Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/B9F0154E9AE211EB8FD0CE52C4F9AE02.roa
File:                     B9F0154E9AE211EB8FD0CE52C4F9AE02.roa (raw, json)
Hash identifier:          RAlXtCJDTeyCFw4W5NzRmGf4QR8QkXrRMG6eIf87R8Q=
Subject key identifier:   9E:4F:59:50:83:A5:44:B6:ED:CA:38:B7:E5:1D:85:7E:AD:EC:88:3D
Certificate issuer:       /CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Certificate serial:       0625
Authority key identifier: 78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/B9F0154E9AE211EB8FD0CE52C4F9AE02.roa
Signing time:             Tue 18 Jul 2023 22:39:37 +0000
ROA not before:           Tue 18 Jul 2023 22:39:37 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     55799
IP address blocks:        103.42.212.0/23 maxlen: 23
                          103.42.212.0/24 maxlen: 24
                          103.42.213.0/24 maxlen: 24
                          103.42.214.0/24 maxlen: 24
                          103.42.215.0/24 maxlen: 24
                          116.193.157.0/24 maxlen: 24
                          2404:be00::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 20 Nov 2023 19:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1573 (0x625)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
        Validity
            Not Before: Jul 18 22:39:37 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64b714a9-619c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9e:5a:15:99:38:db:50:7d:b4:70:59:4a:00:
                    7c:8d:4f:f0:84:03:b7:80:d5:62:dc:b9:df:e7:53:
                    46:87:d2:76:cc:92:d9:e5:5a:15:8c:f6:ad:44:90:
                    d9:e6:20:53:f6:dd:e5:47:0b:c0:29:cf:0b:a7:7e:
                    f7:f0:c1:60:4f:8c:d3:ba:b6:be:a9:64:47:52:d0:
                    8c:7b:57:98:5f:ee:d7:e1:60:1f:51:dc:51:56:29:
                    36:3a:c5:3f:b7:10:ca:c8:02:7f:24:72:9c:9e:cb:
                    97:36:f8:51:b9:d6:9b:53:80:6c:70:bc:44:ee:6a:
                    2c:dd:12:e5:bc:e8:d6:3d:53:11:49:61:82:d4:6d:
                    7e:03:3c:f1:d9:d5:00:f7:26:8e:9e:55:a1:fd:07:
                    d6:c5:1c:6a:5a:55:64:8d:d3:a4:dc:ba:b4:d7:c5:
                    67:74:6b:b1:ab:f3:0f:3a:44:99:dd:bc:ec:c4:00:
                    1e:0b:05:44:4f:2a:dd:d1:78:36:77:06:bd:40:2f:
                    f7:a4:3f:d6:4f:07:e3:ba:f4:e0:20:75:ee:03:79:
                    fb:99:68:4b:88:da:57:78:ee:ae:86:af:7a:21:0a:
                    ae:01:7a:67:c0:f1:f4:a0:3d:cc:fb:2f:51:81:d4:
                    c7:83:02:29:43:07:44:7a:ca:57:c6:78:9f:6a:ea:
                    5d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4F:59:50:83:A5:44:B6:ED:CA:38:B7:E5:1D:85:7E:AD:EC:88:3D
            X509v3 Authority Key Identifier:
                keyid:78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/B9F0154E9AE211EB8FD0CE52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.212.0/22
                  116.193.157.0/24
                IPv6:
                  2404:be00::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:c7:7b:c4:da:7e:01:66:8a:e0:71:4f:5f:71:b1:ba:1a:02:
         a5:bf:98:87:68:58:f8:58:e8:d8:4d:0d:b8:08:11:08:cd:67:
         7b:92:f1:a9:3c:28:09:d4:31:55:1d:b1:28:2b:01:c6:5c:dc:
         62:42:67:47:82:3d:d1:36:bf:66:05:ca:59:ce:28:7e:88:4f:
         c2:2f:d7:a2:95:59:da:e8:8d:07:da:aa:63:19:07:9a:51:97:
         f7:83:f0:9f:aa:de:d7:05:46:ca:cd:c5:be:fa:3b:63:2b:a6:
         af:74:fa:ef:4e:0c:9b:9c:d7:d8:72:97:81:1e:d7:88:02:e2:
         24:6c:3e:6c:4d:be:d9:4d:c0:d4:1a:3b:0a:bd:40:61:28:1b:
         97:dc:d0:5d:3f:b9:5b:08:69:87:e1:18:3f:cf:a8:eb:e1:6c:
         53:46:d5:e0:bf:02:9d:a5:a3:77:95:01:f0:92:b9:c3:08:ea:
         c6:88:b0:82:5a:b2:b1:90:8b:56:c8:1c:d4:87:b9:6c:eb:3a:
         cc:61:e4:26:30:55:04:a6:7b:aa:98:d0:e4:bd:7b:cd:72:36:
         9a:ce:1e:05:38:a0:94:79:56:46:02:85:c7:1f:78:9c:90:18:
         e7:62:44:2d:57:fc:fa:0f:62:cc:fd:89:97:f8:e3:1a:0e:f8:
         d5:f9:e6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----