Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/DB1F881209B711EE91E7C185C4F9AE02.roa
File:                     DB1F881209B711EE91E7C185C4F9AE02.roa (raw, json)
Hash identifier:          RqTUvA4H8QQm8Lvsw4KzlK7fIu330kgZMoZFZjVfrR4=
Subject key identifier:   DF:8B:60:AC:2F:CC:E2:C7:33:7B:D1:AF:6E:3A:FF:BD:06:AF:AD:E8
Certificate issuer:       /CN=A914CCD1/serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E
Certificate serial:       0444
Authority key identifier: A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/DB1F881209B711EE91E7C185C4F9AE02.roa
Signing time:             Tue 13 Jun 2023 06:59:35 +0000
ROA not before:           Tue 13 Jun 2023 06:59:35 +0000
ROA not after:            Sun 31 Mar 2024 00:00:00 +0000
asID:                     139922
IP address blocks:        103.147.62.0/23 maxlen: 24
                          2405:acc0::/32 maxlen: 32
                          2405:acc0::/48 maxlen: 48
                          2405:acc0:1::/48 maxlen: 48
                          2405:acc0:1100::/48 maxlen: 48
                          2405:acc0:f020::/48 maxlen: 48
                          2405:acc0:f021::/48 maxlen: 48
                          2405:acc0:f022::/48 maxlen: 48
                          2405:acc0:f023::/48 maxlen: 48
                          2405:acc0:f111::/48 maxlen: 48
                          2405:acc0:f222::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1092 (0x444)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CCD1/serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E
        Validity
            Not Before: Jun 13 06:59:35 2023 GMT
            Not After : Mar 31 00:00:00 2024 GMT
        Subject: CN=648813d7-298f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:eb:62:f6:f1:02:e3:f1:fc:e0:28:f1:96:c2:
                    25:e2:78:57:b4:03:2f:b6:91:33:8b:01:70:8e:ea:
                    16:4e:d7:60:82:17:13:52:e2:08:29:cf:5b:ba:1f:
                    33:b3:ce:50:bd:8f:e0:a0:7c:ea:66:93:b8:0e:7e:
                    b1:d1:51:47:b9:e1:21:25:18:ff:5a:fd:a7:6e:e8:
                    d0:44:18:2a:c3:55:89:ac:cd:06:f1:e2:a6:50:89:
                    b8:60:2b:86:0b:4d:c4:49:40:4b:3f:31:0f:24:87:
                    94:34:2d:63:fd:92:94:26:f8:d6:49:68:13:47:51:
                    a6:f5:cd:97:35:2d:d7:d0:3a:0e:b0:02:47:24:77:
                    34:fd:bf:8b:1c:9f:b0:56:8b:63:98:d7:a4:0e:7d:
                    71:c2:45:69:43:d1:da:31:10:f9:11:f8:02:3f:26:
                    29:f2:71:cb:73:e6:8b:18:e4:ad:29:bb:fc:9c:7a:
                    f0:c6:4e:81:e0:6f:2a:6c:6d:da:62:1e:dd:07:76:
                    cc:b6:21:9e:0b:a3:9e:5f:0f:e5:0e:fd:82:68:dd:
                    73:50:2b:86:a8:9f:e1:eb:90:2c:13:8d:df:a1:83:
                    c0:0e:9b:ff:ef:5b:2f:c8:a8:69:c9:69:34:68:9c:
                    2f:c0:e8:62:07:ce:fd:6b:0e:25:59:6e:87:ef:7f:
                    53:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8B:60:AC:2F:CC:E2:C7:33:7B:D1:AF:6E:3A:FF:BD:06:AF:AD:E8
            X509v3 Authority Key Identifier:
                keyid:A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/DB1F881209B711EE91E7C185C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.62.0/23
                IPv6:
                  2405:acc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:46:95:b6:e1:ee:5b:a5:3a:2a:37:09:1b:d5:65:88:f8:1d:
         72:28:6c:46:6d:9a:86:a3:78:63:a2:c2:c2:78:f5:a4:1d:29:
         04:fc:6e:a4:c2:63:d6:0a:1f:95:4f:84:d6:6b:0b:ed:d5:e8:
         bc:d0:fa:e5:f0:e8:51:56:6d:57:3c:02:d8:ff:6e:35:b9:0e:
         7d:f2:89:ac:01:36:4e:03:4a:fb:b1:9d:cf:28:f0:11:4d:e3:
         51:47:99:cb:8b:1a:31:e5:6b:83:e2:63:cb:99:d7:23:e4:27:
         18:61:67:0c:62:38:09:90:f1:6e:d4:15:22:f9:82:6c:76:32:
         ac:42:52:42:d8:35:23:0f:75:f3:13:04:d9:45:06:c6:fe:6d:
         e9:32:ef:98:15:a4:4b:9e:7b:2a:a9:02:fd:69:42:a0:d6:77:
         82:6c:17:d1:58:2f:cc:99:ac:08:a0:ec:4a:73:2f:17:0d:7b:
         cb:3b:91:76:34:88:58:5e:55:18:df:75:14:68:14:6a:17:ea:
         d1:4e:1c:85:47:8a:17:3b:07:05:3e:dc:71:b8:3c:60:5d:bd:
         8a:98:b5:1a:8b:0d:17:af:4c:a4:d1:3e:ba:b7:77:5f:2f:24:
         f0:50:e1:9f:f3:4f:21:5b:ac:10:2a:89:76:33:73:3b:dd:c1:
         a4:b9:98:3f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENDRDExMTAvBgNVBAUTKEEzRDVDRjQzREU1QjNEOEI5QzM0M0VENDQ5QzE2OTBF
QkUzNDE3MEUwHhcNMjMwNjEzMDY1OTM1WhcNMjQwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDg4MTNkNy0yOThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvuti9vEC4/H84CjxlsIl4nhXtAMvtpEziwFwjuoWTtdgghcTUuIIKc9buh8z
s85QvY/goHzqZpO4Dn6x0VFHueEhJRj/Wv2nbujQRBgqw1WJrM0G8eKmUIm4YCuG
C03ESUBLPzEPJIeUNC1j/ZKUJvjWSWgTR1Gm9c2XNS3X0DoOsAJHJHc0/b+LHJ+w
VotjmNekDn1xwkVpQ9HaMRD5EfgCPyYp8nHLc+aLGOStKbv8nHrwxk6B4G8qbG3a
Yh7dB3bMtiGeC6OeXw/lDv2CaN1zUCuGqJ/h65AsE43foYPADpv/71svyKhpyWk0
aJwvwOhiB879aw4lWW6H739TnwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFN+LYKwv
zOLHM3vRr246/70Gr63oMB8GA1UdIwQYMBaAFKPVz0PeWz2LnDQ+1EnBaQ6+NBcO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0NEMS9BRDdGNDVBNENE
QzQxMUVCQjVGNDgzNTVDNEY5QUUwMi9vOVhQUTk1YlBZdWNORDdVU2NGcERyNDBG
dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL285WFBROTViUFl1Y05EN1VTY0ZwRHI0MEZ3NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NENDRDEvQUQ3RjQ1QTRDREM0MTFFQkI1RjQ4MzU1QzRGOUFFMDIvREIxRjg4MTIw
OUI3MTFFRTkxRTdDMTg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnkz4wDQQCAAIwBwMFACQFrMAwDQYJKoZIhvcNAQELBQAD
ggEBABlGlbbh7lulOio3CRvVZYj4HXIobEZtmoajeGOiwsJ49aQdKQT8bqTCY9YK
H5VPhNZrC+3V6LzQ+uXw6FFWbVc8Atj/bjW5Dn3yiawBNk4DSvuxnc8o8BFN41FH
mcuLGjHla4PiY8uZ1yPkJxhhZwxiOAmQ8W7UFSL5gmx2MqxCUkLYNSMPdfMTBNlF
Bsb+beky75gVpEueeyqpAv1pQqDWd4JsF9FYL8yZrAig7EpzLxcNe8s7kXY0iFhe
VRjfdRRoFGoX6tFOHIVHihc7BwU+3HG4PGBdvYqYtRqLDRevTKTRPrq3d18vJPBQ
4Z/zTyFbrBAqiXYzczvdwaS5mD8=
-----END CERTIFICATE-----