Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/AC96857C669A11EFAA2C7969C4F9AE02.roa
File:                     AC96857C669A11EFAA2C7969C4F9AE02.roa (raw, json)
Hash identifier:          uVs1Go13vSzHhHA2PxhNq0YhC+xBFvxZP86+mMFBD/E=
Subject key identifier:   B0:06:A8:52:F4:03:F5:AD:39:20:93:89:C8:64:A2:E4:B1:30:01:D9
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       33D0
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/AC96857C669A11EFAA2C7969C4F9AE02.roa
Signing time:             Fri 30 Aug 2024 06:39:58 +0000
ROA not before:           Fri 30 Aug 2024 06:39:58 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     53356
IP address blocks:        122.8.112.0/22 maxlen: 22
                          122.8.116.0/22 maxlen: 22
                          122.8.124.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 08 Oct 2024 07:42:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13264 (0x33d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Aug 30 06:39:58 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=66d1693e-f028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:df:f6:a1:16:92:5f:61:b4:ed:66:41:d1:2d:
                    d3:3a:72:bf:23:f2:99:e4:2b:10:57:9b:cc:39:b6:
                    bb:c0:9c:5a:e3:61:aa:80:78:a1:e2:7e:13:fc:3f:
                    a5:15:86:46:d6:c2:65:a9:db:ef:f7:da:04:ab:e4:
                    4e:8c:f6:f1:b3:f0:14:16:ae:c2:01:3b:af:36:1f:
                    53:53:c9:6c:1e:ed:ac:a0:75:91:79:41:a7:0d:f1:
                    2a:c1:8b:7d:ad:e6:d1:78:35:b5:43:fb:d4:bb:e7:
                    55:5d:db:c8:75:45:b6:c1:97:3c:87:34:22:1c:70:
                    48:b4:b6:cb:ef:43:6c:f4:68:2b:e2:1d:47:8f:3b:
                    8a:5c:9c:30:dd:c6:c8:2c:45:78:a2:cc:e9:39:4c:
                    88:48:6c:2d:38:2c:04:cb:61:75:b3:a9:47:74:be:
                    89:08:20:aa:97:d2:c4:d5:49:6e:fd:45:25:b7:06:
                    e7:26:e0:3d:62:5a:b6:a5:ed:67:1a:60:d5:81:63:
                    82:f3:4a:b2:43:3c:ec:f8:7b:3d:ea:f2:00:21:12:
                    22:78:02:8f:19:a6:ab:4e:d7:68:2e:5c:f8:82:b0:
                    6c:ba:61:41:94:48:eb:20:37:ed:29:2f:18:88:a1:
                    2e:5f:68:be:76:64:b2:85:e4:cc:0f:f2:a6:96:13:
                    19:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:06:A8:52:F4:03:F5:AD:39:20:93:89:C8:64:A2:E4:B1:30:01:D9
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/AC96857C669A11EFAA2C7969C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.8.112.0/21
                  122.8.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:a2:1f:0a:18:4f:1e:6c:95:9d:66:3a:64:0d:d6:78:35:ec:
         f3:5c:a7:ac:bd:73:e2:40:ba:66:f9:b0:fd:e6:9f:c8:a5:b4:
         b8:94:54:13:02:39:30:03:9b:e6:67:68:ae:bd:c9:7c:6c:f0:
         46:ad:3c:54:a3:e4:2b:a0:1d:50:3e:c8:e2:65:c6:dc:29:b1:
         43:23:d4:97:a0:9c:f1:6a:b1:3a:ec:89:48:67:4a:cd:43:1d:
         57:85:14:11:06:5a:d0:e4:21:76:48:75:d8:0b:e0:af:6e:40:
         c6:38:43:4a:8a:d6:cb:60:15:eb:0b:c8:c4:8d:a0:00:a0:55:
         87:eb:b0:d0:18:55:1d:9f:cc:f5:c7:db:f4:9d:8c:ea:81:50:
         d4:08:14:27:1c:0e:b6:4e:45:98:c2:0a:72:3f:25:8b:96:89:
         09:37:da:4f:26:03:d5:90:0f:c1:fd:01:82:22:cb:af:99:10:
         20:77:11:a7:e8:e0:02:42:33:0e:ba:c3:39:fd:74:cb:dc:fd:
         02:d6:30:0d:d3:65:fa:ca:a8:c9:ee:16:7d:16:f4:ec:8c:59:
         0c:e8:50:8c:21:80:10:f3:6d:30:ec:fa:10:d7:86:30:1d:78:
         f4:95:f0:8e:73:38:bf:c1:7e:7d:60:f8:da:95:db:5f:d4:0b:
         9a:72:a7:a2
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICM9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM3MEYxMTAvBgNVBAUTKEJCNUI4MTU2QjAzN0U1RDIyMjYzRUFDN0Y2QTExQzA1
MkZERjYzM0YwHhcNMjQwODMwMDYzOTU4WhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQxNjkzZS1mMDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqd/2oRaSX2G07WZB0S3TOnK/I/KZ5CsQV5vMOba7wJxa42GqgHih4n4T/D+l
FYZG1sJlqdvv99oEq+ROjPbxs/AUFq7CATuvNh9TU8lsHu2soHWReUGnDfEqwYt9
rebReDW1Q/vUu+dVXdvIdUW2wZc8hzQiHHBItLbL70Ns9Ggr4h1HjzuKXJww3cbI
LEV4oszpOUyISGwtOCwEy2F1s6lHdL6JCCCql9LE1Ulu/UUltwbnJuA9Ylq2pe1n
GmDVgWOC80qyQzzs+Hs96vIAIRIieAKPGaarTtdoLlz4grBsumFBlEjrIDftKS8Y
iKEuX2i+dmSyheTMD/KmlhMZYwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLAGqFL0
A/WtOSCTichkouSxMAHZMB8GA1UdIwQYMBaAFLtbgVawN+XSImPqx/ahHAUv32M/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzcwRi83MzQ2RThBMjYw
NDkxMUUyQTMwNzU3OEQyOTc5QkIyMC91MXVCVnJBMzVkSWlZLXJIOXFFY0JTX2ZZ
ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3UxdUJWckEzNWRJaVktckg5cUVjQlNfZll6OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTM3MEYvNzM0NkU4QTI2MDQ5MTFFMkEzMDc1NzhEMjk3OUJCMjAvQUM5Njg1N0M2
NjlBMTFFRkFBMkM3OTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAN6CHADBAJ6CHwwDQYJKoZIhvcNAQELBQADggEBACKiHwoY
Tx5slZ1mOmQN1ng17PNcp6y9c+JAumb5sP3mn8iltLiUVBMCOTADm+ZnaK69yXxs
8EatPFSj5CugHVA+yOJlxtwpsUMj1JegnPFqsTrsiUhnSs1DHVeFFBEGWtDkIXZI
ddgL4K9uQMY4Q0qK1stgFesLyMSNoACgVYfrsNAYVR2fzPXH2/SdjOqBUNQIFCcc
DrZORZjCCnI/JYuWiQk32k8mA9WQD8H9AYIiy6+ZECB3Eafo4AJCMw66wzn9dMvc
/QLWMA3TZfrKqMnuFn0W9OyMWQzoUIwhgBDzbTDs+hDXhjAdePSV8I5zOL/Bfn1g
+NqV21/UC5pyp6I=
-----END CERTIFICATE-----