Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/C34AC2E61ACD11F08744CE41C4F9AE02.roa
File:                     C34AC2E61ACD11F08744CE41C4F9AE02.roa (raw, json)
Hash identifier:          fL2Uvz8JtVrSGovf9Wcyc9DKg9Xnivlu/nHyMHmdEzs=
Subject key identifier:   1A:16:B7:7A:6D:8C:B3:CE:F0:2C:99:AC:B5:06:0F:18:F5:2B:D0:15
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       37A1
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/C34AC2E61ACD11F08744CE41C4F9AE02.roa
Signing time:             Wed 16 Apr 2025 14:19:09 +0000
ROA not before:           Wed 16 Apr 2025 14:19:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     150382
IP address blocks:        111.88.76.0/24 maxlen: 24
                          111.88.77.0/24 maxlen: 24
                          111.88.79.0/24 maxlen: 24
                          111.88.138.0/24 maxlen: 24
                          111.88.139.0/24 maxlen: 24
                          111.88.144.0/24 maxlen: 24
                          111.88.145.0/24 maxlen: 24
                          111.88.146.0/24 maxlen: 24
                          111.88.147.0/24 maxlen: 24
                          111.88.148.0/24 maxlen: 24
                          111.88.149.0/24 maxlen: 24
                          111.88.150.0/24 maxlen: 24
                          111.88.151.0/24 maxlen: 24
                          111.88.152.0/24 maxlen: 24
                          111.88.153.0/24 maxlen: 24
                          111.88.154.0/24 maxlen: 24
                          111.88.155.0/24 maxlen: 24
                          111.88.156.0/24 maxlen: 24
                          111.88.157.0/24 maxlen: 24
                          111.88.158.0/24 maxlen: 24
                          111.88.159.0/24 maxlen: 24
                          111.88.164.0/24 maxlen: 24
                          111.88.165.0/24 maxlen: 24
                          111.88.166.0/24 maxlen: 24
                          111.88.167.0/24 maxlen: 24
                          111.88.184.0/24 maxlen: 24
                          111.88.185.0/24 maxlen: 24
                          111.88.186.0/24 maxlen: 24
                          111.88.187.0/24 maxlen: 24
                          111.88.188.0/24 maxlen: 24
                          111.88.189.0/24 maxlen: 24
                          111.88.190.0/24 maxlen: 24
                          111.88.191.0/24 maxlen: 24
                          111.88.232.0/24 maxlen: 24
                          111.88.235.0/24 maxlen: 24
                          111.88.236.0/24 maxlen: 24
                          111.88.237.0/24 maxlen: 24
                          115.186.1.0/24 maxlen: 24
                          115.186.10.0/24 maxlen: 24
                          115.186.11.0/24 maxlen: 24
                          115.186.12.0/24 maxlen: 24
                          115.186.13.0/24 maxlen: 24
                          115.186.16.0/24 maxlen: 24
                          115.186.18.0/24 maxlen: 24
                          115.186.19.0/24 maxlen: 24
                          115.186.22.0/24 maxlen: 24
                          115.186.24.0/24 maxlen: 24
                          115.186.26.0/24 maxlen: 24
                          115.186.27.0/24 maxlen: 24
                          115.186.28.0/24 maxlen: 24
                          115.186.29.0/24 maxlen: 24
                          115.186.41.0/24 maxlen: 24
                          115.186.48.0/24 maxlen: 24
                          115.186.49.0/24 maxlen: 24
                          115.186.50.0/24 maxlen: 24
                          115.186.51.0/24 maxlen: 24
                          115.186.52.0/24 maxlen: 24
                          115.186.53.0/24 maxlen: 24
                          115.186.54.0/24 maxlen: 24
                          115.186.55.0/24 maxlen: 24
                          115.186.64.0/24 maxlen: 24
                          115.186.65.0/24 maxlen: 24
                          115.186.66.0/24 maxlen: 24
                          115.186.67.0/24 maxlen: 24
                          115.186.68.0/24 maxlen: 24
                          115.186.69.0/24 maxlen: 24
                          115.186.70.0/24 maxlen: 24
                          115.186.71.0/24 maxlen: 24
                          115.186.72.0/24 maxlen: 24
                          115.186.73.0/24 maxlen: 24
                          115.186.74.0/24 maxlen: 24
                          115.186.75.0/24 maxlen: 24
                          115.186.88.0/24 maxlen: 24
                          115.186.89.0/24 maxlen: 24
                          115.186.91.0/24 maxlen: 24
                          115.186.92.0/24 maxlen: 24
                          115.186.93.0/24 maxlen: 24
                          115.186.94.0/24 maxlen: 24
                          115.186.95.0/24 maxlen: 24
                          115.186.97.0/24 maxlen: 24
                          115.186.99.0/24 maxlen: 24
                          115.186.100.0/24 maxlen: 24
                          115.186.105.0/24 maxlen: 24
                          115.186.114.0/24 maxlen: 24
                          115.186.116.0/24 maxlen: 24
                          115.186.122.0/24 maxlen: 24
                          115.186.123.0/24 maxlen: 24
                          115.186.124.0/24 maxlen: 24
                          115.186.125.0/24 maxlen: 24
                          115.186.127.0/24 maxlen: 24
                          117.102.10.0/24 maxlen: 24
                          117.102.11.0/24 maxlen: 24
                          117.102.13.0/24 maxlen: 24
                          117.102.14.0/24 maxlen: 24
                          117.102.15.0/24 maxlen: 24
                          117.102.20.0/24 maxlen: 24
                          117.102.21.0/24 maxlen: 24
                          117.102.22.0/24 maxlen: 24
                          117.102.23.0/24 maxlen: 24
                          117.102.27.0/24 maxlen: 24
                          117.102.29.0/24 maxlen: 24
                          117.102.30.0/24 maxlen: 24
                          117.102.31.0/24 maxlen: 24
                          203.81.212.0/24 maxlen: 24
                          203.81.214.0/24 maxlen: 24
                          203.81.216.0/24 maxlen: 24
                          203.81.217.0/24 maxlen: 24
                          203.81.218.0/24 maxlen: 24
                          203.81.219.0/24 maxlen: 24
                          203.81.220.0/24 maxlen: 24
                          203.81.221.0/24 maxlen: 24
                          203.81.222.0/24 maxlen: 24
                          203.81.223.0/24 maxlen: 24
                          203.81.224.0/24 maxlen: 24
                          203.81.225.0/24 maxlen: 24
                          203.81.226.0/24 maxlen: 24
                          203.81.227.0/24 maxlen: 24
                          203.81.228.0/24 maxlen: 24
                          203.81.229.0/24 maxlen: 24
                          203.81.231.0/24 maxlen: 24
                          203.81.232.0/24 maxlen: 24
                          203.81.233.0/24 maxlen: 24
                          203.81.234.0/24 maxlen: 24
                          203.81.235.0/24 maxlen: 24
                          203.81.236.0/24 maxlen: 24
                          203.81.237.0/24 maxlen: 24
                          203.81.238.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 16 Apr 2025 14:31:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14241 (0x37a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Apr 16 14:19:09 2025 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=67ffbc5d-3012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9f:b8:7f:4a:64:4e:d6:fb:99:bf:88:14:cb:
                    59:62:92:c7:ad:b7:59:7f:8a:61:d2:7f:80:de:b6:
                    8d:2f:ef:e2:b8:f8:e9:13:cc:3b:81:df:5f:54:ea:
                    e4:85:26:41:cc:30:1d:4a:8e:55:59:7a:06:1c:20:
                    23:d4:b2:e0:55:8e:db:7a:50:ac:6e:95:50:19:e2:
                    b7:26:02:ca:8a:b2:b4:6b:69:43:f0:06:81:48:79:
                    78:78:f9:96:6b:92:43:5e:5a:28:75:26:e3:fc:cd:
                    4d:7a:76:79:02:f1:ff:78:89:45:13:fc:15:bf:06:
                    98:41:2c:1a:7e:8f:af:41:0d:68:f8:de:64:18:73:
                    23:52:64:36:94:8c:f1:8f:9e:9f:ea:c1:0b:79:21:
                    92:71:40:c7:f5:52:d6:98:6b:05:bf:76:c6:3b:a6:
                    fe:a4:3f:1e:72:0e:6e:57:0e:ea:1b:71:42:17:09:
                    09:ab:ca:25:dc:26:f7:24:95:a1:09:e5:85:d6:a2:
                    b0:39:b9:67:d2:b8:00:56:f5:92:1a:7b:8c:29:a3:
                    49:5c:b2:65:fc:0d:73:a1:3d:c3:0b:81:4c:2e:2f:
                    51:5f:0a:e0:e6:fe:59:41:bf:e1:1f:30:60:d5:95:
                    39:a6:7d:52:7b:ad:b4:05:71:0a:60:37:b2:03:c3:
                    4f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:16:B7:7A:6D:8C:B3:CE:F0:2C:99:AC:B5:06:0F:18:F5:2B:D0:15
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/C34AC2E61ACD11F08744CE41C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.88.76.0/23
                  111.88.79.0/24
                  111.88.138.0/23
                  111.88.144.0/20
                  111.88.164.0/22
                  111.88.184.0/21
                  111.88.232.0/24
                  111.88.235.0-111.88.237.255
                  115.186.1.0/24
                  115.186.10.0-115.186.13.255
                  115.186.16.0/24
                  115.186.18.0/23
                  115.186.22.0/24
                  115.186.24.0/24
                  115.186.26.0-115.186.29.255
                  115.186.41.0/24
                  115.186.48.0/21
                  115.186.64.0-115.186.75.255
                  115.186.88.0/23
                  115.186.91.0-115.186.95.255
                  115.186.97.0/24
                  115.186.99.0-115.186.100.255
                  115.186.105.0/24
                  115.186.114.0/24
                  115.186.116.0/24
                  115.186.122.0-115.186.125.255
                  115.186.127.0/24
                  117.102.10.0/23
                  117.102.13.0-117.102.15.255
                  117.102.20.0/22
                  117.102.27.0/24
                  117.102.29.0-117.102.31.255
                  203.81.212.0/24
                  203.81.214.0/24
                  203.81.216.0-203.81.229.255
                  203.81.231.0-203.81.238.255

    Signature Algorithm: sha256WithRSAEncryption
         95:2e:55:bb:58:32:fc:d1:17:ff:a6:76:41:93:f8:5e:ed:31:
         b0:18:cf:99:35:46:8f:ff:b8:d8:f8:5a:a0:52:e1:ed:03:67:
         df:08:27:32:e3:14:b6:fe:55:c1:8c:9f:4d:68:db:b5:ab:5e:
         03:8d:91:9d:03:2a:96:e0:55:77:1a:18:c4:35:dc:ef:58:88:
         8f:87:b3:16:b6:9a:c1:c0:e5:b3:6e:ef:e2:74:d3:82:40:fc:
         ad:50:83:54:98:c6:43:b5:e6:00:97:20:c7:2e:c7:f1:af:10:
         f7:e2:09:24:34:91:ba:f7:ff:4b:9d:d7:6d:10:f4:60:cf:df:
         c3:0c:cb:f4:d9:24:6b:23:5a:ef:73:a0:a5:70:2f:f9:b9:1d:
         87:58:02:75:82:be:27:73:6a:9a:7d:b9:aa:cd:d1:a8:6f:b2:
         79:28:bb:de:01:58:1f:ca:be:3b:59:e4:cd:59:d5:83:1d:4b:
         0f:ea:f4:c8:89:1d:3e:ce:21:70:31:54:81:75:13:ed:4c:c9:
         18:54:fe:08:e8:bf:19:75:a2:0f:b6:b3:c4:5e:bc:a6:43:24:
         1c:08:c6:c5:ae:7c:2d:92:96:5a:3d:9b:98:75:32:68:50:0d:
         6b:2a:87:1a:82:b0:5b:a5:ac:e2:88:a7:60:cb:52:42:20:7f:
         c7:f3:60:5f
-----BEGIN CERTIFICATE-----
MIIGpTCCBY2gAwIBAgICN6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE
RDIxRkUyMDYwHhcNMjUwNDE2MTQxOTA5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2ZmYmM1ZC0zMDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1J+4f0pkTtb7mb+IFMtZYpLHrbdZf4ph0n+A3raNL+/iuPjpE8w7gd9fVOrk
hSZBzDAdSo5VWXoGHCAj1LLgVY7belCsbpVQGeK3JgLKirK0a2lD8AaBSHl4ePmW
a5JDXloodSbj/M1NenZ5AvH/eIlFE/wVvwaYQSwafo+vQQ1o+N5kGHMjUmQ2lIzx
j56f6sELeSGScUDH9VLWmGsFv3bGO6b+pD8ecg5uVw7qG3FCFwkJq8ol3Cb3JJWh
CeWF1qKwObln0rgAVvWSGnuMKaNJXLJl/A1zoT3DC4FMLi9RXwrg5v5ZQb/hHzBg
1ZU5pn1Se620BXEKYDeyA8NPbwIDAQABo4IDyTCCA8UwHQYDVR0OBBYEFBoWt3pt
jLPO8CyZrLUGDxj1K9AVMB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE
ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvQzM0QUMyRTYx
QUNEMTFGMDg3NDRDRTQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggFRBggrBgEFBQcBBwEB
/wSCAUAwggE8MIIBOAQCAAEwggEwAwQBb1hMAwQAb1hPAwQBb1iKAwQEb1iQAwQC
b1ikAwQDb1i4AwQAb1joMAwDBABvWOsDBAFvWOwDBABzugEwDAMEAXO6CgMEAXO6
DAMEAHO6EAMEAXO6EgMEAHO6FgMEAHO6GDAMAwQBc7oaAwQBc7ocAwQAc7opAwQD
c7owMAwDBAZzukADBAJzukgDBAFzulgwDAMEAHO6WwMEBXO6QAMEAHO6YTAMAwQA
c7pjAwQAc7pkAwQAc7ppAwQAc7pyAwQAc7p0MAwDBAFzunoDBAFzunwDBABzun8D
BAF1ZgowDAMEAHVmDQMEBHVmAAMEAnVmFAMEAHVmGzAMAwQAdWYdAwQFdWYAAwQA
y1HUAwQAy1HWMAwDBAPLUdgDBAHLUeQwDAMEAMtR5wMEAMtR7jANBgkqhkiG9w0B
AQsFAAOCAQEAlS5Vu1gy/NEX/6Z2QZP4Xu0xsBjPmTVGj/+42PhaoFLh7QNn3wgn
MuMUtv5VwYyfTWjbtateA42RnQMqluBVdxoYxDXc71iIj4ezFraawcDls27v4nTT
gkD8rVCDVJjGQ7XmAJcgxy7H8a8Q9+IJJDSRuvf/S53XbRD0YM/fwwzL9NkkayNa
73OgpXAv+bkdh1gCdYK+J3Nqmn25qs3RqG+yeSi73gFYH8q+O1nkzVnVgx1LD+r0
yIkdPs4hcDFUgXUT7UzJGFT+COi/GXWiD7azxF68pkMkHAjGxa58LZKWWj2bmHUy
aFANayqHGoKwW6Ws4oinYMtSQiB/x/NgXw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:21:54 2025 by rpki-client