Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/906E0DCAE44311EB87EB667EC4F9AE02.roa
File:                     906E0DCAE44311EB87EB667EC4F9AE02.roa (raw, json)
Hash identifier:          eDEdK6WXbtVZfT+1cpjXk0XQhpcVzpC4Yjg39GCj6Fc=
Subject key identifier:   FA:ED:86:A4:61:22:99:F2:27:17:AC:86:A5:75:14:44:A7:0C:09:70
Certificate issuer:       /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
Certificate serial:       7B01
Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/906E0DCAE44311EB87EB667EC4F9AE02.roa
Signing time:             Thu 15 Sep 2022 06:14:58 +0000
ROA not before:           Thu 15 Sep 2022 06:14:58 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     3949
IP address blocks:        103.13.83.144/29 maxlen: 29
                          103.13.83.152/29 maxlen: 29
                          103.13.83.160/29 maxlen: 29
                          103.13.83.161/32 maxlen: 32
                          202.68.66.76/30 maxlen: 30
                          202.68.67.48/29 maxlen: 29
                          202.68.68.0/26 maxlen: 26
                          202.68.68.96/28 maxlen: 28
                          202.68.68.112/28 maxlen: 28
                          202.68.68.192/27 maxlen: 27
                          202.68.68.224/27 maxlen: 27
                          202.68.69.0/27 maxlen: 27
                          202.68.69.32/29 maxlen: 29
                          202.68.69.48/28 maxlen: 28
                          202.68.69.64/27 maxlen: 28
                          202.68.69.68/30 maxlen: 30
                          202.68.69.96/28 maxlen: 28
                          202.68.69.128/25 maxlen: 25
                          202.68.71.0/26 maxlen: 26
                          202.68.71.64/26 maxlen: 26
                          202.68.71.128/26 maxlen: 26
                          202.68.71.192/29 maxlen: 29
                          202.68.71.200/29 maxlen: 29
                          202.68.71.208/29 maxlen: 29
                          202.68.71.216/29 maxlen: 29
                          202.68.71.224/29 maxlen: 29
                          202.68.71.232/29 maxlen: 29
                          202.68.71.240/28 maxlen: 28
                          202.68.72.0/24 maxlen: 24
                          202.68.73.128/30 maxlen: 30
                          202.68.73.192/27 maxlen: 27
                          202.68.74.32/29 maxlen: 29
                          202.68.74.96/28 maxlen: 28
                          202.68.74.156/30 maxlen: 30
                          202.68.74.208/28 maxlen: 28
                          202.68.75.64/28 maxlen: 28
                          202.68.75.80/28 maxlen: 28
                          202.68.75.104/29 maxlen: 29
                          202.68.75.128/27 maxlen: 27
                          202.68.75.160/28 maxlen: 28
                          202.68.75.176/28 maxlen: 28
                          202.68.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31489 (0x7b01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
        Validity
            Not Before: Sep 15 06:14:58 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=6322c2e1-20e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8c:a8:9c:a0:98:61:2b:97:1b:95:e5:b6:c6:
                    1a:bf:b2:6f:7f:e8:4d:89:61:27:4e:fb:07:dc:14:
                    0c:8e:6d:af:e4:82:7d:ca:79:86:4e:6e:cb:4b:67:
                    52:6f:34:89:6e:fd:16:dd:85:dd:12:22:50:85:66:
                    9c:ff:0f:56:9a:4c:5a:16:88:e8:d3:57:90:4b:b0:
                    ff:5f:86:21:55:94:bd:eb:bc:5e:68:76:cd:77:b9:
                    4c:2e:6a:bc:30:76:5e:6e:e9:7e:50:c9:ce:66:06:
                    af:aa:39:ba:13:91:c1:14:ca:02:42:d0:c2:6c:34:
                    3e:cc:28:a8:f0:d2:08:2b:5d:c3:5f:b6:a4:f5:9d:
                    77:d6:7d:72:9e:04:5d:bb:69:d2:9e:9c:01:0a:00:
                    2c:9d:e5:fd:f1:a9:e4:e2:bb:66:33:b2:15:f9:43:
                    97:ae:a0:6e:d9:24:23:fe:d8:0d:be:34:6d:b6:dc:
                    34:fd:8e:f6:fc:0d:0d:97:bb:68:21:84:96:c6:f3:
                    ca:3e:1f:ed:75:fd:6d:c2:7b:57:34:5c:d9:dc:de:
                    c5:e4:57:22:a1:de:f4:0a:e7:0b:fe:d1:8d:ac:dc:
                    95:0b:ed:72:08:dd:e5:00:09:81:ef:12:66:4a:51:
                    31:32:47:d3:88:e1:34:18:66:be:7a:89:71:43:1e:
                    bc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:ED:86:A4:61:22:99:F2:27:17:AC:86:A5:75:14:44:A7:0C:09:70
            X509v3 Authority Key Identifier:
                keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/906E0DCAE44311EB87EB667EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.83.144-103.13.83.167
                  202.68.66.76/30
                  202.68.67.48/29
                  202.68.68.0/26
                  202.68.68.96/27
                  202.68.68.192-202.68.69.39
                  202.68.69.48-202.68.69.111
                  202.68.69.128/25
                  202.68.71.0-202.68.72.255
                  202.68.73.128/30
                  202.68.73.192/27
                  202.68.74.32/29
                  202.68.74.96/28
                  202.68.74.156/30
                  202.68.74.208/28
                  202.68.75.64/27
                  202.68.75.104/29
                  202.68.75.128/26
                  202.68.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:ac:7d:94:c5:38:dc:ac:27:89:24:68:35:82:51:2a:36:37:
         12:09:5d:b5:64:26:12:ed:ec:5c:f6:27:5b:44:49:0c:01:a7:
         3b:10:17:1c:fc:17:d5:98:9b:a6:80:0a:b2:26:e9:74:32:85:
         82:67:07:39:13:ab:be:44:31:1e:5d:31:9c:cd:5b:84:ec:3a:
         88:93:bf:f5:d2:99:86:71:6b:d3:43:c0:c8:ab:e0:c1:e0:0f:
         a0:93:e3:69:ec:1b:7e:c7:cd:a7:24:b3:14:c8:6e:9f:a8:c7:
         88:9b:08:d5:54:a4:d5:27:88:87:42:ec:3d:61:56:21:ac:08:
         42:30:d7:2f:94:51:38:37:f9:74:f2:13:ec:5c:79:a2:86:6b:
         09:38:4b:87:1d:7c:0e:94:c7:7f:92:37:e9:20:6c:16:e9:38:
         48:6b:d3:e5:1a:ac:b5:3f:ba:c6:d3:34:e8:54:9d:e4:ee:38:
         38:68:8e:02:fc:00:d9:75:3e:e8:1d:13:20:2d:be:a4:96:d4:
         48:cd:a0:dd:36:ba:87:91:c1:dc:d7:be:8f:4e:e0:9d:fe:69:
         c6:3a:12:e7:2f:52:e8:b4:a1:78:bf:d9:ec:50:82:6d:af:a1:
         c0:79:90:6e:41:9c:f7:50:0b:fc:fe:19:8f:07:ca:8d:1c:d6:
         48:43:cc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-ams.rpki-client.org