Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/6DCF008A4D9B11EE84B6951FC4F9AE02.roa
File:                     6DCF008A4D9B11EE84B6951FC4F9AE02.roa (raw, json)
Hash identifier:          OrQkLnYE5CMLZkm0Yh9KOgohBvcWeZwRss95a9st6DM=
Subject key identifier:   C9:90:6C:E6:89:46:2D:35:DA:16:48:B9:F7:FC:C5:9C:F5:E2:EC:6B
Certificate issuer:       /CN=A91479A7/serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8
Certificate serial:       28
Authority key identifier: 2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/6DCF008A4D9B11EE84B6951FC4F9AE02.roa
Signing time:             Thu 07 Sep 2023 16:28:39 +0000
ROA not before:           Thu 07 Sep 2023 16:28:39 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     26042
IP address blocks:        103.114.162.0/24 maxlen: 24
                          2402:d0c0:18::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91479A7/serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8
        Validity
            Not Before: Sep  7 16:28:39 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64f9fa37-c7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:74:e0:d4:64:a1:82:4b:ae:88:23:1e:14:35:
                    15:50:dc:fa:69:8b:77:ba:b7:c6:2c:f1:ce:60:bd:
                    d7:b1:d0:4a:4c:1f:63:72:37:e7:fe:f5:df:53:ac:
                    82:bd:7d:14:ce:7c:79:f5:13:88:23:41:94:b3:ee:
                    f1:ad:31:49:0e:cd:14:b3:d4:52:8d:5c:e3:81:0a:
                    54:80:92:fe:ae:cc:e4:14:85:d5:3a:9e:d2:93:5e:
                    0f:cd:43:c3:17:9e:82:52:bb:8c:28:9d:0e:9d:99:
                    55:a1:46:20:36:c3:60:60:68:39:58:98:64:5b:1c:
                    f0:e6:20:74:54:9e:48:85:9d:11:1c:4b:0b:7b:6a:
                    8f:ea:af:14:3b:5a:9d:22:36:21:5f:58:b9:97:80:
                    58:6e:8a:e8:8b:c2:32:75:ee:df:73:73:e0:40:66:
                    bb:95:2b:a0:7b:37:cf:cf:5d:2d:a7:54:16:65:67:
                    9c:58:36:17:14:4b:6a:90:70:94:27:a9:ae:9d:41:
                    4b:53:30:93:a6:24:f8:c8:da:00:2f:d6:8e:65:07:
                    70:ff:c0:6e:c5:bc:68:c9:c6:cb:d0:1e:70:28:f4:
                    d8:92:35:08:87:b4:3c:84:ee:22:00:4d:d9:04:09:
                    bc:4a:3c:33:5b:55:48:12:a9:24:32:38:a2:7f:91:
                    d2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:90:6C:E6:89:46:2D:35:DA:16:48:B9:F7:FC:C5:9C:F5:E2:EC:6B
            X509v3 Authority Key Identifier:
                keyid:2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/6DCF008A4D9B11EE84B6951FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.162.0/24
                IPv6:
                  2402:d0c0:18::/48

    Signature Algorithm: sha256WithRSAEncryption
         d3:7b:da:d3:10:3a:62:b3:76:35:2a:a9:f8:d3:d9:ac:e7:60:
         da:6a:7c:98:d1:68:a8:e3:a0:4f:3a:95:b8:ca:12:84:43:10:
         02:67:6b:b9:76:ff:de:ef:bd:eb:ba:2d:ec:1d:a7:68:3d:31:
         ee:d2:53:7c:fc:69:59:9a:b7:12:81:56:af:74:c1:50:73:d4:
         b1:82:23:6c:3e:17:90:39:3c:e2:4c:ce:34:a2:20:a2:74:a0:
         c4:bb:bc:df:f6:4d:f8:1e:71:c5:a0:e8:36:d2:ef:65:9f:4a:
         2b:5b:a5:2d:ef:1e:23:7a:96:0b:3b:45:e5:28:9e:9d:ce:2a:
         ac:83:2a:a9:d2:88:ee:6c:51:95:c0:d8:cd:3c:1a:ab:46:74:
         00:3d:3b:d9:e1:6c:af:c6:ae:ce:7f:04:58:bf:4d:8b:9f:e9:
         ed:c9:37:df:61:74:59:84:e5:21:5c:a3:a4:94:d7:86:15:f9:
         1e:ad:fd:a3:e3:18:28:09:92:dc:7b:c7:02:e7:1c:b4:33:11:
         1b:4c:8b:c5:4d:88:0d:82:9e:f8:6a:c6:35:ec:30:9c:fb:d1:
         3b:67:fb:98:7e:23:76:c4:a7:73:4c:f2:19:4d:9a:61:98:09:
         88:05:1c:62:2f:24:e4:15:37:f6:43:02:a7:19:1b:48:8e:8f:
         ff:1d:df:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----