Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/38A492642AEF11EDA2248A32C4F9AE02.roa
File:                     38A492642AEF11EDA2248A32C4F9AE02.roa (raw, json)
Hash identifier:          ezs0JkcWW0r9s1J47AfR2ZkG/+22SoWhQBA86lLCfOE=
Subject key identifier:   DF:20:92:86:2C:BE:D9:D5:75:2F:4B:B7:09:2B:FB:5F:DF:37:AA:50
Certificate issuer:       /CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD
Certificate serial:       71
Authority key identifier: 36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/38A492642AEF11EDA2248A32C4F9AE02.roa
Signing time:             Fri 18 Nov 2022 09:14:12 +0000
ROA not before:           Fri 18 Nov 2022 09:14:12 +0000
ROA not after:            Fri 01 Dec 2023 00:00:00 +0000
asID:                     150168
IP address blocks:        103.193.10.0/23 maxlen: 23
                          103.193.10.0/24 maxlen: 24
                          103.193.10.0/25 maxlen: 25
                          103.193.10.128/25 maxlen: 25
                          103.193.11.0/24 maxlen: 24
                          2001:df1:2c40::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F333/serialNumber=36408C11C5472B82248AFFEBEEDBB20E3E07A6CD
        Validity
            Not Before: Nov 18 09:14:12 2022 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=63774ce3-33b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c7:35:e1:2a:b6:8e:24:63:a5:f7:1e:f6:02:
                    c5:5a:70:74:93:3e:bc:92:58:11:81:d1:df:d5:80:
                    ab:5a:46:49:8f:6e:d6:2b:10:68:f7:88:ff:fa:07:
                    ad:ac:d9:af:66:f7:34:c6:bc:3b:ba:62:52:41:a1:
                    bb:22:81:1c:31:ec:36:c0:64:b7:dd:09:55:49:af:
                    c3:13:bb:a7:d4:75:ba:ab:1f:a6:59:81:75:bd:14:
                    d7:e7:a0:96:79:04:17:ee:f5:92:eb:db:06:7d:c8:
                    82:b0:09:55:44:d9:11:3a:c0:70:71:02:7a:17:49:
                    73:4e:e3:0a:14:c5:75:cf:1a:e5:82:20:80:02:20:
                    b1:6c:1a:5a:dd:e3:3a:38:61:36:57:94:1f:1b:52:
                    63:09:eb:de:51:58:24:44:0d:5a:1a:ed:69:15:b2:
                    ff:fd:20:f4:cf:0f:f5:22:b9:c3:e5:7c:92:18:cd:
                    85:0a:68:2d:77:82:9b:0e:c0:9e:d4:cc:97:09:34:
                    8f:79:d9:21:de:24:dd:05:49:bd:61:ed:6b:12:ba:
                    28:9b:67:92:18:22:9b:11:3b:79:7e:ee:60:1d:57:
                    c0:ee:ea:8d:06:ff:7a:6f:91:7e:b5:4e:5c:91:16:
                    f1:e0:5b:e7:41:4f:8c:3c:ea:0d:7b:1e:2e:04:0c:
                    7a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:20:92:86:2C:BE:D9:D5:75:2F:4B:B7:09:2B:FB:5F:DF:37:AA:50
            X509v3 Authority Key Identifier:
                keyid:36:40:8C:11:C5:47:2B:82:24:8A:FF:EB:EE:DB:B2:0E:3E:07:A6:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NkCMEcVHK4Ikiv_r7tuyDj4Hps0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F333/DECB65A4239811ED9067226FC4F9AE02/38A492642AEF11EDA2248A32C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.193.10.0/23
                IPv6:
                  2001:df1:2c40::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:ae:4e:56:34:b4:89:01:52:98:53:38:d9:3c:58:36:c2:4e:
         89:6e:52:1c:8b:19:fa:09:9a:2a:ae:40:46:97:59:b5:38:c2:
         e4:8a:7b:80:84:07:44:10:21:a6:10:2f:e9:14:2a:83:7a:07:
         bb:94:d3:c3:fb:a3:cc:c7:4e:60:82:e1:bd:b1:67:d0:95:e5:
         c8:a4:d0:41:0c:ee:2a:b5:9d:fe:36:04:ce:7a:e0:45:3a:83:
         b2:f0:54:cf:be:fd:5c:2e:a2:29:1d:49:8e:6c:35:ad:2d:80:
         8e:0b:6e:32:1d:37:65:a1:31:8b:90:73:23:a6:6d:a5:bf:57:
         22:28:26:41:d5:a3:af:e9:0d:63:93:19:e4:a9:7e:31:83:ed:
         4c:af:94:7f:e3:cd:54:29:bf:d2:47:83:9c:7d:9a:aa:b4:7d:
         ce:98:bf:2e:3b:11:0d:88:76:78:a6:25:5c:30:04:e1:d2:ad:
         9e:35:b3:c4:ba:ea:74:55:2f:50:81:dd:f3:ef:92:83:6a:a0:
         75:93:11:09:15:f1:62:7a:8d:bb:cb:b6:5b:c6:50:66:18:dd:
         e4:c6:6c:42:36:3a:40:7c:99:e5:a6:86:9f:ce:42:f8:22:46:
         55:59:b8:4d:e1:37:f7:97:0d:23:ba:e9:70:8a:c0:21:47:e2:
         72:9b:e1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----