Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/ACEAC0A4A62A11EA8EEE5680C4F9AE02.roa
File:                     ACEAC0A4A62A11EA8EEE5680C4F9AE02.roa (raw, json)
Hash identifier:          Om6eOyBuBavrJzDyV/BOeiOVBGF1yS7sWQaSP8Vcwzk=
Subject key identifier:   26:FD:D5:47:CB:A3:71:7E:F3:19:AA:17:C4:A5:08:3F:59:D9:AF:99
Certificate issuer:       /CN=A91DE5DA/serialNumber=0EBDD2BF449EF334406351553F0ED6832E46E4CB
Certificate serial:       0695
Authority key identifier: 0E:BD:D2:BF:44:9E:F3:34:40:63:51:55:3F:0E:D6:83:2E:46:E4:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/ACEAC0A4A62A11EA8EEE5680C4F9AE02.roa
Signing time:             Fri 29 Jul 2022 22:27:54 +0000
ROA not before:           Fri 29 Jul 2022 22:27:54 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     140696
IP address blocks:        103.151.248.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1685 (0x695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE5DA/serialNumber=0EBDD2BF449EF334406351553F0ED6832E46E4CB
        Validity
            Not Before: Jul 29 22:27:54 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=62e45eea-5cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:af:1e:d1:d3:cc:78:85:e3:a9:b6:0d:86:33:
                    39:6c:9e:60:de:fb:88:d8:1d:8e:03:84:6f:29:22:
                    59:81:09:bc:f0:6c:f7:95:13:30:25:f9:1b:11:c0:
                    97:9e:98:9c:66:31:1c:40:0c:ee:35:37:48:24:70:
                    94:02:88:ba:17:9a:81:60:5c:04:dc:11:01:e7:11:
                    89:a6:cb:37:31:4b:9b:b6:6f:79:f6:fc:7f:c3:c3:
                    93:57:c2:73:89:46:67:2c:b8:06:52:c2:8d:1f:c4:
                    35:28:17:ba:2e:61:4c:ae:27:dc:ff:9b:4f:74:50:
                    e5:6a:fb:af:98:a2:47:04:af:73:37:01:ca:58:6e:
                    11:83:ed:ad:d3:b9:18:51:29:d3:32:9a:7b:2e:e7:
                    d4:64:7e:f5:93:ff:4a:76:47:c3:8d:45:04:43:dd:
                    1c:e3:07:a2:cf:bb:b2:9b:4e:8d:e0:98:5f:e7:3a:
                    86:d0:f8:5a:0d:6f:03:50:db:57:5a:86:95:ca:37:
                    37:64:49:0a:b5:31:78:ad:48:7d:e1:43:33:e1:40:
                    c8:bd:9c:b3:c9:f9:11:2d:4d:9d:5b:43:15:82:06:
                    35:9d:05:3c:ab:61:bb:2f:7f:2d:04:d7:05:12:cf:
                    de:99:5f:4d:27:a8:d0:07:b1:48:a2:a6:ec:63:87:
                    6f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FD:D5:47:CB:A3:71:7E:F3:19:AA:17:C4:A5:08:3F:59:D9:AF:99
            X509v3 Authority Key Identifier:
                keyid:0E:BD:D2:BF:44:9E:F3:34:40:63:51:55:3F:0E:D6:83:2E:46:E4:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/ACEAC0A4A62A11EA8EEE5680C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:45:e7:4c:d4:1c:3f:e9:da:ff:05:dd:f2:8e:03:fc:af:38:
         de:09:fa:fb:31:83:46:02:35:96:d8:65:6d:8d:69:a5:fc:6e:
         1c:2b:dc:84:a4:50:4d:9d:57:dc:b5:83:9d:26:ee:e7:86:50:
         be:d4:2d:5c:37:0c:cf:81:0b:56:ca:c8:c4:64:dc:77:b1:24:
         2f:28:56:91:d4:4f:c5:0a:c0:4a:a6:b4:1c:16:a7:df:5a:1d:
         1d:a6:8e:48:c0:30:83:05:f4:12:63:9a:85:fc:2b:57:3a:88:
         08:80:12:fc:6a:3e:59:c0:d3:06:96:a3:d5:a8:ef:e3:25:47:
         b3:23:b9:53:16:1e:22:09:a9:c3:8c:eb:ed:19:d6:19:6f:78:
         24:de:3f:d0:3b:29:79:01:4c:c9:de:59:77:d9:40:b2:30:42:
         3f:9d:49:74:9c:26:30:32:a2:33:a2:08:f9:7d:3c:96:48:08:
         ce:6b:93:95:6e:66:1f:5a:00:c9:e7:5d:54:d5:3f:b7:f4:a1:
         52:e9:36:2c:95:aa:51:d7:48:50:80:2f:7c:72:94:48:6d:d6:
         d0:aa:14:58:c5:cf:f1:85:44:47:81:d9:a3:e0:03:59:09:6d:
         09:a2:c9:74:de:ce:bd:6a:ca:62:cb:b6:0b:95:b1:d0:e3:5f:
         42:e2:0b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----