Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/E307FF38D7BA11EEA17F0E83C4F9AE02.roa
File:                     E307FF38D7BA11EEA17F0E83C4F9AE02.roa (raw, json)
Hash identifier:          ZwIRaz2OgOqfi0UxvkhKhrR6vB6VoiXW432y2b+qMQQ=
Subject key identifier:   2A:8C:31:DA:0C:6A:08:B7:7B:B3:FD:15:E9:A7:50:07:52:9F:AA:85
Certificate issuer:       /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial:       05A9
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/E307FF38D7BA11EEA17F0E83C4F9AE02.roa
Signing time:             Fri 01 Mar 2024 11:00:17 +0000
ROA not before:           Fri 01 Mar 2024 11:00:17 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     834
IP address blocks:        43.247.134.0/24 maxlen: 24
                          43.247.135.0/24 maxlen: 24
                          103.24.216.0/23 maxlen: 24
                          103.231.58.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sat 23 Mar 2024 15:29:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1449 (0x5a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
        Validity
            Not Before: Mar  1 11:00:17 2024 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=65e1b541-5c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:06:ca:0a:d0:16:df:00:c4:93:3b:d1:29:57:
                    8d:2d:fb:6f:c1:63:d8:16:4d:b9:42:1e:b0:35:8c:
                    b4:80:5b:80:fb:74:f6:80:2b:09:60:c8:85:f6:04:
                    61:a9:3c:82:c0:43:51:bd:fa:af:44:21:21:7a:c2:
                    c5:11:e7:d6:bf:fc:08:87:f8:bb:11:e2:f6:62:1e:
                    19:12:fd:20:95:01:7c:ed:0e:a3:a7:ec:cc:3f:98:
                    a6:a3:24:51:e7:76:23:d2:0e:59:c2:e0:80:da:fa:
                    2f:3b:1b:a2:21:39:aa:e1:94:63:c0:37:21:58:40:
                    f0:a9:c1:b5:5a:b9:bf:a5:11:17:f8:dd:f0:09:d4:
                    a0:32:6e:99:98:19:7b:5c:3c:3d:2d:8e:78:e2:b2:
                    6a:d7:e3:7f:ec:d3:f8:4d:ef:45:56:7a:02:26:53:
                    29:b2:91:74:16:2e:df:05:ed:75:c1:93:8e:51:4c:
                    e8:83:ea:95:2b:f0:1f:fd:51:11:11:8a:76:46:73:
                    a1:43:c3:47:96:7f:fd:b6:f2:35:d6:c2:2b:13:42:
                    9b:97:c4:a2:b6:38:72:3c:e1:23:03:9d:77:7e:97:
                    1d:a1:98:fd:7e:32:3b:db:34:48:6a:ec:18:78:ab:
                    a9:26:c0:33:01:3d:da:9a:30:4b:82:a5:9a:6a:83:
                    c1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8C:31:DA:0C:6A:08:B7:7B:B3:FD:15:E9:A7:50:07:52:9F:AA:85
            X509v3 Authority Key Identifier:
                keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/E307FF38D7BA11EEA17F0E83C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.247.134.0/23
                  103.24.216.0/23
                  103.231.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:d2:f6:d7:84:ad:99:95:af:de:f6:cf:dc:89:a4:d5:f3:ac:
         32:3c:b9:04:c0:ab:da:97:a4:ca:3a:16:95:00:c2:91:85:1f:
         5c:57:ba:be:c3:c0:eb:7a:86:ab:5c:81:02:4b:fd:ef:55:5c:
         88:7f:f3:b2:7e:7d:b8:c7:8b:66:c2:04:71:7a:ed:b8:ed:b5:
         16:c0:d9:4b:6f:59:e9:c0:1e:90:72:ab:b8:6a:08:16:a1:69:
         81:2a:fe:92:c1:2d:ad:89:e4:b1:ee:77:b7:60:8d:fb:44:57:
         c0:01:79:da:fa:14:a3:8c:f3:dc:83:99:4e:18:a4:5b:e9:37:
         fe:db:48:4b:65:5a:20:3b:96:4b:34:fa:e2:16:75:5b:2b:39:
         fb:36:15:33:7d:1f:2b:66:2a:5c:79:f2:fe:6f:03:e8:c3:cc:
         d1:a8:46:06:a9:17:2a:ae:e0:62:cc:ad:b5:51:3e:0f:63:58:
         a0:2a:ad:15:57:a6:22:af:e5:f5:21:1d:00:33:a7:f6:67:65:
         63:35:3d:1d:04:bb:e6:16:32:90:10:82:66:75:61:2a:44:75:
         d5:56:fa:fb:ee:91:2b:6e:38:81:c1:ba:7e:a6:eb:31:11:f5:
         ea:61:c0:2c:6e:31:15:96:fb:b8:39:23:d7:f8:72:f7:cb:dc:
         71:ab:86:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:03 2024 by rpki-client on console-fra.rpki-client.org