Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/1A86AC149F3211EE80846B0FC4F9AE02.roa
File:                     1A86AC149F3211EE80846B0FC4F9AE02.roa (raw, json)
Hash identifier:          bZmsZLr9z2f/KZ23Ez+jU971mB0mYEc1bzpuLbwkSMY=
Subject key identifier:   3B:ED:81:91:5B:C0:A8:0C:F5:85:72:81:15:6E:ED:74:AC:D3:7E:37
Certificate issuer:       /CN=A919495D/serialNumber=272F9FDF301454EB6C81F3016C205AF443CABD5C
Certificate serial:       039E
Authority key identifier: 27:2F:9F:DF:30:14:54:EB:6C:81:F3:01:6C:20:5A:F4:43:CA:BD:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/1A86AC149F3211EE80846B0FC4F9AE02.roa
Signing time:             Wed 20 Dec 2023 12:20:04 +0000
ROA not before:           Wed 20 Dec 2023 12:20:04 +0000
ROA not after:            Fri 31 Jan 2025 00:00:00 +0000
asID:                     141432
IP address blocks:        103.174.207.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 26 Dec 2023 19:12:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 926 (0x39e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919495D/serialNumber=272F9FDF301454EB6C81F3016C205AF443CABD5C
        Validity
            Not Before: Dec 20 12:20:04 2023 GMT
            Not After : Jan 31 00:00:00 2025 GMT
        Subject: CN=6582dbf4-8657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:71:75:ae:28:b5:c8:b3:97:1e:9c:db:66:63:
                    c7:1d:8a:8a:3c:d0:28:e6:35:51:0c:27:c7:ca:6e:
                    b7:18:b6:51:e1:e3:1d:4b:a6:16:c0:37:a7:40:fb:
                    ef:ab:5f:7b:0a:1d:3f:5d:05:97:4d:d1:7d:42:37:
                    66:30:ac:3c:bf:83:18:25:a5:9b:90:d1:d5:67:c4:
                    5f:2f:3f:8c:1b:fc:ad:94:9a:53:e6:82:59:78:dc:
                    84:22:36:48:35:18:26:3a:10:49:43:ad:05:13:f8:
                    16:39:5e:44:18:7b:58:1b:34:94:7f:98:ba:56:12:
                    b6:fc:50:98:68:1c:9f:ba:17:a5:bb:e3:3e:39:8e:
                    b0:b1:50:f5:d5:30:d8:ea:a0:02:79:d8:98:5d:9d:
                    32:e8:ae:bf:2c:0f:9b:6d:56:be:d7:0f:fb:fe:05:
                    6b:18:af:ba:6d:4d:d6:f1:c0:f7:56:b3:5c:8c:67:
                    d7:bf:47:7d:d1:46:f3:2a:c3:23:89:f4:80:0c:c2:
                    95:ca:af:39:13:35:91:fd:37:cc:3b:52:1e:49:4c:
                    b6:51:e7:b2:a0:12:31:92:77:8b:88:08:4a:2c:a3:
                    5f:e7:d5:71:5d:41:ac:53:39:45:e6:b8:a5:eb:51:
                    ff:09:01:1b:c7:58:ca:6e:95:84:2a:99:37:51:0e:
                    b2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:ED:81:91:5B:C0:A8:0C:F5:85:72:81:15:6E:ED:74:AC:D3:7E:37
            X509v3 Authority Key Identifier:
                keyid:27:2F:9F:DF:30:14:54:EB:6C:81:F3:01:6C:20:5A:F4:43:CA:BD:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jy-f3zAUVOtsgfMBbCBa9EPKvVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919495D/8DE2E4BA326111EC8C4FDE26C4F9AE02/1A86AC149F3211EE80846B0FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:21:a9:0f:22:c2:f0:3b:aa:8b:68:f8:5c:4d:84:a6:ec:db:
         5d:77:dc:e9:19:22:dd:c5:5a:02:1b:47:16:ca:ec:08:c4:7f:
         dd:10:a6:ea:ea:26:c5:36:e9:5c:f4:52:24:9e:c0:88:0d:fa:
         6c:4d:a9:40:4c:2a:89:d3:3c:bf:ae:dc:87:27:76:f3:2f:06:
         22:3c:87:23:18:8b:9f:30:5d:06:20:9b:05:ac:07:82:42:8c:
         53:7b:cc:53:ec:8b:4d:d9:d3:64:a9:41:9d:8e:1b:a8:9d:4b:
         61:86:8b:5a:b5:53:16:c8:a2:3a:e5:1c:08:63:10:21:88:3b:
         30:ac:94:a4:c8:94:95:33:0b:03:9e:f1:1a:ae:a1:eb:3e:e1:
         7b:8d:bc:a3:b5:f5:ad:b1:93:cf:03:7c:18:70:4d:56:31:53:
         47:99:96:da:58:7e:ea:6e:1e:5e:e4:6b:8d:2f:e8:50:6a:cb:
         a7:a7:33:17:e1:85:b3:da:b0:d4:d3:78:95:39:ec:6a:ec:43:
         51:97:4d:6a:f0:e4:6a:0a:67:37:8c:fa:a3:53:88:42:2c:6a:
         21:de:67:9d:78:5b:19:af:2c:13:40:8c:46:77:9a:f7:61:d5:
         89:48:21:fa:36:45:ab:4a:5f:9d:6a:21:1c:f1:68:ac:c4:b4:
         3f:d6:5b:6f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQ5NUQxMTAvBgNVBAUTKDI3MkY5RkRGMzAxNDU0RUI2QzgxRjMwMTZDMjA1QUY0
NDNDQUJENUMwHhcNMjMxMjIwMTIyMDA0WhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTgyZGJmNC04NjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvHF1rii1yLOXHpzbZmPHHYqKPNAo5jVRDCfHym63GLZR4eMdS6YWwDenQPvv
q197Ch0/XQWXTdF9QjdmMKw8v4MYJaWbkNHVZ8RfLz+MG/ytlJpT5oJZeNyEIjZI
NRgmOhBJQ60FE/gWOV5EGHtYGzSUf5i6VhK2/FCYaByfuhelu+M+OY6wsVD11TDY
6qACediYXZ0y6K6/LA+bbVa+1w/7/gVrGK+6bU3W8cD3VrNcjGfXv0d90UbzKsMj
ifSADMKVyq85EzWR/TfMO1IeSUy2UeeyoBIxkneLiAhKLKNf59VxXUGsUzlF5ril
61H/CQEbx1jKbpWEKpk3UQ6yXwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDvtgZFb
wKgM9YVygRVu7XSs0343MB8GA1UdIwQYMBaAFCcvn98wFFTrbIHzAWwgWvRDyr1c
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDk1RC84REUyRTRCQTMy
NjExMUVDOEM0RkRFMjZDNEY5QUUwMi9KeS1mM3pBVVZPdHNnZk1CYkNCYTlFUEt2
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0p5LWYzekFVVk90c2dmTUJiQ0JhOUVQS3ZWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTQ5NUQvOERFMkU0QkEzMjYxMTFFQzhDNEZERTI2QzRGOUFFMDIvMUE4NkFDMTQ5
RjMyMTFFRTgwODQ2QjBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnrs8wDQYJKoZIhvcNAQELBQADggEBABEhqQ8iwvA7qoto
+FxNhKbs21133OkZIt3FWgIbRxbK7AjEf90QpurqJsU26Vz0UiSewIgN+mxNqUBM
KonTPL+u3IcndvMvBiI8hyMYi58wXQYgmwWsB4JCjFN7zFPsi03Z02SpQZ2OG6id
S2GGi1q1UxbIojrlHAhjECGIOzCslKTIlJUzCwOe8Rquoes+4XuNvKO19a2xk88D
fBhwTVYxU0eZltpYfupuHl7ka40v6FBqy6enMxfhhbPasNTTeJU57GrsQ1GXTWrw
5GoKZzeM+qNTiEIsaiHeZ514WxmvLBNAjEZ3mvdh1YlIIfo2RatKX51qIRzxaKzE
tD/WW28=
-----END CERTIFICATE-----