Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/AD2C5D1842E311EDB234A10BC4F9AE02.roa
File:                     AD2C5D1842E311EDB234A10BC4F9AE02.roa (raw, json)
Hash identifier:          xBZ8tEJdV3yQhYLYvRfKHF7S7Y7q0+XDCvWAvcwwlis=
Subject key identifier:   A4:43:EF:86:40:0C:4F:A5:C5:35:FE:4A:EB:0C:99:6F:76:79:9E:57
Certificate issuer:       /CN=A915A0F9/serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
Certificate serial:       0508
Authority key identifier: 74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/AD2C5D1842E311EDB234A10BC4F9AE02.roa
Signing time:             Wed 10 Jul 2024 16:52:32 +0000
ROA not before:           Wed 10 Jul 2024 16:52:32 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     142436
IP address blocks:        103.168.90.0/23 maxlen: 23
                          103.168.90.0/24 maxlen: 24
                          103.168.91.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 27 Jul 2024 04:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1288 (0x508)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0F9/serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
        Validity
            Not Before: Jul 10 16:52:32 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=668ebc50-c647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7f:ed:1f:34:36:11:81:ef:4b:fd:49:a5:82:
                    8d:69:fd:47:d4:57:d4:a1:16:c6:47:b3:63:1a:60:
                    0c:8f:c6:83:dd:80:58:e5:1a:5d:18:34:c0:0e:61:
                    f1:f5:ee:f4:ac:36:92:63:10:9b:e8:db:55:20:4c:
                    64:d6:37:2d:5a:8d:36:50:77:4e:90:23:66:e7:fb:
                    22:2f:ea:79:0b:62:e2:8d:8a:91:43:a7:bb:32:ba:
                    b3:50:fd:7e:4b:8b:95:c2:18:23:cf:6b:f5:d9:66:
                    96:e6:0f:68:01:8d:de:dd:de:7a:ee:ee:cf:2b:5a:
                    b4:04:06:69:70:4b:37:12:65:dc:34:17:8a:43:c3:
                    4b:74:e7:66:73:84:af:a5:0f:c5:0b:ae:28:e5:ea:
                    25:70:63:57:3c:ce:32:96:49:79:86:dc:6e:72:b4:
                    6c:be:e0:4b:9e:38:72:31:44:5d:a0:1d:f0:0f:e7:
                    11:4d:d1:f3:6f:37:f1:9c:51:a3:fe:32:7d:09:a1:
                    bc:42:06:df:ea:49:c7:4d:6e:22:10:43:d3:cc:82:
                    b8:fa:d5:87:86:88:8d:e4:ea:5a:60:bf:b7:06:bc:
                    c1:ba:0c:3d:95:36:09:5e:60:43:20:9b:62:71:41:
                    0d:37:2d:9c:c5:c3:3c:8b:91:3e:0c:88:52:98:29:
                    bf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:43:EF:86:40:0C:4F:A5:C5:35:FE:4A:EB:0C:99:6F:76:79:9E:57
            X509v3 Authority Key Identifier:
                keyid:74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/AD2C5D1842E311EDB234A10BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:90:40:1c:ea:c9:dc:c0:69:8c:67:40:ad:c8:ec:34:1c:b6:
         46:24:c5:f5:b3:ab:38:98:16:b6:c4:ce:f9:1e:76:16:ef:7b:
         b7:cb:5b:c4:f4:a0:44:23:57:33:dd:1a:26:4d:55:85:c3:72:
         ef:de:80:52:bb:a0:c7:fd:b2:be:9f:66:96:5c:ef:be:0e:98:
         7c:ec:c6:a2:7e:7d:4d:5d:fe:b1:14:f5:69:57:18:7c:ea:cc:
         98:29:63:34:c7:4a:1c:bb:61:08:7a:80:ac:7f:31:9f:4e:07:
         66:01:21:5c:bb:dc:e2:49:c1:6e:c9:44:81:d8:66:57:7d:ed:
         4c:85:6a:a5:52:b8:00:1f:e9:a3:29:c6:b5:42:e4:40:28:35:
         06:69:6b:f0:e3:0a:74:36:0f:fe:66:29:d6:14:a1:bf:f1:4f:
         79:75:32:1b:99:d7:77:e3:32:06:67:74:29:60:a7:c0:ae:99:
         04:b3:61:cd:34:1e:d7:e2:a9:77:4e:af:b5:24:c1:77:bf:b1:
         77:eb:bb:3f:84:8a:3f:f0:fb:91:69:b5:41:7e:1a:1d:6d:b4:
         a9:5c:46:98:f8:f8:e4:a3:28:76:a5:d9:e7:6e:55:35:2a:02:
         f8:6c:bd:61:07:93:1c:eb:54:5d:33:b2:0a:0c:61:5d:51:fa:
         89:34:2d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 06:47:04 2024 by rpki-client on console-fra.rpki-client.org