Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/D9FD5CBEC5CF11EEBD593366C4F9AE02.roa
File:                     D9FD5CBEC5CF11EEBD593366C4F9AE02.roa (raw, json)
Hash identifier:          P/viSL/jiNQQHipNrfDGiJ/PhM8kIwSQ+ah7RJ1w7pk=
Subject key identifier:   A3:6F:92:58:73:C4:FD:03:5A:85:01:3A:41:06:A8:D9:6B:A3:29:E7
Certificate issuer:       /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial:       0514
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/D9FD5CBEC5CF11EEBD593366C4F9AE02.roa
Signing time:             Wed 07 Feb 2024 15:45:00 +0000
ROA not before:           Wed 07 Feb 2024 15:45:00 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     150177
IP address blocks:        103.79.16.0/24 maxlen: 24
                          122.50.1.0/24 maxlen: 24
                          122.50.3.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 26 Feb 2024 14:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1300 (0x514)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
        Validity
            Not Before: Feb  7 15:45:00 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65c3a57c-a012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3c:dc:e2:ec:06:20:35:d0:a5:62:7d:80:ba:
                    a3:28:04:4c:0c:2c:b4:79:ee:71:7e:85:df:1a:9b:
                    b6:73:ce:65:87:f3:c3:a9:d5:78:81:12:1f:5c:60:
                    03:97:82:e6:51:e5:ea:bd:d8:5a:fc:35:43:a3:9d:
                    2e:df:a8:5e:21:01:1c:b2:00:f5:fd:55:85:c2:87:
                    90:ff:e1:aa:25:75:c9:4c:ad:66:25:78:36:ab:9c:
                    14:56:11:bf:78:c1:fd:b3:9f:2f:69:41:59:3f:64:
                    33:ca:61:bc:51:8f:45:9c:45:c7:ad:cc:4d:93:8a:
                    3f:ea:a1:e0:aa:0a:54:a1:4e:e7:fb:9b:42:f1:ab:
                    7c:b2:51:d5:6f:af:50:11:d2:36:f3:3b:d0:ee:c8:
                    67:c3:07:fa:45:21:0c:40:f0:0e:e3:ca:78:59:27:
                    15:ba:cd:06:4b:1c:ec:31:27:22:59:2c:a9:88:d9:
                    14:6c:35:d2:0e:19:3a:1c:62:97:1c:bd:8d:cf:9f:
                    11:9d:fe:c3:a0:98:f6:bc:19:79:ec:6e:c7:ab:78:
                    51:ea:8a:c0:40:d7:49:7c:39:7b:83:cf:0a:c4:29:
                    0d:ec:3e:a4:19:9c:1c:11:d4:ce:0e:15:0f:d5:6b:
                    f1:35:17:d9:8a:0f:c1:1e:7f:70:8a:a1:08:70:1e:
                    07:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6F:92:58:73:C4:FD:03:5A:85:01:3A:41:06:A8:D9:6B:A3:29:E7
            X509v3 Authority Key Identifier:
                keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/D9FD5CBEC5CF11EEBD593366C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.16.0/24
                  122.50.1.0/24
                  122.50.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:74:b0:70:42:a5:5c:ea:43:02:d0:4a:f1:1f:46:2b:a8:71:
         0d:40:c1:5d:4e:48:76:22:ac:99:26:21:f0:4a:c2:ff:d9:34:
         cb:f1:be:9f:6f:5f:a4:3f:d4:76:a0:72:68:94:07:f1:60:48:
         a8:91:15:24:ba:49:04:6a:e8:fd:a3:29:f0:26:a2:f2:c1:96:
         db:2e:c0:f4:67:69:ef:a8:d8:5a:0e:ad:96:04:8c:6e:4d:bf:
         8b:bb:56:64:ed:91:a4:38:b0:00:09:da:cf:c7:42:fc:9b:96:
         69:a4:66:4e:9c:b1:59:c3:1b:e6:8c:b1:a6:48:2f:25:08:e2:
         ab:bf:bb:d2:30:ed:96:3d:bf:54:17:18:e7:6f:1e:7b:53:08:
         e1:af:8a:20:e8:c7:8a:ee:73:f7:ea:6f:a5:ce:07:7b:bc:f7:
         c7:4d:e4:f0:57:88:8f:98:e1:14:0c:ed:8a:13:84:f4:d2:72:
         cb:10:42:b6:29:5c:e7:df:83:da:2f:b5:dd:dd:7c:98:d0:bc:
         2c:e4:9e:9d:02:0f:30:d4:6c:1f:26:ff:82:7a:c4:f7:3e:a2:
         42:f8:e8:c8:c2:4f:fc:be:25:35:91:1d:82:42:2d:d5:a3:09:
         2d:dc:81:c8:87:35:09:c5:eb:3d:7e:64:8a:cf:81:08:2e:e3:
         b1:dc:4d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----