Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D32A90EED08A11EE9B67A937C4F9AE02.roa
File:                     D32A90EED08A11EE9B67A937C4F9AE02.roa (raw, json)
Hash identifier:          6BxU81dAoCUXLpvGFPWaxtRPGy8aUZJW6efhTrr/rCA=
Subject key identifier:   E6:38:DB:45:50:BC:9A:AB:75:C3:DC:E6:D0:F4:02:5F:53:12:6F:80
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       835B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D32A90EED08A11EE9B67A937C4F9AE02.roa
Signing time:             Wed 21 Feb 2024 07:28:36 +0000
ROA not before:           Wed 21 Feb 2024 07:28:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     136290
IP address blocks:        103.21.68.0/23 maxlen: 24
                          103.48.68.0/22 maxlen: 24
                          2407:b7c0::/32 maxlen: 32
                          2407:b7c0::/40 maxlen: 48
                          2407:b7c0:100::/40 maxlen: 48

Validation:               Failed, certificate revoked on Wed 21 Feb 2024 07:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33627 (0x835b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Feb 21 07:28:36 2024 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=65d5a624-e07f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f6:fe:94:26:65:e2:4e:d6:2e:9d:69:97:f1:
                    16:71:9d:b1:12:f4:21:8f:89:0b:a7:9f:4c:8c:30:
                    a0:aa:18:b9:67:0b:d4:1e:09:36:ac:eb:f5:f3:56:
                    4c:01:28:ad:3f:da:64:2e:48:f3:b3:12:c7:c3:65:
                    46:db:c4:c9:04:ed:74:f2:ee:c2:33:3e:06:9b:9d:
                    7e:52:05:9c:84:9d:b5:e5:2e:9f:11:67:9c:a7:3d:
                    38:03:a1:c9:c5:60:12:0b:45:c6:26:8b:74:a2:17:
                    17:63:91:6f:1d:4e:74:e3:c7:fd:0e:09:a1:14:e3:
                    38:9e:0d:ea:ad:45:09:5a:3a:77:b4:2e:6c:1f:b5:
                    6e:8d:c9:bc:ee:72:45:9b:0c:d8:54:16:ac:34:ec:
                    53:21:80:ea:e2:c6:1d:e3:16:59:92:de:75:5f:fa:
                    69:5b:3d:b8:71:0b:d6:87:7e:a3:1e:c6:7d:6f:8d:
                    78:1d:2e:77:63:c3:af:80:72:2b:a0:fd:fc:65:8f:
                    8f:ca:14:11:7d:3c:18:1d:42:55:a8:63:1a:c8:f8:
                    eb:1c:3a:0e:bd:8c:ca:0d:1d:5a:21:82:56:96:db:
                    64:68:e3:de:d0:0c:f3:5f:1e:7e:16:0d:99:f2:fe:
                    7a:54:36:92:a3:6c:b4:44:e5:98:e6:6d:34:d9:e3:
                    c1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:38:DB:45:50:BC:9A:AB:75:C3:DC:E6:D0:F4:02:5F:53:12:6F:80
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D32A90EED08A11EE9B67A937C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.68.0/23
                  103.48.68.0/22
                IPv6:
                  2407:b7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:0d:ae:4d:4e:d0:dd:ef:67:ab:50:eb:09:42:82:ef:0e:39:
         52:24:81:48:40:a5:1c:dd:a1:aa:df:48:ca:8e:fd:dc:97:94:
         83:fc:98:e8:3b:17:64:12:ad:8d:68:c4:b0:6f:65:e1:82:03:
         ea:09:a2:a4:42:3e:46:9e:c6:b8:ff:05:19:86:c3:da:02:3e:
         8e:86:c4:de:e9:a6:79:46:26:45:c2:8b:85:da:68:be:89:f4:
         45:3d:1b:d0:42:d8:e1:ba:a0:68:91:4b:d2:5b:9a:82:6c:3b:
         5b:f0:ae:a7:a7:41:09:ae:04:4e:87:c1:9c:32:33:86:f0:75:
         d2:30:e3:5d:c5:89:fd:5f:d6:0c:8d:b4:c9:5b:19:50:12:05:
         3f:09:89:aa:8d:36:71:bf:2e:cf:ee:23:de:3b:cb:c3:33:fc:
         a9:78:f3:00:79:ff:d7:b1:c3:88:d2:84:92:50:45:8c:1e:ae:
         e4:7d:6c:f8:2c:6f:07:6e:9e:ed:98:55:f0:a3:17:46:ef:0e:
         0f:ad:92:6d:60:cd:ba:d0:48:b0:b6:83:97:57:96:ee:f2:0c:
         5a:82:2a:fe:7e:fb:dc:f5:d0:fc:f9:03:5b:25:b2:6b:da:45:
         34:0e:6a:3d:01:6c:ad:a6:3a:6d:e8:f9:fa:ca:60:25:48:81:
         5b:06:90:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----