Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/8DB4B5428DA211EEAD27BE71C4F9AE02.roa
File:                     8DB4B5428DA211EEAD27BE71C4F9AE02.roa (raw, json)
Hash identifier:          jj/Wl4xQf/xgbCMK/2nEkFeNRfD/FUw8F321w9aQH7U=
Subject key identifier:   7D:C8:B4:51:B9:C0:30:F8:EA:BB:7E:59:49:FF:AA:10:E8:8A:1B:6E
Certificate issuer:       /CN=A9147CDA/serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199
Certificate serial:       62
Authority key identifier: F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/8DB4B5428DA211EEAD27BE71C4F9AE02.roa
Signing time:             Tue 28 Nov 2023 03:59:40 +0000
ROA not before:           Tue 28 Nov 2023 03:59:40 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     400402
IP address blocks:        103.197.87.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147CDA/serialNumber=F3DA51FE80BCDA97087525E204621EA9F5574199
        Validity
            Not Before: Nov 28 03:59:40 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=656565ab-42b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3e:5e:30:48:c6:12:69:85:f9:54:c5:44:b2:
                    e6:2a:56:fb:86:ee:f3:a8:cc:bf:19:95:4c:49:9e:
                    7b:d7:bb:07:4a:01:71:e1:fd:12:6c:5a:f6:e9:de:
                    8b:10:37:e2:00:e4:cc:b0:8a:55:cb:0a:90:41:ac:
                    25:46:aa:40:42:6d:a7:3b:cf:68:41:fb:6e:d7:6a:
                    42:ad:68:fb:16:c5:b8:56:28:b2:ce:99:3b:c7:02:
                    03:ec:69:33:66:76:ff:2c:11:2d:34:f7:0f:e9:52:
                    06:45:c0:da:fa:fa:43:53:e5:67:d3:eb:60:7e:fe:
                    1b:67:22:3f:bc:bc:fc:76:96:57:7f:7e:8b:89:c5:
                    3e:30:c0:08:0c:0b:86:49:9c:aa:f6:d5:3b:d7:cf:
                    3e:7e:3e:97:18:ce:a1:cc:ab:41:80:a9:04:bb:8a:
                    63:87:b7:17:7d:b9:bb:d6:16:f9:00:d4:0d:63:18:
                    22:09:3c:13:23:88:68:82:92:14:f4:ee:e7:c4:62:
                    06:4d:80:d3:cd:b0:6d:2a:e0:e1:54:e6:b4:4b:5e:
                    d6:27:0e:34:d8:7b:1c:f9:0c:35:e8:a7:42:f1:32:
                    4c:9e:60:1d:69:64:c8:94:e9:cb:65:88:4a:aa:2f:
                    8e:18:35:b6:28:fc:62:24:fd:51:08:69:8e:39:bd:
                    14:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C8:B4:51:B9:C0:30:F8:EA:BB:7E:59:49:FF:AA:10:E8:8A:1B:6E
            X509v3 Authority Key Identifier:
                keyid:F3:DA:51:FE:80:BC:DA:97:08:75:25:E2:04:62:1E:A9:F5:57:41:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/89pR_oC82pcIdSXiBGIeqfVXQZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89pR_oC82pcIdSXiBGIeqfVXQZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CDA/49B27D8A054D11EE9DFC1624C4F9AE02/8DB4B5428DA211EEAD27BE71C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:4a:93:33:3c:06:93:0c:6a:4c:79:fc:0f:cc:45:8d:b9:84:
         5d:e1:57:20:d2:b3:92:0a:84:ce:36:b7:19:dc:27:0d:55:18:
         8d:0b:2d:87:e0:93:f8:1e:05:46:4a:ac:91:95:32:91:f2:63:
         38:75:5d:14:dc:8a:15:81:94:6f:fd:a4:a2:69:ea:85:08:5e:
         4e:1a:b0:1a:e3:5f:eb:2a:d7:4d:3c:e9:c4:d1:42:bf:94:76:
         ed:37:1c:43:4b:1a:a7:4f:b3:3f:60:94:76:26:4b:26:63:52:
         b2:ab:28:15:47:0e:ca:c8:17:a1:c8:92:23:66:1b:7c:10:e8:
         ab:8d:15:73:cc:f2:17:5b:d0:38:29:82:69:79:4c:35:d2:32:
         fb:e7:cc:10:18:68:84:3f:7e:76:6b:e5:8d:f1:d7:50:be:0e:
         7a:0e:23:11:7c:0e:1b:e9:fe:f6:90:bc:57:9f:0f:02:eb:6d:
         fd:4e:cb:86:c3:f5:ac:af:58:71:33:e4:ae:fd:48:bc:f4:9f:
         90:be:a8:48:55:fb:1e:42:33:f7:8e:34:95:98:04:0c:44:34:
         89:80:8e:80:05:c2:49:93:71:d8:ac:99:1d:9c:bb:51:be:06:
         ed:d6:88:7f:1a:99:a3:ce:5e:9f:93:fc:d6:95:06:7a:4b:66:
         10:d4:82:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----