Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/DBC06200340311EB9DBF2456C4F9AE02.roa
File:                     DBC06200340311EB9DBF2456C4F9AE02.roa (raw, json)
Hash identifier:          0QUehMCPzETJMw+KefgUatURygUAl+rSKxNodS9NIMU=
Subject key identifier:   FB:19:50:B9:C5:13:3B:5F:24:F5:AD:15:B2:2E:64:50:B2:5E:E9:92
Certificate issuer:       /CN=A91C1A4E/serialNumber=A921635C7493F21CD26093D5903510802F4E3586
Certificate serial:       0A33
Authority key identifier: A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/DBC06200340311EB9DBF2456C4F9AE02.roa
Signing time:             Thu 19 Oct 2023 13:20:10 +0000
ROA not before:           Thu 19 Oct 2023 13:20:09 +0000
ROA not after:            Wed 01 May 2024 00:00:00 +0000
asID:                     138585
IP address blocks:        103.133.210.0/24 maxlen: 24
                          103.133.211.0/24 maxlen: 24
                          2404:53c0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2611 (0xa33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1A4E/serialNumber=A921635C7493F21CD26093D5903510802F4E3586
        Validity
            Not Before: Oct 19 13:20:09 2023 GMT
            Not After : May  1 00:00:00 2024 GMT
        Subject: CN=65312d09-6611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ea:55:3f:f5:e9:55:61:32:a3:36:58:5d:97:
                    83:11:b7:e7:26:ae:0d:9f:98:21:7a:0c:cb:ee:f2:
                    d8:10:1f:ce:22:1d:3e:1e:8c:22:a4:e4:5c:7b:fa:
                    3f:69:eb:38:40:35:0d:75:1c:92:ff:9d:99:a0:18:
                    e2:fa:e4:23:94:f4:21:cc:06:65:7b:e9:19:a1:cf:
                    c6:49:8a:e3:f7:98:ba:f6:39:6d:60:41:01:17:59:
                    d4:94:0c:0c:ff:2b:3a:6d:e5:61:e6:49:fd:11:f9:
                    5c:57:5d:3c:f9:db:50:52:f4:fd:41:25:70:6a:d4:
                    63:35:c1:8e:f9:5d:48:f8:b6:c6:a1:1b:c8:38:fb:
                    d4:c9:7f:b3:4f:a3:b7:ff:ab:73:82:79:20:77:18:
                    22:7c:7a:19:62:1c:01:c7:09:27:15:66:e9:56:0a:
                    62:a9:cb:73:8b:12:20:51:7c:ac:a4:b4:af:5b:69:
                    b4:a3:64:96:40:6b:4b:65:95:94:dd:89:be:69:23:
                    2c:88:da:a2:72:12:fe:9f:b4:83:2f:9e:f2:46:53:
                    ef:ce:c1:f1:92:b9:9c:3e:37:a8:d9:05:f4:af:6e:
                    a9:e2:4d:7d:5a:09:3c:a1:ae:3d:7c:04:44:48:1d:
                    39:d9:ea:c0:c1:41:1d:20:62:36:24:1c:04:90:16:
                    33:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:19:50:B9:C5:13:3B:5F:24:F5:AD:15:B2:2E:64:50:B2:5E:E9:92
            X509v3 Authority Key Identifier:
                keyid:A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/DBC06200340311EB9DBF2456C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.210.0/23
                IPv6:
                  2404:53c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:78:02:a7:22:c8:47:7c:12:04:4a:46:dd:d5:16:b3:86:3f:
         9a:f6:9c:04:e7:a9:69:ce:d1:5a:db:ab:fd:65:e3:d9:54:7f:
         78:82:39:a5:17:4b:b1:0d:db:0f:6a:a0:43:cf:f5:89:f1:c4:
         0a:12:aa:e7:90:7a:57:5d:d7:4f:a4:0e:e2:58:8d:f0:c0:c4:
         2c:1e:2b:c0:49:1c:55:7c:e5:0d:03:05:64:2b:bd:ec:a1:b1:
         21:e2:8b:27:1a:11:68:78:35:f2:ba:13:38:9f:c8:0a:7d:a1:
         f6:f1:b9:3c:de:21:e4:69:0e:07:b8:e6:d6:a9:f3:4b:0b:4d:
         19:5c:d3:28:ea:1d:e4:08:2e:87:9d:40:33:93:10:0a:31:bd:
         20:5c:c8:6b:07:98:6e:fb:da:05:d1:ec:93:fe:f7:bf:e9:32:
         a6:43:7d:50:da:7e:46:73:93:cc:b5:13:40:4a:9f:8b:66:2b:
         f2:84:95:f6:3b:ed:d2:42:2f:8a:f3:4d:07:b7:ca:95:2c:b7:
         4f:cd:a7:85:9b:85:f8:21:37:f2:41:34:82:c5:32:1f:4f:89:
         73:67:50:97:1d:70:17:26:b3:f0:0d:b2:31:58:61:cf:52:8a:
         e7:f5:1c:f1:d8:54:56:37:1b:c5:53:03:af:f5:bc:ad:fd:83:
         db:ed:87:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----