Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/6235F9AE608811EE8CF04685C4F9AE02.roa
File:                     6235F9AE608811EE8CF04685C4F9AE02.roa (raw, json)
Hash identifier:          oT3YjF9bxWW/L4KcfgV0EGPbcjwm+dX4LQv4I3baknI=
Subject key identifier:   D1:B3:5D:B3:30:18:96:5D:E4:74:04:FE:A5:B0:5E:88:0D:B1:7B:43
Certificate issuer:       /CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
Certificate serial:       BC
Authority key identifier: 7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/6235F9AE608811EE8CF04685C4F9AE02.roa
Signing time:             Wed 15 May 2024 06:40:55 +0000
ROA not before:           Wed 15 May 2024 06:40:55 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     151201
IP address blocks:        103.69.56.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 01 Jun 2024 11:56:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116190/serialNumber=7B3A6BDED2F7B4C0584568C064AB8034328723A0
        Validity
            Not Before: May 15 06:40:55 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=664458f7-6a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:14:ab:57:a3:fd:ed:d4:36:57:87:d0:de:11:
                    44:b7:76:dc:f3:c1:86:51:0c:f2:b4:c0:0a:2a:bc:
                    18:b9:37:b4:5f:9b:96:3a:29:ef:3e:c4:7a:df:11:
                    1b:18:d1:4b:87:2a:87:61:1f:4a:5c:a8:c8:ed:ee:
                    43:a2:b1:94:f6:bd:b1:5b:0f:25:43:02:a6:a3:93:
                    c3:e7:f2:e9:f3:45:4d:8b:0c:e7:0d:bc:1f:3c:97:
                    d3:88:43:1b:72:63:f3:59:aa:45:c5:23:55:72:20:
                    f3:c8:93:b6:df:52:6e:85:9a:fe:7a:60:ec:b4:ec:
                    86:a6:5b:76:07:a5:c6:f8:cd:bd:1e:40:b8:46:41:
                    da:09:ee:e6:04:e6:b0:1f:84:23:31:56:3f:d8:69:
                    43:6a:ff:f9:5b:9a:5b:de:34:c1:03:4c:15:de:a2:
                    48:e6:d9:8f:74:5f:b7:52:56:2f:f5:b6:c1:74:e0:
                    31:be:59:11:02:ba:d5:72:83:4a:63:d3:f1:ef:9f:
                    da:dc:0b:51:61:ba:92:e2:5f:e4:b0:b3:42:1a:df:
                    2b:64:21:7e:1e:0f:4d:e0:60:37:65:9c:92:b0:86:
                    ff:f6:08:c2:28:4c:9d:74:67:04:51:d9:03:0c:ba:
                    38:01:f8:56:77:1c:be:59:55:7c:e6:05:14:0c:23:
                    af:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B3:5D:B3:30:18:96:5D:E4:74:04:FE:A5:B0:5E:88:0D:B1:7B:43
            X509v3 Authority Key Identifier:
                keyid:7B:3A:6B:DE:D2:F7:B4:C0:58:45:68:C0:64:AB:80:34:32:87:23:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/ezpr3tL3tMBYRWjAZKuANDKHI6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ezpr3tL3tMBYRWjAZKuANDKHI6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116190/0BB39652049611EEBD31ED30C4F9AE02/6235F9AE608811EE8CF04685C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:39:9d:93:6e:ab:1c:bc:68:5d:3c:40:25:ba:67:0c:c1:8b:
         c2:79:83:e2:7e:af:c1:12:54:4b:7e:6e:07:c6:bc:47:54:9e:
         b6:a6:47:43:a6:c1:ff:29:d8:81:c7:5e:f6:ed:c5:4c:ae:10:
         ef:66:ea:ee:09:a5:eb:a8:00:11:72:71:bc:0a:ec:bd:7d:ef:
         cb:ab:51:71:ea:b3:14:1e:93:fd:0a:a8:69:66:d7:0f:1a:ba:
         63:1c:1d:81:a5:a3:69:02:c4:9b:59:c2:6d:60:cb:92:2f:15:
         7a:1d:e4:5d:8e:65:7a:2a:45:15:14:31:e1:16:b4:c5:da:e1:
         6a:cf:10:5c:ff:3b:76:e3:fd:86:e2:b3:4c:73:7a:a9:b5:6d:
         24:93:70:e7:6d:b8:77:fe:64:e7:c4:29:5b:a0:ff:96:f1:02:
         12:25:28:89:f1:98:c2:67:0a:de:78:96:3f:69:8f:f0:f2:c5:
         0a:0d:fc:a5:53:3f:46:69:c5:2f:39:af:8c:ae:f5:a2:a6:30:
         7a:2c:f2:92:91:ed:3e:80:49:78:15:b9:e6:f5:48:cf:60:e0:
         c7:d7:2d:5f:40:7e:ff:7f:a1:9c:e0:85:db:5c:03:4f:1c:a0:
         c3:f2:09:4e:75:83:a3:68:c9:3b:9c:e7:0a:27:97:3a:bf:9a:
         d5:1d:70:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:56:21 2024 by rpki-client on console-fra.rpki-client.org