Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/70F96DD0759B11EFB9062C58C4F9AE02.roa
File:                     70F96DD0759B11EFB9062C58C4F9AE02.roa (raw, json)
Hash identifier:          dLoAYMqscnbJbVMbDOY158pUGlSq2gt7bokj44eDflk=
Subject key identifier:   80:9E:18:D3:4A:A2:E8:3D:94:C6:6F:9C:E6:EE:0A:8C:08:71:0D:48
Certificate issuer:       /CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F
Certificate serial:       0A5A
Authority key identifier: 16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/70F96DD0759B11EFB9062C58C4F9AE02.roa
Signing time:             Wed 18 Sep 2024 08:53:15 +0000
ROA not before:           Wed 18 Sep 2024 08:53:15 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     152177
IP address blocks:        103.139.253.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 14:16:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2650 (0xa5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDCD9/serialNumber=1679EA066683F2A1550DE70F458432DD1A83270F
        Validity
            Not Before: Sep 18 08:53:15 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66ea94fb-901c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:96:5c:b0:d8:b1:21:45:29:8d:9d:ec:d0:ed:
                    ba:29:31:c6:a8:97:e5:d0:8f:47:3a:5d:d6:64:77:
                    27:3f:74:2a:7e:37:0e:99:b8:2b:53:7d:8d:d8:ef:
                    21:15:a8:95:96:77:84:14:5c:f8:5d:0e:a4:e2:26:
                    6b:0b:a2:19:5e:7a:cd:56:b4:06:41:ef:dd:7d:f8:
                    55:a4:03:38:7b:5c:e4:c9:90:d8:f7:f4:ea:5c:72:
                    f6:3e:dd:0e:d3:dc:24:b9:f6:0e:76:15:62:03:98:
                    19:79:a0:df:90:c1:e8:20:92:9c:30:c4:e7:03:7b:
                    10:a0:47:ec:12:1c:56:65:60:ee:72:81:3f:2c:c7:
                    bc:41:b4:db:5e:78:96:08:c2:ae:16:c5:70:5f:72:
                    be:91:83:95:54:35:1d:ca:cb:c6:35:3e:a9:66:25:
                    bb:d9:13:a7:56:5f:ed:96:1f:d6:ac:b8:f3:98:69:
                    f3:33:e9:d2:b8:ce:d4:09:b9:bc:3c:c1:3b:a8:50:
                    59:f6:bc:34:c4:6c:9e:39:75:7e:34:f2:7a:7c:89:
                    7f:f9:4c:9d:68:be:ba:e2:7b:7f:3c:c2:fa:eb:15:
                    4a:03:8c:95:3d:c0:a2:1f:18:d9:98:b0:e4:68:71:
                    a1:db:0e:63:84:d6:de:8c:60:ab:fd:67:04:ce:7b:
                    86:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9E:18:D3:4A:A2:E8:3D:94:C6:6F:9C:E6:EE:0A:8C:08:71:0D:48
            X509v3 Authority Key Identifier:
                keyid:16:79:EA:06:66:83:F2:A1:55:0D:E7:0F:45:84:32:DD:1A:83:27:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/FnnqBmaD8qFVDecPRYQy3RqDJw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FnnqBmaD8qFVDecPRYQy3RqDJw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCD9/410BBC144E6C11EA89049747C4F9AE02/70F96DD0759B11EFB9062C58C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:1e:6e:e9:8c:ad:37:5f:9a:7e:4b:33:2d:67:90:06:c0:aa:
         1e:59:c7:be:40:88:5c:cb:5d:15:b8:f5:76:42:8b:83:9c:93:
         6a:9f:79:1b:33:8a:bc:95:ca:87:d8:a7:5b:e3:92:59:75:24:
         e0:f6:13:7c:45:58:49:d3:42:86:78:bd:9a:3c:cd:fd:7e:a6:
         41:b3:5c:cb:c2:97:99:c3:14:82:57:71:c6:3d:cc:09:3a:d6:
         ab:af:df:75:80:25:7d:87:7a:8b:e5:08:1b:b1:ce:62:b6:e0:
         fc:37:82:63:6f:9b:d2:9e:ff:0b:bd:d0:90:63:99:b0:01:64:
         b9:48:a6:a8:5a:1c:c0:67:49:5b:4b:d8:27:6e:9b:92:4b:91:
         e0:1f:ed:99:1d:9b:71:86:32:55:4f:6a:b4:e0:ab:90:84:84:
         f4:ed:d0:41:2e:52:86:51:47:d0:f9:58:3c:9e:a7:f9:f6:05:
         4b:92:72:60:4f:35:92:7c:94:33:33:20:b5:be:59:05:b4:a1:
         32:be:2e:71:eb:89:61:77:8a:9d:29:7d:0c:ce:3d:48:bd:46:
         15:87:22:a3:7e:e5:52:d2:ed:0d:e9:bb:ba:c0:43:2b:3d:66:
         e6:0d:26:ab:06:82:34:b2:97:0d:4a:6c:dd:b9:7b:11:10:3c:
         58:14:c3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:14:14 2024 by rpki-client on console-ams.rpki-client.org