Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/07BE8F081E0E11ED8709E071C4F9AE02.roa
File:                     07BE8F081E0E11ED8709E071C4F9AE02.roa (raw, json)
Hash identifier:          pjc+NaqE/7klVEE5noqhHvlazeB1hWDX/XnIkIhfi7Q=
Subject key identifier:   97:F7:69:F3:2F:35:5E:BE:D6:10:A4:36:AD:8A:60:FF:2F:F4:8D:59
Certificate issuer:       /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial:       051D
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/07BE8F081E0E11ED8709E071C4F9AE02.roa
Signing time:             Wed 05 Apr 2023 01:42:24 +0000
ROA not before:           Wed 05 Apr 2023 01:42:24 +0000
ROA not after:            Sun 31 Mar 2024 00:00:00 +0000
asID:                     0
IP address blocks:        166.81.0.0/24 maxlen: 24
                          166.81.1.0/24 maxlen: 24
                          166.81.3.0/24 maxlen: 24
                          166.81.4.0/24 maxlen: 24
                          166.81.7.0/24 maxlen: 24
                          166.81.8.0/24 maxlen: 24
                          166.81.31.0/24 maxlen: 24
                          166.81.36.0/24 maxlen: 24
                          166.81.37.0/24 maxlen: 24
                          166.81.41.0/24 maxlen: 24
                          166.81.42.0/24 maxlen: 24
                          166.81.43.0/24 maxlen: 24
                          166.81.44.0/24 maxlen: 24
                          166.81.45.0/24 maxlen: 24
                          166.81.46.0/24 maxlen: 24
                          166.81.47.0/24 maxlen: 24
                          166.81.48.0/24 maxlen: 24
                          166.81.49.0/24 maxlen: 24
                          166.81.50.0/24 maxlen: 24
                          166.81.71.0/24 maxlen: 24
                          166.81.72.0/24 maxlen: 24
                          166.81.73.0/24 maxlen: 24
                          166.81.74.0/24 maxlen: 24
                          166.81.75.0/24 maxlen: 24
                          166.81.76.0/24 maxlen: 24
                          166.81.77.0/24 maxlen: 24
                          166.81.78.0/24 maxlen: 24
                          166.81.79.0/24 maxlen: 24
                          166.81.80.0/24 maxlen: 24
                          166.81.81.0/24 maxlen: 24
                          166.81.82.0/24 maxlen: 24
                          166.81.83.0/24 maxlen: 24
                          166.81.84.0/24 maxlen: 24
                          166.81.85.0/24 maxlen: 24
                          166.81.86.0/24 maxlen: 24
                          166.81.87.0/24 maxlen: 24
                          166.81.88.0/24 maxlen: 24
                          166.81.89.0/24 maxlen: 24
                          166.81.90.0/24 maxlen: 24
                          166.81.91.0/24 maxlen: 24
                          166.81.92.0/24 maxlen: 24
                          166.81.93.0/24 maxlen: 24
                          166.81.94.0/24 maxlen: 24
                          166.81.95.0/24 maxlen: 24
                          166.81.96.0/24 maxlen: 24
                          166.81.97.0/24 maxlen: 24
                          166.81.98.0/24 maxlen: 24
                          166.81.99.0/24 maxlen: 24
                          166.81.100.0/24 maxlen: 24
                          166.81.101.0/24 maxlen: 24
                          166.81.102.0/24 maxlen: 24
                          166.81.103.0/24 maxlen: 24
                          166.81.104.0/24 maxlen: 24
                          166.81.105.0/24 maxlen: 24
                          166.81.106.0/24 maxlen: 24
                          166.81.107.0/24 maxlen: 24
                          166.81.108.0/24 maxlen: 24
                          166.81.109.0/24 maxlen: 24
                          166.81.110.0/24 maxlen: 24
                          166.81.111.0/24 maxlen: 24
                          166.81.112.0/24 maxlen: 24
                          166.81.113.0/24 maxlen: 24
                          166.81.114.0/24 maxlen: 24
                          166.81.115.0/24 maxlen: 24
                          166.81.116.0/24 maxlen: 24
                          166.81.117.0/24 maxlen: 24
                          166.81.118.0/24 maxlen: 24
                          166.81.119.0/24 maxlen: 24
                          166.81.120.0/24 maxlen: 24
                          166.81.121.0/24 maxlen: 24
                          166.81.122.0/24 maxlen: 24
                          166.81.123.0/24 maxlen: 24
                          166.81.124.0/24 maxlen: 24
                          166.81.125.0/24 maxlen: 24
                          166.81.126.0/24 maxlen: 24
                          166.81.127.0/24 maxlen: 24
                          166.81.128.0/24 maxlen: 24
                          166.81.129.0/24 maxlen: 24
                          166.81.130.0/24 maxlen: 24
                          166.81.131.0/24 maxlen: 24
                          166.81.132.0/24 maxlen: 24
                          166.81.133.0/24 maxlen: 24
                          166.81.134.0/24 maxlen: 24
                          166.81.135.0/24 maxlen: 24
                          166.81.136.0/24 maxlen: 24
                          166.81.137.0/24 maxlen: 24
                          166.81.138.0/24 maxlen: 24
                          166.81.139.0/24 maxlen: 24
                          166.81.140.0/24 maxlen: 24
                          166.81.141.0/24 maxlen: 24
                          166.81.142.0/24 maxlen: 24
                          166.81.143.0/24 maxlen: 24
                          166.81.144.0/24 maxlen: 24
                          166.81.145.0/24 maxlen: 24
                          166.81.146.0/24 maxlen: 24
                          166.81.147.0/24 maxlen: 24
                          166.81.148.0/24 maxlen: 24
                          166.81.149.0/24 maxlen: 24
                          166.81.150.0/24 maxlen: 24
                          166.81.151.0/24 maxlen: 24
                          166.81.152.0/24 maxlen: 24
                          166.81.153.0/24 maxlen: 24
                          166.81.154.0/24 maxlen: 24
                          166.81.155.0/24 maxlen: 24
                          166.81.156.0/24 maxlen: 24
                          166.81.157.0/24 maxlen: 24
                          166.81.158.0/24 maxlen: 24
                          166.81.159.0/24 maxlen: 24
                          166.81.160.0/24 maxlen: 24
                          166.81.161.0/24 maxlen: 24
                          166.81.162.0/24 maxlen: 24
                          166.81.163.0/24 maxlen: 24
                          166.81.164.0/24 maxlen: 24
                          166.81.165.0/24 maxlen: 24
                          166.81.166.0/24 maxlen: 24
                          166.81.167.0/24 maxlen: 24
                          166.81.168.0/24 maxlen: 24
                          166.81.169.0/24 maxlen: 24
                          166.81.170.0/24 maxlen: 24
                          166.81.171.0/24 maxlen: 24
                          166.81.172.0/24 maxlen: 24
                          166.81.173.0/24 maxlen: 24
                          166.81.174.0/24 maxlen: 24
                          166.81.175.0/24 maxlen: 24
                          166.81.176.0/24 maxlen: 24
                          166.81.177.0/24 maxlen: 24
                          166.81.178.0/24 maxlen: 24
                          166.81.179.0/24 maxlen: 24
                          166.81.180.0/24 maxlen: 24
                          166.81.181.0/24 maxlen: 24
                          166.81.182.0/24 maxlen: 24
                          166.81.183.0/24 maxlen: 24
                          166.81.184.0/24 maxlen: 24
                          166.81.185.0/24 maxlen: 24
                          166.81.186.0/24 maxlen: 24
                          166.81.187.0/24 maxlen: 24
                          166.81.188.0/24 maxlen: 24
                          166.81.189.0/24 maxlen: 24
                          166.81.190.0/24 maxlen: 24
                          166.81.191.0/24 maxlen: 24
                          166.81.192.0/24 maxlen: 24
                          166.81.193.0/24 maxlen: 24
                          166.81.194.0/24 maxlen: 24
                          166.81.195.0/24 maxlen: 24
                          166.81.196.0/24 maxlen: 24
                          166.81.197.0/24 maxlen: 24
                          166.81.198.0/24 maxlen: 24
                          166.81.199.0/24 maxlen: 24
                          166.81.200.0/24 maxlen: 24
                          166.81.201.0/24 maxlen: 24
                          166.81.202.0/24 maxlen: 24
                          166.81.203.0/24 maxlen: 24
                          166.81.204.0/24 maxlen: 24
                          166.81.205.0/24 maxlen: 24
                          166.81.206.0/24 maxlen: 24
                          166.81.207.0/24 maxlen: 24
                          166.81.208.0/24 maxlen: 24
                          166.81.209.0/24 maxlen: 24
                          166.81.210.0/24 maxlen: 24
                          166.81.211.0/24 maxlen: 24
                          166.81.212.0/24 maxlen: 24
                          166.81.213.0/24 maxlen: 24
                          166.81.214.0/24 maxlen: 24
                          166.81.215.0/24 maxlen: 24
                          166.81.216.0/24 maxlen: 24
                          166.81.217.0/24 maxlen: 24
                          166.81.218.0/24 maxlen: 24
                          166.81.219.0/24 maxlen: 24
                          166.81.220.0/24 maxlen: 24
                          166.81.221.0/24 maxlen: 24
                          166.81.222.0/24 maxlen: 24
                          166.81.223.0/24 maxlen: 24
                          166.81.224.0/24 maxlen: 24
                          166.81.225.0/24 maxlen: 24
                          166.81.226.0/24 maxlen: 24
                          166.81.227.0/24 maxlen: 24
                          166.81.228.0/24 maxlen: 24
                          166.81.229.0/24 maxlen: 24
                          166.81.230.0/24 maxlen: 24
                          166.81.231.0/24 maxlen: 24
                          166.81.232.0/24 maxlen: 24
                          166.81.233.0/24 maxlen: 24
                          166.81.234.0/24 maxlen: 24
                          166.81.235.0/24 maxlen: 24
                          166.81.236.0/24 maxlen: 24
                          166.81.237.0/24 maxlen: 24
                          166.81.238.0/24 maxlen: 24
                          166.81.239.0/24 maxlen: 24
                          166.81.240.0/24 maxlen: 24
                          166.81.241.0/24 maxlen: 24
                          166.81.242.0/24 maxlen: 24
                          166.81.243.0/24 maxlen: 24
                          166.81.244.0/24 maxlen: 24
                          166.81.245.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1309 (0x51d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
        Validity
            Not Before: Apr  5 01:42:24 2023 GMT
            Not After : Mar 31 00:00:00 2024 GMT
        Subject: CN=642cd1ff-cb22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e8:fa:19:ca:08:2c:5e:d9:d5:79:13:ac:d6:
                    51:c1:7c:b8:83:6d:ae:f8:d5:fa:92:bc:27:68:f3:
                    b8:36:86:2a:8c:e3:38:71:80:37:bc:e4:1f:fb:39:
                    e2:82:f7:c8:1e:7c:bb:2c:5e:5c:09:aa:ab:77:71:
                    86:7a:8d:aa:f4:7c:c4:6a:56:db:5e:33:09:e4:20:
                    56:5d:a7:b9:24:b9:d0:ff:0e:d2:0f:89:24:2e:65:
                    33:88:5b:19:f1:31:9d:94:2a:19:68:0c:a9:92:ff:
                    b9:38:59:06:2c:f8:b8:64:b0:98:3a:96:b4:39:85:
                    40:eb:53:36:df:a6:37:bb:bd:b8:d5:b9:92:66:5a:
                    24:70:5a:b9:d2:8f:fb:ae:b5:f1:03:bc:15:ce:8e:
                    96:3d:0b:fe:1f:02:a7:45:a6:01:4c:9d:d8:0c:64:
                    ba:47:d7:ce:67:9e:1b:96:a3:7f:bc:e3:b4:71:0b:
                    97:2a:26:ed:b7:b9:43:aa:1b:ed:7f:49:5f:27:0b:
                    86:c4:7a:31:01:68:ac:15:ee:11:9c:c5:b9:54:14:
                    88:83:81:68:85:ef:95:35:26:7b:73:1e:d3:0a:08:
                    61:71:26:93:6a:50:34:4a:a0:9f:af:93:d2:2e:d3:
                    3a:49:0b:7f:a3:c7:79:4a:a2:8a:5a:b5:7f:a3:b3:
                    74:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F7:69:F3:2F:35:5E:BE:D6:10:A4:36:AD:8A:60:FF:2F:F4:8D:59
            X509v3 Authority Key Identifier:
                keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/07BE8F081E0E11ED8709E071C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.81.0.0/23
                  166.81.3.0-166.81.4.255
                  166.81.7.0-166.81.8.255
                  166.81.31.0/24
                  166.81.36.0/23
                  166.81.41.0-166.81.50.255
                  166.81.71.0-166.81.245.255

    Signature Algorithm: sha256WithRSAEncryption
         5a:39:0e:cd:b1:61:4e:bc:81:b6:68:83:bb:01:77:9e:d7:1e:
         3c:6d:c8:51:f3:d3:20:bf:bd:67:7a:86:06:a4:9c:45:a2:62:
         2a:7d:9d:9b:5e:5d:81:94:b3:c6:c7:ce:97:26:57:84:70:0f:
         61:25:f4:34:cc:1b:bc:38:8c:6d:12:27:e5:eb:d0:30:02:65:
         be:c1:00:ac:93:97:a1:82:50:87:45:fc:d6:7d:d9:9f:cc:8d:
         f7:43:7b:ad:e5:d7:63:39:29:d7:3f:bd:2e:cb:23:47:4b:68:
         e9:ef:6c:67:ca:c4:70:25:c5:29:f6:4f:68:79:78:2e:30:59:
         b5:eb:12:da:a5:5a:c1:58:58:45:89:f1:90:24:4b:f9:ab:f0:
         83:bc:3f:25:2e:f2:3d:c1:10:46:36:c8:d0:12:c8:bb:0d:02:
         08:06:ba:d9:98:de:3d:fb:16:f1:1c:c0:61:2a:54:a4:bc:d9:
         6f:c9:b2:90:41:7e:cc:7c:e9:fe:f0:31:09:23:b5:76:4b:9b:
         b0:d4:82:12:1a:7a:b0:c8:e3:4b:72:a4:2f:f8:28:fe:9c:24:
         99:3c:c9:db:44:0a:30:0e:4a:62:7f:5b:79:8e:d1:3c:c3:62:
         2a:a8:59:c4:4e:98:51:ea:2f:3b:26:73:43:24:82:ad:31:c4:
         65:2c:fd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 29 12:00:00 2023 by rpki-client on console-ams.rpki-client.org