Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4A/14135E60651611EDA632214FC4F9AE02/B49D604E651911ED80A85454C4F9AE02.roa
File:                     B49D604E651911ED80A85454C4F9AE02.roa (raw, json)
Hash identifier:          vbhYS8xmDGALcY/6figJoT5pYTRuBk6KvLPoK54kvCI=
Subject key identifier:   30:9A:34:CE:F2:99:A6:91:71:51:C1:9F:AE:64:99:3D:E5:2B:0B:DA
Certificate issuer:       /CN=A911AE4A/serialNumber=C070A495B383E59D4571B6B17D8A9289AAED1825
Certificate serial:       1F
Authority key identifier: C0:70:A4:95:B3:83:E5:9D:45:71:B6:B1:7D:8A:92:89:AA:ED:18:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHCklbOD5Z1FcbaxfYqSiartGCU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AE4A/14135E60651611EDA632214FC4F9AE02/B49D604E651911ED80A85454C4F9AE02.roa
Signing time:             Sun 01 Jan 2023 17:24:42 +0000
ROA not before:           Sun 01 Jan 2023 17:24:42 +0000
ROA not after:            Fri 01 Mar 2024 00:00:00 +0000
asID:                     150422
IP address blocks:        103.38.208.0/23 maxlen: 23
                          103.38.208.0/24 maxlen: 24
                          103.38.209.0/24 maxlen: 24
                          2400:c060::/32 maxlen: 32
                          2400:c060::/33 maxlen: 33

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AE4A/serialNumber=C070A495B383E59D4571B6B17D8A9289AAED1825
        Validity
            Not Before: Jan  1 17:24:42 2023 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=63b1c1da-e0fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:55:c0:7c:c9:37:21:f6:43:47:db:a0:2a:de:
                    ac:82:d8:c6:5b:de:0b:dc:ae:ee:05:72:5e:dc:dd:
                    8b:ac:2e:96:dc:e9:8b:17:e9:63:b3:88:a0:6c:8e:
                    fb:34:91:bf:3b:67:22:93:c8:f1:c5:33:7d:26:40:
                    5e:c9:1e:1f:be:f8:de:06:e1:0a:f3:fe:8b:ed:96:
                    71:bc:65:00:48:df:cf:9c:bf:01:cf:a5:34:be:4a:
                    28:8c:8a:25:09:40:cf:f0:7e:0b:33:4e:00:f5:a2:
                    c0:16:37:7a:39:82:f5:0f:36:b1:9a:70:10:fd:7f:
                    6d:56:ef:b9:17:6d:be:22:5a:b4:b7:3b:fa:9c:ba:
                    b6:aa:ae:1a:c8:5b:5d:13:b9:ed:02:d5:61:5b:83:
                    41:59:1e:0e:e3:34:7f:d8:c9:e5:3a:37:10:3d:d9:
                    51:e0:1c:d7:2a:29:fd:13:1f:57:f3:70:a9:64:7b:
                    73:d5:69:dc:aa:80:ae:31:c1:a8:72:b9:0c:0a:30:
                    22:72:8c:f7:48:93:a3:2c:c4:fa:e8:22:89:e0:5c:
                    9d:20:c1:3c:90:33:f2:d8:13:3d:db:ca:62:48:f9:
                    3c:0d:8a:95:52:5a:bc:15:df:b8:51:c1:20:2b:95:
                    6f:a9:20:77:dd:1e:94:8b:c7:26:4b:89:c8:92:b6:
                    62:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9A:34:CE:F2:99:A6:91:71:51:C1:9F:AE:64:99:3D:E5:2B:0B:DA
            X509v3 Authority Key Identifier:
                keyid:C0:70:A4:95:B3:83:E5:9D:45:71:B6:B1:7D:8A:92:89:AA:ED:18:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AE4A/14135E60651611EDA632214FC4F9AE02/wHCklbOD5Z1FcbaxfYqSiartGCU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHCklbOD5Z1FcbaxfYqSiartGCU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4A/14135E60651611EDA632214FC4F9AE02/B49D604E651911ED80A85454C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.208.0/23
                IPv6:
                  2400:c060::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:71:9c:ff:bc:77:b2:45:8a:55:d4:e5:23:26:c9:3c:0a:93:
         a9:11:65:df:7d:92:b5:98:61:f3:a3:8d:1c:7c:c9:c5:46:4e:
         a8:d5:ad:90:d9:57:89:71:e6:08:66:c1:f6:df:dc:7e:6c:78:
         8e:30:bb:2b:41:51:e5:0a:9d:18:9d:09:08:e6:a9:52:43:36:
         3a:f0:25:09:cd:ab:41:b9:9e:e8:41:c9:54:3d:26:5f:c9:ca:
         70:93:a6:46:a9:66:47:8d:ca:1f:e3:0c:27:c4:d9:8b:44:92:
         34:6a:ce:83:d7:50:d8:48:a7:69:b0:2c:97:8f:2d:58:37:e4:
         c5:c5:cd:9c:30:9d:a6:a9:8c:c1:db:a5:cc:28:58:ff:8a:61:
         24:6f:97:28:b8:42:38:d2:08:bc:3c:05:9d:46:7e:29:58:16:
         b2:96:60:fb:f0:a0:36:30:6f:36:00:3c:48:e5:fc:e6:d2:9b:
         da:f2:6c:98:c9:0f:b9:6a:04:4f:eb:da:c7:66:c1:72:88:3b:
         7e:84:b8:42:00:fc:7b:a1:c0:bd:9b:98:8b:3a:15:9a:38:41:
         c2:91:2c:30:16:57:ac:97:5b:bc:a6:b2:b9:7e:7f:f9:dd:13:
         71:61:7d:0e:7c:f3:01:5d:2d:05:6c:d2:f8:1d:52:fa:32:0d:
         4c:ff:c6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----