Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/3C6D6186814711EF827ECE65C4F9AE02.roa
File:                     3C6D6186814711EF827ECE65C4F9AE02.roa (raw, json)
Hash identifier:          d0R/RUpnHHZs8kxpsWRde2Vk+TcO60/yRKIfDR6g5Kc=
Subject key identifier:   BB:E1:C5:2B:82:30:AF:CE:28:EF:BB:9E:20:39:37:3D:D0:59:55:F2
Certificate issuer:       /CN=A91211D4/serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1
Certificate serial:       060F
Authority key identifier: 96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/3C6D6186814711EF827ECE65C4F9AE02.roa
Signing time:             Thu 03 Oct 2024 05:21:32 +0000
ROA not before:           Thu 03 Oct 2024 05:21:32 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     142006
IP address blocks:        103.164.86.0/23 maxlen: 24
                          2001:df6:4280::/48 maxlen: 52

Validation:               Failed, certificate revoked on Thu 03 Oct 2024 07:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1551 (0x60f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91211D4/serialNumber=968D2AAA6168CB496944A727018AFB42A26E31E1
        Validity
            Not Before: Oct  3 05:21:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66fe29db-8387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fd:65:c2:74:09:c1:58:64:20:8a:f8:ae:34:
                    48:93:52:0e:b7:ed:a2:63:9e:74:a8:38:a3:1f:1c:
                    61:eb:e6:cf:59:1f:fb:3e:91:3c:23:59:e3:9c:c2:
                    81:3f:33:7d:c0:e1:8f:95:73:91:34:93:10:94:f1:
                    d7:79:e3:0c:6f:70:e3:86:24:d8:20:78:8a:f6:c0:
                    9e:dc:2f:80:26:28:76:65:65:3e:cf:8f:a2:fa:58:
                    fa:78:2f:09:3b:3a:c6:b6:9b:ef:9a:00:90:fc:b1:
                    5a:d2:8d:24:68:65:75:10:c6:45:14:83:11:3a:15:
                    54:59:cd:8c:aa:65:c8:52:b8:83:73:a1:0d:e5:6d:
                    27:01:f5:99:f1:5c:01:0c:93:88:40:6c:83:14:60:
                    c5:08:c5:c7:ba:d3:ea:44:f8:3f:9b:ce:89:b1:49:
                    23:ab:e2:19:9b:f4:68:c9:8d:51:3c:6e:34:c8:53:
                    07:35:16:dd:57:c3:d9:80:1e:4f:eb:cf:d4:6b:d2:
                    fd:41:c5:db:b8:bf:47:ea:23:20:ca:37:23:e1:c7:
                    a5:1a:33:2e:39:2f:3c:72:89:0d:95:61:95:fb:b0:
                    71:ad:75:ef:7d:ea:69:35:83:89:5c:2a:df:b0:d2:
                    68:38:da:6d:e7:0f:1e:d2:66:12:0d:95:7c:b6:b3:
                    ed:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E1:C5:2B:82:30:AF:CE:28:EF:BB:9E:20:39:37:3D:D0:59:55:F2
            X509v3 Authority Key Identifier:
                keyid:96:8D:2A:AA:61:68:CB:49:69:44:A7:27:01:8A:FB:42:A2:6E:31:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/lo0qqmFoy0lpRKcnAYr7QqJuMeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lo0qqmFoy0lpRKcnAYr7QqJuMeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91211D4/A9F4965286CD11EBA4AFF609C4F9AE02/3C6D6186814711EF827ECE65C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.86.0/23
                IPv6:
                  2001:df6:4280::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:12:29:4f:34:41:9a:20:32:8f:09:fa:c0:83:5c:59:69:58:
         72:39:aa:cc:cc:0c:a2:ee:65:79:d3:f1:a0:c0:e1:ff:a9:ed:
         48:6c:2b:bb:ea:39:89:d8:e6:ba:cf:4e:b4:50:51:90:4c:ea:
         a7:5e:b0:e7:ab:ad:63:f8:1c:dd:06:ed:59:66:bf:66:0c:ae:
         54:52:b4:4b:b1:85:b1:bc:aa:01:df:02:00:b5:24:4f:cb:52:
         e6:08:3f:8f:ff:c3:22:79:a9:11:1c:2a:14:6b:f9:c6:41:4d:
         db:25:10:d8:7e:8b:b9:d0:81:63:68:72:e0:e9:cf:cf:d7:f2:
         f4:6e:bd:67:0e:65:61:76:9f:b9:d4:29:24:86:a1:20:b2:f5:
         e5:be:11:a4:3d:c7:db:06:b6:62:d3:b8:4a:34:03:5a:cb:dc:
         ad:5b:dc:b7:7e:7d:2c:ca:03:51:d0:73:7e:96:77:f9:f1:41:
         d4:67:77:60:fa:9d:e9:9b:dd:db:37:21:b1:c8:05:8e:1f:f9:
         6a:74:72:bb:01:5e:52:37:bc:56:a8:ed:ab:37:01:c7:c0:64:
         19:41:38:22:de:31:0a:b9:f3:90:49:68:5d:dd:1a:51:df:a7:
         69:fe:36:95:07:0e:d9:23:de:19:63:a0:4a:62:79:4e:ba:14:
         1a:98:08:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----