Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/6972AE70CBB811ED8583D849C4F9AE02.roa
File:                     6972AE70CBB811ED8583D849C4F9AE02.roa (raw, json)
Hash identifier:          HN3UyiD2PNkwmfM0Dj37gtn6SCwlGgs7sbn4P47eUas=
Subject key identifier:   28:9F:3F:60:60:4B:60:3B:78:74:61:67:CA:83:D0:47:31:AD:2F:CD
Certificate issuer:       /CN=A91EA2CC/serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634
Certificate serial:       0B21
Authority key identifier: 90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/6972AE70CBB811ED8583D849C4F9AE02.roa
Signing time:             Fri 16 Feb 2024 19:57:56 +0000
ROA not before:           Fri 16 Feb 2024 19:57:56 +0000
ROA not after:            Thu 01 May 2025 00:00:00 +0000
asID:                     136022
IP address blocks:        103.134.40.0/22 maxlen: 22
                          103.134.40.0/24 maxlen: 24
                          103.134.41.0/24 maxlen: 24
                          103.134.42.0/24 maxlen: 24
                          103.134.43.0/24 maxlen: 24
                          2404:5cc0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 26 Aug 2024 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2849 (0xb21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA2CC/serialNumber=90A98450B9DA938118A2D5AD534D8828F4B94634
        Validity
            Not Before: Feb 16 19:57:56 2024 GMT
            Not After : May  1 00:00:00 2025 GMT
        Subject: CN=65cfbe44-e0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e7:22:23:1e:c4:b0:26:1a:1d:48:45:89:67:
                    97:ec:c5:7c:cd:a5:48:8c:26:47:25:c5:91:ac:88:
                    0b:5d:04:63:50:92:dc:4a:88:f2:24:e0:a3:78:bf:
                    bc:8f:33:2a:f8:5a:2b:da:bc:2b:53:e5:c9:b0:8e:
                    67:fb:f1:64:48:4f:94:1c:78:ba:86:a4:03:42:be:
                    95:da:58:11:63:dc:29:f5:7c:ea:c1:a4:98:75:80:
                    6c:43:77:4b:4d:e0:de:d4:20:bf:37:f3:7c:4b:36:
                    d5:74:1d:60:b7:39:09:5b:e7:c5:48:46:95:41:51:
                    82:ff:22:07:4d:2a:60:a2:e9:68:aa:36:38:7b:03:
                    78:d5:a2:c5:99:85:0b:3b:da:3a:6c:2b:a7:b0:94:
                    13:73:a1:ce:3b:07:68:eb:af:40:8b:99:9a:d6:62:
                    05:a3:26:03:3e:77:38:dd:c3:fa:ce:83:73:8b:6c:
                    0e:bf:99:a9:31:e4:32:62:57:81:80:f6:03:e2:7b:
                    dc:c1:a2:de:a2:fb:65:4a:6f:d1:2f:a9:56:79:8e:
                    36:0e:6e:ab:f2:8a:16:53:c9:8f:60:1b:ec:12:8a:
                    0c:a8:0f:97:18:b9:a1:fc:b3:9e:98:9a:1c:6c:26:
                    74:26:4a:c9:c2:8b:b1:d5:b5:7f:4c:0e:9e:16:7e:
                    5a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9F:3F:60:60:4B:60:3B:78:74:61:67:CA:83:D0:47:31:AD:2F:CD
            X509v3 Authority Key Identifier:
                keyid:90:A9:84:50:B9:DA:93:81:18:A2:D5:AD:53:4D:88:28:F4:B9:46:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/kKmEULnak4EYotWtU02IKPS5RjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kKmEULnak4EYotWtU02IKPS5RjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA2CC/F26E06CE11F911EA9CB88C35C4F9AE02/6972AE70CBB811ED8583D849C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.40.0/22
                IPv6:
                  2404:5cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:98:e0:39:f1:77:d7:b9:cd:df:5e:c8:74:5a:38:8f:5a:47:
         ca:03:dd:03:bb:a7:79:15:c3:22:4d:c0:48:61:a8:40:01:14:
         f7:c0:3d:a8:a3:08:9f:ea:a0:80:f7:40:17:ac:ac:0d:2b:21:
         5d:ff:71:50:73:02:64:0c:55:46:58:44:e5:6f:50:42:74:f3:
         d0:7d:69:c8:41:6d:80:03:74:e9:cc:5b:0b:2d:59:82:ae:18:
         25:75:11:28:66:78:f0:7d:14:8a:4a:91:b3:bc:a4:25:d9:ad:
         95:28:60:a0:d0:42:d9:8d:36:5f:26:fe:ff:ad:58:67:de:09:
         87:52:58:b3:57:fb:8d:93:2e:27:c3:03:5d:fb:4b:da:42:0e:
         47:91:2e:47:7e:74:4f:72:1c:74:b2:0e:6e:57:3e:78:f8:23:
         e8:78:64:9e:a3:d4:5d:fa:05:e9:a3:45:d9:de:fe:1c:12:15:
         1c:7c:b5:13:b3:df:9a:4c:39:48:89:f6:6c:18:fb:b9:a2:00:
         cd:69:3d:50:59:be:4f:94:fc:12:7c:df:86:d7:70:6a:6f:32:
         08:e6:81:05:25:9b:10:e0:24:71:db:68:c6:83:25:a0:b4:66:
         ee:cc:61:1b:a2:cc:29:8c:13:0a:14:39:b2:50:e1:72:e7:01:
         a2:15:f2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----