Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/8532AF8C4B4111ECACAF3B6FC4F9AE02.roa
File:                     8532AF8C4B4111ECACAF3B6FC4F9AE02.roa (raw, json)
Hash identifier:          2q1efVlinxPW3khFm8cPV+QPtBHpnU+rqEIiKr/SfG0=
Subject key identifier:   1E:91:DA:1A:CA:D7:7A:9F:FB:A2:B4:FC:F2:09:47:65:DA:85:93:2E
Certificate issuer:       /CN=A916E9F4/serialNumber=898AF3837D84F38947A835C063C848D70188EC86
Certificate serial:       06DA
Authority key identifier: 89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/8532AF8C4B4111ECACAF3B6FC4F9AE02.roa
Signing time:             Tue 30 Jan 2024 23:11:10 +0000
ROA not before:           Tue 30 Jan 2024 23:11:10 +0000
ROA not after:            Sat 01 Jun 2024 00:00:00 +0000
asID:                     141015
IP address blocks:        103.154.240.0/23 maxlen: 24
                          2407:e340::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 19 Feb 2024 05:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1754 (0x6da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E9F4/serialNumber=898AF3837D84F38947A835C063C848D70188EC86
        Validity
            Not Before: Jan 30 23:11:10 2024 GMT
            Not After : Jun  1 00:00:00 2024 GMT
        Subject: CN=65b9820d-24ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2a:9a:aa:a3:9e:ce:94:80:7c:0e:ea:69:63:
                    8d:fe:1e:00:4d:d9:76:6d:1f:92:52:c1:76:4e:74:
                    e8:f5:e2:28:f6:87:f0:ad:3f:46:22:fe:75:c9:b3:
                    16:32:33:48:af:d4:89:a6:1f:7d:a5:93:36:93:56:
                    70:0d:05:14:ee:dc:9b:3a:7e:e6:55:cc:86:5f:01:
                    e2:fb:a4:73:1e:76:e0:f9:1f:14:4e:8d:c2:35:50:
                    b7:cc:57:6f:44:9f:a8:8a:29:09:da:ac:10:66:b4:
                    86:ce:82:b8:bd:15:96:70:64:ce:ce:a3:ba:5e:08:
                    d0:78:e4:d4:9b:2d:33:d6:2e:9e:75:cb:4e:ee:11:
                    23:35:c5:31:dd:c7:c5:ae:59:95:3b:ca:98:e0:dd:
                    e8:a9:59:bb:0f:bc:af:49:37:3f:ce:e4:6d:bf:cc:
                    78:58:f8:83:1e:18:a2:2e:2b:53:a7:4c:32:4a:23:
                    44:8c:08:30:90:a3:67:df:d7:8a:b4:da:fc:eb:81:
                    10:e5:b0:65:b6:60:f7:9c:37:cb:9c:36:67:6b:a2:
                    70:27:4e:68:f4:d7:11:db:7a:67:84:7e:d2:d1:0c:
                    8d:a9:5f:f9:22:da:34:9e:79:8d:5e:b5:d7:c4:08:
                    f2:3a:30:91:40:bb:5c:20:80:8b:40:bf:e8:1f:46:
                    a3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:91:DA:1A:CA:D7:7A:9F:FB:A2:B4:FC:F2:09:47:65:DA:85:93:2E
            X509v3 Authority Key Identifier:
                keyid:89:8A:F3:83:7D:84:F3:89:47:A8:35:C0:63:C8:48:D7:01:88:EC:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/iYrzg32E84lHqDXAY8hI1wGI7IY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iYrzg32E84lHqDXAY8hI1wGI7IY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E9F4/3D6BA574F69611EA93486F25C4F9AE02/8532AF8C4B4111ECACAF3B6FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.240.0/23
                IPv6:
                  2407:e340::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:a6:4f:24:40:c3:42:52:64:45:cf:85:cd:0d:be:ea:63:8d:
         2f:d2:c4:91:60:31:94:da:d1:fa:73:cf:2a:e3:3a:e7:3b:6f:
         e0:82:b2:e0:e6:c1:fc:c8:8c:66:1d:50:7b:46:aa:7c:43:2a:
         ed:59:54:2a:ae:6a:9d:9e:0f:0b:ea:f5:13:2f:42:aa:34:32:
         71:f8:92:1a:23:07:0a:5a:bb:eb:0f:7e:ad:75:30:51:98:44:
         4a:83:11:f9:91:7e:fe:5a:c7:d5:ab:b7:2b:96:e0:4c:6c:7e:
         b9:99:21:c7:73:23:11:cd:c2:01:14:5d:52:0a:a5:ef:73:5d:
         43:09:f7:63:75:e4:d7:8c:af:ee:a9:3c:00:e4:a7:63:25:7a:
         c1:ff:87:42:49:86:8a:09:0f:d0:b5:bb:0d:23:34:cb:64:99:
         a5:b3:a8:e5:c4:4d:69:d7:8f:26:21:df:35:b1:af:5a:19:f4:
         a7:cf:57:17:f6:5a:0a:b7:cd:d5:7e:c7:d5:b6:28:99:e0:b3:
         e3:ff:13:23:4b:4f:b5:40:7e:ab:aa:b5:e0:2f:4a:7a:b5:45:
         b3:e0:e3:30:9a:17:8a:68:7b:d0:09:0e:9c:8c:54:60:78:58:
         da:3a:97:5e:15:6c:06:52:d7:77:ab:d8:b1:16:6d:68:f8:cf:
         64:61:7a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----