Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/46728D666E2711EE98435F74C4F9AE02.roa
File:                     46728D666E2711EE98435F74C4F9AE02.roa (raw, json)
Hash identifier:          SXUqWrQMKZf9iQo7I+y4W4/EmTRlV9wPFsh4AqaSHUE=
Subject key identifier:   8A:3E:25:C9:2E:04:8E:A3:B3:1D:42:52:7D:C7:AE:8C:B7:34:35:C2
Certificate issuer:       /CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
Certificate serial:       3363
Authority key identifier: 86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/46728D666E2711EE98435F74C4F9AE02.roa
Signing time:             Thu 19 Oct 2023 02:29:06 +0000
ROA not before:           Thu 19 Oct 2023 02:29:06 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     7540
IP address blocks:        117.18.96.0/24 maxlen: 24
                          117.18.98.0/24 maxlen: 24
                          117.18.101.0/24 maxlen: 24
                          117.18.102.0/24 maxlen: 24
                          117.18.103.0/24 maxlen: 24
                          117.18.104.0/24 maxlen: 24
                          117.18.105.0/24 maxlen: 24
                          117.18.106.0/24 maxlen: 24
                          117.18.107.0/24 maxlen: 24
                          117.18.108.0/24 maxlen: 24
                          117.18.110.0/24 maxlen: 24
                          117.18.112.0/24 maxlen: 24
                          117.18.113.0/24 maxlen: 24
                          117.18.114.0/24 maxlen: 24
                          117.18.115.0/24 maxlen: 24
                          117.18.116.0/24 maxlen: 24
                          117.18.119.0/24 maxlen: 24
                          117.18.120.0/24 maxlen: 24
                          117.18.121.0/24 maxlen: 24
                          117.18.124.0/24 maxlen: 24
                          117.18.125.0/24 maxlen: 24
                          117.18.126.0/24 maxlen: 24
                          202.181.137.0/24 maxlen: 24
                          202.181.138.0/24 maxlen: 24
                          202.181.139.0/24 maxlen: 24
                          202.181.140.0/24 maxlen: 24
                          202.181.141.0/24 maxlen: 24
                          202.181.142.0/24 maxlen: 24
                          202.181.143.0/24 maxlen: 24
                          202.181.148.0/24 maxlen: 24
                          202.181.150.0/24 maxlen: 24
                          202.181.151.0/24 maxlen: 24
                          202.181.152.0/24 maxlen: 24
                          202.181.153.0/24 maxlen: 24
                          202.181.154.0/24 maxlen: 24
                          202.181.156.0/24 maxlen: 24
                          202.181.157.0/24 maxlen: 24
                          202.181.158.0/24 maxlen: 24
                          202.181.159.0/24 maxlen: 24
                          202.181.160.0/24 maxlen: 24
                          202.181.161.0/24 maxlen: 24
                          202.181.162.0/24 maxlen: 24
                          202.181.163.0/24 maxlen: 24
                          202.181.164.0/24 maxlen: 24
                          202.181.165.0/24 maxlen: 24
                          202.181.166.0/24 maxlen: 24
                          202.181.167.0/24 maxlen: 24
                          202.181.168.0/24 maxlen: 24
                          202.181.169.0/24 maxlen: 24
                          202.181.170.0/24 maxlen: 24
                          202.181.171.0/24 maxlen: 24
                          202.181.172.0/24 maxlen: 24
                          202.181.173.0/24 maxlen: 24
                          202.181.174.0/24 maxlen: 24
                          202.181.175.0/24 maxlen: 24
                          202.181.176.0/24 maxlen: 24
                          202.181.177.0/24 maxlen: 24
                          202.181.178.0/24 maxlen: 24
                          202.181.179.0/24 maxlen: 24
                          202.181.180.0/24 maxlen: 24
                          202.181.181.0/24 maxlen: 24
                          202.181.182.0/24 maxlen: 24
                          202.181.183.0/24 maxlen: 24
                          202.181.184.0/24 maxlen: 24
                          202.181.185.0/24 maxlen: 24
                          202.181.186.0/24 maxlen: 24
                          202.181.187.0/24 maxlen: 24
                          202.181.188.0/24 maxlen: 24
                          202.181.189.0/24 maxlen: 24
                          202.181.190.0/24 maxlen: 24
                          202.181.191.0/24 maxlen: 24
                          202.181.192.0/24 maxlen: 24
                          202.181.193.0/24 maxlen: 24
                          202.181.194.0/24 maxlen: 24
                          202.181.195.0/24 maxlen: 24
                          202.181.196.0/24 maxlen: 24
                          202.181.197.0/24 maxlen: 24
                          202.181.198.0/24 maxlen: 24
                          202.181.199.0/24 maxlen: 24
                          202.181.200.0/24 maxlen: 24
                          202.181.201.0/24 maxlen: 24
                          202.181.202.0/24 maxlen: 24
                          202.181.203.0/24 maxlen: 24
                          202.181.204.0/24 maxlen: 24
                          202.181.205.0/24 maxlen: 24
                          202.181.206.0/24 maxlen: 24
                          202.181.207.0/24 maxlen: 24
                          202.181.208.0/24 maxlen: 24
                          202.181.209.0/24 maxlen: 24
                          202.181.210.0/24 maxlen: 24
                          202.181.211.0/24 maxlen: 24
                          202.181.212.0/24 maxlen: 24
                          202.181.213.0/24 maxlen: 24
                          202.181.214.0/24 maxlen: 24
                          202.181.215.0/24 maxlen: 24
                          202.181.216.0/24 maxlen: 24
                          202.181.217.0/24 maxlen: 24
                          202.181.219.0/24 maxlen: 24
                          202.181.220.0/24 maxlen: 24
                          202.181.221.0/24 maxlen: 24
                          202.181.222.0/24 maxlen: 24
                          202.181.223.0/24 maxlen: 24
                          202.181.224.0/24 maxlen: 24
                          202.181.225.0/24 maxlen: 24
                          202.181.226.0/24 maxlen: 24
                          202.181.227.0/24 maxlen: 24
                          202.181.228.0/24 maxlen: 24
                          202.181.229.0/24 maxlen: 24
                          202.181.230.0/24 maxlen: 24
                          202.181.231.0/24 maxlen: 24
                          202.181.233.0/24 maxlen: 24
                          202.181.234.0/24 maxlen: 24
                          202.181.235.0/24 maxlen: 24
                          202.181.236.0/24 maxlen: 24
                          202.181.237.0/24 maxlen: 24
                          202.181.238.0/24 maxlen: 24
                          202.181.239.0/24 maxlen: 24
                          202.181.240.0/24 maxlen: 24
                          202.181.241.0/24 maxlen: 24
                          202.181.242.0/24 maxlen: 24
                          202.181.243.0/24 maxlen: 24
                          202.181.244.0/24 maxlen: 24
                          202.181.245.0/24 maxlen: 24
                          202.181.246.0/24 maxlen: 24
                          202.181.247.0/24 maxlen: 24
                          202.181.248.0/23 maxlen: 24
                          2405:5d00::/64 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13155 (0x3363)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
        Validity
            Not Before: Oct 19 02:29:06 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=65309472-ffd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0f:1c:4c:b8:43:50:18:f0:c7:90:e2:15:04:
                    1c:6b:3a:b5:d6:0d:6f:23:12:19:13:98:3f:5b:07:
                    5f:e9:c7:b2:b0:61:df:0d:e8:90:13:dd:f0:14:28:
                    7a:79:a3:af:c8:d4:99:35:19:79:a7:cc:57:45:28:
                    09:f5:08:37:db:7c:f4:36:fc:8f:fd:ca:61:09:2a:
                    4a:cc:9e:bf:62:5b:e0:ef:ea:e2:f8:a7:23:da:8f:
                    3f:87:14:b8:d0:ab:36:d9:1c:49:c3:19:9a:08:f9:
                    32:78:65:be:9b:bb:eb:4a:97:ee:fc:04:58:44:d2:
                    9f:36:c3:a4:80:66:52:6f:f1:41:95:08:5a:7d:74:
                    89:11:e7:ed:4d:e9:22:89:f6:95:6f:88:49:d4:72:
                    f5:4f:25:4d:7e:96:22:d6:e0:fc:c4:60:48:41:c9:
                    02:7b:2c:8b:c3:39:66:be:2f:f0:aa:be:06:57:ac:
                    e2:34:83:dc:4e:42:83:b6:ee:27:4b:95:92:35:10:
                    c7:e3:4d:be:69:bc:93:1b:38:4c:c4:9b:42:08:ce:
                    c2:20:00:6b:b4:25:49:a3:54:4c:fd:d0:8f:4c:a4:
                    b5:2b:93:a7:d8:7a:e7:d6:6b:f2:0d:a8:a0:f6:be:
                    a7:0d:f1:c9:2c:3b:05:9f:7b:dd:70:6a:35:3d:47:
                    6f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3E:25:C9:2E:04:8E:A3:B3:1D:42:52:7D:C7:AE:8C:B7:34:35:C2
            X509v3 Authority Key Identifier:
                keyid:86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/46728D666E2711EE98435F74C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.18.96.0/24
                  117.18.98.0/24
                  117.18.101.0-117.18.108.255
                  117.18.110.0/24
                  117.18.112.0-117.18.116.255
                  117.18.119.0-117.18.121.255
                  117.18.124.0-117.18.126.255
                  202.181.137.0-202.181.143.255
                  202.181.148.0/24
                  202.181.150.0-202.181.154.255
                  202.181.156.0-202.181.217.255
                  202.181.219.0-202.181.231.255
                  202.181.233.0-202.181.249.255
                IPv6:
                  2405:5d00::/64

    Signature Algorithm: sha256WithRSAEncryption
         23:7d:8c:a3:be:02:4c:49:7e:a8:5a:eb:f1:dc:bc:0e:fc:d1:
         71:83:0d:e9:3e:3d:3f:90:90:c7:6b:0e:c1:1b:24:58:b3:96:
         ce:4d:05:a2:16:91:a8:6d:02:c6:64:77:5a:4d:8d:3a:73:4f:
         eb:cb:23:4d:0b:28:d7:86:fb:4f:d5:28:8e:d0:57:28:83:7c:
         5c:2e:b5:b3:94:6c:3f:67:08:96:96:da:2f:e2:19:6c:5c:06:
         92:9b:b3:67:2d:a7:8b:52:3b:05:c7:cc:9b:18:c2:4a:48:19:
         aa:f2:50:c1:8f:e0:2c:c6:b2:9c:4f:e5:f8:d6:59:04:b7:e9:
         5c:82:fb:ae:35:d6:05:d5:be:d4:32:31:fa:b2:47:99:41:69:
         15:95:6e:4a:d6:72:02:8c:b2:02:25:89:b5:54:a8:dd:0a:34:
         40:f0:d2:5f:72:68:9f:74:4b:9c:9b:a4:70:fb:6d:f1:35:10:
         12:6f:16:2c:0a:69:40:c2:21:0d:a2:f9:00:59:4e:a7:fb:4c:
         4a:01:74:a1:53:37:f5:ee:4a:3b:16:7a:ab:c5:18:9c:21:0e:
         99:9e:20:56:c8:10:59:6d:3d:4d:1e:63:fa:8b:ce:3d:5d:1d:
         38:73:68:06:58:d4:8d:b4:ba:b9:f4:ba:d6:51:c3:f9:9d:4c:
         ef:b5:1e:dc
-----BEGIN CERTIFICATE-----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Generated at Mon Nov 13 01:09:02 2023 by rpki-client on console-fra.rpki-client.org