Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/4F64D60CC1F611EB92C1FE7AC4F9AE02.roa
File:                     4F64D60CC1F611EB92C1FE7AC4F9AE02.roa (raw, json)
Hash identifier:          bJN4C8VUhQKo81dzduMDrPvWY5sSjn2EIYOWM3lXgTQ=
Subject key identifier:   28:04:E5:53:81:86:68:2A:1B:34:D0:DB:8D:52:C4:C0:96:8F:3A:EF
Certificate issuer:       /CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52
Certificate serial:       16A1
Authority key identifier: BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/4F64D60CC1F611EB92C1FE7AC4F9AE02.roa
Signing time:             Wed 07 Sep 2022 17:34:03 +0000
ROA not before:           Wed 07 Sep 2022 17:34:03 +0000
ROA not after:            Fri 01 Dec 2023 00:00:00 +0000
asID:                     136948
IP address blocks:        103.99.248.0/23 maxlen: 23
                          103.99.248.0/24 maxlen: 24
                          103.99.249.0/24 maxlen: 24
                          2401:b640::/32 maxlen: 32
                          2401:b640::/48 maxlen: 48
                          2401:b640:1::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5793 (0x16a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52
        Validity
            Not Before: Sep  7 17:34:03 2022 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=6318d60b-594c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f1:48:51:1c:2b:3e:b8:31:5d:16:94:f8:fe:
                    e9:9c:a0:2b:d3:0e:46:dd:ec:f3:7c:66:8a:f7:73:
                    3a:c6:cb:c9:0f:5e:f8:2e:d6:a5:61:bb:70:bb:dc:
                    7a:1e:b4:bf:a6:22:c3:fa:17:c5:0f:42:ae:76:6a:
                    e1:86:9e:ed:ac:f5:59:7e:91:91:e8:8b:f3:b5:a5:
                    1a:4c:26:04:fa:1b:09:91:29:75:ec:69:67:a8:cc:
                    cf:50:87:97:08:dd:99:60:b2:6f:f5:7d:d2:ca:48:
                    3c:01:b2:dc:7b:95:18:db:53:2f:34:54:54:57:06:
                    23:27:bd:c2:d3:2f:6a:f7:a9:2f:13:b5:61:41:a8:
                    e9:e4:b9:44:b5:43:75:9a:91:08:ca:82:13:c4:20:
                    73:f2:7c:2d:5a:84:f9:1f:c5:c3:b1:c0:e3:62:0c:
                    13:78:8d:ab:27:85:0c:a2:61:16:d1:d0:85:55:64:
                    c8:90:ff:be:41:de:ee:02:f0:d4:cd:74:4d:a3:3c:
                    b5:69:65:bf:93:52:79:31:ab:2d:c0:45:c6:80:43:
                    6c:b9:7f:f8:41:2b:42:34:01:4b:a3:12:bb:b3:1e:
                    09:37:0e:c0:ab:5d:bb:30:b3:67:f0:d0:ab:16:83:
                    19:e6:b9:62:35:f7:ec:78:c2:2c:fa:2b:2f:17:e0:
                    ab:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:04:E5:53:81:86:68:2A:1B:34:D0:DB:8D:52:C4:C0:96:8F:3A:EF
            X509v3 Authority Key Identifier:
                keyid:BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/4F64D60CC1F611EB92C1FE7AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.248.0/23
                IPv6:
                  2401:b640::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:87:1c:75:6a:81:06:3a:44:04:df:01:b7:25:04:32:b4:b5:
         6c:1a:e8:1c:64:53:51:eb:1c:ff:3e:f7:29:6d:57:d0:48:60:
         a2:f6:fa:18:88:f4:3f:a7:61:69:a6:36:b3:61:6d:42:af:dc:
         1f:5d:fd:5e:c8:70:bb:68:0c:0f:8d:fc:3f:aa:55:d0:69:d0:
         2c:3c:0a:27:dd:38:a6:12:24:10:d6:22:83:a4:80:af:02:27:
         3b:de:2e:4a:fc:63:cd:f6:37:d0:41:c0:cd:82:a0:d6:4e:92:
         fb:4a:9d:2a:1b:6f:f8:28:59:9e:62:a8:2b:6a:bc:ca:f6:38:
         26:61:d5:da:eb:7f:ac:63:e7:00:35:9f:1a:d2:a8:10:55:60:
         e3:ef:da:63:27:f6:ca:f4:79:3b:8d:08:2c:9d:16:22:42:9c:
         a3:40:81:38:e4:90:2c:b5:86:4e:95:c4:01:9a:13:cc:79:a1:
         ee:40:7b:53:80:51:ea:37:de:06:58:eb:e1:49:ee:31:53:49:
         25:d0:07:76:09:0c:4e:0b:44:7e:44:62:0b:9a:70:ed:0c:bd:
         bc:f3:a7:cf:aa:d7:30:ea:e3:38:04:b4:7a:1d:be:42:78:98:
         6f:06:71:23:91:00:07:d2:af:d9:aa:ba:c2:0c:41:ea:43:ac:
         a6:9d:80:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----