Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/7088A31C467111EDAA98894FC4F9AE02.roa
File:                     7088A31C467111EDAA98894FC4F9AE02.roa (raw, json)
Hash identifier:          LGcTBMh4blNpci/g9Lkh4t/Ngf9DJ4cq4CEH8RvE6Sc=
Subject key identifier:   6F:A6:A3:5C:AD:58:E2:D9:2B:5E:3C:46:6F:6C:B3:DA:CD:F1:5F:9F
Certificate issuer:       /CN=A911C756/serialNumber=0D562AADC1C0498DAEE2610C1A7DA875BE635CEA
Certificate serial:       014F
Authority key identifier: 0D:56:2A:AD:C1:C0:49:8D:AE:E2:61:0C:1A:7D:A8:75:BE:63:5C:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/7088A31C467111EDAA98894FC4F9AE02.roa
Signing time:             Tue 11 Jul 2023 03:01:59 +0000
ROA not before:           Tue 11 Jul 2023 03:01:59 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     138358
IP address blocks:        103.187.22.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C756/serialNumber=0D562AADC1C0498DAEE2610C1A7DA875BE635CEA
        Validity
            Not Before: Jul 11 03:01:59 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64acc626-bcd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:92:43:18:02:5e:dd:7d:a7:8d:f2:68:76:0c:
                    33:91:c9:9b:23:47:af:6b:65:53:3d:fa:d5:55:78:
                    0a:d2:02:25:d1:d7:33:c0:bd:4d:99:13:e7:24:f2:
                    42:cf:0f:45:e6:f6:9f:13:a1:04:f5:c6:6a:5e:0c:
                    f6:b2:e3:6c:05:23:48:d8:93:0f:61:ae:e4:cb:a2:
                    b4:4e:40:80:d0:1a:e3:f7:fc:1a:49:33:c9:ea:db:
                    32:87:4b:17:55:c2:93:81:d5:04:18:32:a9:d2:4c:
                    bf:13:03:c1:9a:47:6f:92:73:a3:48:88:a9:7f:4c:
                    b0:c5:ec:d9:e5:c2:6a:6f:11:e2:f8:b1:b3:23:35:
                    04:b5:e7:c9:7c:20:d3:4c:0a:63:f7:b4:2c:75:f7:
                    cb:6d:b6:1e:93:6e:88:09:48:f2:3d:1b:81:c2:ec:
                    d3:6f:3a:65:96:77:9c:43:e4:a0:1b:6b:15:ca:e4:
                    74:3c:f3:05:b4:ad:3e:b3:c2:61:ba:9d:dd:0c:a7:
                    03:17:4d:72:b1:23:56:32:74:3f:66:7f:a0:93:89:
                    dd:8a:48:65:2e:fc:b2:70:a7:13:99:1c:ab:1b:8b:
                    aa:b3:c4:d3:c4:ef:61:c7:2d:4f:f7:ed:b1:8a:b5:
                    67:6f:61:2e:cf:30:89:25:38:53:03:9c:87:55:1d:
                    3b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A6:A3:5C:AD:58:E2:D9:2B:5E:3C:46:6F:6C:B3:DA:CD:F1:5F:9F
            X509v3 Authority Key Identifier:
                keyid:0D:56:2A:AD:C1:C0:49:8D:AE:E2:61:0C:1A:7D:A8:75:BE:63:5C:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/7088A31C467111EDAA98894FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:86:2a:b9:83:f8:a2:cd:95:39:15:89:75:26:48:44:26:c1:
         f8:9f:f5:24:6c:d4:b0:10:a1:3f:c6:14:0e:33:c8:f4:b3:54:
         71:e9:54:c8:a5:7c:8a:3a:07:aa:3d:3e:27:a9:90:53:95:19:
         a2:02:68:71:7f:df:55:f2:fa:0d:df:fe:4b:65:35:5a:c8:7b:
         68:7d:81:96:d4:03:41:14:c3:55:e9:46:d7:7d:12:8f:12:ef:
         63:55:a5:fe:8e:e5:d6:4f:31:c5:03:30:f4:2a:2f:5c:67:24:
         a8:30:d9:0b:f8:1b:c4:03:d7:cb:dc:80:65:2a:78:12:4a:b1:
         04:71:29:49:f8:d0:37:aa:c1:b4:3a:6a:c6:2f:1c:eb:d5:cd:
         e0:8e:1d:e2:16:1c:be:2a:0d:bd:d1:52:5d:6b:bb:77:40:e1:
         d3:78:ea:08:98:49:46:d0:44:05:f1:b6:ea:d4:0e:5e:83:57:
         6e:1d:bb:31:da:96:5b:3b:08:91:8a:b0:ff:9f:85:13:89:ef:
         71:bf:8a:4f:7c:ab:83:62:69:76:68:cd:8b:9c:d4:4c:3a:45:
         99:e7:39:c1:fe:56:8b:8c:82:64:de:43:8d:2a:b3:8c:eb:87:
         a8:38:22:a1:87:ec:1d:01:58:a7:7b:d9:1b:b5:7d:50:49:78:
         03:e2:b8:a5
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM3NTYxMTAvBgNVBAUTKDBENTYyQUFEQzFDMDQ5OERBRUUyNjEwQzFBN0RBODc1
QkU2MzVDRUEwHhcNMjMwNzExMDMwMTU5WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGFjYzYyNi1iY2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA55JDGAJe3X2njfJodgwzkcmbI0eva2VTPfrVVXgK0gIl0dczwL1NmRPnJPJC
zw9F5vafE6EE9cZqXgz2suNsBSNI2JMPYa7ky6K0TkCA0Brj9/waSTPJ6tsyh0sX
VcKTgdUEGDKp0ky/EwPBmkdvknOjSIipf0ywxezZ5cJqbxHi+LGzIzUEtefJfCDT
TApj97QsdffLbbYek26ICUjyPRuBwuzTbzpllnecQ+SgG2sVyuR0PPMFtK0+s8Jh
up3dDKcDF01ysSNWMnQ/Zn+gk4ndikhlLvyycKcTmRyrG4uqs8TTxO9hxy1P9+2x
irVnb2EuzzCJJThTA5yHVR07SwIDAQABo4IClTCCApEwHQYDVR0OBBYEFG+mo1yt
WOLZK148Rm9ss9rN8V+fMB8GA1UdIwQYMBaAFA1WKq3BwEmNruJhDBp9qHW+Y1zq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzc1Ni85MTkwNjg1MkY4
OTExMUVDODdFREVDNkFDNEY5QUUwMi9EVllxcmNIQVNZMnU0bUVNR24yb2RiNWpY
T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RWWXFyY0hBU1kydTRtRU1HbjJvZGI1alhPby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUM3NTYvOTE5MDY4NTJGODkxMTFFQzg3RURFQzZBQzRGOUFFMDIvNzA4OEEzMUM0
NjcxMTFFREFBOTg4OTRGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnuxYwDQYJKoZIhvcNAQELBQADggEBAImGKrmD+KLNlTkV
iXUmSEQmwfif9SRs1LAQoT/GFA4zyPSzVHHpVMilfIo6B6o9PiepkFOVGaICaHF/
31Xy+g3f/ktlNVrIe2h9gZbUA0EUw1XpRtd9Eo8S72NVpf6O5dZPMcUDMPQqL1xn
JKgw2Qv4G8QD18vcgGUqeBJKsQRxKUn40DeqwbQ6asYvHOvVzeCOHeIWHL4qDb3R
Ul1ru3dA4dN46giYSUbQRAXxturUDl6DV24duzHalls7CJGKsP+fhROJ73G/ik98
q4NiaXZozYuc1Ew6RZnnOcH+VouMgmTeQ40qs4zrh6g4IqGH7B0BWKd72Ru1fVBJ
eAPiuKU=
-----END CERTIFICATE-----