Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/CDB8866E0BCF11EE8FB8EE16C4F9AE02.roa
File:                     CDB8866E0BCF11EE8FB8EE16C4F9AE02.roa (raw, json)
Hash identifier:          2bPtjzTQacB3nxuls9EwwbG+O2MsmPX0JJOR646mhfM=
Subject key identifier:   11:6D:87:59:81:AD:AD:74:4D:A6:83:CB:EB:8D:BC:70:D7:C2:7A:47
Certificate issuer:       /CN=A91FA562/serialNumber=340F813433719A760E3BFE21933687261179C327
Certificate serial:       B9
Authority key identifier: 34:0F:81:34:33:71:9A:76:0E:3B:FE:21:93:36:87:26:11:79:C3:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/CDB8866E0BCF11EE8FB8EE16C4F9AE02.roa
Signing time:             Fri 31 May 2024 07:42:12 +0000
ROA not before:           Fri 31 May 2024 07:42:12 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     58914
IP address blocks:        103.24.64.0/22 maxlen: 22
                          2406:b300::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 23 Oct 2024 12:58:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA562/serialNumber=340F813433719A760E3BFE21933687261179C327
        Validity
            Not Before: May 31 07:42:12 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66597f54-f6e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e7:7f:6c:56:5c:6f:6a:28:7d:ca:c0:32:68:
                    6c:a9:6d:83:a8:1c:0c:0b:22:87:22:2c:fa:58:38:
                    91:67:d9:1d:74:75:08:d1:1d:c3:32:57:4f:e4:a1:
                    79:2f:36:d9:c0:85:cf:9f:3c:23:dc:a1:45:2f:fa:
                    42:92:53:a2:ca:64:15:a0:2e:d0:9a:e1:e7:bf:5c:
                    99:dc:8c:04:04:dc:00:26:f1:08:8f:5f:a3:83:17:
                    1f:e7:04:fe:8e:f7:38:bf:97:2d:a4:3d:4e:64:6c:
                    3e:fd:77:19:67:dc:03:cf:ac:57:46:84:13:eb:fe:
                    e1:58:1b:fe:16:4f:93:25:c7:b0:21:0a:77:4a:dc:
                    34:2a:44:d4:37:17:ba:7f:a0:1c:a3:92:40:54:4e:
                    af:6b:f0:42:06:a4:f9:a5:90:36:40:79:2c:7f:c4:
                    df:86:f4:37:54:e4:f0:2c:cc:49:ef:d6:51:f1:4d:
                    e4:1b:fd:59:90:ce:b5:37:23:c8:6a:b6:07:dc:81:
                    1d:50:c0:e4:19:54:84:9e:90:79:a9:65:08:1d:d8:
                    59:2e:0c:43:32:30:60:99:a0:a3:dc:f3:b3:59:44:
                    27:49:10:ce:56:28:14:f5:57:bd:9a:5f:d2:2a:aa:
                    23:ad:35:0b:91:30:ee:99:6b:73:7c:ed:cb:8f:29:
                    47:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:6D:87:59:81:AD:AD:74:4D:A6:83:CB:EB:8D:BC:70:D7:C2:7A:47
            X509v3 Authority Key Identifier:
                keyid:34:0F:81:34:33:71:9A:76:0E:3B:FE:21:93:36:87:26:11:79:C3:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/NA-BNDNxmnYOO_4hkzaHJhF5wyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NA-BNDNxmnYOO_4hkzaHJhF5wyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA562/2657F73E0BC911EE8F79BB5DC4F9AE02/CDB8866E0BCF11EE8FB8EE16C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.64.0/22
                IPv6:
                  2406:b300::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:14:8e:f5:1e:fe:40:e6:94:2b:0e:c1:12:12:78:d6:1a:f1:
         a6:97:bd:65:ed:20:66:9c:b5:a7:41:70:75:26:e5:0b:28:57:
         aa:5f:67:54:bd:af:33:40:f6:a0:fe:63:fc:93:e5:30:65:bd:
         2c:19:af:26:cc:2c:89:ff:05:ea:ed:24:1f:1e:47:20:9f:75:
         ed:41:5e:6b:dd:a2:e1:70:9b:1a:a0:f1:c9:c3:00:f4:d9:ec:
         21:61:19:c3:9b:62:93:77:79:dc:41:0e:f5:12:0a:97:33:cc:
         73:b7:19:51:d7:79:a8:a7:0d:04:2e:60:db:27:b2:d7:c8:30:
         b0:a6:e8:66:b1:68:12:ce:c2:40:33:2c:2e:fe:83:31:a6:83:
         f2:10:d3:2f:8d:53:4b:5f:11:ff:ed:8e:77:2e:f0:73:a2:8b:
         08:02:7f:76:f7:62:d3:79:b6:40:3d:9b:de:2a:0f:00:82:a2:
         58:85:ce:1d:79:5e:e3:c9:63:30:2b:ff:4f:26:25:f9:7a:34:
         8e:52:cd:9e:3a:aa:1f:31:32:20:79:ec:a7:81:1c:7d:53:c1:
         ea:7e:24:af:fe:3e:a3:47:6a:f6:90:42:af:73:e7:d0:e7:5c:
         c6:14:c0:ac:31:59:b3:bb:17:e8:55:8a:c3:de:c8:c6:48:4b:
         6c:53:3e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----