Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/72D31B6EF71311EC9205FD0DC4F9AE02.roa
File:                     72D31B6EF71311EC9205FD0DC4F9AE02.roa (raw, json)
Hash identifier:          FP2NDRw6QZKOzmKKA5FnHWBXIW7WJY1smCGylfIIwQQ=
Subject key identifier:   3F:28:D5:92:9C:0C:C8:90:5C:ED:B4:A1:0F:74:64:F3:7B:9B:A0:DF
Certificate issuer:       /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Certificate serial:       56
Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/72D31B6EF71311EC9205FD0DC4F9AE02.roa
Signing time:             Tue 28 Jun 2022 18:52:25 +0000
ROA not before:           Tue 28 Jun 2022 18:52:25 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     149836
IP address blocks:        103.187.244.0/23 maxlen: 24
                          2001:df0:c240::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
        Validity
            Not Before: Jun 28 18:52:25 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=62bb4de8-2237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:41:22:a6:b9:b3:6d:f8:34:ba:31:67:1f:d2:
                    02:96:4d:b5:06:e6:75:9d:9b:28:ce:73:05:3e:82:
                    1a:03:11:36:c4:d8:62:8c:69:c5:66:52:62:f6:55:
                    2c:23:26:bd:18:0e:5d:99:4c:12:db:4a:40:99:40:
                    96:da:b6:4e:56:6f:4e:8a:75:fa:16:dd:62:21:c3:
                    28:62:cb:d3:2b:d2:ad:1d:06:78:80:9f:27:74:c5:
                    c0:a8:7b:7c:b6:78:b7:14:42:94:cb:a2:ec:2d:80:
                    74:db:ee:d3:94:ce:22:92:a2:77:57:45:c6:74:4f:
                    97:6e:07:c1:a4:45:4e:cd:02:b6:71:6b:b2:d0:58:
                    9a:bb:55:6c:fd:6d:6a:ec:98:d7:91:bd:01:a0:f1:
                    95:50:03:27:26:04:8c:92:19:df:be:d5:85:3c:f9:
                    c2:d5:5d:68:d8:bd:4b:20:bc:1c:be:58:03:dd:c3:
                    ab:f0:b0:ec:ee:b3:0b:22:e7:f7:0f:d8:91:07:88:
                    39:31:a6:28:fe:8f:b1:61:c3:fc:48:59:27:e7:e5:
                    69:41:85:6e:b4:f5:f9:9e:9a:79:1f:2e:81:56:36:
                    6d:f2:5f:2c:6b:65:c4:a9:07:da:0d:7d:c9:b2:55:
                    29:6a:0f:1d:ec:41:14:0c:1b:fe:08:12:c1:95:e2:
                    93:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:28:D5:92:9C:0C:C8:90:5C:ED:B4:A1:0F:74:64:F3:7B:9B:A0:DF
            X509v3 Authority Key Identifier:
                keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/72D31B6EF71311EC9205FD0DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.244.0/23
                IPv6:
                  2001:df0:c240::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:4e:01:56:cd:3f:66:d5:c3:a2:aa:79:33:ee:ee:3f:41:d5:
         a9:58:25:43:19:38:84:aa:d6:e9:74:0d:72:fa:d9:63:5d:a6:
         a7:f7:35:c0:74:1c:92:93:09:3e:c4:83:0e:ec:6f:96:f6:96:
         e0:7f:44:4e:08:17:8b:fb:fc:46:b3:cf:45:23:35:ea:62:0c:
         b3:bc:5c:78:c3:ac:58:59:3a:36:b0:ff:93:41:60:14:b2:73:
         52:ec:eb:08:68:44:9f:cd:c0:8f:8f:13:e0:20:e7:ef:12:dd:
         ee:c6:63:fc:b6:c2:21:e8:c1:ea:05:e4:7b:7b:95:ac:91:94:
         eb:03:53:59:9a:75:3c:d2:d8:af:d0:4b:c0:65:d5:75:4a:dd:
         b3:ee:41:65:b8:3b:b7:99:48:b9:3e:e9:70:bf:d2:bc:59:1d:
         5a:14:73:d7:b8:19:30:9e:e8:86:83:6a:05:7f:7d:5c:c7:e7:
         60:e8:68:07:23:95:73:cd:89:91:ab:b6:c6:f9:47:94:c5:22:
         cd:35:6e:4d:4c:34:6d:9b:3f:68:df:e8:32:ce:12:00:20:91:
         f6:6b:4a:17:81:fe:70:71:1a:70:9d:cb:e6:73:f8:c1:69:ac:
         b3:c6:f5:20:0f:70:36:32:80:8e:2f:94:ff:f1:b7:60:90:71:
         81:14:81:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----