 18 07:56:15 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64b6459f-5ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cc:0c:79:32:17:7d:83:44:43:1c:ae:54:82:
                    1c:9e:1c:18:79:bf:45:2a:99:f7:3b:b1:96:c0:e5:
                    4b:8b:5f:0e:5c:c3:01:29:9a:d7:d7:92:41:ff:0b:
                    3c:c5:b5:32:82:da:22:44:87:0f:f1:34:21:f0:01:
                    18:39:6d:dd:1f:c6:5a:2d:a7:ee:61:14:79:56:e1:
                    69:bb:6d:1e:ed:f8:c5:ef:03:e2:b7:b7:fd:ae:9a:
                    d2:34:18:6c:e1:16:80:df:07:c8:67:83:bc:56:23:
                    32:54:89:46:c4:7d:b0:f5:6d:3c:a6:e3:dc:d0:59:
                    81:3f:86:83:2f:5e:47:32:9b:8b:cd:73:23:e0:b8:
                    03:79:77:75:b6:41:2c:33:34:fd:9f:2a:51:8e:b1:
                    76:a9:b6:e6:00:b0:bd:b3:1c:fe:47:ef:84:e2:47:
                    1e:2c:ff:8b:d9:d2:51:8d:5c:8e:05:70:3b:9a:e9:
                    39:c6:31:61:61:b3:03:a6:d7:2f:43:bb:57:ee:e3:
                    5d:68:45:36:cc:82:6a:48:76:5c:05:a9:b3:cd:f4:
                    34:6a:92:ed:a2:6b:d7:44:9d:5c:20:b0:e1:6b:34:
                    72:80:c0:2d:f0:28:97:de:5b:d3:a2:0a:5b:1e:aa:
                    12:be:3e:36:11:3f:44:b5:1b:c1:f0:c4:00:82:ab:
                    5e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:04:35:DC:35:13:38:EC:20:8A:FC:72:1C:94:88:0F:6E:05:E5:CD
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/0D858BFA248211EEAFBB505CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.26.0/24
                  113.203.241.0/24
                  115.167.50.0/24
                  115.167.64.0/22
                  115.167.76.0/24
                  115.167.124.0/23
                  180.178.130.0/23
                  180.178.143.0-180.178.144.255
                  180.178.169.0/24
                  223.29.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:50:32:a8:52:a2:8a:bb:c6:60:10:3d:30:7f:0d:49:02:d7:
         f0:8d:44:86:ee:a9:95:b9:9a:4e:61:84:03:f3:6e:97:2c:70:
         03:9d:c4:e1:70:e7:da:9f:91:77:89:cd:49:15:99:a2:05:92:
         b8:08:45:c5:47:b5:81:5d:fe:b4:4c:0b:72:95:2d:31:d4:e5:
         98:b1:cf:f8:09:d6:cc:4c:cb:52:2a:a5:94:5d:ce:b2:23:01:
         4d:c4:83:ad:dc:aa:a6:e7:e4:3e:f3:61:13:be:08:bf:7f:80:
         23:b1:ea:b6:0c:2f:32:28:bb:9a:b5:0e:09:24:04:24:91:b4:
         eb:be:23:d9:01:67:3a:49:02:fb:2c:5a:f7:93:cd:c7:ed:36:
         9f:c8:1d:79:54:e9:72:88:3e:e1:87:a8:4b:80:21:06:6b:26:
         17:3c:13:6e:12:94:69:99:0a:1c:f1:43:28:1a:50:f4:0d:0d:
         31:2f:14:de:60:51:47:38:e8:f5:0a:08:10:a4:ee:29:7c:f9:
         dc:d6:03:e4:ad:9e:dc:7d:80:02:ef:06:3f:df:97:cc:79:54:
         35:e5:ff:a7:42:ae:36:b6:8f:e5:fd:24:c5:b0:4a:4a:03:27:
         c8:8a:bf:03:c7:fa:96:b1:4b:07:0f:d2:22:f8:36:d6:9d:c3:
         83:31:27:cf
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgICDHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjMwNzE4MDc1NjE1WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGI2NDU5Zi01ZmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1swMeTIXfYNEQxyuVIIcnhwYeb9FKpn3O7GWwOVLi18OXMMBKZrX15JB/ws8
xbUygtoiRIcP8TQh8AEYOW3dH8ZaLafuYRR5VuFpu20e7fjF7wPit7f9rprSNBhs
4RaA3wfIZ4O8ViMyVIlGxH2w9W08puPc0FmBP4aDL15HMpuLzXMj4LgDeXd1tkEs
MzT9nypRjrF2qbbmALC9sxz+R++E4kceLP+L2dJRjVyOBXA7muk5xjFhYbMDptcv
Q7tX7uNdaEU2zIJqSHZcBamzzfQ0apLtomvXRJ1cILDhazRygMAt8CiX3lvTogpb
HqoSvj42ET9EtRvB8MQAgqte3wIDAQABo4IC0zCCAs8wHQYDVR0OBBYEFAUENdw1
EzjsIIr8chyUiA9uBeXNMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMEQ4NThCRkEy
NDgyMTFFRUFGQkI1MDVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwXQYIKwYBBQUHAQcBAf8E
TjBMMEoEAgABMEQDBABnlxoDBABxy/EDBABzpzIDBAJzp0ADBABzp0wDBAFzp3wD
BAG0soIwDAMEALSyjwMEALSykAMEALSyqQMEAN8d4TANBgkqhkiG9w0BAQsFAAOC
AQEAXFAyqFKiirvGYBA9MH8NSQLX8I1Ehu6plbmaTmGEA/NulyxwA53E4XDn2p+R
d4nNSRWZogWSuAhFxUe1gV3+tEwLcpUtMdTlmLHP+AnWzEzLUiqllF3OsiMBTcSD
rdyqpufkPvNhE74Iv3+AI7HqtgwvMii7mrUOCSQEJJG0674j2QFnOkkC+yxa95PN
x+02n8gdeVTpcog+4YeoS4AhBmsmFzwTbhKUaZkKHPFDKBpQ9A0NMS8U3mBRRzjo
9QoIEKTuKXz53NYD5K2e3H2AAu8GP9+XzHlUNeX/p0KuNraP5f0kxbBKSgMnyIq/
A8f6lrFLBw/SIvg21p3DgzEnzw==
-----END CERTIFICATE-----
Generated at Mon Apr 1 08:19:44 2024 by rpki-client on console-ams.rpki-client.org