Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/21B9D048D6DC11ED9FCE0F48C4F9AE02.roa
File:                     21B9D048D6DC11ED9FCE0F48C4F9AE02.roa (raw, json)
Hash identifier:          D5cvpjOptYW49UYp/DrH9eNKzhhjcT8pWpFaFsyPrZU=
Subject key identifier:   55:C7:50:F9:CA:E7:8C:D7:24:DB:E0:2B:85:9C:EC:2A:76:4B:9C:9F
Certificate issuer:       /CN=A9127733/serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
Certificate serial:       05F0
Authority key identifier: 42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/21B9D048D6DC11ED9FCE0F48C4F9AE02.roa
Signing time:             Tue 31 Oct 2023 23:51:09 +0000
ROA not before:           Tue 31 Oct 2023 23:51:09 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     23734
IP address blocks:        103.101.0.0/22 maxlen: 22
                          103.101.0.0/23 maxlen: 24
                          2401:c740::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 26 Jan 2024 22:25:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1520 (0x5f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127733/serialNumber=4275515200B039672AFA0E85877D4E3FE70D89D7
        Validity
            Not Before: Oct 31 23:51:09 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=654192ed-0977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:47:ed:00:ee:66:a9:91:81:a5:28:95:e6:3e:
                    a7:ff:0d:44:ab:31:cb:cb:33:9d:b3:fc:82:2a:ee:
                    f1:60:25:d5:45:ee:1e:ea:b4:76:16:7b:e0:47:b8:
                    b6:fc:90:82:23:c5:dc:7c:9c:9f:dc:35:4a:d1:e7:
                    35:65:38:35:2d:d0:58:68:50:05:bc:b3:22:c9:78:
                    3d:85:5d:a7:b8:68:36:69:6a:d1:4a:11:e4:1c:4a:
                    ed:2b:0b:7b:72:0e:63:7f:11:3c:21:16:8d:35:0d:
                    00:38:5a:d7:74:6e:12:47:8f:2e:5b:12:16:61:ec:
                    d2:51:d8:a6:ce:d3:60:9e:1c:9c:07:6b:f4:25:d2:
                    13:af:13:dd:e4:b7:e7:81:f6:db:98:31:1e:f2:1e:
                    93:3b:18:43:17:d8:36:83:90:13:0b:81:c9:ff:06:
                    2e:0a:91:c5:a8:05:47:db:80:be:42:af:cc:51:d3:
                    b1:cf:00:73:32:be:0a:c4:74:88:98:37:5c:c9:95:
                    d1:1e:c7:4c:d8:9e:be:7f:b5:ba:98:53:f6:d8:31:
                    aa:60:1d:8e:74:d1:62:d4:63:2c:c4:fc:14:b4:ec:
                    5d:c7:68:a4:38:35:10:72:3a:e9:db:a5:e5:f3:8c:
                    84:02:44:d8:56:f3:4f:1f:23:ef:06:6c:fb:60:25:
                    03:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C7:50:F9:CA:E7:8C:D7:24:DB:E0:2B:85:9C:EC:2A:76:4B:9C:9F
            X509v3 Authority Key Identifier:
                keyid:42:75:51:52:00:B0:39:67:2A:FA:0E:85:87:7D:4E:3F:E7:0D:89:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/QnVRUgCwOWcq-g6Fh31OP-cNidc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnVRUgCwOWcq-g6Fh31OP-cNidc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127733/ADDC3B3E458D11EBA39AC740C4F9AE02/21B9D048D6DC11ED9FCE0F48C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.0.0/22
                IPv6:
                  2401:c740::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:62:e6:9b:a0:94:9b:da:3d:e4:37:41:15:1a:d1:04:26:e6:
         4e:64:55:95:e9:ee:20:31:fd:a6:62:65:70:b0:ec:f8:46:ac:
         57:8b:0d:74:44:c7:26:87:44:38:cf:41:ba:de:f8:35:9b:c0:
         89:48:f9:c5:f3:11:08:44:84:10:81:4a:ac:97:b3:7f:5b:39:
         8f:cd:cc:7b:36:dd:f2:c2:60:ab:a6:29:72:07:76:c3:9d:c9:
         0e:47:ac:b1:2b:d4:31:ac:92:49:bd:c9:9b:67:98:d7:cd:21:
         72:74:f4:7b:a8:1c:5b:52:85:bc:fe:36:73:37:80:33:3a:3b:
         cb:04:b6:4b:2a:39:34:7d:df:0b:0c:a6:53:50:5c:92:c5:48:
         73:09:bf:e2:b5:bc:26:4a:c7:d7:14:25:88:bd:b5:5c:0c:06:
         8e:bf:b8:48:9c:65:16:75:4a:f1:ce:dd:b6:0d:93:e3:e0:cf:
         ec:d2:42:09:3d:07:c6:02:d5:54:56:2a:cd:b0:71:7f:98:2e:
         df:d2:f1:6d:31:2e:c6:82:d0:cb:1b:5c:f3:44:64:9c:2a:00:
         45:40:47:6d:8a:46:a4:ae:ca:64:16:59:24:33:8f:c0:6e:c9:
         ee:6a:85:4d:b7:b4:b8:36:8d:a5:bb:55:5e:b5:27:62:de:25:
         4a:e1:a7:ab
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc3MzMxMTAvBgNVBAUTKDQyNzU1MTUyMDBCMDM5NjcyQUZBMEU4NTg3N0Q0RTNG
RTcwRDg5RDcwHhcNMjMxMDMxMjM1MTA5WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTQxOTJlZC0wOTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuEftAO5mqZGBpSiV5j6n/w1EqzHLyzOds/yCKu7xYCXVRe4e6rR2FnvgR7i2
/JCCI8XcfJyf3DVK0ec1ZTg1LdBYaFAFvLMiyXg9hV2nuGg2aWrRShHkHErtKwt7
cg5jfxE8IRaNNQ0AOFrXdG4SR48uWxIWYezSUdimztNgnhycB2v0JdITrxPd5Lfn
gfbbmDEe8h6TOxhDF9g2g5ATC4HJ/wYuCpHFqAVH24C+Qq/MUdOxzwBzMr4KxHSI
mDdcyZXRHsdM2J6+f7W6mFP22DGqYB2OdNFi1GMsxPwUtOxdx2ikODUQcjrp26Xl
84yEAkTYVvNPHyPvBmz7YCUDlwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFFXHUPnK
54zXJNvgK4Wc7Cp2S5yfMB8GA1UdIwQYMBaAFEJ1UVIAsDlnKvoOhYd9Tj/nDYnX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzczMy9BRERDM0IzRTQ1
OEQxMUVCQTM5QUM3NDBDNEY5QUUwMi9RblZSVWdDd09XY3EtZzZGaDMxT1AtY05p
ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FuVlJVZ0N3T1djcS1nNkZoMzFPUC1jTmlkYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjc3MzMvQUREQzNCM0U0NThEMTFFQkEzOUFDNzQwQzRGOUFFMDIvMjFCOUQwNDhE
NkRDMTFFRDlGQ0UwRjQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJnZQAwDQQCAAIwBwMFACQBx0AwDQYJKoZIhvcNAQELBQAD
ggEBAAZi5puglJvaPeQ3QRUa0QQm5k5kVZXp7iAx/aZiZXCw7PhGrFeLDXRExyaH
RDjPQbre+DWbwIlI+cXzEQhEhBCBSqyXs39bOY/NzHs23fLCYKumKXIHdsOdyQ5H
rLEr1DGskkm9yZtnmNfNIXJ09HuoHFtShbz+NnM3gDM6O8sEtksqOTR93wsMplNQ
XJLFSHMJv+K1vCZKx9cUJYi9tVwMBo6/uEicZRZ1SvHO3bYNk+Pgz+zSQgk9B8YC
1VRWKs2wcX+YLt/S8W0xLsaC0MsbXPNEZJwqAEVAR22KRqSuymQWWSQzj8Buye5q
hU23tLg2jaW7VV61J2LeJUrhp6s=
-----END CERTIFICATE-----