Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/361338C2D3DC11EB9FCD6135C4F9AE02.roa
File:                     361338C2D3DC11EB9FCD6135C4F9AE02.roa (raw, json)
Hash identifier:          jppVafrVUbP9N7w3/l7wFRqHzql0/D1ul6XApRHjMDQ=
Subject key identifier:   69:57:1D:BD:BE:EE:6C:32:A6:74:16:EA:FD:D7:DD:1F:59:06:C6:6A
Certificate issuer:       /CN=A91F5B0D/serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4
Certificate serial:       050D
Authority key identifier: 02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/361338C2D3DC11EB9FCD6135C4F9AE02.roa
Signing time:             Sun 16 Jul 2023 23:40:24 +0000
ROA not before:           Sun 16 Jul 2023 23:40:24 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     135391
IP address blocks:        103.115.103.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 19:51:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1293 (0x50d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5B0D/serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4
        Validity
            Not Before: Jul 16 23:40:24 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64b47fe8-3610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3c:36:28:c0:a6:a5:74:e7:9d:38:d0:3f:f9:
                    03:3b:2c:0c:8c:a1:bb:54:65:25:be:67:80:fd:46:
                    29:46:f7:4d:7d:ec:58:8d:6d:6e:01:a8:53:68:a5:
                    03:82:24:aa:39:9e:46:d3:f3:3e:ea:af:04:c8:3c:
                    c9:7c:8b:09:d0:fe:19:eb:4f:50:ed:30:61:1f:3c:
                    b6:a4:b4:0a:a1:4a:ea:a8:23:0c:64:3d:ca:d6:66:
                    80:d0:86:d1:e1:2b:a0:51:6a:07:9c:2c:05:a5:df:
                    69:68:de:d3:83:98:e8:95:11:84:7d:dd:d0:e7:e7:
                    90:eb:f3:85:cd:84:6e:6d:95:0e:e8:65:0f:72:76:
                    ae:f4:39:04:01:53:39:91:b4:03:8c:90:92:d0:92:
                    5d:80:ca:76:de:1b:69:a9:44:65:18:e1:2f:2f:7e:
                    e7:63:71:6c:07:28:37:60:65:ed:a2:79:d0:54:57:
                    db:41:76:6d:5f:cb:26:60:ad:e5:93:32:9f:90:52:
                    5f:66:d2:a3:aa:16:4a:57:04:f2:cd:1f:02:29:a6:
                    8a:73:d5:4d:39:a5:37:62:b8:15:53:a8:a6:e0:2d:
                    40:0d:6b:0e:7e:2e:9f:8d:c6:3a:2f:22:b8:13:54:
                    c6:e8:46:3e:78:b1:fe:05:66:a9:a1:51:d8:97:5e:
                    b3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:57:1D:BD:BE:EE:6C:32:A6:74:16:EA:FD:D7:DD:1F:59:06:C6:6A
            X509v3 Authority Key Identifier:
                keyid:02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/361338C2D3DC11EB9FCD6135C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:bc:62:cf:41:e4:12:b6:66:0a:01:ac:53:56:6f:a8:6c:66:
         7b:7f:e8:43:6f:ef:70:b3:d7:62:2d:80:a8:9b:3b:04:a6:c4:
         b9:bd:61:97:9d:a0:1c:8c:05:ab:f0:7c:f3:11:ab:0a:43:51:
         08:bb:00:1f:a7:ef:4d:0b:4b:27:b0:61:12:2e:2c:29:b5:b8:
         07:a8:92:af:0e:78:68:af:83:84:cf:14:c9:8c:e1:cb:86:b7:
         7a:0b:cd:f6:fd:49:ba:80:2d:05:18:bd:3c:c4:47:0d:00:ca:
         bc:1a:7d:7b:5e:fc:ba:aa:e5:db:17:02:d5:08:4b:89:33:db:
         9b:14:6c:ca:19:03:4e:39:d4:43:9e:50:5e:10:7a:1b:89:2b:
         0e:39:e4:88:21:09:b3:13:f1:91:31:4a:a3:3d:5c:3a:7c:87:
         ff:12:fc:06:bb:27:e1:1a:8e:14:a1:b1:07:27:40:c7:7e:aa:
         e2:3f:a3:17:cf:b6:63:e5:d2:aa:20:1c:21:68:e0:db:8e:37:
         c4:ce:ae:e9:07:a4:45:92:ce:d7:89:ad:d8:c9:a4:a0:27:b9:
         d6:e4:9b:30:a4:e4:5b:98:93:d6:5f:f4:19:e2:b6:39:fb:7f:
         3f:4d:55:a4:87:b0:2c:3a:69:a2:dd:a3:5b:48:b1:be:93:81:
         7c:a6:52:56
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjVCMEQxMTAvBgNVBAUTKDAyRTM4NzBFQzNDNjFFMjc3NzcxNkQ3MDE4QjM0Q0Iz
MzU3QTAyQzQwHhcNMjMwNzE2MjM0MDI0WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGI0N2ZlOC0zNjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0jw2KMCmpXTnnTjQP/kDOywMjKG7VGUlvmeA/UYpRvdNfexYjW1uAahTaKUD
giSqOZ5G0/M+6q8EyDzJfIsJ0P4Z609Q7TBhHzy2pLQKoUrqqCMMZD3K1maA0IbR
4SugUWoHnCwFpd9paN7Tg5jolRGEfd3Q5+eQ6/OFzYRubZUO6GUPcnau9DkEAVM5
kbQDjJCS0JJdgMp23htpqURlGOEvL37nY3FsByg3YGXtonnQVFfbQXZtX8smYK3l
kzKfkFJfZtKjqhZKVwTyzR8CKaaKc9VNOaU3YrgVU6im4C1ADWsOfi6fjcY6LyK4
E1TG6EY+eLH+BWapoVHYl16zYwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGlXHb2+
7mwypnQW6v3X3R9ZBsZqMB8GA1UdIwQYMBaAFALjhw7Dxh4nd3FtcBizTLM1egLE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUIwRC84MzQwN0QyMDg4
QjUxMUVCOURBRUQ3MjJDNEY5QUUwMi9BdU9IRHNQR0hpZDNjVzF3R0xOTXN6VjZB
c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0F1T0hEc1BHSGlkM2NXMXdHTE5Nc3pWNkFzUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjVCMEQvODM0MDdEMjA4OEI1MTFFQjlEQUVENzIyQzRGOUFFMDIvMzYxMzM4QzJE
M0RDMTFFQjlGQ0Q2MTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnc2cwDQYJKoZIhvcNAQELBQADggEBAGm8Ys9B5BK2ZgoB
rFNWb6hsZnt/6ENv73Cz12ItgKibOwSmxLm9YZedoByMBavwfPMRqwpDUQi7AB+n
700LSyewYRIuLCm1uAeokq8OeGivg4TPFMmM4cuGt3oLzfb9SbqALQUYvTzERw0A
yrwafXte/Lqq5dsXAtUIS4kz25sUbMoZA0451EOeUF4QehuJKw455IghCbMT8ZEx
SqM9XDp8h/8S/Aa7J+EajhShsQcnQMd+quI/oxfPtmPl0qogHCFo4NuON8TOrukH
pEWSzteJrdjJpKAnudbkmzCk5FuYk9Zf9Bnitjn7fz9NVaSHsCw6aaLdo1tIsb6T
gXymUlY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:38 2024 by rpki-client on console-ams.rpki-client.org