Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/31960B4CB45011EEA20D071CC4F9AE02.roa
File:                     31960B4CB45011EEA20D071CC4F9AE02.roa (raw, json)
Hash identifier:          kv68U1Pyg9hAzO8u0VQJWauEGujRmYWj9VoFYftkEKM=
Subject key identifier:   C5:49:4B:25:EA:4B:6E:84:30:29:EA:BC:D0:97:8C:2D:64:26:0B:8D
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       32EE
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/31960B4CB45011EEA20D071CC4F9AE02.roa
Signing time:             Tue 16 Jan 2024 09:18:22 +0000
ROA not before:           Tue 16 Jan 2024 09:18:22 +0000
ROA not after:            Wed 29 May 2024 00:00:00 +0000
asID:                     54004
IP address blocks:        122.8.36.0/22 maxlen: 22
                          122.8.48.0/22 maxlen: 22
                          122.8.64.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sun 18 Feb 2024 07:32:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13038 (0x32ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Jan 16 09:18:22 2024 GMT
            Not After : May 29 00:00:00 2024 GMT
        Subject: CN=65a649dd-31b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:90:9b:db:12:eb:52:17:e5:f0:e4:c9:d1:c7:
                    58:8f:af:47:c2:81:d8:fd:cf:26:0e:90:80:4f:46:
                    39:f3:40:22:3e:94:5c:c3:53:1a:5d:0b:e9:1a:08:
                    86:6f:6d:75:b9:5f:e5:ca:cf:ab:0a:f0:5b:07:61:
                    02:c9:97:7b:2d:4c:fe:ab:67:ec:89:f2:6c:2d:6f:
                    0a:35:e9:43:68:7e:a3:3d:c7:13:ec:ba:ef:66:02:
                    23:39:ed:74:de:5d:bd:0f:fc:6b:d3:d2:4e:fe:15:
                    02:9d:e6:cb:59:d9:b5:b4:a5:fe:c7:ca:e6:bd:f6:
                    67:f3:31:8f:2d:5b:c8:f1:97:b7:0a:eb:1f:9d:a2:
                    97:d6:1a:87:90:6e:dd:f6:8b:2f:2b:6a:3a:2c:a8:
                    ca:67:1e:95:b6:9e:25:e6:e8:93:49:3c:5d:f0:01:
                    bd:a5:44:47:e9:93:f7:36:28:8d:28:d4:a4:a9:ea:
                    15:db:07:35:df:11:c0:2b:d0:49:24:bf:be:11:15:
                    a5:36:14:fa:f6:e3:9e:06:e6:ea:12:39:23:1a:4e:
                    83:87:78:16:16:c5:bf:f3:29:0c:81:67:71:bb:ce:
                    93:e2:17:26:94:cc:4c:52:89:93:a2:a9:73:2d:25:
                    02:26:53:4b:24:6b:74:22:1f:f6:6c:88:84:b9:13:
                    40:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:49:4B:25:EA:4B:6E:84:30:29:EA:BC:D0:97:8C:2D:64:26:0B:8D
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/31960B4CB45011EEA20D071CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.8.36.0/22
                  122.8.48.0/22
                  122.8.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:55:19:ef:1a:1a:d6:9c:4b:05:12:ff:85:7f:28:63:a4:36:
         0e:36:0f:d2:71:5a:c0:67:86:18:dd:9a:e2:45:ae:ed:80:20:
         43:70:56:bd:66:53:d7:d9:09:a9:b8:9b:50:e2:de:3d:7a:7a:
         20:d0:89:aa:b4:b0:e7:2d:23:b3:48:56:fc:9a:5a:5a:13:3d:
         47:83:ff:db:e1:3a:95:3c:e0:71:c1:65:43:1a:31:f0:70:29:
         03:bd:4c:36:df:a5:ec:4b:80:02:c4:19:3d:2f:64:e5:3b:63:
         60:34:da:fd:b9:2c:e3:69:58:16:69:be:15:a4:4c:99:64:fd:
         d7:c4:16:c1:da:d6:fa:02:f1:cf:2e:4c:85:ff:a5:11:6d:7b:
         f6:99:a7:d0:98:bf:b8:f7:fa:e6:bc:99:ba:39:74:fa:9d:75:
         af:a5:48:bd:88:bb:91:74:00:c4:e6:3b:86:e0:26:00:1e:dc:
         ed:ab:27:88:de:ae:e3:73:6d:52:e3:fb:41:68:1d:f0:fc:a4:
         8f:e9:47:a6:ac:f4:70:bb:cc:01:33:2f:02:a9:3b:f0:92:2f:
         3d:a6:55:e7:10:f5:a4:ed:8d:4c:8f:5c:6d:52:83:42:3b:38:
         4c:8a:53:a5:cb:4e:b2:36:6a:05:35:4b:82:8f:98:cc:7f:c8:
         58:c8:d1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----