Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/AC4080EE4F1811EFB6ECD54CC4F9AE02.roa
File:                     AC4080EE4F1811EFB6ECD54CC4F9AE02.roa (raw, json)
Hash identifier:          +6sJMGojFNo0MjJqckc7l5olgOdUUOzmDcSIM9uL+G0=
Subject key identifier:   7A:D0:1D:C1:C3:97:0B:73:EA:6E:CD:78:86:71:68:80:6A:74:25:F4
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       33AF
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/AC4080EE4F1811EFB6ECD54CC4F9AE02.roa
Signing time:             Wed 31 Jul 2024 08:41:26 +0000
ROA not before:           Wed 31 Jul 2024 08:41:26 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     6079
IP address blocks:        122.8.44.0/22 maxlen: 22
                          122.8.48.0/22 maxlen: 22
                          122.8.100.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 01 Aug 2024 06:39:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13231 (0x33af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Jul 31 08:41:26 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=66a9f8b6-4572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6e:4d:43:69:00:34:81:77:b8:28:5e:6b:c2:
                    ab:60:5a:c0:18:8d:5e:01:e8:c8:c8:d3:87:96:ee:
                    b2:31:39:18:c4:23:8a:38:c8:1e:fc:f0:cd:d6:bd:
                    d0:d2:48:f0:6f:e9:5e:9d:2b:0c:7a:b6:8b:d8:c9:
                    22:df:37:77:b1:e3:a8:48:d2:66:ae:66:23:c4:ac:
                    31:07:ba:a9:b7:71:7b:65:53:8e:68:97:4d:53:9b:
                    6c:35:ae:74:3f:94:ea:f2:97:70:19:dc:6b:af:c1:
                    93:a8:5c:e1:42:18:5c:27:ae:11:ef:db:3e:a5:30:
                    7a:1d:26:95:f5:32:ec:b7:6b:c5:e0:02:5d:d4:84:
                    d8:97:1e:32:79:67:82:1b:02:1e:8f:6c:5e:e9:e8:
                    96:6d:a6:00:d8:8b:0e:cf:36:c8:66:ba:e8:f5:4a:
                    65:e2:66:49:5a:c6:dc:6a:24:2b:17:c5:a8:58:35:
                    0f:92:91:9b:61:fc:5e:74:cc:3b:83:c6:f0:f5:33:
                    0e:54:f6:21:40:a4:d6:cd:91:0a:eb:ba:6a:dd:55:
                    d8:76:5d:35:d6:5d:04:f7:6e:50:b4:1b:95:5a:76:
                    0b:dc:38:cf:3e:c5:bf:46:e2:32:99:82:ea:22:a1:
                    ed:ac:f9:b4:d4:c5:70:62:39:d3:67:b5:81:1f:65:
                    b2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D0:1D:C1:C3:97:0B:73:EA:6E:CD:78:86:71:68:80:6A:74:25:F4
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/AC4080EE4F1811EFB6ECD54CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.8.44.0-122.8.51.255
                  122.8.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:9d:22:e1:83:21:aa:a8:5f:78:bd:cf:5b:aa:42:73:40:95:
         cc:7b:3a:22:8d:5d:56:66:af:6f:c2:62:21:a3:fa:a7:8e:d5:
         1b:dd:e2:23:f7:66:29:19:40:d1:b9:56:54:d8:86:80:a1:a8:
         10:0d:2d:c7:74:3c:e6:ff:0c:b6:52:49:98:62:c0:02:ea:9d:
         17:22:dd:f4:22:b5:75:48:0b:35:d3:54:f6:bf:55:24:2d:f3:
         05:60:71:d6:d7:ea:df:93:94:41:cf:cd:42:59:fd:55:6d:70:
         0e:70:51:68:6c:ca:2b:37:9b:51:92:cc:bd:ba:e2:78:77:2d:
         cd:73:48:1e:bf:19:36:a0:b9:2b:89:d7:a5:36:e9:12:55:ff:
         8f:9a:51:9c:66:fc:d5:b6:fe:b2:86:d5:b0:32:0d:ad:19:32:
         75:7a:bf:e1:ea:85:f5:40:99:dc:8d:d3:3e:cf:b0:19:eb:f4:
         50:e8:3f:cb:f1:a1:f4:ed:35:98:28:d6:5c:21:59:34:1d:59:
         84:73:0d:c0:73:48:13:8b:2b:3c:76:0d:6b:38:3e:25:1a:f9:
         a2:40:c2:d4:73:83:4b:46:40:34:f5:d1:8b:70:59:fc:c5:b0:
         b7:fe:d7:7b:7a:fa:d2:74:97:86:f0:d6:24:f0:62:54:c9:bd:
         e0:84:62:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----