Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/9EACAD0C765811EEA11F2721C4F9AE02.roa
File:                     9EACAD0C765811EEA11F2721C4F9AE02.roa (raw, json)
Hash identifier:          Elsf39TDuorYly4uf2aQV0IaCwOHefTHOfhngFnEpHE=
Subject key identifier:   52:D2:E6:41:77:70:77:A4:7B:75:F6:2E:51:B5:23:36:22:26:03:E4
Certificate issuer:       /CN=A91B6462/serialNumber=91A5E6E576C315C4319EEF9FDA3287AD20C38039
Certificate serial:       0AD0
Authority key identifier: 91:A5:E6:E5:76:C3:15:C4:31:9E:EF:9F:DA:32:87:AD:20:C3:80:39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/9EACAD0C765811EEA11F2721C4F9AE02.roa
Signing time:             Sun 29 Oct 2023 12:42:29 +0000
ROA not before:           Sun 29 Oct 2023 12:42:29 +0000
ROA not after:            Fri 01 Mar 2024 00:00:00 +0000
asID:                     213371
IP address blocks:        103.145.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2768 (0xad0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6462/serialNumber=91A5E6E576C315C4319EEF9FDA3287AD20C38039
        Validity
            Not Before: Oct 29 12:42:29 2023 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=653e5334-9a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:99:20:34:f6:9d:6e:2b:81:a3:fe:ac:c2:cc:
                    4d:43:3f:c7:c4:2d:c5:f7:51:2e:65:e5:47:94:1c:
                    f7:50:e9:48:2f:9e:b1:53:5e:4c:cf:11:7a:df:b8:
                    d1:bb:18:fc:05:bf:41:06:3a:51:f8:7a:7d:6a:f9:
                    df:ed:53:bf:76:13:ac:eb:75:6e:69:39:c0:0f:56:
                    91:ae:ca:e6:b3:18:4e:4e:6c:e6:af:1e:06:7d:f0:
                    75:47:33:c6:57:bd:02:f1:61:07:55:34:7e:3e:80:
                    cf:7a:32:2e:af:5f:1a:73:b0:bd:54:2f:42:1f:6b:
                    88:5d:b9:2c:ac:20:d6:b5:3d:92:82:68:13:df:90:
                    63:34:84:63:46:3b:d1:77:4e:e5:67:e9:ca:38:b8:
                    78:c7:55:50:1c:68:90:c0:73:d6:2a:1f:ea:c4:f2:
                    38:dc:49:47:0b:f0:c5:c7:0c:9b:ef:de:3e:aa:7b:
                    f1:86:ec:c2:b4:fa:97:b1:eb:67:89:ff:5b:37:fc:
                    6a:b0:73:9b:22:a4:79:8e:bc:a3:8d:d0:db:8d:5c:
                    bf:f2:dd:f9:2e:fc:9a:04:cc:37:8a:9f:36:57:71:
                    9d:c4:97:38:01:fd:6b:f1:1b:98:e7:c6:b5:1a:95:
                    a9:e8:79:4b:6d:7a:0e:8e:e9:e4:00:87:3a:5a:8a:
                    f1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D2:E6:41:77:70:77:A4:7B:75:F6:2E:51:B5:23:36:22:26:03:E4
            X509v3 Authority Key Identifier:
                keyid:91:A5:E6:E5:76:C3:15:C4:31:9E:EF:9F:DA:32:87:AD:20:C3:80:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/kaXm5XbDFcQxnu-f2jKHrSDDgDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaXm5XbDFcQxnu-f2jKHrSDDgDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6462/DAF435E0184311EAB0AF201DC4F9AE02/9EACAD0C765811EEA11F2721C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:8e:0c:2d:d9:3c:e5:3a:19:fc:09:85:01:ce:b7:ed:9f:9b:
         d7:0e:f3:48:f9:74:70:17:09:d9:f2:7d:10:91:a9:c1:a0:f0:
         f7:bf:37:b1:0e:28:72:8b:a6:7c:0a:8f:40:1e:a0:36:a9:a7:
         53:85:e7:0a:f5:d6:cf:69:70:a8:2d:23:76:2c:89:12:64:ac:
         29:09:b7:26:ef:cf:13:69:f9:aa:8f:3b:0f:1a:49:cc:86:f7:
         1e:14:a8:ba:fc:05:65:53:fb:4f:8c:5d:a1:4d:82:c4:2b:a3:
         c7:f0:bf:f7:9d:45:77:5a:43:bc:cf:bc:57:64:92:15:3b:38:
         cf:05:1b:ab:aa:a6:d9:2f:c9:f2:96:c4:89:4d:16:89:4d:73:
         e4:cf:87:a4:60:19:9d:27:dc:4c:02:dc:69:cb:7b:7e:18:38:
         87:36:72:18:05:44:17:13:a8:1a:eb:0b:c6:ba:5d:6a:73:29:
         a7:e0:03:82:9f:92:7e:5a:23:3c:04:71:94:4e:2b:82:05:68:
         c0:f5:c0:47:aa:12:36:18:c3:ba:13:2e:cd:a8:42:0a:2d:a1:
         7a:53:cd:11:ec:ae:e8:5e:93:f9:a9:34:4c:90:50:0c:f3:46:
         27:8d:30:b9:c6:3e:c9:6f:9d:9a:35:e8:4c:ac:66:ad:dd:d2:
         ad:02:a6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----