Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1B23E3B029C111F08A05830AC4F9AE02.roa
File:                     1B23E3B029C111F08A05830AC4F9AE02.roa (raw, json)
Hash identifier:          JXT+IREW1FHdTPiY82xvHRN3wNRLSGb5xsFAVkM3GJM=
Subject key identifier:   6F:35:80:1C:6E:C6:C7:A0:6A:E4:B9:9E:0B:33:F3:66:6E:AB:F3:08
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       26A5
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1B23E3B029C111F08A05830AC4F9AE02.roa
Signing time:             Mon 05 May 2025 14:56:21 +0000
ROA not before:           Mon 05 May 2025 14:56:21 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     138241
IP address blocks:        103.11.63.0/24 maxlen: 24
                          103.151.26.0/24 maxlen: 24
                          103.151.27.0/24 maxlen: 24
                          113.203.208.0/24 maxlen: 24
                          113.203.209.0/24 maxlen: 24
                          113.203.210.0/24 maxlen: 24
                          113.203.211.0/24 maxlen: 24
                          113.203.212.0/24 maxlen: 24
                          113.203.213.0/24 maxlen: 24
                          113.203.214.0/24 maxlen: 24
                          113.203.215.0/24 maxlen: 24
                          113.203.216.0/24 maxlen: 24
                          113.203.217.0/24 maxlen: 24
                          113.203.218.0/24 maxlen: 24
                          113.203.219.0/24 maxlen: 24
                          113.203.220.0/24 maxlen: 24
                          113.203.222.0/24 maxlen: 24
                          113.203.223.0/24 maxlen: 24
                          113.203.225.0/24 maxlen: 24
                          113.203.226.0/24 maxlen: 24
                          113.203.227.0/24 maxlen: 24
                          113.203.228.0/24 maxlen: 24
                          113.203.229.0/24 maxlen: 24
                          113.203.230.0/24 maxlen: 24
                          113.203.231.0/24 maxlen: 24
                          113.203.233.0/24 maxlen: 24
                          113.203.241.0/24 maxlen: 24
                          113.203.242.0/24 maxlen: 24
                          113.203.243.0/24 maxlen: 24
                          113.203.244.0/24 maxlen: 24
                          113.203.245.0/24 maxlen: 24
                          113.203.246.0/24 maxlen: 24
                          113.203.248.0/24 maxlen: 24
                          113.203.252.0/24 maxlen: 24
                          113.203.253.0/24 maxlen: 24
                          113.203.254.0/24 maxlen: 24
                          113.203.255.0/24 maxlen: 24
                          115.167.2.0/24 maxlen: 24
                          115.167.6.0/24 maxlen: 24
                          115.167.15.0/24 maxlen: 24
                          115.167.16.0/22 maxlen: 24
                          115.167.20.0/22 maxlen: 24
                          115.167.28.0/24 maxlen: 24
                          115.167.29.0/24 maxlen: 24
                          115.167.30.0/24 maxlen: 24
                          115.167.31.0/24 maxlen: 24
                          115.167.48.0/24 maxlen: 24
                          115.167.50.0/24 maxlen: 24
                          115.167.61.0/24 maxlen: 24
                          115.167.64.0/24 maxlen: 24
                          115.167.77.0/24 maxlen: 24
                          115.167.96.0/22 maxlen: 24
                          115.167.101.0/24 maxlen: 24
                          115.167.102.0/24 maxlen: 24
                          115.167.103.0/24 maxlen: 24
                          115.167.112.0/22 maxlen: 24
                          115.167.116.0/24 maxlen: 24
                          115.167.117.0/24 maxlen: 24
                          115.167.118.0/24 maxlen: 24
                          115.167.119.0/24 maxlen: 24
                          115.167.120.0/24 maxlen: 24
                          115.167.121.0/24 maxlen: 24
                          115.167.123.0/24 maxlen: 24
                          115.167.125.0/24 maxlen: 24
                          175.110.64.0/22 maxlen: 24
                          175.110.81.0/24 maxlen: 24
                          175.110.82.0/24 maxlen: 24
                          175.110.83.0/24 maxlen: 24
                          175.110.90.0/24 maxlen: 24
                          175.110.91.0/24 maxlen: 24
                          175.110.97.0/24 maxlen: 24
                          175.110.98.0/24 maxlen: 24
                          175.110.99.0/24 maxlen: 24
                          175.110.101.0/24 maxlen: 24
                          175.110.102.0/24 maxlen: 24
                          175.110.103.0/24 maxlen: 24
                          175.110.104.0/24 maxlen: 24
                          175.110.105.0/24 maxlen: 24
                          175.110.106.0/24 maxlen: 24
                          175.110.107.0/24 maxlen: 24
                          175.110.108.0/24 maxlen: 24
                          175.110.109.0/24 maxlen: 24
                          175.110.110.0/24 maxlen: 24
                          175.110.111.0/24 maxlen: 24
                          180.178.142.0/24 maxlen: 24
                          180.178.144.0/24 maxlen: 24
                          180.178.146.0/24 maxlen: 24
                          180.178.147.0/24 maxlen: 24
                          180.178.148.0/24 maxlen: 24
                          180.178.149.0/24 maxlen: 24
                          180.178.150.0/24 maxlen: 24
                          180.178.152.0/22 maxlen: 24
                          180.178.160.0/24 maxlen: 24
                          180.178.161.0/24 maxlen: 24
                          180.178.162.0/24 maxlen: 24
                          180.178.163.0/24 maxlen: 24
                          180.178.164.0/24 maxlen: 24
                          180.178.165.0/24 maxlen: 24
                          180.178.166.0/24 maxlen: 24
                          180.178.167.0/24 maxlen: 24
                          180.178.168.0/24 maxlen: 24
                          180.178.169.0/24 maxlen: 24
                          180.178.170.0/24 maxlen: 24
                          180.178.171.0/24 maxlen: 24
                          180.178.176.0/22 maxlen: 22
                          180.178.180.0/24 maxlen: 24
                          180.178.181.0/24 maxlen: 24
                          180.178.182.0/24 maxlen: 24
                          180.178.183.0/24 maxlen: 24
                          180.178.184.0/22 maxlen: 22
                          180.178.185.0/24 maxlen: 24
                          180.178.186.0/24 maxlen: 24
                          180.178.187.0/24 maxlen: 24
                          180.178.188.0/24 maxlen: 24
                          180.178.190.0/24 maxlen: 24
                          180.178.191.0/24 maxlen: 24
                          202.92.18.0/24 maxlen: 24
                          202.92.20.0/24 maxlen: 24
                          202.92.26.0/24 maxlen: 24
                          223.29.225.0/24 maxlen: 24
                          223.29.226.0/24 maxlen: 24
                          223.29.228.0/24 maxlen: 24
                          223.29.229.0/24 maxlen: 24
                          223.29.230.0/24 maxlen: 24
                          223.29.231.0/24 maxlen: 24
                          223.29.236.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 05 May 2025 15:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9893 (0x26a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May  5 14:56:21 2025 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6818d195-662f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8c:d0:c7:82:69:1a:60:78:e4:9c:dd:7d:09:
                    01:a3:bd:b2:c8:66:83:ff:bb:52:78:53:84:7a:51:
                    79:51:96:65:c0:30:e1:4d:9f:9c:ac:9e:b4:02:3f:
                    96:69:ba:a8:5a:59:f4:3a:d9:45:e9:4e:9a:7e:75:
                    20:f8:45:b1:cf:ee:be:cf:e6:69:b6:08:79:2c:ac:
                    c2:f1:72:ee:4d:08:80:27:dd:29:58:e0:7d:70:3d:
                    e7:4f:9c:47:c8:b5:a5:12:18:59:dd:6a:c9:24:3e:
                    69:1b:a3:0f:e2:13:6a:d2:af:71:c8:ae:e4:24:d9:
                    8f:0b:98:88:4f:30:dc:93:86:9e:26:3b:51:36:7b:
                    99:e3:4a:40:4d:f5:d2:e9:de:de:92:5f:32:92:1c:
                    f3:35:db:32:93:9d:ef:d9:81:d3:cf:1c:4b:9b:85:
                    f2:47:5d:ef:26:f2:f4:d6:2d:6f:70:3d:f2:3c:39:
                    20:06:1b:ef:92:d4:be:b9:d4:bd:fc:b8:8c:52:43:
                    3a:5c:e6:e3:3a:f6:e1:bc:6b:1f:6f:1e:f0:23:fe:
                    f2:44:ce:ca:50:db:74:db:cb:07:cd:2a:e9:4b:5e:
                    51:e7:44:da:b4:0e:15:88:08:7a:b3:40:b3:ef:93:
                    b8:cf:1e:ae:5b:bd:90:a9:02:71:b2:82:5f:4f:f2:
                    ba:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:35:80:1C:6E:C6:C7:A0:6A:E4:B9:9E:0B:33:F3:66:6E:AB:F3:08
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1B23E3B029C111F08A05830AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.63.0/24
                  103.151.26.0/23
                  113.203.208.0-113.203.220.255
                  113.203.222.0/23
                  113.203.225.0-113.203.231.255
                  113.203.233.0/24
                  113.203.241.0-113.203.246.255
                  113.203.248.0/24
                  113.203.252.0/22
                  115.167.2.0/24
                  115.167.6.0/24
                  115.167.15.0-115.167.23.255
                  115.167.28.0/22
                  115.167.48.0/24
                  115.167.50.0/24
                  115.167.61.0/24
                  115.167.64.0/24
                  115.167.77.0/24
                  115.167.96.0/22
                  115.167.101.0-115.167.103.255
                  115.167.112.0-115.167.121.255
                  115.167.123.0/24
                  115.167.125.0/24
                  175.110.64.0/22
                  175.110.81.0-175.110.83.255
                  175.110.90.0/23
                  175.110.97.0-175.110.99.255
                  175.110.101.0-175.110.111.255
                  180.178.142.0/24
                  180.178.144.0/24
                  180.178.146.0-180.178.150.255
                  180.178.152.0/22
                  180.178.160.0-180.178.171.255
                  180.178.176.0-180.178.188.255
                  180.178.190.0/23
                  202.92.18.0/24
                  202.92.20.0/24
                  202.92.26.0/24
                  223.29.225.0-223.29.226.255
                  223.29.228.0/22
                  223.29.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:c5:10:e9:89:7c:93:72:94:03:fe:d8:56:e6:8b:6d:76:d9:
         ce:cd:d6:30:0f:23:b7:cb:78:48:de:4f:1d:99:0b:28:8a:70:
         36:00:51:e6:5b:84:bc:87:46:1e:95:53:7b:5a:54:8f:5e:4b:
         d2:60:6f:83:73:68:2c:39:07:74:4a:df:6e:92:0c:0f:20:40:
         8d:1b:35:72:0c:9f:02:4f:d6:23:d0:a6:39:ba:81:d2:36:7f:
         c3:8f:da:5e:56:e5:bd:27:e7:10:c0:62:2e:9e:05:e0:c0:bb:
         f3:4a:3b:bd:cc:00:26:d8:71:ac:56:fd:72:e0:dd:86:23:c0:
         17:85:05:30:78:36:9e:ba:b5:97:84:2e:a3:28:c3:82:cb:41:
         09:ac:62:75:ca:5c:aa:95:84:5d:93:d3:60:c3:d4:79:c1:36:
         fb:3e:a4:02:0c:62:c5:f9:cc:70:d0:fa:4f:4c:61:c6:ee:bf:
         d0:18:7d:c5:61:71:b5:7e:51:43:b1:fd:da:8b:4a:19:e1:80:
         19:2d:b5:55:6d:6b:65:62:6b:44:49:41:ed:a0:f5:30:30:ca:
         57:0d:a5:95:77:29:98:40:0c:28:9d:19:4f:ff:f6:5e:24:c7:
         b5:d1:c8:45:49:4c:ad:97:50:32:c8:9c:69:91:6c:f5:2e:b9:
         5f:bb:a0:74
-----BEGIN CERTIFICATE-----
MIIG0zCCBbugAwIBAgICJqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjUwNTA1MTQ1NjIxWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODE4ZDE5NS02NjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz4zQx4JpGmB45JzdfQkBo72yyGaD/7tSeFOEelF5UZZlwDDhTZ+crJ60Aj+W
abqoWln0OtlF6U6afnUg+EWxz+6+z+Zptgh5LKzC8XLuTQiAJ90pWOB9cD3nT5xH
yLWlEhhZ3WrJJD5pG6MP4hNq0q9xyK7kJNmPC5iITzDck4aeJjtRNnuZ40pATfXS
6d7ekl8ykhzzNdsyk53v2YHTzxxLm4XyR13vJvL01i1vcD3yPDkgBhvvktS+udS9
/LiMUkM6XObjOvbhvGsfbx7wI/7yRM7KUNt028sHzSrpS15R50TatA4ViAh6s0Cz
75O4zx6uW72QqQJxsoJfT/K6MwIDAQABo4ID9zCCA/MwHQYDVR0OBBYEFG81gBxu
xsegauS5ngsz82Zuq/MIMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMUIyM0UzQjAy
OUMxMTFGMDhBMDU4MzBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggF/BggrBgEFBQcBBwEB
/wSCAW4wggFqMIIBZgQCAAEwggFeAwQAZws/AwQBZ5caMAwDBARxy9ADBABxy9wD
BAFxy94wDAMEAHHL4QMEA3HL4AMEAHHL6TAMAwQAccvxAwQAccv2AwQAccv4AwQC
ccv8AwQAc6cCAwQAc6cGMAwDBABzpw8DBANzpxADBAJzpxwDBABzpzADBABzpzID
BABzpz0DBABzp0ADBABzp00DBAJzp2AwDAMEAHOnZQMEA3OnYDAMAwQEc6dwAwQB
c6d4AwQAc6d7AwQAc6d9AwQCr25AMAwDBACvblEDBAKvblADBAGvblowDAMEAK9u
YQMEAq9uYDAMAwQAr25lAwQEr25gAwQAtLKOAwQAtLKQMAwDBAG0spIDBAC0spYD
BAK0spgwDAMEBbSyoAMEArSyqDAMAwQEtLKwAwQAtLK8AwQBtLK+AwQAylwSAwQA
ylwUAwQAylwaMAwDBADfHeEDBADfHeIDBALfHeQDBADfHewwDQYJKoZIhvcNAQEL
BQADggEBAGTFEOmJfJNylAP+2Fbmi2122c7N1jAPI7fLeEjeTx2ZCyiKcDYAUeZb
hLyHRh6VU3taVI9eS9Jgb4NzaCw5B3RK326SDA8gQI0bNXIMnwJP1iPQpjm6gdI2
f8OP2l5W5b0n5xDAYi6eBeDAu/NKO73MACbYcaxW/XLg3YYjwBeFBTB4Np66tZeE
LqMow4LLQQmsYnXKXKqVhF2T02DD1HnBNvs+pAIMYsX5zHDQ+k9MYcbuv9AYfcVh
cbV+UUOx/dqLShnhgBkttVVta2Via0RJQe2g9TAwylcNpZV3KZhADCidGU//9l4k
x7XRyEVJTK2XUDLInGmRbPUuuV+7oHQ=
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:09:40 2025 by rpki-client