Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/B57D1BF0B7D911F1ABD230D06511F970.roa
File:                     B57D1BF0B7D911F1ABD230D06511F970.roa (raw, json)
Hash identifier:          gGgddYYEodXW99t7HD+8Sp1tE5BAsvpzh56qv3di9NI=
Subject key identifier:   A9:56:24:D3:BD:8B:9B:62:0C:C6:A4:FE:A8:78:A1:80:0D:FE:A5:05
Certificate issuer:       /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75
Certificate serial:       030C
Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/B57D1BF0B7D911F1ABD230D06511F970.roa
Signing time:             Thu 24 Sep 2026 05:35:11 +0000
ROA not before:           Thu 24 Sep 2026 05:35:11 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     149021
IP address blocks:        103.176.204.0/23 maxlen: 23
                          103.176.204.0/24 maxlen: 24
                          103.176.205.0/24 maxlen: 24
                          2401:43e0::/32 maxlen: 32
                          2401:43e0::/48 maxlen: 48
                          2401:43e0:1::/48 maxlen: 48
                          2401:43e0:2::/47 maxlen: 47
                          2401:43e0:2::/48 maxlen: 48
                          2401:43e0:4::/46 maxlen: 46
                          2401:43e0:10::/44 maxlen: 44
                          2401:43e0:20::/43 maxlen: 43
                          2401:43e0:40::/42 maxlen: 42
                          2401:43e0:80::/41 maxlen: 41
                          2401:43e0:100::/40 maxlen: 40
                          2401:43e0:200::/39 maxlen: 39
                          2401:43e0:400::/38 maxlen: 38
                          2401:43e0:800::/37 maxlen: 37
                          2401:43e0:1000::/36 maxlen: 36
                          2401:43e0:2000::/35 maxlen: 35
                          2401:43e0:4000::/34 maxlen: 34
                          2401:43e0:8000::/33 maxlen: 33
Validation:               Failed, certificate revoked on Fri 25 Sep 2026 04:50:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 780 (0x30c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECC24, serialNumber=F497D17169276D43C585215C198331C33C225A75
        Validity
            Not Before: Sep 24 05:35:11 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6ab4b68f-0cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:61:59:fa:a4:19:88:2a:7c:b0:3a:42:54:d4:
                    59:96:14:d7:95:6e:1e:43:d2:06:2d:9c:37:eb:96:
                    88:06:74:18:de:1a:54:78:ab:9d:36:f9:d3:a6:d0:
                    ae:30:40:55:15:22:d0:e2:9b:02:90:2c:75:6e:94:
                    1f:31:82:8b:ca:e6:47:c2:49:df:68:41:9a:ca:46:
                    74:1e:5b:c4:75:9b:54:40:e2:e1:2a:30:d8:11:62:
                    bb:db:a9:05:72:c0:0c:7d:f7:e9:d7:ea:44:ce:c1:
                    0f:5f:98:dd:b1:12:7b:f7:02:f1:ad:68:fc:d0:34:
                    1b:5c:1d:17:10:11:e9:ad:40:25:49:df:c8:e0:13:
                    28:c7:af:61:5b:01:33:5c:82:a6:2f:86:d5:fe:f6:
                    ed:8f:1e:fa:41:40:3a:61:a3:3c:d6:04:8e:c2:ee:
                    7b:60:8f:5f:22:5f:fe:29:e4:70:bb:d0:0e:4b:bc:
                    dd:f8:8d:e7:5c:db:85:bf:fb:97:eb:4b:33:69:57:
                    9e:9a:3e:5d:e5:cc:4a:3f:20:d5:af:56:04:57:a1:
                    80:8d:94:46:6b:70:4a:02:16:91:14:39:64:dc:93:
                    71:48:a2:2e:02:a2:bd:1f:fe:40:3c:4d:40:1b:03:
                    c3:ab:d1:a1:5e:83:88:f8:e4:ea:42:0b:90:de:52:
                    8d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:56:24:D3:BD:8B:9B:62:0C:C6:A4:FE:A8:78:A1:80:0D:FE:A5:05
            X509v3 Authority Key Identifier:
                keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/B57D1BF0B7D911F1ABD230D06511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.204.0/23
                IPv6:
                  2401:43e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:a9:2a:f4:52:04:6e:c9:ac:c1:38:7b:c9:f1:fe:3c:be:6f:
         3c:c0:fd:63:d4:6f:a7:2c:3f:58:4b:28:a1:4b:9f:e9:91:b6:
         63:e5:60:3a:b8:53:b7:f3:bd:7d:e2:ef:92:88:fa:72:45:4b:
         e7:6d:ea:dc:44:96:26:93:9f:c9:0a:ca:6c:24:d1:fb:58:71:
         69:c6:fe:15:00:4a:0d:d3:0e:b6:62:5d:c1:44:13:e5:1c:97:
         1a:aa:04:db:4d:3f:f6:a3:36:b5:f9:af:de:09:6a:05:58:ef:
         f7:ca:47:c1:83:e5:ad:30:3a:0a:14:85:1b:f5:be:cb:e1:6c:
         cc:09:c3:de:e5:54:85:05:03:5f:1f:34:ba:4d:96:e8:3e:91:
         01:d7:a2:5a:4c:a8:3f:ae:3b:64:de:f9:85:cf:84:68:17:1b:
         f4:da:b9:45:c7:6c:89:54:a7:ad:d2:50:d9:e3:b0:00:c4:13:
         7e:dd:b4:19:e5:06:d4:3b:c2:d6:7a:84:7f:ff:1b:ed:f4:af:
         21:08:1d:42:2b:39:00:a3:62:df:7c:85:61:c9:25:00:d5:8e:
         d8:65:f6:9f:6c:c2:a7:64:cd:07:85:7b:8c:97:fe:78:d1:aa:
         fc:29:59:92:81:85:e3:3e:49:27:5d:bf:21:bb:3a:0d:0e:9a:
         8d:b5:76:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----