Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/B1FABD6CAFEB11EBB965A648C4F9AE02.roa
File:                     B1FABD6CAFEB11EBB965A648C4F9AE02.roa (raw, json)
Hash identifier:          rERr7MH5PAjq44n3H3Abs60d1kAG/xGn6PVwdmOfJ48=
Subject key identifier:   52:1D:ED:CE:A0:58:59:80:E4:B1:82:DD:AD:35:27:1B:73:EB:49:DC
Certificate issuer:       /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Certificate serial:       0E6B
Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/B1FABD6CAFEB11EBB965A648C4F9AE02.roa
Signing time:             Sun 02 Jun 2024 18:51:46 +0000
ROA not before:           Sun 02 Jun 2024 18:51:46 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     140913
IP address blocks:        2402:3180::/45 maxlen: 48

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 12:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3691 (0xe6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
        Validity
            Not Before: Jun  2 18:51:46 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=665cbf42-d8a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2e:80:4c:fa:5b:fc:ae:63:24:38:65:37:92:
                    5f:26:81:0b:7c:9c:54:e8:6e:e0:20:1d:d4:1b:de:
                    53:be:77:9f:88:73:f1:bf:6f:4e:90:34:de:3c:b4:
                    fa:75:6a:18:96:cc:5c:39:08:17:53:46:45:53:70:
                    11:6b:1f:d8:1c:6b:30:f3:93:6d:3b:b1:0a:38:99:
                    54:3a:9e:e0:05:c3:15:6e:fd:f2:19:7a:06:cb:32:
                    3c:0b:7f:14:eb:06:b3:78:aa:b6:d2:0b:9b:ee:7f:
                    08:48:ef:fc:e2:2c:b5:73:cb:af:4f:58:d8:7d:09:
                    8c:54:91:ec:b0:07:e1:98:3c:18:0b:4a:85:8e:80:
                    75:93:4b:c8:b2:bf:0f:57:6f:cd:a9:02:cd:09:5c:
                    1b:df:30:4e:eb:b8:79:fa:3f:eb:39:f7:47:a7:14:
                    c9:e4:2b:b4:d0:03:ca:e6:a2:32:11:3e:28:19:49:
                    a1:a0:5c:48:2f:87:10:e0:6d:58:85:37:56:cd:a6:
                    cc:68:6d:da:67:01:64:5f:16:36:c1:fd:a9:d1:72:
                    7f:be:d3:53:a8:96:b4:a2:3e:4d:23:07:bb:c0:1e:
                    5b:df:7d:d7:5f:58:6c:b7:14:64:d3:5a:32:b9:3b:
                    1f:f7:68:19:ff:18:e2:30:62:a9:19:3c:a4:86:fb:
                    77:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1D:ED:CE:A0:58:59:80:E4:B1:82:DD:AD:35:27:1B:73:EB:49:DC
            X509v3 Authority Key Identifier:
                keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/B1FABD6CAFEB11EBB965A648C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3180::/45

    Signature Algorithm: sha256WithRSAEncryption
         23:a0:9d:fb:71:ab:7c:81:b3:f2:12:f7:bd:5e:83:57:e7:cc:
         7f:24:95:39:34:7a:c8:4b:cc:2c:ee:55:d1:0f:2b:4f:ea:ac:
         e9:d9:28:e1:b3:9a:da:98:4b:4f:d5:2d:14:7b:ac:e9:b0:29:
         6b:ee:25:50:c3:31:6a:d2:98:d9:e2:42:ca:e7:f2:fe:8f:27:
         d3:cc:5f:6a:f9:28:6e:38:17:a7:e3:3f:b9:94:a3:fd:b2:6c:
         86:ff:1d:67:4e:38:74:f0:bb:2a:9a:d5:7a:d6:33:dc:55:b3:
         32:8f:b4:92:0e:f7:e1:ec:61:c1:f6:5f:3a:43:e3:ef:1f:63:
         a7:94:71:19:36:67:d8:ee:d9:5f:86:3a:90:e7:e9:22:be:4d:
         b5:1d:01:36:48:e6:75:64:ef:05:08:6a:9a:c9:85:8b:6b:7c:
         e0:90:0f:33:3e:ef:fe:84:7e:ea:40:73:17:c3:85:71:f9:b7:
         b8:67:e8:a8:43:fd:57:4f:99:8f:32:36:43:e8:d1:e7:42:9e:
         67:4a:e3:5c:86:1e:b3:cf:ef:c4:4a:57:b4:f9:85:93:39:33:
         d4:da:7c:6d:64:f6:4e:c8:38:a9:8b:7a:88:03:e0:a7:4d:a8:
         37:b6:f2:06:1e:42:08:28:e5:57:b5:3d:a0:c9:2e:ba:83:35:
         c8:40:0e:ec
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICDmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzZCRkYxMTAvBgNVBAUTKEMxNDM4OTUxN0Y4ODY4MDVBMkQ0ODVCQTQxMkRBRDJC
NTI3NzZGNzIwHhcNMjQwNjAyMTg1MTQ2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjVjYmY0Mi1kOGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAri6ATPpb/K5jJDhlN5JfJoELfJxU6G7gIB3UG95TvnefiHPxv29OkDTePLT6
dWoYlsxcOQgXU0ZFU3ARax/YHGsw85NtO7EKOJlUOp7gBcMVbv3yGXoGyzI8C38U
6wazeKq20gub7n8ISO/84iy1c8uvT1jYfQmMVJHssAfhmDwYC0qFjoB1k0vIsr8P
V2/NqQLNCVwb3zBO67h5+j/rOfdHpxTJ5Cu00APK5qIyET4oGUmhoFxIL4cQ4G1Y
hTdWzabMaG3aZwFkXxY2wf2p0XJ/vtNTqJa0oj5NIwe7wB5b333XX1hstxRk01oy
uTsf92gZ/xjiMGKpGTykhvt39wIDAQABo4ICmDCCApQwHQYDVR0OBBYEFFId7c6g
WFmA5LGC3a01Jxtz60ncMB8GA1UdIwQYMBaAFMFDiVF/iGgFotSFukEtrStSd29y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkJGRi9FNDJCRUFDMjkz
RjAxMUU5QkMwQ0ZGNzFDNEY5QUUwMi93VU9KVVgtSWFBV2kxSVc2UVMydEsxSjNi
M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dVT0pVWC1JYUFXaTFJVzZRUzJ0SzFKM2IzSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzZCRkYvRTQyQkVBQzI5M0YwMTFFOUJDMENGRjcxQzRGOUFFMDIvQjFGQUJENkNB
RkVCMTFFQkI5NjVBNjQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwMkAjGAAAAwDQYJKoZIhvcNAQELBQADggEBACOgnftxq3yB
s/IS971eg1fnzH8klTk0eshLzCzuVdEPK0/qrOnZKOGzmtqYS0/VLRR7rOmwKWvu
JVDDMWrSmNniQsrn8v6PJ9PMX2r5KG44F6fjP7mUo/2ybIb/HWdOOHTwuyqa1XrW
M9xVszKPtJIO9+HsYcH2XzpD4+8fY6eUcRk2Z9ju2V+GOpDn6SK+TbUdATZI5nVk
7wUIaprJhYtrfOCQDzM+7/6EfupAcxfDhXH5t7hn6KhD/VdPmY8yNkPo0edCnmdK
41yGHrPP78RKV7T5hZM5M9TafG1k9k7IOKmLeogD4KdNqDe28gYeQggo5Ve1PaDJ
LrqDNchADuw=
-----END CERTIFICATE-----