Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/2578D808319C11EEAA55E221C4F9AE02.roa
File:                     2578D808319C11EEAA55E221C4F9AE02.roa (raw, json)
Hash identifier:          GybWXYX6jBMPRGbunVj6TWt+c+nOYhpIx/yYwvmmSaQ=
Subject key identifier:   D5:87:10:EC:AA:5A:6E:6A:81:63:20:CD:0C:36:F9:34:7B:3E:2E:1E
Certificate issuer:       /CN=A913C0C6/serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B
Certificate serial:       0443
Authority key identifier: 00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/2578D808319C11EEAA55E221C4F9AE02.roa
Signing time:             Mon 03 Jun 2024 02:48:22 +0000
ROA not before:           Mon 03 Jun 2024 02:48:22 +0000
ROA not after:            Tue 01 Oct 2024 00:00:00 +0000
asID:                     138521
IP address blocks:        103.127.162.0/23 maxlen: 24
                          2404:2440::/32 maxlen: 32
                          2404:2440:a0a0::/48 maxlen: 48
                          2404:2440:abcd::/48 maxlen: 48
                          2404:2440:b0b0::/48 maxlen: 48
                          2404:2440:beef::/48 maxlen: 48
                          2404:2440:c0c0::/48 maxlen: 48
                          2404:2440:cafe::/48 maxlen: 48
                          2404:2440:d0d0::/48 maxlen: 48
                          2404:2440:dada::/48 maxlen: 48
                          2404:2440:e0e0::/48 maxlen: 48
                          2404:2440:eeee::/48 maxlen: 48
                          2404:2440:f0f0::/48 maxlen: 48
                          2404:2440:face::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 23 Jul 2024 01:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1091 (0x443)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C0C6/serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B
        Validity
            Not Before: Jun  3 02:48:22 2024 GMT
            Not After : Oct  1 00:00:00 2024 GMT
        Subject: CN=665d2ef6-ecb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4b:cc:6c:10:a3:dd:e0:1c:93:e4:07:a6:61:
                    c4:d6:b8:67:c7:a3:29:db:82:88:3e:30:86:15:ed:
                    35:9b:1f:4b:47:da:6f:4f:a4:22:c6:ca:7f:e7:11:
                    49:38:7d:19:b1:6d:24:52:42:c0:c4:f3:c5:5d:48:
                    a5:61:c0:6c:b9:b1:d1:25:31:cf:8e:13:49:a3:f0:
                    f4:b8:21:18:de:a2:c7:1a:4d:e7:c9:7a:50:ba:73:
                    74:6f:f4:6a:c4:57:9c:62:92:6d:21:a5:47:18:c1:
                    0a:15:8a:5b:a2:cb:ee:9c:89:c3:23:39:6a:22:ea:
                    e1:10:98:44:8f:cf:c8:a2:29:a6:8a:d8:01:e2:ba:
                    c2:a6:05:63:f3:15:ac:70:e0:88:bf:cd:8b:c2:4b:
                    28:49:13:55:39:ec:20:cd:44:84:01:3b:c2:8f:bd:
                    f9:e6:be:9f:20:d3:a9:fc:ed:2f:41:9f:27:67:2e:
                    8d:ad:da:52:19:ed:4f:3e:65:56:0e:95:dc:ee:56:
                    35:dc:91:cc:8b:80:c4:1c:78:e2:cf:e5:dc:18:69:
                    b6:e6:a9:ee:50:12:87:29:80:7f:98:4e:d7:23:95:
                    41:62:28:e4:fd:fe:1a:17:95:a4:c8:f9:35:4a:98:
                    a0:ba:47:ae:1d:37:a0:bb:60:31:24:36:55:0f:75:
                    85:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:87:10:EC:AA:5A:6E:6A:81:63:20:CD:0C:36:F9:34:7B:3E:2E:1E
            X509v3 Authority Key Identifier:
                keyid:00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/2578D808319C11EEAA55E221C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.162.0/23
                IPv6:
                  2404:2440::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:12:62:14:e3:05:23:cf:4a:07:80:d5:c8:5f:0c:e9:0f:67:
         d7:bc:e0:54:27:7d:77:bb:99:51:fc:96:f5:80:22:03:ee:16:
         d2:8e:c7:66:4c:78:a7:97:7a:ad:4f:cb:81:2e:39:c9:8b:f9:
         38:d4:3f:91:e8:2b:f4:dc:a4:bb:f7:47:96:18:f5:7f:ab:a0:
         26:eb:e5:21:11:e6:8b:cf:ed:a8:a5:84:bd:4e:47:e7:95:e3:
         40:89:ab:46:19:60:57:f3:12:45:bd:e5:3f:1e:54:6d:0d:fa:
         7f:30:77:af:4b:d6:2b:f2:b1:52:4d:c5:39:07:9f:68:d5:f7:
         75:dc:40:e3:64:72:57:20:11:40:85:1e:ec:06:7e:13:69:42:
         8f:5b:4b:8a:80:53:30:28:c0:04:48:1b:60:fc:e6:8c:eb:b9:
         a1:34:7b:da:69:ec:e7:4f:53:14:a1:26:ea:3e:71:5c:a9:25:
         16:e1:85:6d:c6:05:fa:43:37:ba:a5:e4:de:a6:ff:89:29:ac:
         67:fb:4d:71:39:97:40:53:26:65:26:b3:d9:5a:a4:cb:3d:7e:
         d8:11:75:79:90:18:34:eb:ae:28:9e:72:c6:2b:76:75:c0:13:
         45:2b:b1:64:4e:d2:ad:88:84:bf:0a:83:a1:8b:3c:89:aa:b4:
         88:c8:68:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----