Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/7E9F6494803C11EE950DD570C4F9AE02.roa
File:                     7E9F6494803C11EE950DD570C4F9AE02.roa (raw, json)
Hash identifier:          aCXJFAUu8eHBnZRzZlCMo23fAIpiDre2L7lxRoL+VFI=
Subject key identifier:   3F:74:BC:71:91:AB:54:24:AB:7F:BE:BA:62:A2:EC:A9:92:24:11:95
Certificate issuer:       /CN=A913E05B/serialNumber=5758A413556582F8598E1F45FC633799A7B1D107
Certificate serial:       0F7B
Authority key identifier: 57:58:A4:13:55:65:82:F8:59:8E:1F:45:FC:63:37:99:A7:B1:D1:07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1ikE1VlgvhZjh9F_GM3maex0Qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/7E9F6494803C11EE950DD570C4F9AE02.roa
Signing time:             Sat 11 Nov 2023 02:46:20 +0000
ROA not before:           Sat 11 Nov 2023 02:46:20 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     147020
IP address blocks:        103.65.141.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3963 (0xf7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E05B/serialNumber=5758A413556582F8598E1F45FC633799A7B1D107
        Validity
            Not Before: Nov 11 02:46:20 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=654eeafc-40ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:7a:19:a5:66:ef:26:6a:66:18:55:d1:6c:08:
                    32:c4:d3:cf:64:78:6b:27:65:76:d0:7a:95:fa:a8:
                    8b:6f:bc:e7:ad:dd:2d:50:76:7c:1b:7a:39:da:69:
                    a4:f1:56:59:9f:7a:9b:86:f7:d2:51:3c:0a:2f:78:
                    93:64:dd:86:87:af:09:ab:6d:bd:fc:d4:ca:5f:58:
                    98:0c:ca:f7:12:de:37:00:a6:fe:a6:61:83:68:ac:
                    81:ac:f2:19:45:e3:91:87:03:b7:5d:df:99:3a:4b:
                    67:f6:a1:6e:5a:b5:28:e3:36:f5:7b:89:24:e9:0d:
                    dc:61:19:2e:bc:9d:dd:23:af:91:23:42:59:76:9b:
                    a9:78:16:79:c2:f2:dc:7d:f4:f1:ae:ef:5e:e8:7c:
                    03:10:17:c1:a9:f4:f6:da:05:d4:3a:85:6c:35:be:
                    bb:a3:50:ca:9d:9a:53:a4:52:6c:d7:bc:52:59:11:
                    bf:e4:64:0e:43:4d:ba:d1:99:ba:40:8f:43:af:dc:
                    4e:d6:13:5b:c6:3d:3f:ef:7b:3b:46:c2:d1:f3:7e:
                    7a:17:19:e6:d5:84:55:94:8b:a9:ee:6d:a5:17:45:
                    08:19:30:29:3d:97:68:18:11:67:04:d8:d1:cb:b7:
                    54:ad:e9:b8:56:67:42:5a:99:f7:05:0a:18:12:31:
                    93:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:74:BC:71:91:AB:54:24:AB:7F:BE:BA:62:A2:EC:A9:92:24:11:95
            X509v3 Authority Key Identifier:
                keyid:57:58:A4:13:55:65:82:F8:59:8E:1F:45:FC:63:37:99:A7:B1:D1:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/V1ikE1VlgvhZjh9F_GM3maex0Qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V1ikE1VlgvhZjh9F_GM3maex0Qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E05B/B31966C42C5A11E9943E9D4CC4F9AE02/7E9F6494803C11EE950DD570C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:b7:b9:13:48:9f:65:69:57:96:4d:7b:49:4c:df:b4:68:e7:
         ee:cd:53:03:57:b4:97:31:6a:5f:b5:57:bd:43:7e:26:eb:aa:
         12:3a:0f:53:64:c8:79:a2:3d:bd:ef:a5:82:cc:d2:af:90:ba:
         10:f3:71:a0:d0:48:93:49:56:54:3e:4a:15:0d:16:2a:07:90:
         2d:8a:76:26:a3:51:24:2d:5b:6d:34:3a:46:1d:fb:25:b0:e5:
         86:2b:5c:7c:32:af:2c:53:30:12:ae:c5:e7:09:4e:8d:f5:95:
         1a:f5:a1:b5:1f:31:a5:21:b2:66:92:50:77:ad:2e:0b:5b:f4:
         62:00:cd:3c:70:58:6d:ec:92:0b:ea:60:bd:94:7c:97:16:8b:
         c3:7e:b1:38:e5:9f:b8:15:b8:26:f1:23:5e:5a:43:43:75:7d:
         40:45:d6:e6:e2:ed:ec:e8:a7:22:a8:c4:f5:4e:f5:3d:36:c5:
         f2:38:74:4c:c0:bd:e4:b4:23:19:a2:b5:52:88:d1:16:90:05:
         d9:f3:a9:1f:22:c4:a4:ec:2f:13:91:02:e6:66:e0:10:41:98:
         39:4f:62:cf:4a:64:2e:3d:aa:d6:7a:6d:4a:5e:88:08:fd:ec:
         cd:12:99:6c:cc:5b:af:a4:83:37:ec:b1:4e:44:50:9c:41:80:
         09:6a:28:82
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICD3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0UwNUIxMTAvBgNVBAUTKDU3NThBNDEzNTU2NTgyRjg1OThFMUY0NUZDNjMzNzk5
QTdCMUQxMDcwHhcNMjMxMTExMDI0NjIwWhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTRlZWFmYy00MGFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9noZpWbvJmpmGFXRbAgyxNPPZHhrJ2V20HqV+qiLb7znrd0tUHZ8G3o52mmk
8VZZn3qbhvfSUTwKL3iTZN2Gh68Jq229/NTKX1iYDMr3Et43AKb+pmGDaKyBrPIZ
ReORhwO3Xd+ZOktn9qFuWrUo4zb1e4kk6Q3cYRkuvJ3dI6+RI0JZdpupeBZ5wvLc
ffTxru9e6HwDEBfBqfT22gXUOoVsNb67o1DKnZpTpFJs17xSWRG/5GQOQ0260Zm6
QI9Dr9xO1hNbxj0/73s7RsLR8356Fxnm1YRVlIup7m2lF0UIGTApPZdoGBFnBNjR
y7dUrem4VmdCWpn3BQoYEjGTKQIDAQABo4IClTCCApEwHQYDVR0OBBYEFD90vHGR
q1Qkq3++umKi7KmSJBGVMB8GA1UdIwQYMBaAFFdYpBNVZYL4WY4fRfxjN5mnsdEH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTA1Qi9CMzE5NjZDNDJD
NUExMUU5OTQzRTlENENDNEY5QUUwMi9WMWlrRTFWbGd2aFpqaDlGX0dNM21hZXgw
UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1YxaWtFMVZsZ3ZoWmpoOUZfR00zbWFleDBRYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0UwNUIvQjMxOTY2QzQyQzVBMTFFOTk0M0U5RDRDQzRGOUFFMDIvN0U5RjY0OTQ4
MDNDMTFFRTk1MERENTcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnQY0wDQYJKoZIhvcNAQELBQADggEBADS3uRNIn2VpV5ZN
e0lM37Ro5+7NUwNXtJcxal+1V71DfibrqhI6D1NkyHmiPb3vpYLM0q+QuhDzcaDQ
SJNJVlQ+ShUNFioHkC2KdiajUSQtW200OkYd+yWw5YYrXHwyryxTMBKuxecJTo31
lRr1obUfMaUhsmaSUHetLgtb9GIAzTxwWG3skgvqYL2UfJcWi8N+sTjln7gVuCbx
I15aQ0N1fUBF1ubi7ezopyKoxPVO9T02xfI4dEzAveS0IxmitVKI0RaQBdnzqR8i
xKTsLxORAuZm4BBBmDlPYs9KZC49qtZ6bUpeiAj97M0SmWzMW6+kgzfssU5EUJxB
gAlqKII=
Generated at Sat Nov 11 05:21:56 2023 by rpki-client on console-ams.rpki-client.org