Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/273B5D66C38711EC8CDED51DC4F9AE02.roa
File:                     273B5D66C38711EC8CDED51DC4F9AE02.roa (raw, json)
Hash identifier:          yarPatSzeW3FdI/yRgTblZA0NEn4P6/hJRvrN5hNESw=
Subject key identifier:   C2:BB:FD:14:5F:79:82:A6:8D:3C:A6:F2:1A:E7:A8:70:30:1D:A3:39
Certificate issuer:       /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Certificate serial:       0638
Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/273B5D66C38711EC8CDED51DC4F9AE02.roa
Signing time:             Tue 23 Aug 2022 07:18:54 +0000
ROA not before:           Tue 23 Aug 2022 07:18:54 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     10122
IP address blocks:        103.139.72.0/24 maxlen: 24
                          103.139.73.0/24 maxlen: 24
                          164.90.64.0/24 maxlen: 24
                          164.90.65.0/24 maxlen: 24
                          164.90.66.0/24 maxlen: 24
                          164.90.67.0/24 maxlen: 24
                          164.90.68.0/24 maxlen: 24
                          164.90.69.0/24 maxlen: 24
                          164.90.70.0/24 maxlen: 24
                          164.90.72.0/24 maxlen: 24
                          164.90.73.0/24 maxlen: 24
                          164.90.74.0/24 maxlen: 24
                          164.90.76.0/24 maxlen: 24
                          164.90.77.0/24 maxlen: 24
                          164.90.78.0/24 maxlen: 24
                          164.90.79.0/24 maxlen: 24
                          164.90.80.0/24 maxlen: 24
                          164.90.81.0/24 maxlen: 24
                          164.90.82.0/24 maxlen: 24
                          164.90.83.0/24 maxlen: 24
                          164.90.84.0/24 maxlen: 24
                          164.90.85.0/24 maxlen: 24
                          164.90.86.0/24 maxlen: 24
                          164.90.87.0/24 maxlen: 24
                          164.90.88.0/24 maxlen: 24
                          164.90.89.0/24 maxlen: 24
                          164.90.90.0/24 maxlen: 24
                          164.90.91.0/24 maxlen: 24
                          164.90.92.0/24 maxlen: 24
                          164.90.93.0/24 maxlen: 24
                          164.90.94.0/24 maxlen: 24
                          164.90.95.0/24 maxlen: 24
                          164.90.96.0/24 maxlen: 24
                          164.90.97.0/24 maxlen: 24
                          164.90.98.0/24 maxlen: 24
                          164.90.100.0/24 maxlen: 24
                          164.90.101.0/24 maxlen: 24
                          164.90.104.0/24 maxlen: 24
                          164.90.105.0/24 maxlen: 24
                          164.90.106.0/24 maxlen: 24
                          164.90.107.0/24 maxlen: 24
                          164.90.108.0/24 maxlen: 24
                          164.90.109.0/24 maxlen: 24
                          164.90.110.0/24 maxlen: 24
                          164.90.111.0/24 maxlen: 24
                          164.90.113.0/24 maxlen: 24
                          164.90.114.0/24 maxlen: 24
                          164.90.115.0/24 maxlen: 24
                          164.90.116.0/24 maxlen: 24
                          164.90.117.0/24 maxlen: 24
                          164.90.121.0/24 maxlen: 24
                          164.90.122.0/24 maxlen: 24
                          164.90.125.0/24 maxlen: 24
                          164.90.126.0/24 maxlen: 24
                          164.90.127.0/24 maxlen: 24
                          202.63.32.0/24 maxlen: 24
                          202.63.33.0/24 maxlen: 24
                          202.63.34.0/24 maxlen: 24
                          202.63.35.0/24 maxlen: 24
                          202.63.36.0/24 maxlen: 24
                          202.63.37.0/24 maxlen: 24
                          202.63.38.0/24 maxlen: 24
                          202.63.39.0/24 maxlen: 24
                          202.63.40.0/24 maxlen: 24
                          202.63.41.0/24 maxlen: 24
                          202.63.42.0/24 maxlen: 24
                          202.63.43.0/24 maxlen: 24
                          202.63.44.0/24 maxlen: 24
                          202.63.45.0/24 maxlen: 24
                          202.63.46.0/24 maxlen: 24
                          202.63.47.0/24 maxlen: 24
                          202.63.48.0/24 maxlen: 24
                          202.63.49.0/24 maxlen: 24
                          202.63.50.0/24 maxlen: 24
                          202.63.51.0/24 maxlen: 24
                          202.63.52.0/24 maxlen: 24
                          202.63.53.0/24 maxlen: 24
                          202.63.54.0/24 maxlen: 24
                          202.63.55.0/24 maxlen: 24
                          202.63.56.0/24 maxlen: 24
                          202.63.57.0/24 maxlen: 24
                          202.63.58.0/24 maxlen: 24
                          202.63.59.0/24 maxlen: 24
                          202.63.60.0/24 maxlen: 24
                          202.63.61.0/24 maxlen: 24
                          202.63.62.0/24 maxlen: 24
                          202.63.63.0/24 maxlen: 24
                          202.168.96.0/24 maxlen: 24
                          202.168.97.0/24 maxlen: 24
                          202.168.98.0/24 maxlen: 24
                          202.168.99.0/24 maxlen: 24
                          202.168.100.0/24 maxlen: 24
                          202.168.101.0/24 maxlen: 24
                          202.168.102.0/24 maxlen: 24
                          202.168.103.0/24 maxlen: 24
                          202.168.104.0/24 maxlen: 24
                          202.168.105.0/24 maxlen: 24
                          202.168.106.0/24 maxlen: 24
                          202.168.107.0/24 maxlen: 24
                          202.168.108.0/24 maxlen: 24
                          202.168.109.0/24 maxlen: 24
                          202.168.110.0/24 maxlen: 24
                          202.168.112.0/24 maxlen: 24
                          202.168.113.0/24 maxlen: 24
                          202.168.114.0/24 maxlen: 24
                          202.168.115.0/24 maxlen: 24
                          202.168.116.0/24 maxlen: 24
                          202.168.117.0/24 maxlen: 24
                          202.168.118.0/24 maxlen: 24
                          202.168.119.0/24 maxlen: 24
                          202.168.120.0/24 maxlen: 24
                          202.168.121.0/24 maxlen: 24
                          202.168.122.0/24 maxlen: 24
                          202.168.123.0/24 maxlen: 24
                          202.168.124.0/23 maxlen: 23
                          202.168.124.0/24 maxlen: 24
                          202.168.125.0/24 maxlen: 24
                          202.168.126.0/24 maxlen: 24
                          202.168.127.0/24 maxlen: 24
                          2404:efc0:155::/48 maxlen: 48
                          2404:efc0:235::/48 maxlen: 48
                          2404:efc0:236::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1592 (0x638)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
        Validity
            Not Before: Aug 23 07:18:54 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=63047f5e-5a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f8:ec:d0:75:c2:4f:4d:dd:4e:58:2b:87:8d:
                    37:90:ff:48:b8:26:74:84:5e:ac:1c:77:37:78:e3:
                    21:0c:94:6e:32:02:3e:8a:01:a7:89:4e:ac:4e:11:
                    96:9b:a8:96:28:56:2a:6a:96:c6:5c:6d:ce:51:bf:
                    25:82:1f:b6:5c:fd:1e:40:77:b4:28:e1:f0:2e:17:
                    0f:f9:6c:b8:c0:bb:80:4e:36:fd:4b:4d:69:e1:6b:
                    6d:ef:1d:0f:71:cd:b8:ae:9b:c2:1d:f7:c2:6d:ac:
                    50:d6:14:c7:d1:40:5c:f5:3c:45:7c:c3:c1:2c:6e:
                    c4:0e:ef:57:ec:2d:7f:88:a4:95:94:db:e3:e1:86:
                    f0:23:6f:e4:b2:38:fb:81:ea:a3:ab:b4:f8:53:9d:
                    f8:2a:a5:9c:ae:f4:9b:02:a3:51:e8:f1:69:96:fc:
                    5e:57:72:da:50:c5:c2:8b:6a:35:f6:d9:0c:6e:28:
                    b3:70:fa:da:a8:4d:b3:52:1c:69:e2:01:24:9b:26:
                    5c:e0:85:7d:68:ff:b8:34:0c:d8:32:16:fe:4e:20:
                    0b:0f:1b:b1:2e:d7:4e:98:f0:65:10:88:d2:8a:cc:
                    f7:79:0b:9c:a6:08:bb:3a:e1:3f:0b:1d:da:af:a9:
                    be:eb:7c:be:bc:b3:1e:91:34:b6:13:f3:c1:12:57:
                    9b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BB:FD:14:5F:79:82:A6:8D:3C:A6:F2:1A:E7:A8:70:30:1D:A3:39
            X509v3 Authority Key Identifier:
                keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/273B5D66C38711EC8CDED51DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.72.0/23
                  164.90.64.0-164.90.70.255
                  164.90.72.0-164.90.74.255
                  164.90.76.0-164.90.98.255
                  164.90.100.0/23
                  164.90.104.0/21
                  164.90.113.0-164.90.117.255
                  164.90.121.0-164.90.122.255
                  164.90.125.0-164.90.127.255
                  202.63.32.0/19
                  202.168.96.0-202.168.110.255
                  202.168.112.0/20
                IPv6:
                  2404:efc0:155::/48
                  2404:efc0:235::-2404:efc0:236:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         ac:c9:99:ee:ff:c5:57:e7:67:a8:5a:14:6a:51:35:72:20:fc:
         6d:3e:21:09:7b:e9:7e:f6:07:80:45:0b:5c:5a:43:d1:a1:c5:
         4b:89:a5:c2:e8:ee:b8:93:c1:99:93:2e:f0:77:a9:7f:a0:b5:
         67:e6:fe:2d:92:b8:4b:fb:58:94:8b:bf:f5:18:78:ba:31:23:
         31:1d:9e:b2:76:ce:d4:bc:ca:33:a2:67:dd:d4:9e:46:76:6a:
         23:b9:b0:da:f6:40:08:9c:46:ab:94:a3:fa:2d:6f:97:9c:0e:
         83:52:ad:b9:10:54:08:da:f0:c9:d7:86:27:5b:88:0a:92:72:
         a8:d9:88:57:4b:a7:ec:e0:f2:51:e7:e7:86:af:e7:ff:19:db:
         65:d0:a6:24:c4:a3:1f:32:a6:e9:18:64:f1:1d:9f:d3:3e:bc:
         69:29:41:8b:bc:1c:e0:18:97:2f:3c:9a:73:d2:6a:65:99:18:
         e0:6b:ef:4d:f6:59:44:5c:12:a1:16:56:a1:1b:92:d3:ad:6b:
         21:0a:cd:15:ca:51:1a:de:6f:d3:b9:a7:d3:68:7c:3a:63:b8:
         dd:ab:f1:e3:11:59:77:78:eb:32:7f:91:13:ab:92:32:0e:d2:
         65:c8:d2:52:1e:ad:f3:3c:cb:a5:31:7f:db:90:52:8e:f5:e1:
         f9:e2:76:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:10 2023 by rpki-client on console-fra.rpki-client.org