Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CE40/0042AD6A053211EA95776851C4F9AE02/9D53699EFB2B11ED95D51E34C4F9AE02.roa
File:                     9D53699EFB2B11ED95D51E34C4F9AE02.roa (raw, json)
Hash identifier:          mNRT9Nnpu1Yoa2UhqdM7vE6OyQ53UYd/lGk5mPwckyI=
Subject key identifier:   70:E1:09:06:76:39:EB:90:D6:EC:6D:B2:F3:06:C6:E1:F8:4E:06:7B
Certificate issuer:       /CN=A911CE40/serialNumber=9CF5C275B7B3162D15714131E25493B0938DF6FC
Certificate serial:       0BDA
Authority key identifier: 9C:F5:C2:75:B7:B3:16:2D:15:71:41:31:E2:54:93:B0:93:8D:F6:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPXCdbezFi0VcUEx4lSTsJON9vw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CE40/0042AD6A053211EA95776851C4F9AE02/9D53699EFB2B11ED95D51E34C4F9AE02.roa
Signing time:             Sun 02 Jun 2024 19:43:46 +0000
ROA not before:           Sun 02 Jun 2024 19:43:46 +0000
ROA not after:            Tue 01 Oct 2024 00:00:00 +0000
asID:                     137531
IP address blocks:        2001:df6:fd80::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 16 Jul 2024 02:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3034 (0xbda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CE40/serialNumber=9CF5C275B7B3162D15714131E25493B0938DF6FC
        Validity
            Not Before: Jun  2 19:43:46 2024 GMT
            Not After : Oct  1 00:00:00 2024 GMT
        Subject: CN=665ccb72-3923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:be:24:14:51:60:25:16:bb:32:f1:d1:63:ca:
                    0b:f7:16:17:1c:56:29:78:9c:5f:08:07:a6:c6:25:
                    b5:6d:d9:ea:c1:3e:2f:16:b3:0d:ce:79:84:a3:6c:
                    27:0c:98:3a:af:c7:bb:f8:e7:81:d4:58:ad:5e:63:
                    2e:76:95:33:94:cb:03:e9:cf:a9:c4:55:41:7d:e4:
                    10:8c:d8:e9:c9:ab:1c:a4:63:d1:3c:13:fe:21:da:
                    f8:d3:0a:3c:4b:74:db:12:ba:9d:9b:9f:21:d5:ed:
                    ff:67:3c:e9:ae:54:e9:47:cf:5f:95:0e:89:04:62:
                    06:f2:f3:b9:07:49:99:5b:a7:ef:ad:d5:11:05:da:
                    25:2f:98:99:34:3a:8e:76:61:f1:41:19:4b:9f:5a:
                    44:16:6d:56:a3:fc:36:6d:da:33:92:ee:0c:61:51:
                    92:7f:be:29:5c:84:14:8d:0d:28:3a:cc:61:c1:13:
                    93:c8:b0:f1:26:1f:f4:7e:18:78:99:3a:af:01:11:
                    53:c0:a7:70:1f:62:6a:fc:88:44:6a:4f:c0:71:dc:
                    44:ea:fb:63:c6:2e:64:32:42:38:ea:0c:b5:67:20:
                    b5:65:86:91:8f:7e:ef:87:1c:58:e3:11:39:25:92:
                    22:41:f8:1f:7c:81:2c:8b:32:bd:75:73:f9:ad:70:
                    55:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E1:09:06:76:39:EB:90:D6:EC:6D:B2:F3:06:C6:E1:F8:4E:06:7B
            X509v3 Authority Key Identifier:
                keyid:9C:F5:C2:75:B7:B3:16:2D:15:71:41:31:E2:54:93:B0:93:8D:F6:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CE40/0042AD6A053211EA95776851C4F9AE02/nPXCdbezFi0VcUEx4lSTsJON9vw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPXCdbezFi0VcUEx4lSTsJON9vw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CE40/0042AD6A053211EA95776851C4F9AE02/9D53699EFB2B11ED95D51E34C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:fd80::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:9b:84:37:9c:d3:d3:19:37:9f:f7:50:fd:d5:2c:cd:56:4f:
         63:02:20:b3:68:7b:be:5a:91:41:d8:bf:f3:6a:3e:95:51:28:
         72:6e:c2:f4:5d:4f:c4:b8:b1:90:38:bf:0b:7e:c2:60:cb:ee:
         e2:07:a6:9c:f2:e4:77:8a:24:df:f1:26:17:4e:de:83:e2:01:
         75:2f:47:76:b0:78:0d:93:fb:bc:8a:df:0e:b0:24:89:59:22:
         19:18:b4:df:e2:15:6b:d8:ec:66:12:2e:14:ec:01:42:a6:7e:
         ae:0a:c5:21:d4:a4:04:e9:59:72:b7:ec:75:65:d2:40:98:89:
         44:4b:e4:92:4d:d1:90:65:73:9e:c5:d6:2b:74:49:35:50:97:
         24:86:40:36:35:f1:1c:65:21:9c:d1:aa:42:7e:bc:4f:ef:5d:
         28:a6:97:eb:1b:56:f0:f8:a0:60:40:7b:cf:bf:1d:af:3c:34:
         04:71:95:aa:75:51:52:1e:c4:b3:47:77:b8:34:b6:cb:04:7d:
         a0:a8:e4:8b:a0:f8:a0:8c:ec:b4:f8:4a:a4:05:96:0b:31:86:
         8b:6a:65:53:c1:95:90:9a:17:b7:8f:e3:1a:3f:82:5d:06:18:
         5e:de:36:c1:f3:54:92:47:4e:6a:a4:c3:2f:65:d8:51:0f:90:
         93:41:1e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----