Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/0B4EDB88909511ED9E54B261C4F9AE02.roa
File:                     0B4EDB88909511ED9E54B261C4F9AE02.roa (raw, json)
Hash identifier:          4emzRUgWsmixDjQld96dbj/Sp5QI5a2k3+noP5YSYhY=
Subject key identifier:   D6:17:63:85:F8:CD:19:51:61:59:82:69:96:C9:3C:70:20:D1:55:79
Certificate issuer:       /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Certificate serial:       0DA9
Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/0B4EDB88909511ED9E54B261C4F9AE02.roa
Signing time:             Fri 26 Apr 2024 18:37:27 +0000
ROA not before:           Fri 26 Apr 2024 18:37:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     997
IP address blocks:        103.136.35.0/24 maxlen: 24
                          2404:8ac0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 13 Aug 2024 10:34:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3497 (0xda9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
        Validity
            Not Before: Apr 26 18:37:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=662bf467-1581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d3:e7:3f:12:70:87:3b:0a:78:20:e5:23:48:
                    f2:cf:42:8f:44:31:94:c0:e8:7a:a3:6b:a8:91:8d:
                    a4:2f:74:ad:22:f5:c4:a6:49:98:09:48:a5:6e:d5:
                    1a:fc:ef:17:57:c0:9f:bf:db:dc:db:9c:6b:8e:99:
                    f0:00:8a:82:50:05:39:4e:b9:c7:49:e1:21:17:f0:
                    e7:a3:ae:31:5a:3e:8c:84:f9:1c:ad:23:a3:ca:f1:
                    35:87:aa:c3:d5:35:60:7f:aa:a7:27:fa:11:ff:58:
                    2f:7a:49:cf:32:61:aa:ac:58:ad:4b:85:00:67:29:
                    67:0a:da:a9:a4:ed:e3:66:2d:83:ca:24:ff:6d:79:
                    9d:0f:d7:27:55:c1:d9:0b:5a:3d:21:a0:b4:c7:18:
                    23:7f:a7:64:e4:a2:02:a5:27:f8:11:6a:bd:24:af:
                    1b:13:d9:70:9b:03:88:5d:d4:96:67:ec:0f:93:f9:
                    f5:cd:5e:43:5f:15:c9:c6:d2:7a:0c:c9:80:cf:c2:
                    2b:a2:70:19:c9:6c:95:d0:fd:97:09:f6:9e:a5:63:
                    bf:26:36:37:bd:24:c1:e5:cd:41:bb:98:56:73:e9:
                    21:8c:44:db:18:36:c4:24:e0:43:2a:bd:89:e4:bb:
                    5b:8c:84:da:04:7c:18:26:5d:0c:31:d1:03:e6:b3:
                    6a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:17:63:85:F8:CD:19:51:61:59:82:69:96:C9:3C:70:20:D1:55:79
            X509v3 Authority Key Identifier:
                keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/0B4EDB88909511ED9E54B261C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.35.0/24
                IPv6:
                  2404:8ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:39:f8:25:58:72:f4:2b:ff:ad:a7:59:87:bc:1a:eb:26:7f:
         01:9e:88:2a:4c:ab:71:37:91:db:08:a6:ec:a3:1e:52:95:68:
         00:8d:b0:98:92:d6:49:4a:aa:c4:d2:51:af:b1:ec:2d:b4:b6:
         d9:3e:1a:30:b2:44:61:dd:ab:4e:18:09:9c:ad:92:9e:b0:23:
         61:b6:af:14:be:7a:0f:df:f9:b5:a5:e5:e6:df:03:e2:1f:9f:
         4e:06:16:a5:56:94:5c:d7:7b:ed:e3:32:08:3a:82:cf:da:b7:
         c2:3f:23:5b:fc:c0:8d:8e:f2:b2:87:d1:3f:e9:16:a4:af:ec:
         e9:e9:d5:71:8a:69:f9:1a:64:29:e9:f1:5f:2f:bc:de:b0:77:
         7a:fb:ae:98:cb:e4:bf:53:16:82:c1:de:2c:fd:73:ac:bf:2a:
         63:1c:d0:6a:99:d8:ab:ee:72:f6:58:b6:d9:6f:ff:12:27:37:
         7f:b4:c7:dd:b0:af:c4:63:2a:14:c4:12:78:7b:62:83:da:91:
         00:1b:12:0e:79:00:f5:ed:53:31:15:4d:01:9e:14:e4:c6:2d:
         62:2c:27:cf:ba:3a:db:0a:ce:c8:81:14:55:8f:f2:16:48:d4:
         a2:f0:ed:bf:20:56:7f:1f:91:79:ef:5b:38:23:76:e4:41:76:
         99:81:8d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----