Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/050EDCE86E9911F0B8003F17C4F9AE02.roa
File:                     050EDCE86E9911F0B8003F17C4F9AE02.roa (raw, json)
Hash identifier:          yoNN1cyuGYIzWHkuDXG0mMA/dnKI15YKGx3vsJ3VJYE=
Subject key identifier:   DD:A4:E1:DB:31:F3:ED:7B:C1:EE:7D:1C:58:79:AC:85:F9:33:26:A0
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       28D3
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/050EDCE86E9911F0B8003F17C4F9AE02.roa
Signing time:             Fri 01 Aug 2025 06:13:23 +0000
ROA not before:           Fri 01 Aug 2025 06:13:23 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     57844
IP address blocks:        115.167.101.0/24 maxlen: 24
                          115.167.102.0/24 maxlen: 24
                          115.167.103.0/24 maxlen: 24
                          115.167.116.0/24 maxlen: 24
                          115.167.117.0/24 maxlen: 24
                          115.167.118.0/24 maxlen: 24
                          115.167.119.0/24 maxlen: 24
                          115.167.120.0/24 maxlen: 24
                          115.167.121.0/24 maxlen: 24
                          115.167.122.0/24 maxlen: 24
                          115.167.123.0/24 maxlen: 24
                          115.167.124.0/24 maxlen: 24
                          115.167.125.0/24 maxlen: 24
                          175.110.64.0/24 maxlen: 24
                          175.110.66.0/24 maxlen: 24
                          175.110.67.0/24 maxlen: 24
                          175.110.82.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 05 Aug 2025 06:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10451 (0x28d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Aug  1 06:13:23 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=688c5b02-2d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:be:83:d4:3a:48:39:5a:5e:35:77:6d:67:c6:
                    ca:dc:a0:de:ef:07:0f:d8:26:fd:b3:56:52:63:b2:
                    fb:d0:70:94:b3:21:54:55:98:fa:41:c6:7f:cc:da:
                    af:45:a6:95:11:08:88:87:a5:75:da:4f:03:8e:1f:
                    26:85:91:4c:9d:60:c7:47:05:1c:41:d0:f9:28:54:
                    1c:b9:c8:7b:d2:d7:bb:91:e3:d9:3a:96:37:87:44:
                    62:23:6b:00:39:c5:36:71:6a:27:d4:3d:3b:1d:1f:
                    c5:90:c7:22:a1:31:1c:1a:ad:c3:28:5f:41:c2:8d:
                    bd:29:d1:a6:75:21:29:d2:98:06:12:fa:8c:97:2d:
                    dc:da:03:c8:dd:87:c5:d9:15:37:6e:0f:3f:1d:e3:
                    7e:eb:2d:19:52:fb:ac:f6:b6:91:89:d3:d6:ac:c0:
                    06:72:a0:32:b6:a1:02:e7:68:77:1e:1b:8f:6d:2b:
                    70:81:83:65:1b:17:f8:e7:ee:05:85:bb:58:03:50:
                    dc:bc:1f:18:e6:7c:ad:e7:57:83:71:a2:91:19:84:
                    06:68:26:47:b9:95:55:79:bb:77:73:3b:cf:f1:52:
                    35:c8:41:ae:10:c6:84:bf:3a:0d:7f:3f:e4:a0:d9:
                    df:85:e5:5f:6f:3c:6f:38:4f:5f:7b:9c:6f:94:58:
                    1b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A4:E1:DB:31:F3:ED:7B:C1:EE:7D:1C:58:79:AC:85:F9:33:26:A0
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/050EDCE86E9911F0B8003F17C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.101.0-115.167.103.255
                  115.167.116.0-115.167.125.255
                  175.110.64.0/24
                  175.110.66.0/23
                  175.110.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:c4:31:35:2c:eb:6f:48:5a:ee:50:a7:13:6a:a9:5a:7d:24:
         01:a4:0d:69:c7:3e:11:5a:19:f0:58:99:45:a3:79:2e:ce:1b:
         9e:1f:d7:8d:9a:b2:e8:93:c2:8f:be:91:d2:68:9b:66:b8:a5:
         e2:dc:7a:6c:48:6b:ed:43:df:fe:08:c8:db:72:48:65:12:2a:
         ee:fa:bf:c2:f9:49:9a:e8:d2:dd:7f:f9:9e:da:bb:7b:13:8f:
         5d:1a:68:98:97:73:41:a0:82:d9:d5:67:22:7c:8d:6f:26:ef:
         d2:38:3a:7d:4e:bf:11:f0:5f:bd:a0:cb:53:01:e3:15:af:eb:
         45:b6:6f:41:2c:4c:2f:0e:5c:cd:91:30:08:28:b5:d9:ab:f6:
         c0:92:cc:8c:44:df:96:91:49:ef:13:c4:ad:ca:d0:be:3d:1d:
         47:0e:43:64:81:45:ac:1e:1f:18:a1:9f:fe:6b:3f:0c:f0:ff:
         a3:bd:95:54:98:0d:f8:3e:39:01:95:52:d1:4c:18:c9:c5:e1:
         51:2b:82:5e:86:9e:52:75:dc:ed:88:77:44:3e:c0:0b:1c:37:
         d5:83:50:63:dd:82:aa:17:d7:61:09:22:4c:a7:50:44:c7:61:
         1e:85:1a:af:e0:45:0d:75:74:a5:66:99:d6:92:aa:3c:62:60:
         b3:d7:5e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:33:26 2025 by rpki-client