Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/A1C0839A0A5D11EE912F0140C4F9AE02.roa
File:                     A1C0839A0A5D11EE912F0140C4F9AE02.roa (raw, json)
Hash identifier:          eSOnFf7fWtIM//jPBRTD1qSeFUkw3/IHkWmNBVP3/6I=
Subject key identifier:   6D:18:59:30:E4:87:42:BA:E3:91:6D:36:1E:CB:9A:3F:BF:10:5E:76
Certificate issuer:       /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
Certificate serial:       03
Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/A1C0839A0A5D11EE912F0140C4F9AE02.roa
Signing time:             Wed 14 Jun 2023 02:46:16 +0000
ROA not before:           Wed 14 Jun 2023 02:46:16 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     51722
IP address blocks:        103.120.13.0/24 maxlen: 24
                          103.120.14.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
        Validity
            Not Before: Jun 14 02:46:16 2023 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=648929f8-dfaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:7f:b9:32:b0:b0:23:df:0b:c1:04:b9:40:
                    50:7c:e8:97:5e:f8:98:15:d9:56:56:55:5c:13:42:
                    d5:10:a9:d2:c0:f3:cf:3c:50:20:28:2b:64:d2:b7:
                    05:e2:65:33:15:28:a2:72:ad:4b:cf:0b:06:6a:0a:
                    b0:41:84:40:9e:7d:92:a2:4b:a9:3f:db:d8:90:9f:
                    28:ce:0f:83:00:40:63:9f:f7:a3:9a:35:5c:8e:ab:
                    5a:99:ab:06:0c:10:07:26:d6:b6:76:80:1a:7e:2a:
                    6b:f4:4e:e0:0f:75:79:cc:38:ce:31:7b:4d:4e:57:
                    6a:b7:bb:fc:a9:92:28:36:9c:3a:a9:34:4e:1b:6f:
                    62:d0:a6:ba:18:9a:03:e6:2d:62:7d:e4:dd:b3:99:
                    a0:e4:3c:a0:57:b3:06:5b:9c:2b:c1:65:e8:98:74:
                    a6:54:12:5b:24:78:b3:30:c9:17:4a:fc:d0:e3:d8:
                    5e:83:3e:9b:d0:6e:8f:cd:39:cd:22:a2:74:10:bc:
                    22:4e:8e:11:cb:35:46:2b:3d:27:af:26:c9:ad:d8:
                    1a:19:0c:b5:90:45:7e:6f:f7:a0:d9:6b:45:0f:f4:
                    75:50:6e:6f:18:3e:ab:4e:2c:c2:90:59:54:a0:56:
                    f4:40:2b:0f:58:81:93:6b:5e:f8:0d:d8:c0:8c:64:
                    8b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:18:59:30:E4:87:42:BA:E3:91:6D:36:1E:CB:9A:3F:BF:10:5E:76
            X509v3 Authority Key Identifier:
                keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/A1C0839A0A5D11EE912F0140C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.13.0-103.120.14.255

    Signature Algorithm: sha256WithRSAEncryption
         40:ed:92:1a:a2:c3:3a:a0:89:c3:0c:9d:22:55:86:b7:ed:97:
         f2:cb:46:66:e6:e3:42:21:2d:32:99:31:64:89:37:34:97:74:
         3b:35:88:ee:2a:a7:a7:b7:57:7b:5f:d7:6f:fa:ff:6a:19:72:
         58:e5:68:6b:c0:86:ba:17:71:fa:cf:78:45:1a:92:c4:c9:e5:
         af:3c:5b:fa:a0:a3:83:29:80:12:ca:ae:48:fa:db:67:9f:0f:
         21:66:05:31:d4:ca:6d:43:fb:96:78:fc:7c:14:8c:6e:d8:f4:
         5c:aa:48:10:4d:2e:23:75:7e:e3:fd:70:51:9e:9b:84:6b:83:
         82:d2:85:54:74:5b:15:a0:bd:01:d5:cd:5f:09:5c:cf:83:4f:
         ad:de:64:ff:06:68:22:77:65:53:a6:76:70:6b:14:53:5a:b8:
         59:0d:b8:81:76:2e:68:ca:0a:5b:48:04:3d:85:e1:83:4e:23:
         9f:67:b4:51:0d:55:42:6a:d8:d9:a3:3a:43:82:d7:e6:54:ae:
         ad:9e:5e:92:bf:18:c1:b4:f2:3f:6b:cc:31:7a:75:59:73:e4:
         50:1e:91:5f:f5:26:1b:9f:b7:9e:42:6d:e5:95:c2:3b:c5:32:
         87:18:58:53:de:9a:b0:de:75:9e:30:04:38:79:fd:0b:f1:84:
         b9:4f:c4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----