Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/F3774AAA569A11EE87E02E14C4F9AE02.roa
File:                     F3774AAA569A11EE87E02E14C4F9AE02.roa (raw, json)
Hash identifier:          uC1zSRgXohHZ7YOXO/TFgS7KDS0JNMd2OlpTbf0z6q4=
Subject key identifier:   5B:C8:B8:3A:8F:9B:F0:1D:F7:0F:D6:23:B3:C4:80:A6:C4:70:EA:85
Certificate issuer:       /CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
Certificate serial:       0D
Authority key identifier: 1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/F3774AAA569A11EE87E02E14C4F9AE02.roa
Signing time:             Tue 19 Sep 2023 13:20:52 +0000
ROA not before:           Tue 19 Sep 2023 13:20:52 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     42960
IP address blocks:        103.247.28.0/23 maxlen: 24
                          2401:1fe0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CA31/serialNumber=1EF30C4C5604A56ECB3EAEE7F2CA97EB78105070
        Validity
            Not Before: Sep 19 13:20:52 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=6509a033-f2d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2f:43:37:cb:14:00:ef:f5:38:ed:59:ee:0a:
                    89:5e:34:8f:eb:f6:9e:22:99:8b:0e:df:d3:54:76:
                    b5:04:a7:f5:01:f3:41:54:b1:89:16:e1:a1:cd:be:
                    3a:8c:1f:b2:0e:a4:fe:b7:7a:04:d4:a8:60:61:b8:
                    c8:6c:0a:35:c7:07:7c:6a:c6:8d:77:a3:53:01:72:
                    6b:c6:8b:04:fc:85:9e:d5:4e:c7:69:04:ea:9c:77:
                    2a:d6:b4:c7:32:02:c5:58:7f:02:cb:7e:a3:0f:53:
                    db:1c:29:af:38:bd:bb:9a:1e:76:4a:f7:f2:74:1f:
                    22:46:38:f6:53:1b:f2:9b:bf:cc:bd:c6:dd:8e:c7:
                    1b:1e:68:0e:67:14:22:47:27:c2:03:c2:58:49:52:
                    95:66:29:f1:ca:7c:8a:65:47:09:93:41:ef:64:69:
                    b4:2c:d6:21:00:21:36:da:da:8d:ea:15:25:e7:b6:
                    0f:c1:ea:22:ca:b0:3b:d3:5d:66:0d:6b:7f:f2:0b:
                    55:65:f9:b4:b7:fe:0c:ce:21:f0:b4:96:61:22:a4:
                    fd:7b:8a:45:bc:a2:ae:12:6d:21:01:5e:85:52:46:
                    4c:77:8d:6d:10:ba:6b:e8:d5:79:aa:2f:6a:ab:5e:
                    6b:50:3c:de:7c:a2:42:b1:57:c3:08:2f:6e:f9:59:
                    d2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C8:B8:3A:8F:9B:F0:1D:F7:0F:D6:23:B3:C4:80:A6:C4:70:EA:85
            X509v3 Authority Key Identifier:
                keyid:1E:F3:0C:4C:56:04:A5:6E:CB:3E:AE:E7:F2:CA:97:EB:78:10:50:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/HvMMTFYEpW7LPq7n8sqX63gQUHA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HvMMTFYEpW7LPq7n8sqX63gQUHA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CA31/090F14FA500C11EE82B26863C4F9AE02/F3774AAA569A11EE87E02E14C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.28.0/23
                IPv6:
                  2401:1fe0::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:11:43:4f:cf:35:d5:9e:d5:4b:56:45:34:38:86:29:e0:6b:
         5b:18:84:c8:fa:f3:83:c9:8e:22:1f:e2:0b:4b:5b:8a:8b:25:
         5a:51:0c:0f:63:c5:c1:a8:39:6d:18:4a:fb:d3:75:05:9d:07:
         eb:b3:5b:03:d2:55:b7:d1:0e:3d:4d:ac:95:b5:73:90:0f:0b:
         d7:8d:90:9b:a5:a8:0e:04:e8:77:36:82:88:c4:22:b0:78:5b:
         cb:b2:54:f2:5a:ce:da:6f:20:50:9d:41:b1:4e:39:16:e1:18:
         a8:a5:b5:bb:f4:8f:45:2c:22:f6:57:66:e3:72:08:0c:65:80:
         7f:b0:7a:43:0c:48:e1:50:95:a5:e5:34:cf:aa:64:40:e2:ee:
         9c:f5:84:6c:52:57:14:35:2c:2b:b8:d5:a3:f4:6d:e5:cc:b2:
         ca:be:4b:83:0c:80:02:57:5f:b2:5b:e6:02:d0:d6:31:ed:10:
         b7:57:29:be:97:bd:63:6c:d1:a4:5a:38:a9:d8:83:8a:4d:9c:
         aa:23:9b:cc:2f:9b:14:88:f8:69:98:59:61:42:94:97:4f:28:
         2a:77:76:df:c0:44:70:af:16:2c:2e:d1:9a:d4:d9:c7:f5:db:
         f3:d4:63:92:ab:13:36:92:d4:20:49:b9:5f:91:fc:1d:f3:29:
         ce:65:9d:be
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
Q0EzMTExMC8GA1UEBRMoMUVGMzBDNEM1NjA0QTU2RUNCM0VBRUU3RjJDQTk3RUI3
ODEwNTA3MDAeFw0yMzA5MTkxMzIwNTJaFw0yNDEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1MDlhMDMzLWYyZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDcL0M3yxQA7/U47VnuColeNI/r9p4imYsO39NUdrUEp/UB80FUsYkW4aHNvjqM
H7IOpP63egTUqGBhuMhsCjXHB3xqxo13o1MBcmvGiwT8hZ7VTsdpBOqcdyrWtMcy
AsVYfwLLfqMPU9scKa84vbuaHnZK9/J0HyJGOPZTG/Kbv8y9xt2OxxseaA5nFCJH
J8IDwlhJUpVmKfHKfIplRwmTQe9kabQs1iEAITba2o3qFSXntg/B6iLKsDvTXWYN
a3/yC1Vl+bS3/gzOIfC0lmEipP17ikW8oq4SbSEBXoVSRkx3jW0Qumvo1XmqL2qr
XmtQPN58okKxV8MIL275WdI3AgMBAAGjggKmMIICojAdBgNVHQ4EFgQUW8i4Oo+b
8B33D9Yjs8SApsRw6oUwHwYDVR0jBBgwFoAUHvMMTFYEpW7LPq7n8sqX63gQUHAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDQTMxLzA5MEYxNEZBNTAw
QzExRUU4MkIyNjg2M0M0RjlBRTAyL0h2TU1URllFcFc3TFBxN244c3FYNjNnUVVI
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSHZNTVRGWUVwVzdMUHE3bjhzcVg2M2dRVUhBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Q0EzMS8wOTBGMTRGQTUwMEMxMUVFODJCMjY4NjNDNEY5QUUwMi9GMzc3NEFBQTU2
OUExMUVFODdFMDJFMTRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAWf3HDAPBAIAAjAJAwcAJAEf4AAAMA0GCSqGSIb3DQEBCwUA
A4IBAQAZEUNPzzXVntVLVkU0OIYp4GtbGITI+vODyY4iH+ILS1uKiyVaUQwPY8XB
qDltGEr703UFnQfrs1sD0lW30Q49TayVtXOQDwvXjZCbpagOBOh3NoKIxCKweFvL
slTyWs7abyBQnUGxTjkW4RiopbW79I9FLCL2V2bjcggMZYB/sHpDDEjhUJWl5TTP
qmRA4u6c9YRsUlcUNSwruNWj9G3lzLLKvkuDDIACV1+yW+YC0NYx7RC3Vym+l71j
bNGkWjip2IOKTZyqI5vML5sUiPhpmFlhQpSXTygqd3bfwERwrxYsLtGa1NnH9dvz
1GOSqxM2ktQgSblfkfwd8ynOZZ2+
-----END CERTIFICATE-----