Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/43F4B16E388011EDB3E3D23DC4F9AE02.roa
File:                     43F4B16E388011EDB3E3D23DC4F9AE02.roa (raw, json)
Hash identifier:          Ck61Rkwm5kvuwxHz+p013sdE16yRrvnnXpyhtUWtPn4=
Subject key identifier:   6E:C4:7F:21:49:2D:4E:EA:6B:43:45:51:26:C1:AA:70:CF:30:A3:54
Certificate issuer:       /CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
Certificate serial:       13
Authority key identifier: 3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/43F4B16E388011EDB3E3D23DC4F9AE02.roa
Signing time:             Tue 20 Sep 2022 01:05:07 +0000
ROA not before:           Tue 20 Sep 2022 01:05:07 +0000
ROA not after:            Sat 30 Dec 2023 00:00:00 +0000
asID:                     7586
IP address blocks:        103.1.158.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915087F/serialNumber=3A6DD4B70C4560EAC37E81E622CC43809F523B4B
        Validity
            Not Before: Sep 20 01:05:07 2022 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=632911c2-2889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2a:90:03:3e:f8:a8:2a:57:be:98:ae:3c:09:
                    c9:ec:ca:19:b6:64:ac:00:e4:4d:d7:46:de:0a:96:
                    c6:4a:ff:36:1d:12:98:ef:8c:7a:05:49:14:96:6a:
                    d0:9a:4e:80:df:65:80:f1:ee:11:89:41:bd:08:06:
                    f5:0b:78:c9:fe:fe:81:40:0c:fb:11:c2:e4:1a:a9:
                    cd:a5:df:b4:41:8f:2c:c4:98:01:dd:b0:19:57:bb:
                    fd:ac:51:54:d6:55:e8:50:21:6a:f8:c5:e3:25:eb:
                    6f:38:a1:e0:46:30:7a:81:cc:25:53:15:fd:12:14:
                    d6:d3:00:ff:3a:9c:01:b0:b3:5b:e1:0f:1f:09:d5:
                    a2:ba:66:c3:34:7b:de:82:25:f0:ac:79:83:68:a4:
                    19:8d:8e:c9:25:74:a5:19:d6:bd:01:68:22:49:b8:
                    5d:86:e2:d7:22:f6:10:c1:1f:84:68:ad:cb:2b:f6:
                    11:d6:6d:dd:f2:68:04:f6:b1:66:b1:ed:c9:41:87:
                    69:63:74:eb:08:b8:bc:c5:8c:e6:9b:cc:b5:c8:7e:
                    95:43:7b:d3:6a:04:2d:f1:bb:b0:14:f2:ac:8c:c7:
                    1a:11:42:5b:99:df:03:a5:48:7d:4c:bf:35:93:20:
                    4d:52:d3:10:38:25:1b:f2:d2:6a:a0:9f:76:25:3a:
                    2e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C4:7F:21:49:2D:4E:EA:6B:43:45:51:26:C1:AA:70:CF:30:A3:54
            X509v3 Authority Key Identifier:
                keyid:3A:6D:D4:B7:0C:45:60:EA:C3:7E:81:E6:22:CC:43:80:9F:52:3B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Om3UtwxFYOrDfoHmIsxDgJ9SO0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915087F/F73196AA33E111EDB3A0EA58C4F9AE02/43F4B16E388011EDB3E3D23DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.1.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:56:6a:c4:2d:65:9e:e0:8e:57:14:4b:4e:04:ca:99:b2:6a:
         65:1c:c1:d5:d6:71:e7:30:c5:a6:d2:a8:38:64:ee:a3:17:58:
         0c:27:f7:6b:25:4e:8c:a6:9e:7f:72:a0:84:ef:f0:ce:8e:3c:
         ab:54:4d:6c:78:6a:d1:92:12:c4:51:da:94:3b:23:5c:41:c5:
         18:54:64:02:06:e6:6c:b8:f3:29:d0:ef:53:b7:5e:db:c3:ec:
         59:65:43:01:9c:8d:43:36:d9:41:e6:39:e6:7d:95:fe:b4:9b:
         c0:bb:2f:3d:87:12:0b:8a:0a:9a:aa:98:39:59:c4:e1:c9:25:
         d9:a6:c6:7a:10:ea:65:7c:68:db:ab:eb:61:7a:d8:88:ec:2b:
         35:aa:8d:22:c3:56:84:41:11:83:f2:5f:44:6b:03:b0:25:d7:
         68:d0:8f:ea:48:72:0c:f7:2b:78:e2:8c:a0:69:c4:d4:43:86:
         fb:bb:bc:c0:73:6d:31:c6:a3:1d:3c:51:d0:c1:f5:8d:34:ba:
         a4:63:ce:a6:63:11:18:b0:b0:9c:c6:e7:e4:c9:bf:10:bc:2c:
         87:c7:1e:ca:45:e0:5a:88:d9:0d:7f:b5:18:a9:47:34:40:e4:
         ef:33:b0:ee:e9:0a:33:13:3c:d1:5c:a0:ea:96:6d:34:8e:c5:
         7e:d7:c8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----