Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D2A/5525F5E03DC111EAAF98CB35C4F9AE02/775595120E9111EFB468FB5AC4F9AE02.roa
File:                     775595120E9111EFB468FB5AC4F9AE02.roa (raw, json)
Hash identifier:          qiHHDW7jVMXgfiRmAyNzDdqQ6GpAUfWWfOnPnHvJH58=
Subject key identifier:   C4:F5:C2:47:D6:5E:43:73:78:0D:49:24:77:3F:B7:DE:7A:61:78:01
Certificate issuer:       /CN=A91C9D2A/serialNumber=C99EF20F9F0B0077C70D5D7300E0BBFD8721EFFF
Certificate serial:       0A82
Authority key identifier: C9:9E:F2:0F:9F:0B:00:77:C7:0D:5D:73:00:E0:BB:FD:87:21:EF:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ7yD58LAHfHDV1zAOC7_Ych7_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9D2A/5525F5E03DC111EAAF98CB35C4F9AE02/775595120E9111EFB468FB5AC4F9AE02.roa
Signing time:             Fri 10 May 2024 05:52:21 +0000
ROA not before:           Fri 10 May 2024 05:52:21 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     134176
IP address blocks:        2403:6dc0:1000::/36 maxlen: 36

Validation:               Failed, certificate revoked on Mon 17 Jun 2024 09:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2690 (0xa82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9D2A/serialNumber=C99EF20F9F0B0077C70D5D7300E0BBFD8721EFFF
        Validity
            Not Before: May 10 05:52:21 2024 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=663db614-778d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1e:ec:fc:f9:9f:89:27:a2:06:99:d1:9b:ef:
                    17:51:60:bf:7d:dd:d0:ca:6d:8a:a3:ff:2b:88:5e:
                    b8:fe:b5:86:8a:4e:1f:89:ae:75:d4:08:53:ad:3d:
                    a1:ef:20:24:0d:ae:d9:d6:59:92:28:fe:25:7f:1e:
                    f3:87:8e:81:d8:45:de:9c:8a:20:a5:bf:2f:a9:87:
                    b8:94:7f:a8:7f:2e:cf:f4:df:44:61:47:24:3c:37:
                    6b:5a:5d:d5:02:ed:7a:63:70:3c:f6:06:ef:c2:b7:
                    e2:be:aa:cc:8d:d2:c5:e4:74:32:d3:d8:5e:4e:da:
                    e0:0d:70:32:18:6d:f0:f5:87:fc:19:cb:bd:0f:25:
                    43:ae:da:4b:94:8b:6b:17:bf:cf:ed:34:a4:bd:b6:
                    51:ec:fa:c8:c7:d7:8b:ab:04:77:71:bc:81:bd:f6:
                    7f:d8:6a:a7:a7:8d:dd:60:1b:e0:8d:bc:db:b6:d5:
                    91:19:d1:a3:79:0a:15:82:b4:8e:74:75:45:de:e2:
                    5a:86:87:02:24:5b:28:d1:e5:8c:60:77:55:30:ac:
                    6f:5d:b7:7c:1c:ae:7d:74:bd:40:07:56:c9:a1:a4:
                    d0:9d:a3:d4:62:61:89:d2:52:20:86:9d:34:0e:e8:
                    11:a6:4a:80:08:ea:33:f1:7a:6b:a9:b1:8b:50:e5:
                    f8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F5:C2:47:D6:5E:43:73:78:0D:49:24:77:3F:B7:DE:7A:61:78:01
            X509v3 Authority Key Identifier:
                keyid:C9:9E:F2:0F:9F:0B:00:77:C7:0D:5D:73:00:E0:BB:FD:87:21:EF:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9D2A/5525F5E03DC111EAAF98CB35C4F9AE02/yZ7yD58LAHfHDV1zAOC7_Ych7_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZ7yD58LAHfHDV1zAOC7_Ych7_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D2A/5525F5E03DC111EAAF98CB35C4F9AE02/775595120E9111EFB468FB5AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:6dc0:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a0:0a:99:5c:3f:ae:1d:0f:21:80:d5:2a:62:ee:45:9d:e9:39:
         eb:58:8b:cc:f8:9c:06:28:53:02:0e:c7:a9:41:25:1d:a4:43:
         8d:67:46:73:68:87:d0:5a:b2:03:4e:57:f6:e3:38:6d:5b:1d:
         98:54:df:48:87:b0:b2:f0:68:ec:ff:f8:3b:91:dd:97:ae:28:
         1c:6e:e7:d0:a5:73:41:1d:59:a2:58:4e:cb:e9:72:bc:9b:b7:
         01:0a:15:69:12:10:e4:29:f8:61:19:99:c3:4f:56:dd:6b:b9:
         13:d0:aa:7b:6f:88:8e:b8:56:aa:c9:01:1d:a4:e4:70:91:f1:
         d6:65:b3:8b:bc:4d:9d:b0:29:d2:ed:88:e4:b2:8a:c0:b5:f9:
         f5:cf:f2:4a:7d:09:02:66:b2:ea:73:b8:f7:f6:00:aa:ef:29:
         36:92:8e:13:91:b9:01:db:8a:f7:31:b1:f8:d6:8c:cd:b5:b2:
         b8:21:5c:af:2c:9f:ba:33:1f:d2:aa:6b:7e:f3:56:fa:9d:64:
         e3:0d:7f:8c:8e:ef:8e:23:94:d7:6e:b2:8f:68:e5:11:95:4a:
         5b:cc:dd:9d:ff:33:e1:f2:cf:aa:21:87:6a:47:bb:10:46:24:
         f8:45:87:ba:02:f4:de:70:c7:c9:53:7c:ce:32:f1:58:1b:4a:
         e3:cd:7f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----