Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/6E9BA8D467E911EEAC5AD27AC4F9AE02.roa
File:                     6E9BA8D467E911EEAC5AD27AC4F9AE02.roa (raw, json)
Hash identifier:          SjYopd66YHXUq7zblE1YAC9i7k6lAcD2nkUsRdr4WxE=
Subject key identifier:   D3:FD:64:9D:6B:08:5C:CE:B1:6F:3D:92:B6:E0:A9:38:0D:24:FD:8B
Certificate issuer:       /CN=A91C5413/serialNumber=33E7F26615D3F40732C53BF873E27C9C52E12DCD
Certificate serial:       A0
Authority key identifier: 33:E7:F2:66:15:D3:F4:07:32:C5:3B:F8:73:E2:7C:9C:52:E1:2D:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M-fyZhXT9AcyxTv4c-J8nFLhLc0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/6E9BA8D467E911EEAC5AD27AC4F9AE02.roa
Signing time:             Tue 30 Jul 2024 23:41:17 +0000
ROA not before:           Tue 30 Jul 2024 23:41:17 +0000
ROA not after:            Fri 29 Nov 2024 00:00:00 +0000
asID:                     137480
IP address blocks:        103.110.64.0/22 maxlen: 22
                          103.110.64.0/23 maxlen: 23
                          103.110.64.0/24 maxlen: 24
                          103.110.65.0/24 maxlen: 24
                          103.110.66.0/23 maxlen: 23
                          103.110.66.0/24 maxlen: 24
                          103.110.67.0/24 maxlen: 24
                          2402:8440::/32 maxlen: 32
                          2402:8440::/48 maxlen: 48
                          2402:8440:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 18 Aug 2024 22:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5413/serialNumber=33E7F26615D3F40732C53BF873E27C9C52E12DCD
        Validity
            Not Before: Jul 30 23:41:17 2024 GMT
            Not After : Nov 29 00:00:00 2024 GMT
        Subject: CN=66a97a1d-a5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f3:18:30:7d:1a:dd:ec:5b:ed:94:d6:07:2f:
                    7c:68:eb:0e:3f:2b:a9:ae:ab:fc:2f:e5:45:bd:37:
                    13:c0:f0:97:69:98:d1:ce:b6:27:71:43:7a:f3:ff:
                    18:94:ca:ff:92:b1:64:fd:44:bb:6a:83:e0:d5:32:
                    08:29:94:63:a2:4d:b7:15:c6:6c:d9:3d:a1:db:a4:
                    58:18:d5:17:17:fe:ce:25:90:92:1d:aa:26:f4:c0:
                    06:c6:ef:3c:ca:92:a8:a9:73:e4:7b:5c:57:7f:be:
                    33:35:1d:5a:53:71:b8:89:3c:8d:b5:a5:32:51:58:
                    7e:08:32:56:5a:ff:31:c1:1b:9d:7a:e4:ec:35:fc:
                    b6:20:44:05:41:d5:bc:9c:00:44:0b:9f:16:92:60:
                    97:d5:a8:34:86:b0:db:ff:bd:c8:cd:4b:61:a2:68:
                    f4:ed:34:bb:ea:15:e7:b9:ab:bd:65:0e:5c:c3:db:
                    c0:c9:60:05:60:18:06:1a:4a:90:4d:35:ae:00:ce:
                    bf:4e:69:78:93:8e:7b:ce:b4:a6:06:4f:71:0e:5b:
                    30:60:3c:5b:97:50:26:da:62:52:9d:ce:af:45:7f:
                    9e:19:7f:df:f9:6f:99:fb:05:41:d9:d0:2e:d3:38:
                    99:21:f1:fa:07:c8:70:5d:35:57:4f:fc:57:9a:72:
                    36:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FD:64:9D:6B:08:5C:CE:B1:6F:3D:92:B6:E0:A9:38:0D:24:FD:8B
            X509v3 Authority Key Identifier:
                keyid:33:E7:F2:66:15:D3:F4:07:32:C5:3B:F8:73:E2:7C:9C:52:E1:2D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/M-fyZhXT9AcyxTv4c-J8nFLhLc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M-fyZhXT9AcyxTv4c-J8nFLhLc0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5413/DF99A1E87BE811EB9A092342C4F9AE02/6E9BA8D467E911EEAC5AD27AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.64.0/22
                IPv6:
                  2402:8440::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:3e:50:3a:b8:d5:aa:61:0c:36:62:ad:5b:00:38:bd:a2:f0:
         5b:b6:f7:f5:d4:63:ef:ca:a6:73:8e:7e:74:40:d2:54:25:1c:
         4b:18:49:7c:78:74:8e:02:41:49:de:6a:7b:b3:b7:7b:fe:bd:
         9c:b9:5f:f2:a9:28:ac:95:05:83:1b:b4:1d:56:fb:3b:02:9a:
         85:57:1f:85:d5:a7:52:d3:77:e2:31:60:30:d4:dc:5b:bc:08:
         09:28:13:67:3e:c6:f5:54:d1:93:b5:00:1e:b7:a5:f9:f7:2a:
         5a:cc:3d:17:5f:65:9c:ad:39:f4:82:5c:6d:da:35:7d:fb:fc:
         23:28:0c:73:ed:c2:5d:c9:0c:16:8c:a4:79:86:af:05:5c:89:
         f5:03:d7:ea:c1:ed:c6:dd:3d:68:d4:17:d0:c5:c1:67:b0:fa:
         02:fe:9b:30:75:9e:14:17:6a:1a:87:46:46:bc:6d:d3:71:f7:
         1b:e7:30:4d:21:5e:0b:62:d3:1b:8a:ee:f2:35:bf:6d:19:b4:
         ab:a9:fd:d2:2f:19:e5:3e:5a:7a:9c:4d:52:d2:d1:f6:26:23:
         ac:f1:ff:f0:7f:65:75:d6:03:63:40:97:a1:35:bf:70:c1:7b:
         e3:2d:61:03:1c:fb:22:f7:0a:1b:d8:d2:32:e6:bb:9b:a3:83:
         7a:ab:66:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----