Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/508AAFBA4E8D11F1930B80F7B5833773.roa
File:                     508AAFBA4E8D11F1930B80F7B5833773.roa (raw, json)
Hash identifier:          kxjhGgjzOHSvLyTmJ5ilKabA34dVQHdm2SHb9msFmoI=
Subject key identifier:   9B:F9:BA:A0:97:8B:E7:B9:F4:8C:3E:90:BE:20:FE:46:02:BC:CC:3B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E05F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/508AAFBA4E8D11F1930B80F7B5833773.roa
Signing time:             Wed 13 May 2026 05:33:47 +0000
ROA not before:           Wed 13 May 2026 05:33:47 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     132116
IP address blocks:        27.123.240.0/22 maxlen: 24
                          43.230.148.0/22 maxlen: 24
                          43.247.40.0/24 maxlen: 24
                          43.247.41.0/24 maxlen: 24
                          43.247.42.0/24 maxlen: 24
                          43.247.43.0/24 maxlen: 24
                          43.248.152.0/22 maxlen: 24
                          43.248.240.0/22 maxlen: 24
                          43.251.92.0/22 maxlen: 23
                          43.251.92.0/24 maxlen: 24
                          43.251.93.0/24 maxlen: 24
                          43.251.94.0/24 maxlen: 24
                          43.251.95.0/24 maxlen: 24
                          45.120.160.0/22 maxlen: 24
                          45.248.0.0/22 maxlen: 24
                          45.248.172.0/22 maxlen: 24
                          103.16.28.0/24 maxlen: 24
                          103.16.29.0/24 maxlen: 24
                          103.16.30.0/24 maxlen: 24
                          103.16.31.0/24 maxlen: 24
                          103.28.252.0/22 maxlen: 24
                          103.40.200.0/22 maxlen: 24
                          103.43.32.0/22 maxlen: 24
                          103.55.60.0/22 maxlen: 24
                          103.68.20.0/22 maxlen: 24
                          103.68.140.0/23 maxlen: 24
                          103.69.24.0/24 maxlen: 24
                          103.69.25.0/24 maxlen: 24
                          103.69.26.0/24 maxlen: 24
                          103.69.27.0/24 maxlen: 24
                          103.69.244.0/22 maxlen: 24
                          103.70.80.0/24 maxlen: 24
                          103.70.81.0/24 maxlen: 24
                          103.70.82.0/24 maxlen: 24
                          103.70.83.0/24 maxlen: 24
                          103.91.73.0/24 maxlen: 24
                          103.91.74.0/24 maxlen: 24
                          103.94.83.0/24 maxlen: 24
                          103.100.4.0/22 maxlen: 24
                          103.102.147.0/24 maxlen: 24
                          103.103.55.0/24 maxlen: 24
                          103.105.96.0/24 maxlen: 24
                          103.106.28.0/22 maxlen: 24
                          103.124.120.0/23 maxlen: 24
                          103.153.12.0/24 maxlen: 24
                          103.154.8.0/23 maxlen: 24
                          103.158.90.0/23 maxlen: 24
                          103.164.141.0/24 maxlen: 24
                          103.165.88.0/23 maxlen: 24
                          103.165.102.0/23 maxlen: 24
                          103.167.154.0/23 maxlen: 24
                          103.167.182.0/23 maxlen: 24
                          103.167.224.0/23 maxlen: 24
                          103.167.238.0/23 maxlen: 24
                          103.168.60.0/23 maxlen: 24
                          103.169.242.0/24 maxlen: 24
                          103.169.243.0/24 maxlen: 24
                          103.170.38.0/23 maxlen: 24
                          103.170.52.0/23 maxlen: 24
                          103.170.84.0/23 maxlen: 24
                          103.183.86.0/23 maxlen: 24
                          103.190.8.0/24 maxlen: 24
                          103.190.9.0/24 maxlen: 24
                          103.192.64.0/24 maxlen: 24
                          103.192.66.0/24 maxlen: 24
                          103.192.67.0/24 maxlen: 24
                          103.198.172.0/22 maxlen: 24
                          103.216.140.0/22 maxlen: 24
                          103.217.132.0/22 maxlen: 24
                          103.224.144.0/22 maxlen: 24
                          103.225.188.0/22 maxlen: 24
                          103.226.88.0/24 maxlen: 24
                          103.226.89.0/24 maxlen: 24
                          103.226.90.0/24 maxlen: 24
                          103.226.91.0/24 maxlen: 24
                          103.243.52.0/24 maxlen: 24
                          103.243.53.0/24 maxlen: 24
                          103.248.92.0/22 maxlen: 24
                          103.248.172.0/22 maxlen: 24
                          119.42.56.0/22 maxlen: 24
                          157.119.80.0/22 maxlen: 24
                          163.53.84.0/22 maxlen: 24
                          180.149.225.0/24 maxlen: 24
                          180.149.226.0/24 maxlen: 24
                          180.149.227.0/24 maxlen: 24
                          2001:df3:6ec0::/48 maxlen: 48
                          2405:e100:d::/48 maxlen: 48
                          2405:e100:e::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 13 May 2026 05:42:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57439 (0xe05f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 13 05:33:47 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6a040d3b-925b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4b:5b:80:aa:02:d7:32:f7:d9:cd:c1:76:34:
                    0f:d5:34:97:7c:b6:e3:f8:77:e0:4f:fb:e9:d1:6e:
                    91:28:48:a0:8e:42:b8:b8:23:1a:79:d4:9f:f2:19:
                    95:4c:99:0b:a8:2e:1c:8b:02:48:66:8b:32:25:99:
                    f2:a5:bd:bd:b3:fa:a5:13:83:71:7f:b1:32:3c:0d:
                    89:6e:7b:de:40:8f:fc:93:84:1b:91:77:13:d2:a5:
                    c8:8f:2f:41:27:93:21:2a:ea:fd:f2:dc:f2:0f:2c:
                    31:18:cd:bc:65:69:dc:8f:8f:be:bf:17:7d:d4:53:
                    3d:15:6e:f6:22:39:94:0f:31:c8:70:10:35:fc:2a:
                    71:81:58:a0:bf:67:93:01:97:ad:f6:b5:b4:ae:de:
                    06:e2:b2:05:b8:e1:f9:59:5a:26:41:38:f7:fd:d7:
                    5c:a9:d0:ab:32:ab:10:65:15:04:18:7c:b5:1b:b2:
                    dc:be:89:b5:78:87:57:e5:f5:0e:16:cc:ca:2e:8f:
                    77:bb:0a:e8:ef:38:cd:20:e2:e3:34:33:0a:c1:48:
                    06:7e:45:10:19:06:01:dc:c6:85:d4:f3:88:b5:fe:
                    18:f1:bd:f5:a8:bb:e5:c7:ef:3b:f4:05:44:c1:d0:
                    29:78:4f:dc:30:89:e7:9c:95:b3:c3:5d:ed:6f:b3:
                    73:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F9:BA:A0:97:8B:E7:B9:F4:8C:3E:90:BE:20:FE:46:02:BC:CC:3B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/508AAFBA4E8D11F1930B80F7B5833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.123.240.0/22
                  43.230.148.0/22
                  43.247.40.0/22
                  43.248.152.0/22
                  43.248.240.0/22
                  43.251.92.0/22
                  45.120.160.0/22
                  45.248.0.0/22
                  45.248.172.0/22
                  103.16.28.0/22
                  103.28.252.0/22
                  103.40.200.0/22
                  103.43.32.0/22
                  103.55.60.0/22
                  103.68.20.0/22
                  103.68.140.0/23
                  103.69.24.0/22
                  103.69.244.0/22
                  103.70.80.0/22
                  103.91.73.0-103.91.74.255
                  103.94.83.0/24
                  103.100.4.0/22
                  103.102.147.0/24
                  103.103.55.0/24
                  103.105.96.0/24
                  103.106.28.0/22
                  103.124.120.0/23
                  103.153.12.0/24
                  103.154.8.0/23
                  103.158.90.0/23
                  103.164.141.0/24
                  103.165.88.0/23
                  103.165.102.0/23
                  103.167.154.0/23
                  103.167.182.0/23
                  103.167.224.0/23
                  103.167.238.0/23
                  103.168.60.0/23
                  103.169.242.0/23
                  103.170.38.0/23
                  103.170.52.0/23
                  103.170.84.0/23
                  103.183.86.0/23
                  103.190.8.0/23
                  103.192.64.0/24
                  103.192.66.0/23
                  103.198.172.0/22
                  103.216.140.0/22
                  103.217.132.0/22
                  103.224.144.0/22
                  103.225.188.0/22
                  103.226.88.0/22
                  103.243.52.0/23
                  103.248.92.0/22
                  103.248.172.0/22
                  119.42.56.0/22
                  157.119.80.0/22
                  163.53.84.0/22
                  180.149.225.0-180.149.227.255
                IPv6:
                  2001:df3:6ec0::/48
                  2405:e100:d::-2405:e100:e:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         93:88:5f:41:cf:7e:81:5a:22:b2:2f:28:9f:7e:be:5d:5e:b8:
         2e:26:36:d6:68:0e:0b:46:20:85:1e:e5:03:b9:5d:42:6d:f5:
         50:61:e2:38:47:78:f1:81:56:82:7e:97:70:5b:cd:fa:43:be:
         70:9e:37:1b:33:3d:75:34:c8:27:90:32:0f:c3:59:a4:48:e4:
         6c:62:58:47:a3:b0:a3:0b:67:f6:6b:06:00:b3:7b:64:f1:3c:
         14:ec:f7:28:cf:de:aa:dc:3f:c2:51:08:b9:28:ae:9c:ac:e9:
         c7:cd:f3:02:21:5e:e3:e9:a3:7a:96:61:3f:fe:05:4f:96:55:
         4a:a1:55:f0:54:72:e2:96:e3:7f:07:c5:5d:4f:95:0f:39:4b:
         89:ac:df:af:a2:65:aa:4c:22:af:18:ea:05:9d:12:d8:fb:eb:
         f7:41:b4:6d:37:c1:ac:c3:29:d3:57:d9:78:f8:e7:b3:71:9d:
         26:6f:68:e9:1e:93:9f:39:26:d4:5b:3c:56:4a:36:bf:45:7f:
         8f:6e:b1:e8:1c:4f:3a:18:c4:eb:35:c0:9f:63:3c:3a:cc:32:
         b9:06:ca:9e:0c:af:02:b0:da:03:d8:10:a9:60:96:bd:0f:b2:
         b6:8f:98:d3:19:c7:2c:94:1e:ee:96:50:83:cd:ec:7c:43:e1:
         e3:67:e5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:54:54 2026 by rpki-client