Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/DDDC2174306B11EA828E5D32C4F9AE02.roa
File:                     DDDC2174306B11EA828E5D32C4F9AE02.roa (raw, json)
Hash identifier:          tq4deNVr3bKb59RehrJfwoxNGpe7cIXIyIzxO0USlho=
Subject key identifier:   0D:AE:6D:A0:10:61:A9:8D:84:8F:C5:54:4F:A0:2C:44:CE:91:F9:82
Certificate issuer:       /CN=A913383A/serialNumber=9ED7BAF63F554F1FEA570E19BAF69EDED0D9E4BE
Certificate serial:       0A0C
Authority key identifier: 9E:D7:BA:F6:3F:55:4F:1F:EA:57:0E:19:BA:F6:9E:DE:D0:D9:E4:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nte69j9VTx_qVw4Zuvae3tDZ5L4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/DDDC2174306B11EA828E5D32C4F9AE02.roa
Signing time:             Fri 28 Jul 2023 19:56:40 +0000
ROA not before:           Fri 28 Jul 2023 19:56:40 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     10137
IP address blocks:        103.93.184.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2572 (0xa0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913383A/serialNumber=9ED7BAF63F554F1FEA570E19BAF69EDED0D9E4BE
        Validity
            Not Before: Jul 28 19:56:40 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64c41d78-2da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8f:3c:60:bc:cc:fb:23:9a:fb:8e:34:9f:d7:
                    04:91:65:57:ee:c3:4b:e0:38:9d:a7:70:a8:db:c4:
                    d1:ab:3c:42:46:cf:0b:4a:01:1e:be:b0:19:11:09:
                    db:82:1a:39:32:ed:22:fe:0c:82:1d:61:f8:ad:c2:
                    23:86:5c:0f:23:16:ca:17:58:fe:d2:17:b9:b5:48:
                    61:cf:bf:6d:04:55:3b:d6:e9:42:86:41:45:b6:19:
                    b2:cc:91:c8:fc:83:45:e1:02:81:60:79:84:18:7b:
                    32:fc:03:61:c0:c9:ec:3d:9d:d3:77:5a:5b:d0:7c:
                    c6:84:37:a6:78:12:a8:23:a9:79:69:71:53:1b:53:
                    87:62:81:24:95:2b:e5:6b:25:1d:06:a9:a7:52:ec:
                    9a:96:01:d2:94:f5:0e:aa:b7:d8:bb:32:4e:0c:4e:
                    bb:36:d6:8c:32:0f:ce:75:9c:35:f2:3c:9b:25:07:
                    22:45:87:57:ed:7a:e8:9f:f7:fd:18:7e:47:50:6d:
                    5a:d9:0c:78:f5:c5:12:ab:03:66:a9:b5:82:fc:4a:
                    08:4c:7d:b4:07:c3:78:ef:2f:54:ab:d6:40:b3:62:
                    22:03:eb:be:21:36:27:f6:2d:1d:4f:53:72:9d:35:
                    fe:a7:cc:0e:09:bd:2d:13:c2:4c:4e:7d:9b:11:fe:
                    b3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AE:6D:A0:10:61:A9:8D:84:8F:C5:54:4F:A0:2C:44:CE:91:F9:82
            X509v3 Authority Key Identifier:
                keyid:9E:D7:BA:F6:3F:55:4F:1F:EA:57:0E:19:BA:F6:9E:DE:D0:D9:E4:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/nte69j9VTx_qVw4Zuvae3tDZ5L4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nte69j9VTx_qVw4Zuvae3tDZ5L4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913383A/1FFB7D80306B11EA848BE031C4F9AE02/DDDC2174306B11EA828E5D32C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:0a:8b:2d:16:1d:89:3c:c8:3c:b9:eb:2f:6f:0a:96:72:61:
         b3:72:0b:f9:e8:d6:61:e3:15:84:77:db:38:94:d2:e0:2b:21:
         69:4f:1b:1e:8a:c7:f9:f7:06:83:df:7d:58:97:e8:37:c4:a2:
         4a:64:21:39:a5:6c:c8:b0:25:1b:40:14:ab:5c:2c:91:bc:89:
         34:74:0a:76:1f:85:36:e5:07:71:93:e9:7b:13:28:69:a0:eb:
         d9:b0:87:94:e7:01:0d:1b:51:25:eb:84:06:8f:1c:5d:9c:4a:
         ab:64:36:54:1b:08:5a:7d:6f:ca:58:4c:2f:da:88:92:41:f0:
         19:c3:4a:6b:bf:4e:d2:06:02:85:18:fc:3c:ec:36:66:fa:09:
         38:37:59:07:bc:fc:cc:7b:d6:2e:7d:25:88:23:cc:c9:c4:27:
         dd:c7:46:fb:67:22:58:0b:c7:a8:f7:7a:58:ed:b1:2f:c5:e8:
         bc:98:8e:f0:2d:e6:45:49:0a:48:c3:5e:66:db:38:47:36:01:
         5d:80:e5:c4:26:5c:07:9a:bc:01:04:1f:2f:35:32:c7:d6:c5:
         f8:2e:90:6f:72:e4:20:1c:21:13:d8:c2:7f:d9:49:96:41:a6:
         61:79:72:a6:4e:dc:9f:aa:3f:24:bd:9d:37:3f:b6:0e:ce:a9:
         07:73:38:48
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzM4M0ExMTAvBgNVBAUTKDlFRDdCQUY2M0Y1NTRGMUZFQTU3MEUxOUJBRjY5RURF
RDBEOUU0QkUwHhcNMjMwNzI4MTk1NjQwWhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGM0MWQ3OC0yZGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyo88YLzM+yOa+440n9cEkWVX7sNL4Didp3Co28TRqzxCRs8LSgEevrAZEQnb
gho5Mu0i/gyCHWH4rcIjhlwPIxbKF1j+0he5tUhhz79tBFU71ulChkFFthmyzJHI
/INF4QKBYHmEGHsy/ANhwMnsPZ3Td1pb0HzGhDemeBKoI6l5aXFTG1OHYoEklSvl
ayUdBqmnUuyalgHSlPUOqrfYuzJODE67NtaMMg/OdZw18jybJQciRYdX7Xron/f9
GH5HUG1a2Qx49cUSqwNmqbWC/EoITH20B8N47y9Uq9ZAs2IiA+u+ITYn9i0dT1Ny
nTX+p8wOCb0tE8JMTn2bEf6z8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFA2ubaAQ
YamNhI/FVE+gLETOkfmCMB8GA1UdIwQYMBaAFJ7XuvY/VU8f6lcOGbr2nt7Q2eS+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzgzQS8xRkZCN0Q4MDMw
NkIxMUVBODQ4QkUwMzFDNEY5QUUwMi9udGU2OWo5VlR4X3FWdzRadXZhZTN0RFo1
TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL250ZTY5ajlWVHhfcVZ3NFp1dmFlM3REWjVMNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzM4M0EvMUZGQjdEODAzMDZCMTFFQTg0OEJFMDMxQzRGOUFFMDIvREREQzIxNzQz
MDZCMTFFQTgyOEU1RDMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnXbgwDQYJKoZIhvcNAQELBQADggEBAFYKiy0WHYk8yDy5
6y9vCpZyYbNyC/no1mHjFYR32ziU0uArIWlPGx6Kx/n3BoPffViX6DfEokpkITml
bMiwJRtAFKtcLJG8iTR0CnYfhTblB3GT6XsTKGmg69mwh5TnAQ0bUSXrhAaPHF2c
SqtkNlQbCFp9b8pYTC/aiJJB8BnDSmu/TtIGAoUY/DzsNmb6CTg3WQe8/Mx71i59
JYgjzMnEJ93HRvtnIlgLx6j3eljtsS/F6LyYjvAt5kVJCkjDXmbbOEc2AV2A5cQm
XAeavAEEHy81MsfWxfgukG9y5CAcIRPYwn/ZSZZBpmF5cqZO3J+qPyS9nTc/tg7O
qQdzOEg=