Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/A0CFCD4E59DD11EFB06C1C0CC4F9AE02.roa
File:                     A0CFCD4E59DD11EFB06C1C0CC4F9AE02.roa (raw, json)
Hash identifier:          C9utwVlQXH2kZ1weZFohnS2RHobqMkYmtk0F5dkQb+o=
Subject key identifier:   BA:C0:C9:41:E5:FC:5A:BF:02:C2:86:05:8F:73:16:B2:BA:69:D8:5C
Certificate issuer:       /CN=A9186513/serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
Certificate serial:       0682
Authority key identifier: B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/A0CFCD4E59DD11EFB06C1C0CC4F9AE02.roa
Signing time:             Tue 20 Aug 2024 03:25:43 +0000
ROA not before:           Tue 20 Aug 2024 03:25:43 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     141718
IP address blocks:        103.205.18.0/23 maxlen: 23
                          103.205.18.0/24 maxlen: 24
                          103.205.19.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 24 Aug 2024 07:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1666 (0x682)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186513/serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
        Validity
            Not Before: Aug 20 03:25:43 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=66c40cb7-4769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3f:4b:0a:ed:ac:9f:db:be:f4:8e:f5:aa:82:
                    3e:83:ff:f8:9c:3f:02:a4:f5:ad:21:80:f1:dd:18:
                    8e:ff:23:dc:7b:1e:1d:17:6f:6a:7a:3b:bc:9f:bf:
                    22:61:9f:23:c4:71:28:07:8c:0b:63:c6:83:2e:0b:
                    1e:26:ba:63:c4:ea:0d:25:84:b3:5b:9a:f2:57:6a:
                    9c:20:f5:68:8b:49:e5:76:8e:68:02:3e:d9:8e:b5:
                    5f:4e:f9:ba:fd:45:bc:a1:44:03:db:33:6f:b7:5b:
                    c5:18:82:53:b3:6e:c6:20:6e:21:a2:7c:d3:34:94:
                    e4:18:26:6d:70:10:35:fa:c2:5c:c4:d1:18:17:54:
                    42:51:60:a7:b0:fc:35:1c:f7:e6:01:60:6c:11:2b:
                    92:0f:8f:af:7d:fe:06:db:38:19:b6:a9:69:33:58:
                    5e:0d:5e:7a:ce:f7:7f:3c:03:57:61:03:a1:ee:3d:
                    a3:16:07:39:7f:44:a4:87:02:7a:b3:7f:a3:4b:a3:
                    bf:6e:ef:7f:9b:4c:b5:7c:ac:7a:68:84:e0:61:3e:
                    8e:86:a7:5f:6e:28:22:90:f6:7c:9c:24:f7:62:fd:
                    27:07:f7:78:a2:31:92:6a:14:f8:42:6b:30:e6:1d:
                    41:ae:dd:81:c5:72:12:df:e0:19:43:ed:fc:5e:0a:
                    28:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C0:C9:41:E5:FC:5A:BF:02:C2:86:05:8F:73:16:B2:BA:69:D8:5C
            X509v3 Authority Key Identifier:
                keyid:B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/A0CFCD4E59DD11EFB06C1C0CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:52:8b:b8:1f:1c:fb:d6:26:9c:c7:c1:bd:c8:a3:75:d4:94:
         53:af:34:8f:09:97:c1:d1:39:f9:a7:10:a7:b7:bc:51:d5:9a:
         ab:e4:22:19:37:16:e4:3b:60:93:7c:7a:e1:b7:10:31:bb:97:
         8f:fc:e6:80:7c:97:07:e6:09:1d:42:a2:02:fb:2e:ff:1e:90:
         17:6f:49:9a:d2:98:fc:e0:78:4e:07:6f:67:78:8a:ec:ac:eb:
         f8:70:b7:0f:8f:c3:2a:37:18:90:dc:b7:45:2d:8c:de:45:8b:
         b4:b3:1d:2f:fd:85:16:47:a6:d3:a4:92:ac:fe:ce:0a:ca:c5:
         67:ba:48:32:37:4e:94:9d:be:ca:cb:70:01:1f:d1:f8:e6:85:
         70:61:1b:b9:65:39:eb:e1:65:a0:79:b7:c3:d3:f2:09:4c:ae:
         16:01:95:a8:36:90:1b:26:53:e3:5b:8e:92:35:72:b9:49:a8:
         a0:e9:51:9d:45:5b:18:79:5e:34:91:e9:0e:04:53:15:df:7c:
         64:29:65:41:86:e0:7c:ee:c9:81:08:c5:84:31:04:e2:19:49:
         4c:ea:34:7e:86:8d:9f:a7:0d:26:90:d6:43:ff:b0:c5:ea:41:
         1d:d7:39:24:41:73:d3:4c:c6:db:f0:de:82:ba:7b:13:07:a9:
         ca:24:68:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 24 09:28:42 2024 by rpki-client on console-fra.rpki-client.org