Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/FDF1FC4EB87A11EFB30CD726C4F9AE02.roa
File:                     FDF1FC4EB87A11EFB30CD726C4F9AE02.roa (raw, json)
Hash identifier:          ieoHUbtlP3QAC5uZuJwm3s83W9TGJWbhNnm4DyMglWg=
Subject key identifier:   6E:1B:5E:4D:D3:EB:A0:B1:E7:00:2D:A7:49:FB:51:D6:09:C0:54:7F
Certificate issuer:       /CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
Certificate serial:       1F28
Authority key identifier: 25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/FDF1FC4EB87A11EFB30CD726C4F9AE02.roa
Signing time:             Sun 15 Dec 2024 06:40:38 +0000
ROA not before:           Sun 15 Dec 2024 06:40:38 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     17501
IP address blocks:        27.34.0.0/17 maxlen: 24
                          103.211.148.0/23 maxlen: 24
                          103.254.184.0/22 maxlen: 22
                          103.254.184.0/24 maxlen: 24
                          103.254.185.0/24 maxlen: 24
                          103.254.186.0/24 maxlen: 24
                          103.254.187.0/24 maxlen: 24
                          124.41.192.0/18 maxlen: 20
                          124.41.192.0/19 maxlen: 24
                          124.41.224.0/20 maxlen: 24
                          124.41.240.0/22 maxlen: 24
                          124.41.248.0/21 maxlen: 21
                          124.41.248.0/22 maxlen: 22
                          124.41.248.0/23 maxlen: 24
                          124.41.250.0/24 maxlen: 24
                          124.41.251.0/24 maxlen: 24
                          124.41.252.0/24 maxlen: 24
                          124.41.253.0/24 maxlen: 24
                          124.41.254.0/24 maxlen: 24
                          124.41.255.0/24 maxlen: 24
                          139.5.68.0/22 maxlen: 24
                          139.5.72.0/22 maxlen: 24
                          202.79.32.0/19 maxlen: 24
                          202.129.248.0/22 maxlen: 24
                          202.166.192.0/19 maxlen: 24
                          2400:1a00::/32 maxlen: 32
                          2400:1a00::/36 maxlen: 36
                          2400:1a00::/48 maxlen: 48
                          2400:1a00:4::/48 maxlen: 48
                          2400:1a00:1000::/36 maxlen: 36
                          2400:1a00:2000::/36 maxlen: 36
                          2400:1a00:3000::/36 maxlen: 36
                          2400:1a00:4000::/36 maxlen: 36
                          2400:1a00:5000::/36 maxlen: 36
                          2400:1a00:6000::/36 maxlen: 36
                          2400:1a00:7000::/36 maxlen: 36
                          2400:1a00:8000::/36 maxlen: 36
                          2400:1a00:8000::/48 maxlen: 48
                          2400:1a00:8002::/48 maxlen: 48
                          2400:1a00:8004::/48 maxlen: 48
                          2400:1a00:8010::/48 maxlen: 48
                          2400:1a00:b000::/36 maxlen: 36
                          2400:1a00:b000::/40 maxlen: 40
                          2400:1a00:b010::/48 maxlen: 48
                          2400:1a00:b011::/48 maxlen: 48
                          2400:1a00:b012::/48 maxlen: 48
                          2400:1a00:b013::/48 maxlen: 48
                          2400:1a00:b020::/48 maxlen: 48
                          2400:1a00:b021::/48 maxlen: 48
                          2400:1a00:b022::/48 maxlen: 48
                          2400:1a00:b030::/48 maxlen: 48
                          2400:1a00:b031::/48 maxlen: 48
                          2400:1a00:b032::/48 maxlen: 48
                          2400:1a00:b040::/48 maxlen: 48
                          2400:1a00:b041::/48 maxlen: 48
                          2400:1a00:b050::/48 maxlen: 48
                          2400:1a00:b051::/48 maxlen: 48
                          2400:1a00:b060::/48 maxlen: 48
                          2400:1a00:b061::/48 maxlen: 48
                          2400:1a00:b070::/48 maxlen: 48
                          2400:1a00:b071::/48 maxlen: 48
                          2400:1a00:b080::/48 maxlen: 48
                          2400:1a00:b081::/48 maxlen: 48
                          2400:1a00:b100::/40 maxlen: 40
                          2400:1a00:b111::/48 maxlen: 48
                          2400:1a00:b112::/48 maxlen: 48
                          2400:1a00:b1a6::/48 maxlen: 48
                          2400:1a00:b1af::/48 maxlen: 48
                          2400:1a00:b1ba::/48 maxlen: 48
                          2400:1a00:b1c0::/48 maxlen: 48
                          2400:1a00:b1c1::/48 maxlen: 48
                          2400:1a00:b1e0::/48 maxlen: 48
                          2400:1a00:b1e1::/48 maxlen: 48
                          2400:1a00:b1fa::/48 maxlen: 48
                          2400:1a00:ba00::/40 maxlen: 40
                          2400:1a00:ba10::/48 maxlen: 48
                          2400:1a00:ba11::/48 maxlen: 48
                          2400:1a00:baa0::/48 maxlen: 48
                          2400:1a00:baa1::/48 maxlen: 48
                          2400:1a00:bb00::/40 maxlen: 40
                          2400:1a00:bb10::/48 maxlen: 48
                          2400:1a00:bb11::/48 maxlen: 48
                          2400:1a00:bb20::/48 maxlen: 48
                          2400:1a00:bb21::/48 maxlen: 48
                          2400:1a00:bc00::/40 maxlen: 40
                          2400:1a00:bc10::/48 maxlen: 48
                          2400:1a00:bc11::/48 maxlen: 48
                          2400:1a00:bd00::/40 maxlen: 40
                          2400:1a00:bd11::/48 maxlen: 48
                          2400:1a00:bd12::/48 maxlen: 48
                          2400:1a00:bd20::/48 maxlen: 48
                          2400:1a00:bd21::/48 maxlen: 48
                          2400:1a00:bda0::/48 maxlen: 48
                          2400:1a00:bda1::/48 maxlen: 48
                          2400:1a00:bde0::/48 maxlen: 48
                          2400:1a00:bde1::/48 maxlen: 48
                          2400:1a00:cd11::/48 maxlen: 48
                          2400:1a00:d000::/36 maxlen: 36
                          2400:1a00:d000::/40 maxlen: 40
                          2400:1a00:d100::/40 maxlen: 40
                          2400:1a00:d200::/40 maxlen: 48
                          2400:1a00:d300::/40 maxlen: 40
                          2400:1a00:d400::/40 maxlen: 40
                          2400:1a00:d500::/40 maxlen: 40
                          2400:1a00:d600::/40 maxlen: 40
                          2400:1a00:efff::/48 maxlen: 48
Validation:               Failed, certificate revoked on Mon 23 Dec 2024 04:49:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7976 (0x1f28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F731E
        Validity
            Not Before: Dec 15 06:40:38 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=675e79e6-6cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:72:02:62:87:e9:a8:7f:8d:b9:ab:a6:15:00:
                    34:f1:62:70:c9:e8:2d:51:6f:17:83:91:ab:d7:6e:
                    6c:2f:ae:98:f8:e9:84:c4:b5:a3:99:49:70:63:50:
                    97:98:60:b7:1e:cf:9b:d1:36:4c:b8:92:56:7b:8d:
                    d1:b2:6e:c0:cf:3a:b7:73:b3:0b:54:54:ed:b8:0c:
                    e4:5e:f4:81:d2:f0:67:c3:85:9d:d7:02:75:23:24:
                    9e:74:98:85:99:1c:aa:b5:11:44:8f:08:b6:63:fd:
                    34:54:0f:f1:f2:44:bd:9d:fa:a7:2a:4a:67:82:7b:
                    80:7a:1e:0b:da:f1:47:ea:08:98:1b:e8:45:06:1c:
                    03:9e:27:0b:a8:fa:a8:26:f8:7d:58:dd:8c:21:7d:
                    36:b2:ca:fd:e8:9e:17:fb:73:86:ed:71:7b:ea:20:
                    19:eb:68:65:2a:91:31:10:f5:ed:8b:90:9f:34:b7:
                    ca:6c:84:be:cf:d8:97:35:0b:cf:d1:13:57:26:d2:
                    b2:69:5b:2d:71:63:37:5c:c7:9e:f9:da:23:85:fb:
                    45:83:99:07:ce:e5:f5:d4:f5:15:29:1b:94:2e:d5:
                    9c:65:ed:dc:ea:7a:aa:03:aa:1d:ba:d1:3c:ae:26:
                    d6:ca:9f:4a:e0:cd:66:c8:3c:4b:92:ad:87:bb:d2:
                    72:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1B:5E:4D:D3:EB:A0:B1:E7:00:2D:A7:49:FB:51:D6:09:C0:54:7F
            X509v3 Authority Key Identifier:
                keyid:25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/FDF1FC4EB87A11EFB30CD726C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.34.0.0/17
                  103.211.148.0/23
                  103.254.184.0/22
                  124.41.192.0/18
                  139.5.68.0-139.5.75.255
                  202.79.32.0/19
                  202.129.248.0/22
                  202.166.192.0/19
                IPv6:
                  2400:1a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:e1:6d:d9:31:e8:6f:6b:33:e2:93:49:b4:db:76:a8:cd:66:
         c6:50:58:ed:3f:b6:fa:ac:79:11:10:f4:41:a6:c2:18:9d:fd:
         5e:5a:f2:cd:78:52:49:44:74:45:33:03:22:ae:7a:18:6c:9a:
         70:b7:71:a0:76:9b:c7:2e:74:3b:99:55:d6:9b:0e:18:62:c0:
         f4:3c:df:aa:d5:71:f3:6f:58:8f:ef:8e:ac:ce:db:10:19:a7:
         1a:f1:18:67:3d:8e:d8:e1:29:87:98:a4:88:88:17:7b:99:65:
         2d:d1:d4:8d:9f:65:2f:32:fd:6d:69:c7:aa:06:0a:eb:2c:be:
         88:f4:bd:a6:34:53:b9:0a:68:d3:71:61:2a:80:90:da:d2:59:
         47:a1:27:38:d9:6f:1e:60:c9:cc:f3:5c:c6:67:af:12:27:c7:
         b5:21:76:0b:32:e2:08:00:1f:2d:ef:3d:96:cb:04:e7:d3:e4:
         6a:e2:3a:11:da:ae:28:c6:f3:33:20:66:97:92:21:bf:e1:52:
         77:ad:5d:ad:f5:0a:f1:99:f1:48:86:2f:70:cb:ac:25:1f:56:
         11:f0:c3:fa:b4:d9:98:ec:f9:5e:1f:35:20:8d:17:6b:51:81:
         0e:6e:74:5d:a2:32:f1:c7:6e:11:4e:86:e4:77:a4:c4:fe:cf:
         6c:9d:20:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:44 2025 by rpki-client