Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/79B78D4E403011EFB3A91267C4F9AE02.roa
File:                     79B78D4E403011EFB3A91267C4F9AE02.roa (raw, json)
Hash identifier:          kE/XQ9VhjxvUs+wQ5QARjC7TwSkksPscSQihkvU+qiA=
Subject key identifier:   FD:4D:F0:39:0D:05:8E:30:AD:EA:A7:DB:DE:7D:CC:35:59:D6:F4:C2
Certificate issuer:       /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Certificate serial:       0206
Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/79B78D4E403011EFB3A91267C4F9AE02.roa
Signing time:             Sat 27 Jul 2024 03:26:45 +0000
ROA not before:           Sat 27 Jul 2024 03:26:45 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     136557
IP address blocks:        103.67.244.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 14 Oct 2024 04:21:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 518 (0x206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
        Validity
            Not Before: Jul 27 03:26:45 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a468f4-82c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:97:cc:49:e2:89:10:ea:cf:33:a7:a1:e6:93:
                    7f:42:91:62:84:99:22:85:0c:d9:ae:ee:77:67:89:
                    1b:d1:33:90:7c:c1:2c:28:5e:ff:bb:17:7e:b6:fa:
                    5d:c4:20:2c:6c:c1:0c:e3:f0:5c:91:1b:9d:52:18:
                    f8:64:d3:59:3e:94:f6:8e:7a:2b:8f:b9:0e:c1:c6:
                    46:1d:d6:80:53:50:20:67:89:f2:f6:24:fd:e8:d6:
                    fb:d9:44:d7:e4:1e:a9:69:41:4f:90:fb:0d:89:87:
                    3e:85:63:c7:df:83:77:94:a0:a8:9c:c4:ba:de:a1:
                    1f:42:a9:f7:09:58:d0:ab:91:5a:16:69:08:12:b1:
                    42:55:2b:d3:a1:3e:a3:e8:cc:87:da:63:06:b8:8e:
                    2f:a5:68:94:68:54:1b:b6:f8:0d:86:12:4c:df:82:
                    49:8e:6b:99:70:6b:d6:4a:dd:d0:bd:54:7b:f5:e2:
                    f9:e6:2f:5c:7e:ca:b9:dc:2e:96:f2:88:09:6b:b2:
                    4c:9a:9c:98:35:89:02:99:35:2a:f4:27:7b:1c:f3:
                    c0:3a:85:94:aa:b4:6d:fe:b0:1d:59:42:ac:38:fd:
                    49:79:72:fa:cf:fe:71:82:93:0e:c5:c3:41:ce:70:
                    a7:79:49:b6:ea:3f:6e:95:e2:3a:12:9d:2a:57:c9:
                    74:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4D:F0:39:0D:05:8E:30:AD:EA:A7:DB:DE:7D:CC:35:59:D6:F4:C2
            X509v3 Authority Key Identifier:
                keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/79B78D4E403011EFB3A91267C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:8c:e2:dc:e9:93:a3:8a:bc:46:7b:cd:ec:78:31:d0:21:14:
         6e:1b:ed:65:4f:fa:22:41:6d:a4:72:d7:49:52:fb:8e:9c:c9:
         ea:f5:f3:2f:e9:b2:42:35:26:c2:5b:69:ef:7c:61:54:e7:15:
         73:db:d5:64:44:ec:65:e0:0d:2b:77:d5:91:dd:12:38:03:20:
         9f:9a:1e:97:12:c4:2e:d6:92:e5:8a:5d:7e:0a:cc:8c:d0:20:
         fe:93:c4:46:73:d2:60:a2:29:03:83:7e:93:8f:60:70:90:7a:
         73:3d:f4:84:a5:d4:39:0f:2f:e4:6f:c9:9a:b2:6e:a4:2d:53:
         df:28:47:d7:71:fb:d0:f5:21:83:cf:46:0d:91:2c:0f:dc:e1:
         af:8e:bd:e7:27:d3:dd:78:da:b0:5b:44:55:50:aa:1f:aa:6c:
         62:44:b5:ff:af:8d:78:a3:75:43:af:8b:b7:88:3c:f3:57:d2:
         60:7d:1a:86:bc:9a:96:c6:a1:62:3f:9a:b6:85:65:12:55:13:
         db:eb:90:d1:d0:ea:16:bf:8b:60:81:cc:97:3e:9d:0b:9b:cc:
         f1:8c:66:86:bf:77:c8:7a:d1:8f:38:a9:d9:49:6c:d5:a0:6f:
         cb:05:83:92:75:2c:0a:6b:4c:b7:ec:94:b1:37:af:58:63:cd:
         ac:b0:ef:8b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjE0N0MxMTAvBgNVBAUTKEVEQTM4NUQ0NTcyM0IxRTFERjI5NzNGNjJCNUQyM0Ey
RkJGRDI2ODYwHhcNMjQwNzI3MDMyNjQ1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmE0NjhmNC04MmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm5fMSeKJEOrPM6eh5pN/QpFihJkihQzZru53Z4kb0TOQfMEsKF7/uxd+tvpd
xCAsbMEM4/BckRudUhj4ZNNZPpT2jnorj7kOwcZGHdaAU1AgZ4ny9iT96Nb72UTX
5B6paUFPkPsNiYc+hWPH34N3lKConMS63qEfQqn3CVjQq5FaFmkIErFCVSvToT6j
6MyH2mMGuI4vpWiUaFQbtvgNhhJM34JJjmuZcGvWSt3QvVR79eL55i9cfsq53C6W
8ogJa7JMmpyYNYkCmTUq9Cd7HPPAOoWUqrRt/rAdWUKsOP1JeXL6z/5xgpMOxcNB
znCneUm26j9uleI6Ep0qV8l0KQIDAQABo4IClTCCApEwHQYDVR0OBBYEFP1N8DkN
BY4wreqn2959zDVZ1vTCMB8GA1UdIwQYMBaAFO2jhdRXI7Hh3ylz9itdI6L7/SaG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ3Qy83RTBGNTg3MjAx
RTkxMUVEQUY4QkRFMzBDNEY5QUUwMi83YU9GMUZjanNlSGZLWFAySzEwam92djlK
b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdhT0YxRmNqc2VIZktYUDJLMTBqb3Z2OUpvWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjE0N0MvN0UwRjU4NzIwMUU5MTFFREFGOEJERTMwQzRGOUFFMDIvNzlCNzhENEU0
MDMwMTFFRkIzQTkxMjY3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnQ/QwDQYJKoZIhvcNAQELBQADggEBAJaM4tzpk6OKvEZ7
zex4MdAhFG4b7WVP+iJBbaRy10lS+46cyer18y/pskI1JsJbae98YVTnFXPb1WRE
7GXgDSt31ZHdEjgDIJ+aHpcSxC7WkuWKXX4KzIzQIP6TxEZz0mCiKQODfpOPYHCQ
enM99ISl1DkPL+RvyZqybqQtU98oR9dx+9D1IYPPRg2RLA/c4a+Ovecn09142rBb
RFVQqh+qbGJEtf+vjXijdUOvi7eIPPNX0mB9Goa8mpbGoWI/mraFZRJVE9vrkNHQ
6ha/i2CBzJc+nQubzPGMZoa/d8h60Y84qdlJbNWgb8sFg5J1LAprTLfslLE3r1hj
zayw74s=
-----END CERTIFICATE-----