Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BE009978AB6B11EE9E76E487C4F9AE02.roa
File:                     BE009978AB6B11EE9E76E487C4F9AE02.roa (raw, json)
Hash identifier:          mhoawDUOjHbXrJ1sj2CgqCcnSowYQQTlyLtHbo30QCU=
Subject key identifier:   BC:5B:16:A6:2D:0A:78:08:96:4C:F0:F9:60:B5:F9:CF:60:65:AB:BF
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4615
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BE009978AB6B11EE9E76E487C4F9AE02.roa
Signing time:             Thu 05 Sep 2024 03:35:05 +0000
ROA not before:           Thu 05 Sep 2024 03:35:05 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     150909
IP address blocks:        103.213.8.0/23 maxlen: 23
                          2401:3e20::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 19 Sep 2024 14:54:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17941 (0x4615)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Sep  5 03:35:05 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=66d926e9-dfdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e8:56:a8:fc:87:f8:fd:4a:58:36:d6:23:3b:
                    ab:2d:dd:4e:6d:d9:7e:b5:a3:27:3d:7e:84:d1:7d:
                    f3:bd:fa:6b:61:fd:09:59:93:44:59:f6:b9:67:8b:
                    01:6c:0d:27:7a:8e:13:84:70:33:6e:50:b4:4d:4d:
                    28:de:e1:b8:42:13:85:05:3e:3f:7d:d6:6b:67:43:
                    c0:3c:a5:23:a1:f5:68:72:fc:b7:3a:ea:c8:63:5b:
                    29:7e:5f:32:5a:9b:37:a8:7e:6e:8a:2f:9f:d9:9a:
                    95:66:54:70:33:47:e5:9c:78:3f:e0:9a:fc:80:f8:
                    af:a5:d0:dd:a6:3f:c2:bb:76:c6:a0:b7:76:83:c1:
                    90:dc:05:a6:e0:90:2a:0d:96:f6:e5:1e:51:76:28:
                    63:7f:81:87:4e:ce:2b:e7:27:62:f3:7b:84:39:5d:
                    f7:ae:d3:ef:e4:19:82:e6:28:18:f7:5a:c6:cd:78:
                    31:9f:15:a1:c9:f3:33:8d:9b:79:56:24:6a:b2:db:
                    71:1c:ba:e9:51:a4:7e:78:b5:a9:ab:3b:50:e7:d5:
                    9d:4b:01:31:14:9c:12:09:14:88:29:ca:08:2d:81:
                    91:d6:fd:94:84:e0:75:a2:c3:8b:3f:5d:0d:8d:72:
                    69:dc:6e:b6:b9:cf:8d:41:cf:18:7c:0f:86:85:ab:
                    81:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5B:16:A6:2D:0A:78:08:96:4C:F0:F9:60:B5:F9:CF:60:65:AB:BF
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BE009978AB6B11EE9E76E487C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.8.0/23
                IPv6:
                  2401:3e20::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:33:38:f2:c9:82:e7:0e:01:7a:df:3d:96:0f:e0:d9:25:43:
         38:5a:54:67:e8:3d:27:2c:18:79:3c:b9:26:23:52:f5:25:87:
         c1:44:c6:51:fa:77:c7:44:66:cc:e2:2a:aa:06:e4:17:ec:27:
         7f:4f:0f:01:82:07:ee:16:10:75:b8:b7:6f:e9:4a:ac:77:f8:
         69:19:eb:95:e2:ae:f2:02:4c:8f:c4:db:bb:54:16:d4:81:6a:
         7c:df:7c:4b:1e:1c:ac:43:c2:d8:83:f2:64:9e:2e:68:34:6c:
         f4:13:19:8c:df:30:e9:30:13:93:c2:0b:42:94:7e:33:02:6f:
         02:34:5f:df:55:af:5b:17:c8:3d:80:ad:ba:30:cd:ca:db:0d:
         8d:11:53:87:40:94:9f:f1:4d:15:7c:d4:ee:8f:27:1f:ae:8c:
         97:b1:af:3a:5b:29:e1:bd:3d:cf:a9:06:d0:e8:82:be:f8:c4:
         8c:28:00:37:8e:77:b9:6a:b6:04:ca:9a:36:d3:71:06:ea:04:
         5f:b2:e7:e3:52:a8:b6:67:26:97:92:12:1c:d2:dc:1d:d6:68:
         d3:d6:c6:4d:c8:de:99:55:a6:33:f4:4e:15:ac:75:0c:2c:78:
         cc:f3:9d:c0:97:6d:cb:d0:93:65:e4:1f:c5:1d:d3:bd:18:05:
         71:d9:39:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----