Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/62621C72347811EFB0ED7B82C4F9AE02.roa
File:                     62621C72347811EFB0ED7B82C4F9AE02.roa (raw, json)
Hash identifier:          6D4cfZ8eLddGa20zsi83gd+Y24WJpO7EWsSldbwWlJY=
Subject key identifier:   A9:4C:5B:93:5C:B8:2F:87:D4:5A:DD:77:70:29:9E:3B:A0:B3:09:7B
Certificate issuer:       /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
Certificate serial:       2979
Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/62621C72347811EFB0ED7B82C4F9AE02.roa
Signing time:             Thu 27 Jun 2024 11:28:32 +0000
ROA not before:           Thu 27 Jun 2024 11:28:32 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     58601
IP address blocks:        43.245.195.0/24 maxlen: 24
                          103.9.112.0/22 maxlen: 22
                          103.9.112.0/24 maxlen: 24
                          103.9.113.0/24 maxlen: 24
                          103.9.114.0/24 maxlen: 24
                          103.9.115.0/24 maxlen: 24
                          2403:e100::/32 maxlen: 32
                          2403:e100:1000::/48 maxlen: 48
                          2403:e100:1000:4::/64 maxlen: 64

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 03:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10617 (0x2979)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1
        Validity
            Not Before: Jun 27 11:28:32 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=667d4ce0-99d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3c:b2:da:7a:60:55:3c:e4:c9:13:ab:d6:19:
                    c9:ee:81:66:f8:d5:68:62:69:5d:d4:ec:ea:4d:29:
                    1d:a1:c9:23:06:35:16:a6:ee:cd:51:7b:93:05:ef:
                    a7:b1:4b:fe:d7:46:4d:b1:20:c8:15:df:31:b5:4e:
                    b4:03:aa:20:86:61:b1:9b:1f:d7:ce:2a:1b:65:5e:
                    d0:92:6d:b1:07:42:97:be:cc:7d:7a:b6:6a:47:20:
                    d1:5b:6a:4e:54:14:12:62:e8:11:91:f9:2a:d7:c5:
                    c9:53:e0:d0:21:40:b0:29:39:d5:1b:e2:95:4d:6f:
                    de:07:5f:da:cd:fc:bf:09:01:cd:66:76:6b:79:8f:
                    93:3e:e4:4e:0c:7e:28:99:1b:01:7c:bd:e6:fa:e4:
                    ff:39:87:5b:27:ad:14:e7:17:6e:11:40:02:21:5e:
                    22:30:62:f1:e5:58:fa:09:5b:bb:76:18:68:8e:67:
                    b5:02:69:8b:a4:4a:c6:d8:e5:e1:34:bc:51:3a:27:
                    aa:e4:65:8e:6f:47:ca:57:b1:ef:d4:e3:26:c0:32:
                    d1:24:72:6a:2d:20:cd:b8:c6:b9:d7:15:38:06:db:
                    e3:02:dd:83:bf:29:08:01:2d:0a:38:05:55:e4:d6:
                    e5:62:e3:f9:11:b9:22:c1:91:20:ad:c4:a1:0c:3f:
                    b7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4C:5B:93:5C:B8:2F:87:D4:5A:DD:77:70:29:9E:3B:A0:B3:09:7B
            X509v3 Authority Key Identifier:
                keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/62621C72347811EFB0ED7B82C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.245.195.0/24
                  103.9.112.0/22
                IPv6:
                  2403:e100::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:16:ab:30:0a:b9:f6:5e:60:83:90:1d:0f:73:4c:25:bf:48:
         05:df:c5:92:95:43:65:80:8d:56:64:72:9a:a6:a7:dc:75:21:
         24:bb:e9:e5:b7:ee:a6:4c:46:df:cf:e5:14:63:32:cf:90:8e:
         f3:17:7a:3e:08:11:46:d7:20:80:dd:ec:46:2c:95:03:5d:6e:
         5d:76:4f:f4:cb:75:e6:74:6e:e2:48:60:e8:81:32:d7:b5:f7:
         7f:a3:58:aa:5f:55:76:8f:b3:14:47:f2:74:eb:b8:d3:96:24:
         9d:84:bc:e4:fd:0f:76:a1:6d:39:19:32:39:d6:9d:16:04:e8:
         f9:b0:34:46:af:33:17:3c:55:18:4a:53:3e:cc:ba:9d:12:2a:
         5b:88:5b:5e:61:dd:b3:4a:c6:e3:ac:99:40:f4:7f:8c:96:46:
         26:99:c7:92:26:f8:9c:61:eb:38:1d:27:23:24:4d:4c:f4:62:
         b7:0f:b5:e4:21:4e:2b:e8:79:b7:d7:13:c6:3a:a6:9b:56:7a:
         23:0a:6c:30:92:ba:c0:f1:b0:1c:cb:52:fc:70:af:db:41:16:
         0b:00:5c:cf:1e:13:95:8c:6d:f8:03:32:06:cd:21:f5:48:a0:
         52:d0:9b:69:66:cd:bf:db:3b:d2:12:c6:f9:ee:af:0a:da:7a:
         6b:c5:60:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----