Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/FB0EDA2EBBDD11EDB989924CC4F9AE02.roa
File:                     FB0EDA2EBBDD11EDB989924CC4F9AE02.roa (raw, json)
Hash identifier:          GXx8FdjG685RCAz/YmEI88HRu+xpURI396sesAeLPCk=
Subject key identifier:   32:C0:E6:CD:78:52:5E:AE:6F:A7:CC:3F:C5:FF:81:C5:3B:F2:C4:AC
Certificate issuer:       /CN=A91FDA40/serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A
Certificate serial:       DA
Authority key identifier: 37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/FB0EDA2EBBDD11EDB989924CC4F9AE02.roa
Signing time:             Sat 27 Apr 2024 06:20:07 +0000
ROA not before:           Sat 27 Apr 2024 06:20:07 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     150791
IP address blocks:        103.101.98.0/23 maxlen: 23
                          103.101.98.0/24 maxlen: 24
                          103.101.99.0/24 maxlen: 24
                          2001:df2:fc0::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 17 May 2024 05:16:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDA40/serialNumber=37B62A77251C52A04B33B82D2ED0204C927A429A
        Validity
            Not Before: Apr 27 06:20:07 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=662c9917-9eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:88:80:12:e2:31:d9:fd:e7:15:4a:ed:62:af:
                    e9:5f:b3:de:d5:a8:fc:6d:8a:da:92:cc:7a:57:c7:
                    2b:3f:26:03:77:43:0f:b5:30:a8:28:65:9d:8d:b9:
                    96:67:e9:9c:e5:9d:07:2e:66:02:44:bf:da:5d:a5:
                    cc:3c:f6:85:69:f8:59:ac:d7:05:0f:cf:41:98:f3:
                    a4:a1:c4:f3:69:35:f9:ac:21:88:5a:27:65:3a:22:
                    8a:c3:18:b8:81:76:2f:96:a5:a9:eb:1d:02:9a:50:
                    5e:f3:10:1d:8b:27:aa:60:f7:69:9f:b2:d8:c1:65:
                    0c:41:7f:e7:98:ba:48:f5:5f:77:07:fa:20:24:b7:
                    3f:6c:57:a5:c7:7b:b3:30:a1:eb:9b:ca:48:c7:ce:
                    33:da:23:0e:25:71:66:c8:11:e1:c2:98:0b:cd:05:
                    9e:bc:d4:02:72:17:79:5e:a8:f1:15:03:17:37:3e:
                    6f:ba:d2:c5:0f:ce:2c:b2:ac:48:0c:59:26:e7:15:
                    62:90:bc:91:05:85:0b:0d:6a:da:0a:f5:91:9a:0b:
                    db:04:2c:f4:55:2c:6a:a5:6d:25:88:52:35:48:31:
                    e1:d7:31:e2:86:08:bd:02:f7:1c:6b:db:dd:db:a9:
                    e5:99:b8:4f:6b:72:e5:82:c9:58:2b:64:3c:51:7c:
                    51:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C0:E6:CD:78:52:5E:AE:6F:A7:CC:3F:C5:FF:81:C5:3B:F2:C4:AC
            X509v3 Authority Key Identifier:
                keyid:37:B6:2A:77:25:1C:52:A0:4B:33:B8:2D:2E:D0:20:4C:92:7A:42:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N7YqdyUcUqBLM7gtLtAgTJJ6Qpo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA40/96F0D70CBBDA11ED8878EF47C4F9AE02/FB0EDA2EBBDD11EDB989924CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.98.0/23
                IPv6:
                  2001:df2:fc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         d0:9d:e5:32:91:84:d6:66:c1:9d:14:b8:93:86:2f:b8:bc:49:
         16:57:56:d0:5f:07:94:28:1e:89:9a:66:82:27:a6:b7:b2:05:
         cd:a7:26:87:cd:57:18:b5:f4:6a:62:67:f0:91:88:53:32:7d:
         12:db:06:ab:5a:e1:ef:38:f5:fc:dd:8f:5b:ae:57:ba:6a:15:
         88:eb:90:6b:50:f3:6c:7a:6a:67:6a:d0:69:c2:0f:fc:d0:fe:
         12:de:0e:5c:ce:02:86:ef:1a:83:03:04:12:57:59:99:7a:52:
         2d:91:67:15:21:69:d5:c5:b7:1b:3c:d8:4e:5b:58:30:12:28:
         ad:f0:19:10:1b:27:2e:89:00:99:ce:f9:9c:f0:3a:8a:c8:8e:
         54:5f:65:e9:49:5d:40:ea:0b:14:5a:f1:04:b8:db:9b:9c:21:
         d5:6b:04:1a:fc:5a:82:71:07:9e:c4:27:93:15:9f:3f:77:18:
         e3:3c:d9:55:d6:91:32:bb:40:1d:cd:f9:9c:11:2c:7d:b9:10:
         69:a8:4b:55:1e:99:76:5e:ab:1a:15:76:c6:22:5c:d5:23:5d:
         fc:ac:48:f4:73:93:52:7f:c7:dd:3f:96:c9:84:1d:7b:ba:09:
         3f:97:59:2f:58:cf:ee:82:c0:c7:86:ae:d4:12:5b:9d:6a:d5:
         95:3f:89:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:40 2024 by rpki-client on console-ams.rpki-client.org