Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/EE826AB0C83311EEA202644EC4F9AE02.roa
File:                     EE826AB0C83311EEA202644EC4F9AE02.roa (raw, json)
Hash identifier:          RR5yH9LZC+CVKquuOYGfas9jMJVBtkYVRStwCZsstMg=
Subject key identifier:   0E:0F:6E:92:60:B9:46:6F:B3:D7:2C:FC:C4:E5:7E:17:02:99:2B:78
Certificate issuer:       /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23
Certificate serial:       185C
Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/EE826AB0C83311EEA202644EC4F9AE02.roa
Signing time:             Mon 18 Nov 2024 10:56:30 +0000
ROA not before:           Mon 18 Nov 2024 10:56:30 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     152472
IP address blocks:        103.39.238.0/24 maxlen: 24
                          175.111.178.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 18 Nov 2024 22:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6236 (0x185c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23
        Validity
            Not Before: Nov 18 10:56:30 2024 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=673b1d5d-6f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9b:16:f1:40:7e:d9:23:28:96:35:09:43:63:
                    08:6d:2f:db:61:19:aa:45:7f:2e:fa:7d:76:86:75:
                    b9:4a:78:8f:1d:27:d7:db:e4:e4:b5:83:75:b9:cc:
                    b3:54:ca:bb:fd:45:da:5b:c8:dd:eb:d6:86:bd:36:
                    30:0d:dc:0a:8c:f5:6d:1a:2c:74:db:90:78:ee:3e:
                    cc:a9:be:83:97:2e:85:16:15:2f:1e:77:60:23:04:
                    99:7c:9c:d4:e4:d6:1b:8b:a6:3f:30:f0:7a:d4:8a:
                    e4:a9:62:9a:88:38:b4:4e:d1:71:12:03:25:8a:04:
                    c6:bb:63:3f:fd:06:47:d9:12:ae:b0:cf:a4:3c:e5:
                    6d:c4:cf:c3:49:65:cf:3f:e7:7e:a6:33:a5:15:c7:
                    64:24:99:21:31:e1:c7:4a:49:f8:f3:4d:ac:97:ef:
                    8a:e1:d9:95:ef:31:8b:d2:e7:68:7f:56:5a:40:2b:
                    18:28:8b:7d:ab:28:b6:cc:53:af:29:c7:ef:95:2d:
                    64:ee:c9:1c:0a:f6:30:a0:00:35:e1:4e:9f:f6:84:
                    20:8f:c1:4c:14:85:5e:03:3a:6f:fb:39:cd:94:6c:
                    cc:d8:9b:25:9f:6a:fb:6b:11:86:f5:e6:ee:90:6e:
                    d7:2e:1d:e2:e7:8b:be:a9:dc:60:f2:ff:1a:8c:d4:
                    f8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0F:6E:92:60:B9:46:6F:B3:D7:2C:FC:C4:E5:7E:17:02:99:2B:78
            X509v3 Authority Key Identifier:
                keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/EE826AB0C83311EEA202644EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.238.0/24
                  175.111.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:25:43:cc:43:ca:50:2e:65:53:5a:40:aa:c0:48:96:70:4d:
         f7:2f:38:88:27:e7:86:c7:a8:a3:92:a1:bc:1f:23:7b:a6:64:
         53:af:fe:64:77:9c:15:27:2b:10:f5:31:26:fe:d2:2d:89:e4:
         4d:79:9c:5c:22:e5:90:3a:14:29:03:cc:08:7a:55:1a:e3:02:
         c0:7d:1a:f8:4b:11:bd:7c:d7:40:bf:7e:3c:4d:dd:01:43:78:
         f9:7e:8c:fd:25:2e:a0:9a:64:96:0a:43:55:e0:d6:03:83:9b:
         45:6c:28:2c:4f:7f:d1:6a:f3:1d:15:2b:c3:70:aa:6d:2b:7a:
         bc:b3:16:4d:ac:e7:c5:65:20:32:26:03:36:6e:fe:ff:87:16:
         f6:fc:9a:2e:5c:44:2b:25:8d:84:5b:06:89:0e:b1:e2:fe:26:
         4c:ef:68:8c:39:0d:d8:f4:c7:5c:b7:58:8d:27:c9:ec:ce:c1:
         37:02:75:36:54:16:52:61:47:04:7d:89:d9:5a:a6:74:e9:50:
         f0:0a:a4:22:4f:df:76:65:c6:c9:9f:77:04:5f:53:bb:c1:e5:
         a3:fd:4d:3f:92:3a:25:8d:e2:ed:b1:3c:a6:f8:9b:24:25:5a:
         68:78:b7:60:9a:62:5f:5f:10:38:fd:db:0e:f1:b4:4a:48:ad:
         22:4e:ba:1a
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICGFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ2QkYxMTAvBgNVBAUTKDRFMDFGNEZDQTc2REJGOTI5NURFQzYxQzFCMzJBNEVF
NjhBREZEMjMwHhcNMjQxMTE4MTA1NjMwWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzNiMWQ1ZC02ZjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp5sW8UB+2SMoljUJQ2MIbS/bYRmqRX8u+n12hnW5SniPHSfX2+TktYN1ucyz
VMq7/UXaW8jd69aGvTYwDdwKjPVtGix025B47j7Mqb6Dly6FFhUvHndgIwSZfJzU
5NYbi6Y/MPB61IrkqWKaiDi0TtFxEgMligTGu2M//QZH2RKusM+kPOVtxM/DSWXP
P+d+pjOlFcdkJJkhMeHHSkn4802sl++K4dmV7zGL0udof1ZaQCsYKIt9qyi2zFOv
KcfvlS1k7skcCvYwoAA14U6f9oQgj8FMFIVeAzpv+znNlGzM2Jsln2r7axGG9ebu
kG7XLh3i54u+qdxg8v8ajNT4xwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFA4PbpJg
uUZvs9cs/MTlfhcCmSt4MB8GA1UdIwQYMBaAFE4B9Pynbb+Sld7GHBsypO5orf0j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZCRi9FMzYxQkEyMEE1
QTExMUU3QjNBMzEyN0RDNEY5QUUwMi9UZ0gwX0tkdHY1S1Yzc1ljR3pLazdtaXRf
U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RnSDBfS2R0djVLVjNzWWNHektrN21pdF9TTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEQ2QkYvRTM2MUJBMjBBNUExMTFFN0IzQTMxMjdEQzRGOUFFMDIvRUU4MjZBQjBD
ODMzMTFFRUEyMDI2NDRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnJ+4DBACvb7IwDQYJKoZIhvcNAQELBQADggEBACwlQ8xD
ylAuZVNaQKrASJZwTfcvOIgn54bHqKOSobwfI3umZFOv/mR3nBUnKxD1MSb+0i2J
5E15nFwi5ZA6FCkDzAh6VRrjAsB9GvhLEb1810C/fjxN3QFDePl+jP0lLqCaZJYK
Q1Xg1gODm0VsKCxPf9Fq8x0VK8Nwqm0reryzFk2s58VlIDImAzZu/v+HFvb8mi5c
RCsljYRbBokOseL+JkzvaIw5Ddj0x1y3WI0nyezOwTcCdTZUFlJhRwR9idlapnTp
UPAKpCJP33ZlxsmfdwRfU7vB5aP9TT+SOiWN4u2xPKb4myQlWmh4t2CaYl9fEDj9
2w7xtEpIrSJOuho=
-----END CERTIFICATE-----
Generated at Tue Nov 19 00:48:05 2024 by rpki-client on console-fra.rpki-client.org