Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/62C76B762F7611EDB5056C16C4F9AE02.roa
File:                     62C76B762F7611EDB5056C16C4F9AE02.roa (raw, json)
Hash identifier:          Z0a2XPFZrH9aLV/DoNu0v68cq+N3SzgQJCixrNZgitQ=
Subject key identifier:   D2:A7:83:1A:77:6A:04:99:0F:06:B2:7D:21:3A:08:B8:10:33:74:10
Certificate issuer:       /CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2
Certificate serial:       0581
Authority key identifier: A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/62C76B762F7611EDB5056C16C4F9AE02.roa
Signing time:             Mon 03 Apr 2023 01:11:34 +0000
ROA not before:           Mon 03 Apr 2023 01:11:34 +0000
ROA not after:            Wed 29 May 2024 00:00:00 +0000
asID:                     25369
IP address blocks:        103.110.105.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1409 (0x581)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2
        Validity
            Not Before: Apr  3 01:11:34 2023 GMT
            Not After : May 29 00:00:00 2024 GMT
        Subject: CN=642a27c6-fc1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:04:07:67:25:20:7a:a4:60:a4:14:51:3b:41:
                    65:68:f4:ab:ba:47:17:bf:60:88:d5:a7:9a:93:c4:
                    5a:86:90:e1:d9:c3:55:fd:63:89:42:c5:a2:ef:61:
                    b4:ab:f2:4e:0d:cb:46:83:51:7b:78:86:b4:fa:05:
                    e8:5e:65:e7:58:38:b1:90:4e:a2:bb:3a:3b:b9:40:
                    ed:b8:92:ae:dc:66:07:7d:4f:0e:12:c7:d6:61:7d:
                    59:6f:ec:6e:8e:ba:3d:ab:7b:12:bf:c7:2c:27:cc:
                    53:93:7d:29:26:bf:7a:e2:75:f7:64:46:0a:78:0d:
                    22:f9:d9:de:a8:eb:66:de:b2:12:79:df:15:8f:f9:
                    09:1f:d9:f2:ec:d7:f3:70:70:62:94:c3:30:74:94:
                    6e:ea:a1:86:50:72:92:f2:4b:c5:a5:18:81:2a:f8:
                    d9:74:f9:0a:93:c1:3d:03:f1:ca:07:cc:7f:a9:ba:
                    91:c3:71:92:64:d2:b8:51:9d:e5:4f:67:36:29:0f:
                    25:ea:62:56:46:8b:3f:2f:07:f1:e4:ac:6c:b5:36:
                    58:0d:ea:31:64:0b:1a:35:48:23:e2:78:9d:24:70:
                    18:a2:9a:f9:a2:db:2b:b5:b2:03:74:15:8e:c0:63:
                    17:52:57:8c:62:47:7e:dd:3b:9b:aa:8b:c0:4b:32:
                    74:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A7:83:1A:77:6A:04:99:0F:06:B2:7D:21:3A:08:B8:10:33:74:10
            X509v3 Authority Key Identifier:
                keyid:A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/62C76B762F7611EDB5056C16C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:04:18:f2:d6:7a:b6:1f:13:98:56:93:9e:3a:44:45:7f:6c:
         aa:ab:fb:13:fe:bc:4b:8b:08:64:a8:b4:84:ea:9d:8d:73:3c:
         c3:9d:55:5a:58:91:b6:b6:3d:2b:1a:7f:24:9a:cb:14:f1:86:
         37:80:40:b1:39:9d:b4:69:70:20:b3:f8:3d:aa:90:f8:a9:44:
         ab:5f:73:d2:d1:d1:7b:1e:ce:1a:20:4b:51:dd:d6:e2:ce:0b:
         50:21:fe:42:3b:16:cd:a1:84:cf:c5:69:76:0b:ce:b5:b4:5a:
         28:46:10:85:3f:a3:98:0c:7b:33:06:32:97:18:96:0c:fa:6e:
         30:f5:6b:6f:56:63:4b:5d:16:bd:2c:c6:91:fa:72:70:2f:fc:
         d8:df:19:9e:c0:bb:c9:a1:37:c7:17:37:ee:72:d5:5b:ec:38:
         49:63:80:c4:04:35:ef:36:04:e4:e6:28:4f:11:3e:3b:74:b6:
         2b:fd:88:99:77:8d:ab:57:63:0b:da:68:19:37:7d:86:f3:d6:
         ef:85:a0:da:d8:b0:b3:ca:b8:d7:1e:83:c2:5b:3f:da:51:5e:
         11:1e:dd:2c:8d:99:92:df:e4:ca:01:9d:01:c0:f5:28:b6:f9:
         05:56:4f:d8:b4:b2:11:fa:be:20:5e:3b:af:a1:49:7c:c5:1e:
         95:fb:3a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----