Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B4B4E810CE2F11EEAF078018C4F9AE02.roa
File:                     B4B4E810CE2F11EEAF078018C4F9AE02.roa (raw, json)
Hash identifier:          xKWytfzC1SvywuZjFw5bBW4OSO5MJ+G6a9q9erT+YAU=
Subject key identifier:   28:2D:0C:3D:8F:CF:FE:40:94:58:F7:5A:EC:0E:B8:12:9C:66:35:03
Certificate issuer:       /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial:       332E
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B4B4E810CE2F11EEAF078018C4F9AE02.roa
Signing time:             Thu 14 Mar 2024 16:01:16 +0000
ROA not before:           Thu 14 Mar 2024 16:01:16 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     53356
IP address blocks:        122.8.32.0/22 maxlen: 22
                          122.8.36.0/22 maxlen: 22
                          122.8.48.0/22 maxlen: 22
                          122.8.64.0/22 maxlen: 22
                          122.8.112.0/22 maxlen: 22
                          122.8.116.0/22 maxlen: 22
                          122.8.124.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 24 Apr 2024 09:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13102 (0x332e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
        Validity
            Not Before: Mar 14 16:01:16 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=65f31f4c-3964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3f:ac:06:25:f3:80:3a:87:ab:36:c5:3c:a1:
                    98:2e:3c:41:61:49:f6:d4:e4:3d:42:45:6c:68:c7:
                    d0:0a:47:32:c1:e8:ba:df:3a:66:c5:95:ec:bf:b4:
                    c5:63:f6:f3:b4:92:e1:4b:0e:bb:c5:93:e2:22:a8:
                    c1:97:e7:90:59:68:fa:79:10:df:8e:07:8a:aa:a3:
                    fc:8a:bc:10:39:a1:c1:2f:9c:8e:5a:57:9d:2f:64:
                    fa:97:ec:8f:28:06:87:50:9e:be:d9:04:e1:ea:e2:
                    3b:91:11:e7:2e:7e:4c:7c:b7:72:5c:66:c1:93:c4:
                    62:63:44:6c:2e:6d:73:81:ec:85:ee:a4:eb:5e:3f:
                    b8:1a:7a:c3:76:02:6c:2b:07:26:34:51:37:21:6b:
                    ee:0f:dc:5e:20:02:ab:82:9d:ca:79:b1:f6:3c:ef:
                    9f:1e:e0:4d:17:10:28:7c:8f:07:06:4f:0b:ba:3d:
                    87:c0:fa:14:b0:b3:b9:f3:47:50:ac:7b:8b:59:1b:
                    e5:d7:2d:dc:44:2a:46:d9:40:8f:33:69:5a:38:db:
                    33:82:bd:00:02:9d:dc:4b:19:6a:91:fc:51:36:70:
                    8e:12:c1:98:7d:a0:d7:be:7f:bc:5a:27:0d:3d:eb:
                    ec:1b:47:bd:87:a9:ab:71:e1:7b:49:89:ac:11:46:
                    84:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2D:0C:3D:8F:CF:FE:40:94:58:F7:5A:EC:0E:B8:12:9C:66:35:03
            X509v3 Authority Key Identifier:
                keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/B4B4E810CE2F11EEAF078018C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.8.32.0/21
                  122.8.48.0/22
                  122.8.64.0/22
                  122.8.112.0/21
                  122.8.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:e0:15:de:87:1f:ea:f5:88:09:c5:b0:da:42:82:18:5d:e7:
         de:18:a6:84:2d:fb:a5:ac:ea:1d:ea:7c:51:58:52:e8:f2:b7:
         d2:b5:96:c7:28:2e:a2:1b:ad:0f:80:c6:25:00:9f:27:59:3a:
         e7:8c:a9:b0:2a:5b:8b:b0:9c:d8:88:a8:0d:ad:0e:1b:36:f7:
         7a:7d:0f:6f:c2:87:35:7f:1e:23:4e:93:ad:4c:32:b1:87:9a:
         8c:a0:1e:e6:fb:4a:25:8e:6e:1a:57:fa:c5:a9:ce:67:10:49:
         b8:d6:09:45:1b:e1:d6:25:1f:42:a2:68:5d:66:99:29:18:8a:
         2c:56:dd:e6:a6:0d:74:2d:fb:e3:18:9a:da:46:f8:29:35:8b:
         02:bf:4e:cd:3b:b0:d2:60:74:0c:72:15:47:d6:d5:93:7a:f3:
         0c:a4:ea:84:13:a2:2f:27:c8:68:e6:76:54:23:1d:80:bb:3f:
         8e:6b:7a:a3:e4:58:c5:58:da:26:56:68:f3:f4:be:b4:d5:91:
         db:5b:ac:2f:cd:9c:28:f3:00:b7:4b:50:1d:34:7d:d5:28:5e:
         28:3e:90:e3:5f:5e:4d:f6:e1:75:d9:0e:79:d8:98:44:5e:51:
         47:c7:4e:91:99:20:10:77:0a:e4:1d:24:ed:7f:77:2e:2c:a8:
         bc:ef:81:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----