Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/AA13B1FE865511EBABB6CE18C4F9AE02.roa
File:                     AA13B1FE865511EBABB6CE18C4F9AE02.roa (raw, json)
Hash identifier:          0HMM0HTGz13kcNiBVFfoVdTTZpbI7tgdlZVVpGcFxAA=
Subject key identifier:   FA:60:7F:B1:D3:8C:86:7F:0F:9D:14:69:D7:DC:D8:F5:5A:5F:02:33
Certificate issuer:       /CN=A911218D/serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0
Certificate serial:       05D6
Authority key identifier: E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/AA13B1FE865511EBABB6CE18C4F9AE02.roa
Signing time:             Sun 30 Oct 2022 23:29:56 +0000
ROA not before:           Sun 30 Oct 2022 23:29:56 +0000
ROA not after:            Sat 30 Dec 2023 00:00:00 +0000
asID:                     141209
IP address blocks:        103.156.126.0/23 maxlen: 23
                          103.156.127.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1494 (0x5d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911218D/serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0
        Validity
            Not Before: Oct 30 23:29:56 2022 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=635f08f3-aeb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:88:7f:33:11:8a:f5:75:35:b7:68:78:84:c9:
                    a3:b5:ea:d7:5a:2b:da:2e:17:f5:a4:b1:65:46:2a:
                    b2:5a:fd:93:1a:49:84:1f:7a:ae:2c:36:29:87:1b:
                    b5:41:16:62:f4:9a:02:aa:1e:e2:90:b3:d4:13:57:
                    bb:aa:c5:e8:2a:bb:9d:31:51:d6:02:0c:4e:de:77:
                    c6:fd:6c:a2:86:e0:1c:ef:4d:34:99:3c:a5:17:66:
                    03:f8:24:e9:62:76:57:6d:f6:c1:5e:fd:31:48:a2:
                    08:84:87:dd:c1:32:2c:68:fe:fc:d1:ae:8f:97:fd:
                    87:25:1e:78:08:f8:ff:cd:9c:8d:eb:8c:60:16:c1:
                    6f:5f:5d:bd:d9:12:f3:c0:4a:cb:c5:eb:f8:fc:bf:
                    f9:a6:cd:39:c7:fd:81:ea:1c:b7:d5:3d:f9:7c:91:
                    4e:f1:f2:bb:bc:b0:ab:f0:00:44:9d:2d:55:c7:f3:
                    b4:86:34:76:2d:ce:bd:9e:c2:68:8a:62:26:d3:39:
                    80:d3:d1:d2:50:d9:ea:df:64:16:f8:27:b8:41:53:
                    63:dc:c8:1e:64:dd:b9:9a:fc:c7:8c:08:08:ee:b2:
                    97:53:a7:a7:df:91:0f:80:fc:a3:f3:66:ec:90:d6:
                    2f:b7:e6:27:88:ad:3e:1c:bd:fd:8f:29:f7:ae:75:
                    4a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:60:7F:B1:D3:8C:86:7F:0F:9D:14:69:D7:DC:D8:F5:5A:5F:02:33
            X509v3 Authority Key Identifier:
                keyid:E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/AA13B1FE865511EBABB6CE18C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:c2:86:7a:e6:bb:e2:2a:ac:53:60:b4:9a:db:54:18:fd:cc:
         70:6e:4d:af:bc:2d:71:89:b3:af:19:7f:37:f7:38:1c:c5:6e:
         ba:a8:bb:86:3d:22:63:ff:91:a6:b9:1f:bb:73:2e:64:76:b2:
         dc:08:d1:37:54:df:9e:6b:2d:e3:4d:18:4c:f1:ef:51:86:7e:
         40:51:5f:ce:6e:89:19:bf:bd:07:11:e6:c3:c6:ca:da:b1:09:
         72:f5:89:9a:ce:97:87:c5:3a:6b:8e:77:ea:83:42:a9:3a:69:
         5a:ea:68:dc:64:ff:ed:c8:ee:8f:7c:7a:92:84:c9:84:e5:51:
         a9:cb:1a:2c:40:72:34:da:e4:6f:b3:41:79:95:12:5d:fe:df:
         76:ce:11:fa:ab:2d:cf:0c:31:2f:31:af:4a:ef:8c:a8:bb:12:
         60:fd:39:d9:42:f9:c7:09:d9:b7:de:e1:19:c9:ec:2b:d3:cc:
         51:a4:2d:de:b9:5d:c8:68:97:17:f9:36:fd:7e:c0:6d:e7:be:
         af:05:59:1e:17:53:8a:04:00:39:d4:55:e5:88:9d:86:89:1e:
         f3:51:83:f3:2d:43:18:92:09:ea:07:88:f6:fd:cf:20:96:0e:
         2d:03:db:84:78:00:4e:a7:25:55:ae:86:4d:44:aa:21:fa:b8:
         7d:0c:cf:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----