Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/6549F07453CB11EE86F77B5FC4F9AE02.roa
File:                     6549F07453CB11EE86F77B5FC4F9AE02.roa (raw, json)
Hash identifier:          rseJYVkmLdfhbMkeaQ/WR0HHbsV9kP8v+KtELq6chRg=
Subject key identifier:   85:7D:4E:B6:23:60:5D:52:C5:7F:FF:77:3D:A1:44:D4:CE:CD:4A:03
Certificate issuer:       /CN=A912978E/serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A
Certificate serial:       02
Authority key identifier: 6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/6549F07453CB11EE86F77B5FC4F9AE02.roa
Signing time:             Fri 15 Sep 2023 13:25:54 +0000
ROA not before:           Fri 15 Sep 2023 13:25:54 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     24499
IP address blocks:        103.76.110.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912978E/serialNumber=6DF0935660B524D2A808064368B0AFC56538A69A
        Validity
            Not Before: Sep 15 13:25:54 2023 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65045b62-d8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:02:7a:61:14:0d:5e:70:16:13:72:72:80:57:
                    5e:1e:e1:97:c1:cd:f5:a2:ef:d5:82:15:59:7f:bd:
                    0d:79:7f:e8:a0:2c:e9:7a:9c:bc:cf:95:94:f7:3d:
                    7f:de:08:2f:a4:8e:48:6b:08:df:24:5e:83:8b:32:
                    09:81:98:28:59:8a:88:3c:07:79:06:0f:c8:62:cd:
                    52:c6:76:2c:16:9d:f9:a7:23:a2:a4:89:d5:f2:ff:
                    0c:fc:e9:4e:d3:29:0c:93:30:78:8c:31:a6:43:cf:
                    0c:aa:03:0f:ea:eb:25:75:84:59:d8:89:b7:34:cf:
                    b5:85:c4:f9:4a:e8:f2:ba:91:ef:2b:e3:1c:3a:f6:
                    8e:68:ff:22:05:25:f9:cd:10:65:29:7d:b1:61:b5:
                    fc:05:cc:78:4f:39:c6:65:f4:e6:62:b1:be:d8:68:
                    9d:ca:ba:4b:5e:98:d3:24:20:13:06:4d:e5:15:cb:
                    9a:c6:9d:c2:f1:6f:69:a5:97:05:d6:01:55:ff:25:
                    20:25:16:05:92:50:f6:10:4f:b2:e6:0f:98:5f:53:
                    e6:0b:45:1f:c4:ed:44:36:9d:cf:71:f5:a3:9e:b4:
                    7a:96:0d:6c:dd:36:d3:d0:ac:a2:aa:b9:c1:27:fc:
                    27:71:ea:2f:d8:4a:b9:a7:90:6b:90:7a:fc:27:7f:
                    57:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7D:4E:B6:23:60:5D:52:C5:7F:FF:77:3D:A1:44:D4:CE:CD:4A:03
            X509v3 Authority Key Identifier:
                keyid:6D:F0:93:56:60:B5:24:D2:A8:08:06:43:68:B0:AF:C5:65:38:A6:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/bfCTVmC1JNKoCAZDaLCvxWU4ppo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bfCTVmC1JNKoCAZDaLCvxWU4ppo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912978E/D5AE7FAC53CA11EE8049935EC4F9AE02/6549F07453CB11EE86F77B5FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:b0:ac:e3:96:2f:34:ea:64:31:0c:50:45:36:a3:ab:2b:bf:
         7e:fd:b1:63:fa:72:2f:04:7e:cf:4f:66:b6:14:61:8d:79:c6:
         90:85:de:94:bf:b0:bb:22:84:24:04:52:2f:51:0a:53:e6:a4:
         7d:0b:d8:55:b2:da:6d:e4:7f:de:c5:3c:f4:1f:42:76:5f:82:
         99:b2:fa:d0:3d:2a:95:c7:d8:0a:4c:75:07:53:12:c4:c8:43:
         37:8a:e4:34:c6:69:1d:be:73:83:10:f5:48:d8:1d:54:2c:e2:
         12:77:02:93:e1:ed:4e:33:19:e1:e6:63:7c:8a:91:f3:58:1d:
         0c:c2:6b:21:69:c6:7a:3e:3c:22:7e:69:64:b2:03:3d:00:e0:
         b1:5b:13:04:f6:76:c2:02:12:5c:ac:f0:3b:9a:f8:04:d1:7f:
         a5:97:a1:f9:64:31:2a:fe:26:1a:72:7c:12:17:01:ad:7e:2c:
         78:f7:e6:1e:7e:d2:54:fa:db:b2:5b:54:07:78:2a:70:c2:d4:
         90:38:21:97:9b:69:d5:71:19:23:04:78:82:90:14:ed:0b:f1:
         7c:0a:52:31:26:05:73:0c:d8:00:7d:bf:d6:11:53:a4:33:90:
         8c:2d:2f:f8:b3:87:98:d9:6b:dd:99:e1:83:40:b1:c5:07:cd:
         fd:d5:57:d4
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
OTc4RTExMC8GA1UEBRMoNkRGMDkzNTY2MEI1MjREMkE4MDgwNjQzNjhCMEFGQzU2
NTM4QTY5QTAeFw0yMzA5MTUxMzI1NTRaFw0yNDEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1MDQ1YjYyLWQ4ZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpAnphFA1ecBYTcnKAV14e4ZfBzfWi79WCFVl/vQ15f+igLOl6nLzPlZT3PX/e
CC+kjkhrCN8kXoOLMgmBmChZiog8B3kGD8hizVLGdiwWnfmnI6KkidXy/wz86U7T
KQyTMHiMMaZDzwyqAw/q6yV1hFnYibc0z7WFxPlK6PK6ke8r4xw69o5o/yIFJfnN
EGUpfbFhtfwFzHhPOcZl9OZisb7YaJ3KuktemNMkIBMGTeUVy5rGncLxb2mllwXW
AVX/JSAlFgWSUPYQT7LmD5hfU+YLRR/E7UQ2nc9x9aOetHqWDWzdNtPQrKKqucEn
/Cdx6i/YSrmnkGuQevwnf1edAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUhX1OtiNg
XVLFf/93PaFE1M7NSgMwHwYDVR0jBBgwFoAUbfCTVmC1JNKoCAZDaLCvxWU4ppow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5NzhFL0Q1QUU3RkFDNTND
QTExRUU4MDQ5OTM1RUM0RjlBRTAyL2JmQ1RWbUMxSk5Lb0NBWkRhTEN2eFdVNHBw
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYmZDVFZtQzFKTktvQ0FaRGFMQ3Z4V1U0cHBvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OTc4RS9ENUFFN0ZBQzUzQ0ExMUVFODA0OTkzNUVDNEY5QUUwMi82NTQ5RjA3NDUz
Q0IxMUVFODZGNzdCNUZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGdMbjANBgkqhkiG9w0BAQsFAAOCAQEAKrCs45YvNOpkMQxQ
RTajqyu/fv2xY/pyLwR+z09mthRhjXnGkIXelL+wuyKEJARSL1EKU+akfQvYVbLa
beR/3sU89B9Cdl+CmbL60D0qlcfYCkx1B1MSxMhDN4rkNMZpHb5zgxD1SNgdVCzi
EncCk+HtTjMZ4eZjfIqR81gdDMJrIWnGej48In5pZLIDPQDgsVsTBPZ2wgISXKzw
O5r4BNF/pZeh+WQxKv4mGnJ8EhcBrX4sePfmHn7SVPrbsltUB3gqcMLUkDghl5tp
1XEZIwR4gpAU7QvxfApSMSYFcwzYAH2/1hFTpDOQjC0v+LOHmNlr3Znhg0CxxQfN
/dVX1A==
-----END CERTIFICATE-----