Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/07756D907BE711EEA2370F69C4F9AE02.roa
File:                     07756D907BE711EEA2370F69C4F9AE02.roa (raw, json)
Hash identifier:          OIdu5GTOIKyXblmYaWauLJj4oru9rOP0XZY4qGDcBtk=
Subject key identifier:   9D:68:37:64:97:88:B4:C3:E7:7D:F2:04:3C:10:81:B7:A7:89:98:C0
Certificate issuer:       /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Certificate serial:       68
Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/07756D907BE711EEA2370F69C4F9AE02.roa
Signing time:             Sun 05 Nov 2023 14:24:29 +0000
ROA not before:           Sun 05 Nov 2023 14:24:29 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     150368
IP address blocks:        2401:3fa0:100::/44 maxlen: 44

Validation:               Failed, certificate revoked on Tue 30 Jan 2024 13:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
        Validity
            Not Before: Nov  5 14:24:29 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=6547a59d-2ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:92:6c:89:66:ef:24:26:eb:ea:d9:fc:8f:e4:
                    dd:af:68:05:ec:3a:19:b6:b9:f7:b6:cd:bc:68:6d:
                    a2:a6:76:aa:31:41:74:ea:68:0e:7d:75:43:78:16:
                    3c:93:86:7e:a7:c9:2a:54:d0:c7:b0:24:72:0f:bb:
                    19:e5:9b:62:bf:d4:e9:1d:7e:9a:2e:ff:bd:20:f6:
                    b8:d3:c3:d9:a0:14:a6:a5:43:b6:a3:7b:24:18:23:
                    43:4b:e9:4e:5f:85:07:29:b4:a1:37:13:b2:b1:4a:
                    5e:ca:fa:5b:f7:97:1f:f2:02:46:2f:29:ac:96:ee:
                    9b:42:9a:fa:89:ae:61:52:58:8f:eb:c0:17:20:be:
                    6c:c4:aa:fd:93:73:df:be:b3:8c:33:2d:83:1d:d2:
                    ee:29:38:d2:c6:46:cc:1a:59:4f:19:fb:31:af:b4:
                    ab:52:5d:d5:1e:69:9d:ce:8f:a7:0c:d5:ac:df:52:
                    aa:8e:09:1f:c7:bc:b3:3e:6a:8f:f9:5c:a7:d8:c3:
                    53:22:9f:b2:cb:cf:88:ef:c9:60:7e:13:57:dc:97:
                    95:ba:66:79:16:92:9a:83:2d:54:2d:57:8c:aa:79:
                    ec:12:a1:f2:94:0c:b6:bd:16:cd:1c:2f:6e:52:e8:
                    91:d8:b5:b8:05:bf:dc:c1:94:94:93:a7:82:a8:1b:
                    d0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:68:37:64:97:88:B4:C3:E7:7D:F2:04:3C:10:81:B7:A7:89:98:C0
            X509v3 Authority Key Identifier:
                keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/07756D907BE711EEA2370F69C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3fa0:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         20:77:ae:0a:45:fc:8b:05:e1:f5:18:f9:4f:81:4e:03:38:89:
         24:bc:a2:9a:30:c3:2a:69:69:eb:05:85:0a:20:68:d0:90:d7:
         82:9d:96:7d:99:bf:37:ac:89:3f:61:dd:e6:55:3b:8b:f8:a3:
         48:bf:23:c8:4f:5f:2d:2d:1c:b8:f5:a5:29:fc:cc:7c:62:77:
         9f:4a:52:16:26:b1:98:1e:d8:4a:66:e9:7d:09:0f:c9:de:84:
         bf:1c:90:3b:30:2c:68:50:54:72:e9:2c:68:9a:ca:4b:50:39:
         21:b5:77:c5:3b:69:6e:1a:96:c0:bf:45:5f:f3:3a:74:f5:2e:
         67:1c:2e:70:04:33:b2:33:fb:5f:27:c6:f0:ad:31:23:c6:61:
         f9:52:13:ac:8d:58:93:31:05:ec:3c:48:33:86:b5:3d:ef:0a:
         2e:83:a7:b7:92:fa:7e:c8:33:ff:87:c8:b2:93:97:dc:e5:76:
         2a:2f:b2:13:eb:d8:db:12:9f:37:67:ab:46:32:cf:f1:1c:ee:
         6f:f2:1f:00:93:eb:e3:49:49:d5:6d:33:71:d8:ba:78:3b:9f:
         02:ad:f4:5b:0e:c9:f3:bd:c8:39:af:3d:53:68:86:a9:9c:e7:
         5c:e4:85:d6:41:63:d7:d9:1b:4c:d8:1e:64:d6:bd:00:56:e7:
         cf:e1:95:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----