Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/754AECBA597611EFBA559786C4F9AE02.roa
File:                     754AECBA597611EFBA559786C4F9AE02.roa (raw, json)
Hash identifier:          ZvHeS4yzBj2iFQo/+I5l16JKu2rjVJ/e4w1l3+zDaOQ=
Subject key identifier:   F6:75:1A:B9:6F:EF:C4:7A:3F:D1:35:60:07:1E:AC:B3:2F:D0:E4:1C
Certificate issuer:       /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
Certificate serial:       27A7
Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/754AECBA597611EFBA559786C4F9AE02.roa
Signing time:             Tue 13 Aug 2024 13:17:58 +0000
ROA not before:           Tue 13 Aug 2024 13:17:58 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     133177
IP address blocks:        43.250.124.0/24 maxlen: 24
                          43.250.126.0/24 maxlen: 24
                          43.250.127.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 23 Sep 2024 02:40:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10151 (0x27a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA
        Validity
            Not Before: Aug 13 13:17:58 2024 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=66bb5d06-edf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e0:0a:4c:14:30:6c:30:0c:ed:8b:7a:bd:67:
                    ba:09:f9:7b:82:0b:0f:f7:39:74:ea:eb:a3:98:04:
                    81:df:d0:17:1e:33:66:33:1a:f3:83:ea:6d:11:86:
                    14:a9:49:22:b7:53:d5:51:63:ee:27:2c:89:f7:a0:
                    e4:32:1d:be:97:83:aa:c2:20:1b:23:fc:17:1d:06:
                    a5:50:44:f7:8a:a2:64:3a:39:78:ed:8b:40:09:76:
                    26:f9:00:2e:22:77:3d:9e:c4:08:f3:9b:90:36:76:
                    7d:72:52:12:5f:9d:ac:3f:bb:11:84:5a:41:24:be:
                    2e:24:5e:fb:b3:ec:0d:48:08:06:81:9b:73:24:f4:
                    6a:c5:86:85:a1:d7:cb:99:b4:f1:81:4a:69:01:09:
                    95:7a:8f:9f:2d:2f:b6:a5:02:06:10:ca:79:1d:2f:
                    95:7c:7c:2b:57:83:df:71:55:50:86:e9:b0:27:00:
                    39:ea:69:d8:6d:01:79:37:1f:19:3e:0c:67:a2:b4:
                    00:2a:38:f1:d0:a4:af:49:11:a6:d8:fa:a2:d2:fc:
                    3f:e5:71:37:46:e4:f8:6a:10:29:ea:fc:f2:fe:7f:
                    9c:89:31:90:48:cc:b2:7f:09:36:d2:34:78:60:5f:
                    c5:43:86:ed:ef:3e:a1:8a:67:73:78:81:69:d7:75:
                    79:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:75:1A:B9:6F:EF:C4:7A:3F:D1:35:60:07:1E:AC:B3:2F:D0:E4:1C
            X509v3 Authority Key Identifier:
                keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/754AECBA597611EFBA559786C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.250.124.0/24
                  43.250.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:fd:9c:89:fa:37:6c:97:76:a4:3a:6f:7d:8d:46:b8:c9:fb:
         f3:7a:10:02:95:3e:2e:65:e1:cd:a7:11:02:bf:c3:67:b1:0a:
         e8:0f:10:62:60:9b:50:d4:20:98:b8:dc:40:27:8c:20:f3:46:
         63:3d:cf:dc:61:94:8a:8c:5a:7e:88:30:5f:93:40:0e:af:69:
         4a:04:51:e6:b0:12:6d:58:bd:91:9a:e7:8f:74:1d:3d:3d:32:
         64:1c:f9:1e:d4:6d:e0:60:07:8e:cf:c2:20:06:70:8a:96:51:
         f0:c4:fb:c4:7f:71:38:6a:40:51:b8:d1:b9:8c:6e:62:61:c1:
         f2:b2:6e:4c:55:09:c6:7e:c0:e1:5d:40:b3:81:cc:45:5f:b4:
         12:18:37:b4:b3:1b:d9:1c:b5:0a:94:fb:13:bb:c2:f7:38:eb:
         04:5e:85:15:ae:7f:3f:19:28:f2:24:b2:aa:91:5b:3d:4f:46:
         a8:5f:08:9c:72:86:71:21:88:6d:c1:70:d8:51:3b:00:48:e4:
         5e:55:36:41:70:17:1e:84:f5:5c:b6:2c:46:c4:ad:91:49:98:
         3b:0e:18:73:fd:61:a8:91:24:33:6a:ae:58:23:ba:9b:d7:4d:
         59:74:38:a6:46:73:aa:0a:bd:38:3b:0d:23:99:64:a5:81:42:
         b3:07:f1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----