Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/6C6B925CA13F11EDB4BD4A36C4F9AE02.roa
File:                     6C6B925CA13F11EDB4BD4A36C4F9AE02.roa (raw, json)
Hash identifier:          kXT4U3z7UQiCXO1/1E6pAjFNTmNYvthFBtyelFJaKNU=
Subject key identifier:   ED:C1:73:C6:AE:54:F4:FA:B4:BA:B9:84:B9:93:D1:CE:B5:73:7C:80
Certificate issuer:       /CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D
Certificate serial:       19
Authority key identifier: 94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/6C6B925CA13F11EDB4BD4A36C4F9AE02.roa
Signing time:             Tue 31 Jan 2023 08:15:29 +0000
ROA not before:           Tue 31 Jan 2023 08:15:29 +0000
ROA not after:            Sun 31 Mar 2024 00:00:00 +0000
asID:                     150697
IP address blocks:        103.59.216.0/24 maxlen: 24
                          103.59.217.0/24 maxlen: 24
                          2001:df1:bac0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121071/serialNumber=94C2F46A32D10775E1649BA250F697FF47AC063D
        Validity
            Not Before: Jan 31 08:15:29 2023 GMT
            Not After : Mar 31 00:00:00 2024 GMT
        Subject: CN=63d8ce21-8605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:24:31:9b:6c:40:00:b5:2d:1c:5a:98:e0:1d:
                    a0:4e:a5:ae:aa:1f:34:05:39:de:95:96:cc:b4:79:
                    ae:40:60:ad:a2:d3:5a:ef:f8:21:38:13:7a:40:7c:
                    dc:90:74:11:34:fb:c6:cd:53:71:47:96:7b:cf:f1:
                    7d:00:81:80:be:fd:8c:fa:81:b4:27:ba:5c:5b:82:
                    41:d3:82:5e:2c:b7:92:36:de:2b:96:8c:e0:66:d6:
                    b4:6e:2f:81:8b:ec:ad:ce:cb:41:03:e3:28:9a:eb:
                    43:b7:08:5c:14:13:ac:af:3a:b2:7e:9a:15:eb:42:
                    07:f1:b4:12:4e:31:85:da:f3:fe:26:73:34:9c:6c:
                    92:29:ac:8f:5e:3f:5f:b7:3e:ad:07:6e:74:3c:2a:
                    93:2c:06:fc:79:4e:1c:5e:9f:bb:e1:2c:c4:32:49:
                    26:5d:65:bb:09:20:6f:8b:f1:49:1e:0a:69:e1:cf:
                    fb:55:85:31:11:6b:1c:09:cd:ff:24:2b:d1:b6:ba:
                    ea:47:c8:a8:06:14:94:0f:88:fa:0e:52:ee:9e:e4:
                    76:4a:e4:dc:78:2a:d7:64:5d:8a:d3:4d:20:43:8c:
                    f1:30:8a:4c:1b:a6:3a:89:a3:71:1c:98:f8:e3:52:
                    c6:21:5b:58:48:07:77:8c:47:49:f0:70:f4:e6:2c:
                    56:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C1:73:C6:AE:54:F4:FA:B4:BA:B9:84:B9:93:D1:CE:B5:73:7C:80
            X509v3 Authority Key Identifier:
                keyid:94:C2:F4:6A:32:D1:07:75:E1:64:9B:A2:50:F6:97:FF:47:AC:06:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/lML0ajLRB3XhZJuiUPaX_0esBj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lML0ajLRB3XhZJuiUPaX_0esBj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121071/2F0F7A4886B611EDAA3B2B33C4F9AE02/6C6B925CA13F11EDB4BD4A36C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.59.216.0/23
                IPv6:
                  2001:df1:bac0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:6c:91:2b:08:56:5b:ca:fa:a0:8c:e4:9b:f2:54:e1:7f:02:
         d3:da:38:ab:e7:f4:97:ce:dc:f1:f3:12:18:ee:98:66:7b:72:
         d7:44:01:de:56:f4:cd:c0:78:70:8e:bc:3a:28:9a:2e:8d:fe:
         25:30:b5:3a:93:f4:53:f3:3e:cb:f2:59:78:b3:67:03:b3:96:
         f1:9f:be:be:30:0c:81:94:06:77:09:18:01:b5:29:42:1c:70:
         5e:bd:18:84:60:8b:ab:0c:2b:69:58:d7:1f:47:ec:dc:43:f5:
         cd:48:09:49:4c:ff:61:3c:25:49:94:87:df:79:c0:06:18:94:
         2f:aa:a4:13:ef:86:e9:85:ee:ec:62:5d:de:d6:d6:c7:1f:c7:
         9d:d9:e6:91:82:29:96:2a:a3:db:98:39:ca:c7:c9:0b:e6:18:
         c6:46:3b:4d:6c:63:df:78:48:35:2f:c0:25:b2:a8:cd:62:62:
         29:f5:75:ef:da:f7:b4:52:b0:55:7f:df:ce:33:6c:54:a3:e8:
         b0:f5:c6:56:5c:33:91:d5:8e:db:22:90:7f:9d:46:30:da:d3:
         1a:75:ca:69:f0:43:b2:4f:47:02:14:7a:89:52:4f:ed:e1:19:
         06:e6:24:56:22:90:14:75:2a:83:36:3f:d6:7c:06:17:c2:a1:
         c7:7a:40:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----