Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/49CFE34A29C511F0BA705435C4F9AE02.roa
File:                     49CFE34A29C511F0BA705435C4F9AE02.roa (raw, json)
Hash identifier:          Dcs7C3XuglA8QVQ3LyekAG8T3jwyxZuMYLn4WvoYtRE=
Subject key identifier:   3D:80:26:E3:6E:CA:46:C3:42:01:5F:CE:AD:C4:C4:ED:28:30:D1:DC
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       26AA
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/49CFE34A29C511F0BA705435C4F9AE02.roa
Signing time:             Mon 05 May 2025 15:26:17 +0000
ROA not before:           Mon 05 May 2025 15:26:17 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     138241
IP address blocks:        103.11.63.0/24 maxlen: 24
                          103.151.26.0/24 maxlen: 24
                          103.151.27.0/24 maxlen: 24
                          113.203.208.0/24 maxlen: 24
                          113.203.209.0/24 maxlen: 24
                          113.203.210.0/24 maxlen: 24
                          113.203.211.0/24 maxlen: 24
                          113.203.212.0/24 maxlen: 24
                          113.203.213.0/24 maxlen: 24
                          113.203.214.0/24 maxlen: 24
                          113.203.215.0/24 maxlen: 24
                          113.203.216.0/24 maxlen: 24
                          113.203.217.0/24 maxlen: 24
                          113.203.218.0/24 maxlen: 24
                          113.203.219.0/24 maxlen: 24
                          113.203.220.0/24 maxlen: 24
                          113.203.222.0/24 maxlen: 24
                          113.203.223.0/24 maxlen: 24
                          113.203.225.0/24 maxlen: 24
                          113.203.226.0/24 maxlen: 24
                          113.203.227.0/24 maxlen: 24
                          113.203.228.0/24 maxlen: 24
                          113.203.229.0/24 maxlen: 24
                          113.203.230.0/24 maxlen: 24
                          113.203.231.0/24 maxlen: 24
                          113.203.233.0/24 maxlen: 24
                          113.203.241.0/24 maxlen: 24
                          113.203.242.0/24 maxlen: 24
                          113.203.243.0/24 maxlen: 24
                          113.203.244.0/24 maxlen: 24
                          113.203.245.0/24 maxlen: 24
                          113.203.246.0/24 maxlen: 24
                          113.203.248.0/24 maxlen: 24
                          113.203.252.0/24 maxlen: 24
                          113.203.253.0/24 maxlen: 24
                          113.203.254.0/24 maxlen: 24
                          113.203.255.0/24 maxlen: 24
                          115.167.2.0/24 maxlen: 24
                          115.167.6.0/24 maxlen: 24
                          115.167.15.0/24 maxlen: 24
                          115.167.16.0/22 maxlen: 24
                          115.167.20.0/22 maxlen: 24
                          115.167.28.0/24 maxlen: 24
                          115.167.29.0/24 maxlen: 24
                          115.167.30.0/24 maxlen: 24
                          115.167.31.0/24 maxlen: 24
                          115.167.48.0/24 maxlen: 24
                          115.167.50.0/24 maxlen: 24
                          115.167.61.0/24 maxlen: 24
                          115.167.64.0/24 maxlen: 24
                          115.167.77.0/24 maxlen: 24
                          115.167.96.0/22 maxlen: 24
                          115.167.101.0/24 maxlen: 24
                          115.167.102.0/24 maxlen: 24
                          115.167.103.0/24 maxlen: 24
                          115.167.112.0/22 maxlen: 24
                          115.167.116.0/24 maxlen: 24
                          115.167.118.0/24 maxlen: 24
                          115.167.119.0/24 maxlen: 24
                          115.167.120.0/24 maxlen: 24
                          115.167.121.0/24 maxlen: 24
                          115.167.123.0/24 maxlen: 24
                          115.167.125.0/24 maxlen: 24
                          175.110.64.0/22 maxlen: 24
                          175.110.81.0/24 maxlen: 24
                          175.110.82.0/24 maxlen: 24
                          175.110.83.0/24 maxlen: 24
                          175.110.90.0/24 maxlen: 24
                          175.110.91.0/24 maxlen: 24
                          175.110.97.0/24 maxlen: 24
                          175.110.98.0/24 maxlen: 24
                          175.110.99.0/24 maxlen: 24
                          175.110.101.0/24 maxlen: 24
                          175.110.102.0/24 maxlen: 24
                          175.110.103.0/24 maxlen: 24
                          175.110.104.0/24 maxlen: 24
                          175.110.105.0/24 maxlen: 24
                          175.110.106.0/24 maxlen: 24
                          175.110.107.0/24 maxlen: 24
                          175.110.108.0/24 maxlen: 24
                          175.110.109.0/24 maxlen: 24
                          175.110.110.0/24 maxlen: 24
                          175.110.111.0/24 maxlen: 24
                          180.178.142.0/24 maxlen: 24
                          180.178.144.0/24 maxlen: 24
                          180.178.146.0/24 maxlen: 24
                          180.178.147.0/24 maxlen: 24
                          180.178.148.0/24 maxlen: 24
                          180.178.149.0/24 maxlen: 24
                          180.178.150.0/24 maxlen: 24
                          180.178.152.0/22 maxlen: 24
                          180.178.160.0/24 maxlen: 24
                          180.178.161.0/24 maxlen: 24
                          180.178.162.0/24 maxlen: 24
                          180.178.163.0/24 maxlen: 24
                          180.178.164.0/24 maxlen: 24
                          180.178.165.0/24 maxlen: 24
                          180.178.166.0/24 maxlen: 24
                          180.178.167.0/24 maxlen: 24
                          180.178.168.0/24 maxlen: 24
                          180.178.169.0/24 maxlen: 24
                          180.178.170.0/24 maxlen: 24
                          180.178.171.0/24 maxlen: 24
                          180.178.176.0/22 maxlen: 22
                          180.178.180.0/24 maxlen: 24
                          180.178.181.0/24 maxlen: 24
                          180.178.182.0/24 maxlen: 24
                          180.178.183.0/24 maxlen: 24
                          180.178.184.0/22 maxlen: 22
                          180.178.185.0/24 maxlen: 24
                          180.178.186.0/24 maxlen: 24
                          180.178.187.0/24 maxlen: 24
                          180.178.188.0/24 maxlen: 24
                          180.178.190.0/24 maxlen: 24
                          180.178.191.0/24 maxlen: 24
                          202.92.18.0/24 maxlen: 24
                          202.92.20.0/24 maxlen: 24
                          202.92.26.0/24 maxlen: 24
                          223.29.225.0/24 maxlen: 24
                          223.29.226.0/24 maxlen: 24
                          223.29.228.0/24 maxlen: 24
                          223.29.229.0/24 maxlen: 24
                          223.29.230.0/24 maxlen: 24
                          223.29.231.0/24 maxlen: 24
                          223.29.236.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 06 May 2025 03:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9898 (0x26aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May  5 15:26:17 2025 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=6818d899-b6f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d5:75:a4:fc:b9:5f:cd:33:84:2d:af:cb:cd:
                    77:8c:47:25:0a:99:ce:d6:68:63:6d:2b:40:36:ae:
                    12:41:d0:df:69:1c:0d:93:d4:09:c0:43:f2:ce:b8:
                    a9:7c:53:21:29:a3:fe:20:c1:68:d1:ca:43:2b:c1:
                    4c:ea:49:35:6d:fe:5e:74:cd:55:9c:17:3c:48:e2:
                    1f:2c:47:54:ab:b4:0d:69:8a:b5:92:46:34:5c:2b:
                    6f:ca:5b:5e:7c:9f:a5:df:18:2c:7f:a4:1d:71:7d:
                    93:4f:de:78:a5:6c:32:6a:21:70:86:22:e0:b4:12:
                    14:c0:05:bd:1a:05:c1:e7:9e:ae:5d:71:07:b3:f1:
                    d8:22:30:76:40:77:ae:70:17:4e:20:8d:60:9f:48:
                    dd:af:5d:44:f8:9a:a1:5a:f3:92:20:09:29:79:e1:
                    2b:83:60:c0:83:0b:59:0b:1a:b9:8b:be:c9:12:ed:
                    7d:30:03:0a:d2:37:de:31:1e:e1:ab:ed:e9:2e:76:
                    72:c1:cb:2d:4f:4c:1b:0b:76:2e:fa:c5:5b:ee:da:
                    ae:08:ce:49:97:31:d3:bb:ad:63:f4:5a:4b:8e:24:
                    3f:e0:5e:58:cc:b0:3f:96:96:12:0c:c1:0f:e0:46:
                    10:36:2a:7c:bb:52:a3:ca:6e:e0:2a:b7:71:06:b7:
                    8d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:80:26:E3:6E:CA:46:C3:42:01:5F:CE:AD:C4:C4:ED:28:30:D1:DC
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/49CFE34A29C511F0BA705435C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.63.0/24
                  103.151.26.0/23
                  113.203.208.0-113.203.220.255
                  113.203.222.0/23
                  113.203.225.0-113.203.231.255
                  113.203.233.0/24
                  113.203.241.0-113.203.246.255
                  113.203.248.0/24
                  113.203.252.0/22
                  115.167.2.0/24
                  115.167.6.0/24
                  115.167.15.0-115.167.23.255
                  115.167.28.0/22
                  115.167.48.0/24
                  115.167.50.0/24
                  115.167.61.0/24
                  115.167.64.0/24
                  115.167.77.0/24
                  115.167.96.0/22
                  115.167.101.0-115.167.103.255
                  115.167.112.0-115.167.116.255
                  115.167.118.0-115.167.121.255
                  115.167.123.0/24
                  115.167.125.0/24
                  175.110.64.0/22
                  175.110.81.0-175.110.83.255
                  175.110.90.0/23
                  175.110.97.0-175.110.99.255
                  175.110.101.0-175.110.111.255
                  180.178.142.0/24
                  180.178.144.0/24
                  180.178.146.0-180.178.150.255
                  180.178.152.0/22
                  180.178.160.0-180.178.171.255
                  180.178.176.0-180.178.188.255
                  180.178.190.0/23
                  202.92.18.0/24
                  202.92.20.0/24
                  202.92.26.0/24
                  223.29.225.0-223.29.226.255
                  223.29.228.0/22
                  223.29.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:f0:70:4c:a1:5c:98:85:db:68:0c:71:05:82:94:95:25:26:
         b8:81:8f:5a:42:3e:6c:64:e2:f9:98:03:3b:eb:af:d0:86:90:
         75:09:62:c9:40:99:38:b6:9d:66:57:f7:b4:66:8f:13:1f:35:
         95:30:85:fc:15:39:d4:8f:f9:ed:b5:1f:71:cf:06:01:57:8e:
         c4:e2:0e:fb:86:32:89:a2:7f:b6:14:84:79:f9:7c:73:db:a2:
         62:e9:01:ed:48:dc:58:79:11:aa:8d:cc:3a:16:51:64:62:9d:
         10:4b:3d:62:87:d0:00:37:2b:30:71:96:f1:0f:3a:b4:e7:a1:
         2e:4e:27:b3:e5:1b:e3:90:f3:cf:1e:52:0c:71:a7:9e:43:97:
         77:42:a7:46:66:d6:40:24:5e:1e:14:29:c0:ed:96:27:c1:c5:
         61:e8:4f:55:83:68:2f:a6:e3:ea:f1:ac:8e:c2:2b:e9:66:35:
         26:e8:9b:e2:fc:2c:03:3d:a2:3f:20:48:ac:54:c1:06:19:90:
         70:b1:0b:98:3b:2e:73:27:ad:ba:e0:12:74:bf:8f:cf:cf:b4:
         55:d5:10:2a:46:b4:d6:7d:87:20:1d:90:4a:5f:53:5c:94:c9:
         f5:e4:4c:a1:01:32:92:c3:bb:86:ac:67:d1:07:fe:76:4c:85:
         1a:6d:c5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:53:23 2025 by rpki-client