Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/A16BFA9CE03011EE9FD7291DC4F9AE02.roa
File:                     A16BFA9CE03011EE9FD7291DC4F9AE02.roa (raw, json)
Hash identifier:          OKUB1S+qDYeFUc1kb7xpOUTrPm9FqnkD5ZuYg/M3Vbk=
Subject key identifier:   FF:A7:7A:3B:E5:58:4E:C7:7F:0C:8F:6B:09:FD:CA:A3:5F:8F:90:A0
Certificate issuer:       /CN=A91EFBA1/serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
Certificate serial:       1811
Authority key identifier: 41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/A16BFA9CE03011EE9FD7291DC4F9AE02.roa
Signing time:             Tue 30 Apr 2024 17:25:16 +0000
ROA not before:           Tue 30 Apr 2024 17:25:16 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     136435
IP address blocks:        103.87.248.0/22 maxlen: 22
                          103.87.248.0/23 maxlen: 23
                          103.87.248.0/24 maxlen: 24
                          103.87.249.0/24 maxlen: 24
                          103.87.250.0/23 maxlen: 23
                          103.87.250.0/24 maxlen: 24
                          103.87.251.0/24 maxlen: 24
                          203.96.225.0/24 maxlen: 24
                          203.96.226.0/23 maxlen: 23
                          203.96.226.0/24 maxlen: 24
                          203.96.227.0/24 maxlen: 24
                          2400:dac0::/48 maxlen: 48
                          2400:dac0:1::/48 maxlen: 48
                          2400:dac0:2::/48 maxlen: 48
                          2400:dac0:3::/48 maxlen: 48
                          2400:dac0:4::/48 maxlen: 48
                          2400:dac0:5::/48 maxlen: 48
                          2400:dac0:6::/48 maxlen: 48
                          2400:dac0:7::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 22 May 2024 16:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6161 (0x1811)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFBA1/serialNumber=415406ED80B4D927A479A8BA042116AE2D11A1A6
        Validity
            Not Before: Apr 30 17:25:16 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=6631297c-4e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d6:22:5e:a8:8d:5d:1f:91:07:b3:c4:c5:d6:
                    40:94:a6:f1:d4:b7:62:be:a5:45:a5:56:45:cc:03:
                    95:4f:fc:0c:61:80:fb:5a:3e:39:5f:0c:90:fe:b5:
                    85:5f:38:ca:2b:b3:b9:67:0b:a3:53:fb:13:5b:34:
                    ea:e4:34:81:15:92:04:e2:e2:af:16:11:b9:4a:b2:
                    6d:69:00:5c:2e:c7:3e:85:bd:6b:e5:54:d7:c1:ac:
                    f0:8a:bc:c6:37:8d:cb:24:97:37:29:77:e6:4d:e6:
                    1b:af:ff:27:50:f3:ce:b2:29:06:50:35:f8:d3:e4:
                    2f:6a:21:fa:fe:e3:5a:7c:5d:6f:f6:5f:ce:a2:3d:
                    7e:ab:f1:a0:a4:00:83:60:91:69:49:a1:0b:dc:9f:
                    65:17:45:a3:cf:e9:95:a7:d6:2e:d1:c1:ae:3b:7e:
                    fa:c2:eb:19:34:c2:ab:7d:43:e7:7c:79:bf:58:47:
                    f8:bb:8f:53:f8:24:29:f9:9c:14:6a:9f:9a:2e:35:
                    ae:49:ae:c0:fc:50:e2:26:c8:c8:35:04:0e:42:1e:
                    d6:e6:5f:79:0c:dd:df:60:97:b3:77:6d:dc:30:37:
                    8e:1f:79:3d:09:78:27:84:2c:f1:b5:f7:24:46:51:
                    af:d1:7d:2d:73:e4:29:5e:05:ae:d9:82:62:ae:05:
                    0b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A7:7A:3B:E5:58:4E:C7:7F:0C:8F:6B:09:FD:CA:A3:5F:8F:90:A0
            X509v3 Authority Key Identifier:
                keyid:41:54:06:ED:80:B4:D9:27:A4:79:A8:BA:04:21:16:AE:2D:11:A1:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/QVQG7YC02Sekeai6BCEWri0RoaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVQG7YC02Sekeai6BCEWri0RoaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFBA1/2AD51F4C990311E7A5E95C6FC4F9AE02/A16BFA9CE03011EE9FD7291DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.248.0/22
                  203.96.225.0-203.96.227.255
                IPv6:
                  2400:dac0::/45

    Signature Algorithm: sha256WithRSAEncryption
         95:87:52:08:2d:fe:e9:ad:59:7d:aa:b9:f5:a1:51:a6:37:e2:
         42:68:7c:9e:e3:89:b2:91:3b:de:3f:c9:74:92:b7:f6:ac:84:
         02:fe:7d:0c:82:bc:f7:3e:92:d8:de:ea:fe:80:a7:31:6e:3b:
         b2:0f:cf:aa:ff:2d:e2:f7:9c:3c:fc:e6:12:bf:8f:59:38:37:
         fe:ac:9a:a6:d4:65:08:4e:1e:c6:81:9f:8f:98:fe:8d:5c:da:
         76:b7:f6:5f:59:2b:6d:bc:d7:a6:92:b8:5e:db:06:88:e6:fe:
         4a:e9:ca:54:ff:dc:5e:49:c0:aa:9f:cd:72:18:f5:97:23:7c:
         17:73:1f:be:c6:df:04:f6:f1:ab:dc:cf:28:bd:d6:30:4f:92:
         e4:c1:ee:b4:5f:28:1b:99:88:8f:1d:2d:5d:47:f8:3d:c7:b6:
         69:af:fa:b3:b7:5c:72:37:4b:90:9c:30:14:c6:92:3a:ac:06:
         2e:bb:9e:19:a7:9e:d8:65:35:76:8d:e9:ff:d6:30:0d:ab:52:
         5a:ce:21:99:19:eb:4d:76:9b:72:1a:93:de:0a:8f:25:e6:02:
         75:65:af:11:6c:fa:99:fe:42:29:10:10:c3:ad:a7:32:49:04:
         25:84:31:21:c9:d1:a7:dd:78:9d:21:9f:cb:a0:d8:a8:8b:01:
         6d:2c:31:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----