Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/C2D5B85E9BFC11ED99828F6BC4F9AE02.roa
File:                     C2D5B85E9BFC11ED99828F6BC4F9AE02.roa (raw, json)
Hash identifier:          CaTanO8eFvutkfQnAolu2sGqjRzR/ZNe3vBW0rzrApo=
Subject key identifier:   7E:4C:43:C1:7C:5F:77:5E:CE:07:27:3F:0B:6A:A8:C8:73:D8:E6:8D
Certificate issuer:       /CN=A919DBBF/serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B
Certificate serial:       E5
Authority key identifier: 85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/C2D5B85E9BFC11ED99828F6BC4F9AE02.roa
Signing time:             Wed 03 Apr 2024 06:08:36 +0000
ROA not before:           Wed 03 Apr 2024 06:08:36 +0000
ROA not after:            Thu 01 Aug 2024 00:00:00 +0000
asID:                     150726
IP address blocks:        103.74.10.0/23 maxlen: 23
                          103.74.10.0/24 maxlen: 24
                          103.74.11.0/24 maxlen: 24
                          2001:df1:dd40::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 30 May 2024 09:11:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DBBF/serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B
        Validity
            Not Before: Apr  3 06:08:36 2024 GMT
            Not After : Aug  1 00:00:00 2024 GMT
        Subject: CN=660cf264-7a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cb:de:55:55:3e:0c:e0:86:26:18:d1:37:79:
                    1c:09:be:3c:e5:5e:ce:52:05:ec:3d:71:f9:59:09:
                    ab:e6:62:37:69:72:05:71:0c:bd:06:5c:70:68:dc:
                    04:e1:04:8b:9d:54:04:7d:0d:7f:d6:80:67:a5:63:
                    fd:54:62:73:2a:98:04:7f:c0:c4:66:bd:c7:eb:49:
                    25:56:dd:17:f8:43:31:49:4b:13:dc:6c:ed:85:7b:
                    9d:23:89:72:99:84:02:12:79:b9:10:7a:ea:ee:46:
                    35:4c:f0:67:b9:f2:fe:47:f6:7b:a8:1e:7b:5a:ad:
                    95:d6:d9:49:b7:db:37:57:1d:f8:9f:45:c0:98:72:
                    f8:c9:73:8b:8d:ef:84:24:30:f3:47:e4:b5:5c:0a:
                    93:1f:f3:f8:76:76:c5:7f:d8:ee:8c:90:5d:7b:28:
                    e6:f8:1e:0a:3a:be:75:fa:ba:d0:7c:e9:dd:e5:bf:
                    3b:37:a1:a6:59:79:fc:07:93:29:be:fb:14:7a:6a:
                    1d:51:96:56:95:13:00:d0:5b:71:1b:3a:86:ed:ab:
                    df:81:03:52:4f:b6:7e:69:89:39:8f:0f:90:4d:e4:
                    2e:1b:73:a4:5a:dd:22:ad:4d:48:3b:d3:88:9a:d0:
                    dc:86:e9:78:96:23:1c:06:54:19:c8:6e:e5:3b:6a:
                    4d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4C:43:C1:7C:5F:77:5E:CE:07:27:3F:0B:6A:A8:C8:73:D8:E6:8D
            X509v3 Authority Key Identifier:
                keyid:85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/C2D5B85E9BFC11ED99828F6BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.10.0/23
                IPv6:
                  2001:df1:dd40::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:10:b5:23:91:b6:a3:e8:3b:1a:50:56:5e:bc:e6:50:a6:b2:
         a4:1c:d8:7a:f5:e5:f5:46:25:28:0e:6d:a4:c5:49:6a:f7:0d:
         a4:d0:04:9a:85:c3:70:df:25:2c:60:73:db:d7:c0:7f:4e:fb:
         73:4e:39:20:eb:a8:61:92:23:2e:02:85:6b:05:19:d5:e5:39:
         4c:8a:5c:97:55:5c:28:04:8b:82:ab:d3:f3:3f:ce:74:44:a7:
         3e:46:b1:3a:59:e6:16:5d:16:fe:64:82:47:01:71:4a:cb:62:
         de:13:15:de:0e:be:20:77:db:1c:19:61:88:63:ab:0d:b1:33:
         d1:10:a0:a3:49:01:fe:af:85:2d:7d:9d:65:79:ac:0b:51:c4:
         58:5c:1b:2d:4f:ec:3c:0e:38:a2:57:56:80:4b:e0:73:fd:24:
         ca:33:b0:93:11:44:58:09:e5:0e:5b:19:a8:e8:cc:2b:ea:9c:
         53:d3:4a:ae:51:74:90:5b:f7:2b:83:5a:a5:19:45:27:c5:cd:
         ca:98:ba:35:11:39:6f:7a:eb:ac:e0:98:f7:f6:e5:f5:a8:ea:
         9a:c6:56:1f:dd:4f:98:86:68:fc:1c:17:a8:db:0f:63:1a:40:
         7d:a0:43:10:70:d3:21:09:f1:a1:67:06:ca:b2:f0:52:a0:c3:
         29:40:df:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:35 2024 by rpki-client on console-fra.rpki-client.org