Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/76482C624D1D11F184B3C654BA833773.roa
File:                     76482C624D1D11F184B3C654BA833773.roa (raw, json)
Hash identifier:          p0DTmEbb54lTPxg+re2HeYM1xSl3r2V18W+KXJVPI7M=
Subject key identifier:   5A:71:C3:D9:0D:96:D8:D4:E3:DD:08:0A:06:C1:CE:C5:91:C6:31:1F
Certificate issuer:       /CN=A91E7363/serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3
Certificate serial:       3619
Authority key identifier: A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/76482C624D1D11F184B3C654BA833773.roa
Signing time:             Wed 23 Sep 2026 05:58:18 +0000
ROA not before:           Wed 23 Sep 2026 05:58:18 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     138984
IP address blocks:        112.134.16.0/20 maxlen: 24
                          112.134.56.0/24 maxlen: 24
                          203.96.160.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Wed 23 Sep 2026 06:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13849 (0x3619)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7363, serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3
        Validity
            Not Before: Sep 23 05:58:18 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6ab36a7a-86fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:76:ec:ca:c7:b1:07:47:d6:46:c8:08:12:05:
                    7e:55:14:4c:39:37:03:c3:aa:74:bb:9f:d7:47:42:
                    56:c8:c2:75:8a:fe:90:03:08:27:77:3e:1d:24:5f:
                    79:94:38:72:09:5c:ad:32:84:57:f1:23:de:76:9b:
                    29:77:74:d1:0d:4f:55:db:e0:da:87:34:ad:86:70:
                    df:6a:00:3b:56:5c:e5:8b:05:be:57:57:98:9d:ca:
                    68:63:09:0e:c0:5a:ef:f6:f9:e3:5b:30:39:e5:de:
                    6b:cd:a9:04:07:23:ae:b5:c1:c8:1b:60:b1:33:2e:
                    2f:65:bb:84:37:9d:7c:ac:e0:10:ba:d0:69:29:a4:
                    24:16:9e:95:19:75:0c:5d:45:87:d0:22:53:e4:0e:
                    eb:67:8b:03:1a:dc:ec:85:e3:e2:24:d5:c8:4c:a1:
                    1b:55:f5:ac:42:ac:ea:ea:63:fd:24:7d:96:86:4a:
                    9c:09:ee:a3:95:16:33:97:9e:b0:07:0c:a1:f1:a3:
                    c3:cd:f7:e9:0b:84:b1:ae:4b:22:8d:b3:a3:fd:0e:
                    a0:0c:a2:46:59:9a:b1:29:27:67:84:d9:2d:b7:62:
                    96:9b:98:d3:b3:59:6b:36:39:27:1e:40:58:b4:48:
                    3d:9c:11:9b:d0:55:9f:b8:50:bd:ed:8e:d7:2e:04:
                    3e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:71:C3:D9:0D:96:D8:D4:E3:DD:08:0A:06:C1:CE:C5:91:C6:31:1F
            X509v3 Authority Key Identifier:
                keyid:A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/76482C624D1D11F184B3C654BA833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.134.16.0/20
                  112.134.56.0/24
                  203.96.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:f9:31:6c:72:8a:26:c5:80:e0:3e:27:53:41:ec:08:a5:d0:
         20:ec:d5:01:ac:fa:b8:d4:27:df:81:4c:6d:40:c3:a5:92:36:
         05:90:46:45:c1:c2:b6:66:f8:14:9a:03:1f:7b:18:3c:40:09:
         57:e5:a0:28:49:64:0d:71:12:92:0b:45:d5:4d:91:61:11:5a:
         00:2e:7d:9b:77:96:c7:0a:52:ce:33:b9:b7:64:77:4b:6c:09:
         96:d2:8a:14:9f:3f:dd:22:e8:53:16:8b:30:8a:d4:99:7b:18:
         95:8d:1a:d1:2f:a0:e3:f5:bd:00:90:e5:ee:96:12:f1:4b:31:
         d9:7c:05:f8:b2:0f:b8:2d:4f:9b:d3:28:77:98:ed:9e:a6:14:
         ec:a0:26:6d:ce:2a:37:7e:52:cb:a3:f3:24:f8:95:de:60:48:
         7f:9f:b4:96:94:1c:bc:6c:c1:ad:d5:6b:09:cf:72:62:4d:e4:
         ef:68:56:9a:e5:79:62:a9:70:55:70:6a:4c:13:43:44:77:1d:
         7f:68:1f:f9:6d:68:ff:b7:f6:27:51:7e:38:d4:c0:25:09:54:
         d1:fc:04:cd:85:4f:07:54:62:fd:0c:ea:88:45:a8:16:34:b6:
         1a:f2:ad:c4:fa:a3:c1:71:df:dc:b2:be:5f:f6:d9:2b:d6:04:
         c6:fd:a0:5d
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICNhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTczNjMxMTAvBgNVBAUTKEE4OTdDMDRERTEyRjBBNkY1OUMxQUQxNTA5RjBCMjA5
RkE1NDM4QjMwHhcNMjYwOTIzMDU1ODE4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWIzNmE3YS04NmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvXbsysexB0fWRsgIEgV+VRRMOTcDw6p0u5/XR0JWyMJ1iv6QAwgndz4dJF95
lDhyCVytMoRX8SPedpspd3TRDU9V2+DahzSthnDfagA7VlzliwW+V1eYncpoYwkO
wFrv9vnjWzA55d5rzakEByOutcHIG2CxMy4vZbuEN518rOAQutBpKaQkFp6VGXUM
XUWH0CJT5A7rZ4sDGtzshePiJNXITKEbVfWsQqzq6mP9JH2WhkqcCe6jlRYzl56w
Bwyh8aPDzffpC4SxrksijbOj/Q6gDKJGWZqxKSdnhNktt2KWm5jTs1lrNjknHkBY
tEg9nBGb0FWfuFC97Y7XLgQ+lQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFFpxw9kN
ltjU490ICgbBzsWRxjEfMB8GA1UdIwQYMBaAFKiXwE3hLwpvWcGtFQnwsgn6VDiz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzM2My9GRjhCNEI2QzFE
ODQxMUUyOENEMzNEREIwOEIwMkNEMi9xSmZBVGVFdkNtOVp3YTBWQ2ZDeUNmcFVP
TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FKZkFUZUV2Q205WndhMFZDZkN5Q2ZwVU9MTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTczNjMvRkY4QjRCNkMxRDg0MTFFMjhDRDMzRERCMDhCMDJDRDIvNzY0ODJDNjI0
RDFEMTFGMTg0QjNDNjU0QkE4MzM3NzMucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAATASAwQEcIYQAwQAcIY4AwQCy2CgMA0GCSqGSIb3DQEBCwUAA4IBAQAB+TFs
coomxYDgPidTQewIpdAg7NUBrPq41CffgUxtQMOlkjYFkEZFwcK2ZvgUmgMfexg8
QAlX5aAoSWQNcRKSC0XVTZFhEVoALn2bd5bHClLOM7m3ZHdLbAmW0ooUnz/dIuhT
FoswitSZexiVjRrRL6Dj9b0AkOXulhLxSzHZfAX4sg+4LU+b0yh3mO2ephTsoCZt
zio3flLLo/Mk+JXeYEh/n7SWlBy8bMGt1WsJz3JiTeTvaFaa5XliqXBVcGpME0NE
dx1/aB/5bWj/t/YnUX441MAlCVTR/ATNhU8HVGL9DOqIRagWNLYa8q3E+qPBcd/c
sr5f9tkr1gTG/aBd
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:50:16 2026 by rpki-client