Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/DB9C390C664A11EF8D66F248C4F9AE02.roa
File:                     DB9C390C664A11EF8D66F248C4F9AE02.roa (raw, json)
Hash identifier:          Y03nC2guxa345/bUz8r9WIuSerh3qndiAgFjonFaH0Q=
Subject key identifier:   22:73:94:75:DC:64:A4:72:21:48:69:16:C1:C2:CD:DF:48:53:83:EB
Certificate issuer:       /CN=A91D3307/serialNumber=53C94817EB1365F1DE8C3C2B4402239881C1943D
Certificate serial:       0416
Authority key identifier: 53:C9:48:17:EB:13:65:F1:DE:8C:3C:2B:44:02:23:98:81:C1:94:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/DB9C390C664A11EF8D66F248C4F9AE02.roa
Signing time:             Thu 29 Aug 2024 21:17:29 +0000
ROA not before:           Thu 29 Aug 2024 21:17:29 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     132834
IP address blocks:        103.135.84.0/22 maxlen: 24
                          103.248.188.0/24 maxlen: 24
                          180.94.238.0/24 maxlen: 24
                          180.94.239.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 02 Sep 2024 21:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1046 (0x416)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3307/serialNumber=53C94817EB1365F1DE8C3C2B4402239881C1943D
        Validity
            Not Before: Aug 29 21:17:29 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=66d0e569-dc18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a6:0b:56:0f:ad:fc:45:ed:c4:fc:fc:8e:27:
                    02:c5:dd:1f:60:3b:a4:f4:70:88:d0:0d:72:51:83:
                    3e:a4:7e:e8:c5:26:bd:1b:08:87:e6:b0:c5:b7:4d:
                    96:2e:76:c6:c4:f0:05:68:de:46:9e:74:63:44:c6:
                    78:5b:1a:f9:af:e0:8f:95:04:19:fa:84:87:ab:b9:
                    c0:92:1f:f1:85:a2:ad:f2:5d:11:d8:5d:2d:12:85:
                    2e:af:58:78:c0:50:94:3f:24:e3:e9:40:cd:d5:3a:
                    28:90:a9:fe:62:6b:e2:d5:f2:86:b0:d6:fa:6a:11:
                    e4:c0:c1:6c:53:65:0b:e3:79:ab:0b:d3:81:33:29:
                    45:7b:28:be:e4:fd:26:72:4d:aa:7b:94:67:66:55:
                    23:30:f6:01:41:2e:97:31:77:3c:e7:34:a6:e0:a3:
                    76:bf:b0:61:ef:29:15:5f:ab:52:be:fd:9e:df:ce:
                    0a:7d:ac:f7:48:4c:45:bb:19:b9:2b:d0:de:4a:5a:
                    4e:91:09:6e:40:2e:d9:1a:43:21:3b:29:c1:36:6b:
                    9f:d8:e1:aa:24:47:47:cb:ff:61:af:d5:75:56:8a:
                    c1:df:7e:61:8d:ba:3d:60:c7:c0:48:2e:cb:15:82:
                    c9:29:86:57:12:61:03:cc:d8:3e:d1:cd:93:97:29:
                    21:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:73:94:75:DC:64:A4:72:21:48:69:16:C1:C2:CD:DF:48:53:83:EB
            X509v3 Authority Key Identifier:
                keyid:53:C9:48:17:EB:13:65:F1:DE:8C:3C:2B:44:02:23:98:81:C1:94:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/DB9C390C664A11EF8D66F248C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.84.0/22
                  103.248.188.0/24
                  180.94.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:ae:ee:7c:8f:55:b8:c7:0e:64:fa:e9:02:a1:cd:67:38:19:
         b6:2a:c0:58:29:c1:7d:65:a0:2e:9e:4a:53:3a:cc:c9:8e:86:
         c4:c9:de:2e:6f:82:14:60:86:ca:cc:d7:02:b8:34:a9:2b:8b:
         05:bc:9d:cf:4c:9e:9b:3a:61:e9:95:23:30:ab:70:11:dd:e7:
         b0:d3:c9:20:24:23:20:72:7f:69:86:8b:03:cc:7f:97:da:25:
         d9:5d:ae:26:b2:b4:c7:df:02:c2:71:03:dd:64:3f:da:d9:9f:
         b8:22:d4:54:7b:65:36:d4:2f:39:e4:9d:18:1a:10:c7:e8:86:
         bb:7e:8f:61:74:c1:79:00:d3:9e:f7:de:10:de:df:3d:ca:20:
         41:b5:4b:70:a6:02:5b:1d:55:ff:8b:ea:eb:b7:e3:cb:a3:9d:
         d6:d9:e4:5f:67:1d:60:ac:25:77:1a:c7:44:e4:b1:51:4d:c0:
         35:af:56:b5:a2:5f:bb:53:85:e6:63:42:78:4e:3e:94:23:57:
         89:d3:48:bb:9d:6e:cb:68:d8:11:62:6b:4e:8a:d7:18:97:db:
         e6:bc:4a:f1:fa:95:ba:ad:cb:a4:ac:66:44:f8:0a:6a:c5:9a:
         b4:ce:8f:5c:ee:83:c3:cf:3a:eb:5a:95:50:bc:3b:0a:6b:b3:
         54:a9:20:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----