Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/F773727CC4B311EAA0E09D26C4F9AE02.roa
File:                     F773727CC4B311EAA0E09D26C4F9AE02.roa (raw, json)
Hash identifier:          c87IiKGQjQurweRggM9732quOjgIEegnDL9lLp/hsOU=
Subject key identifier:   F6:2F:EF:0E:34:6B:DA:71:EB:9E:07:6A:05:AF:A5:1C:7A:E8:74:80
Certificate issuer:       /CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
Certificate serial:       107A
Authority key identifier: 71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/F773727CC4B311EAA0E09D26C4F9AE02.roa
Signing time:             Wed 27 Jul 2022 06:24:38 +0000
ROA not before:           Wed 27 Jul 2022 06:24:38 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     1221
IP address blocks:        1.120.0.0/13 maxlen: 13
                          1.128.0.0/11 maxlen: 11
                          1.143.62.0/24 maxlen: 24
                          58.160.0.0/12 maxlen: 12
                          60.224.0.0/13 maxlen: 13
                          61.8.0.0/19 maxlen: 19
                          61.9.128.0/17 maxlen: 17
                          101.103.0.0/16 maxlen: 16
                          101.160.0.0/11 maxlen: 11
                          110.140.0.0/15 maxlen: 15
                          110.142.0.0/16 maxlen: 16
                          110.143.0.0/16 maxlen: 16
                          110.144.0.0/13 maxlen: 13
                          120.144.0.0/13 maxlen: 13
                          120.152.0.0/14 maxlen: 14
                          120.156.0.0/15 maxlen: 15
                          120.158.0.0/16 maxlen: 16
                          121.208.0.0/12 maxlen: 12
                          123.209.0.0/16 maxlen: 16
                          123.210.0.0/15 maxlen: 15
                          124.176.0.0/12 maxlen: 12
                          125.255.0.0/16 maxlen: 16
                          202.7.64.0/19 maxlen: 19
                          202.12.128.0/18 maxlen: 18
                          202.12.192.0/19 maxlen: 19
                          202.12.224.0/20 maxlen: 20
                          202.12.240.0/23 maxlen: 23
                          202.12.242.0/24 maxlen: 24
                          203.2.228.0/24 maxlen: 24
                          203.9.190.0/23 maxlen: 23
                          203.12.42.0/24 maxlen: 24
                          203.12.97.0/24 maxlen: 24
                          203.12.144.0/21 maxlen: 21
                          203.13.21.0/24 maxlen: 24
                          203.14.0.0/20 maxlen: 20
                          203.15.68.0/24 maxlen: 24
                          203.16.180.0/22 maxlen: 22
                          203.17.40.0/21 maxlen: 21
                          203.17.162.0/24 maxlen: 24
                          203.18.76.0/23 maxlen: 23
                          203.18.112.0/20 maxlen: 20
                          203.22.129.0/24 maxlen: 24
                          203.24.134.0/23 maxlen: 23
                          203.24.170.0/24 maxlen: 24
                          203.26.8.0/22 maxlen: 22
                          203.26.175.0/24 maxlen: 24
                          203.27.69.0/24 maxlen: 24
                          203.27.128.0/18 maxlen: 18
                          203.27.237.0/24 maxlen: 24
                          203.29.160.0/20 maxlen: 20
                          203.34.33.0/24 maxlen: 24
                          203.34.68.0/24 maxlen: 24
                          203.35.0.0/16 maxlen: 16
                          203.36.0.0/14 maxlen: 14
                          203.40.0.0/13 maxlen: 13
                          203.48.0.0/14 maxlen: 14
                          203.52.0.0/15 maxlen: 15
                          203.54.0.0/16 maxlen: 16
                          203.58.32.0/19 maxlen: 19
                          203.58.64.0/18 maxlen: 18
                          203.58.128.0/17 maxlen: 17
                          203.62.148.0/22 maxlen: 22
                          203.62.248.0/21 maxlen: 21
                          203.92.224.0/19 maxlen: 24
                          203.100.224.0/19 maxlen: 19
                          203.143.192.0/18 maxlen: 18
                          203.143.192.0/19 maxlen: 19
                          203.143.224.0/19 maxlen: 19
                          210.23.128.0/19 maxlen: 19
                          2001:8000::/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4218 (0x107a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A983/serialNumber=71565F2D7B924CD72B455B68B667194010BB1A9F
        Validity
            Not Before: Jul 27 06:24:38 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=62e0da26-fe21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a6:73:d3:6e:c9:2e:77:a8:23:c7:80:25:84:
                    df:dd:08:e7:8e:48:d7:f5:01:64:fd:b8:ea:02:0d:
                    c3:10:7f:b5:22:a2:5a:03:06:5f:00:71:7e:bb:98:
                    a1:2b:f7:18:87:0e:83:79:3f:2c:3b:17:f3:3d:6a:
                    33:56:f0:23:d4:33:62:7e:47:47:8c:4c:32:8e:93:
                    3f:ed:62:dc:67:86:eb:58:0b:81:7e:25:49:84:89:
                    63:97:af:cf:d5:d8:8a:c6:cc:30:48:36:87:32:01:
                    85:59:aa:02:e2:d4:93:95:b6:ea:22:eb:b8:8f:cc:
                    a9:90:6b:88:05:a8:bb:ee:84:78:2e:ef:01:b7:83:
                    28:3f:23:7b:96:33:c5:63:fd:ed:76:ae:19:8b:de:
                    e9:3c:59:d7:12:e6:7d:24:84:0d:04:df:40:c0:47:
                    6f:c1:a7:1d:46:94:ff:06:79:56:62:da:82:2b:ba:
                    e2:c9:64:9a:72:67:18:e3:69:cb:91:f6:60:ea:4a:
                    ea:c2:03:fd:02:1b:b7:a2:d0:d9:7e:35:39:58:da:
                    7c:85:e8:23:3e:50:03:76:c8:ad:b3:94:7f:d0:39:
                    5f:c6:24:e7:0c:4b:58:de:e1:2c:be:b1:2f:c1:0e:
                    e5:56:99:86:33:ad:3a:05:56:eb:e1:bd:34:ea:20:
                    28:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2F:EF:0E:34:6B:DA:71:EB:9E:07:6A:05:AF:A5:1C:7A:E8:74:80
            X509v3 Authority Key Identifier:
                keyid:71:56:5F:2D:7B:92:4C:D7:2B:45:5B:68:B6:67:19:40:10:BB:1A:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/cVZfLXuSTNcrRVtotmcZQBC7Gp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cVZfLXuSTNcrRVtotmcZQBC7Gp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/16730D20CD0F11E89D9FF165C4F9AE02/F773727CC4B311EAA0E09D26C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.120.0.0-1.159.255.255
                  58.160.0.0/12
                  60.224.0.0/13
                  61.8.0.0/19
                  61.9.128.0/17
                  101.103.0.0/16
                  101.160.0.0/11
                  110.140.0.0-110.151.255.255
                  120.144.0.0-120.158.255.255
                  121.208.0.0/12
                  123.209.0.0-123.211.255.255
                  124.176.0.0/12
                  125.255.0.0/16
                  202.7.64.0/19
                  202.12.128.0-202.12.242.255
                  203.2.228.0/24
                  203.9.190.0/23
                  203.12.42.0/24
                  203.12.97.0/24
                  203.12.144.0/21
                  203.13.21.0/24
                  203.14.0.0/20
                  203.15.68.0/24
                  203.16.180.0/22
                  203.17.40.0/21
                  203.17.162.0/24
                  203.18.76.0/23
                  203.18.112.0/20
                  203.22.129.0/24
                  203.24.134.0/23
                  203.24.170.0/24
                  203.26.8.0/22
                  203.26.175.0/24
                  203.27.69.0/24
                  203.27.128.0/18
                  203.27.237.0/24
                  203.29.160.0/20
                  203.34.33.0/24
                  203.34.68.0/24
                  203.35.0.0-203.54.255.255
                  203.58.32.0-203.58.255.255
                  203.62.148.0/22
                  203.62.248.0/21
                  203.92.224.0/19
                  203.100.224.0/19
                  203.143.192.0/18
                  210.23.128.0/19
                IPv6:
                  2001:8000::/20

    Signature Algorithm: sha256WithRSAEncryption
         0d:7b:cd:9d:af:27:a9:16:f5:4b:83:65:18:20:f8:a0:a2:86:
         98:49:29:21:fd:ab:94:de:59:90:82:42:2f:74:35:b2:99:52:
         82:f5:49:57:9e:4c:4c:47:e1:2f:56:ae:45:50:11:d9:f9:b2:
         9e:7b:87:64:68:0f:df:9b:44:d8:0b:3d:a3:ef:37:80:a0:eb:
         66:7f:a7:fa:0a:ba:43:26:ba:e1:0e:fe:c1:20:46:20:24:96:
         a3:87:a8:99:9a:cf:3f:93:c6:69:98:11:3e:9d:11:83:69:22:
         90:5d:f7:54:2b:aa:37:7e:3a:a7:90:86:79:98:e5:34:2c:c4:
         44:25:e3:2c:b3:66:53:30:16:bc:be:a2:d5:1e:80:bf:72:65:
         b0:22:cd:18:a7:bf:da:d6:7b:1f:a1:ca:20:ae:cb:01:c7:67:
         fc:e7:82:2f:65:a4:77:de:0b:91:40:76:78:f6:be:12:33:1e:
         06:8e:ca:4d:fd:9a:4d:a4:ba:58:17:d5:19:07:b4:fb:58:9d:
         7a:70:4d:6c:65:4a:eb:32:85:53:54:57:43:4a:e2:07:05:28:
         c2:b2:38:09:8e:26:41:1d:c0:66:13:be:d9:54:ee:99:be:21:
         1f:2a:15:67:a9:1b:3f:f5:e0:0d:84:cf:7e:c0:29:3d:ec:d1:
         8f:ad:5d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:45 2023 by rpki-client on console-fra.rpki-client.org