Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/220A2886E33011E791814D30C4F9AE02.roa
File:                     220A2886E33011E791814D30C4F9AE02.roa (raw, json)
Hash identifier:          JRNwI6xrZ+L404OFqFmt17PJ5LBAG5DsA4oXmCJnVDI=
Subject key identifier:   0C:0B:29:C8:A4:A8:A0:D0:4A:E0:BB:B1:F4:8B:FE:CA:BD:E9:91:FA
Certificate issuer:       /CN=A9154AFB/serialNumber=D4E3176CB9F4893E74C4E805FA7FB5D90A4A7B0A
Certificate serial:       15CC
Authority key identifier: D4:E3:17:6C:B9:F4:89:3E:74:C4:E8:05:FA:7F:B5:D9:0A:4A:7B:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OMXbLn0iT50xOgF-n-12QpKewo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/220A2886E33011E791814D30C4F9AE02.roa
Signing time:             Thu 13 Jul 2023 09:32:56 +0000
ROA not before:           Thu 13 Jul 2023 09:32:56 +0000
ROA not after:            Wed 29 May 2024 00:00:00 +0000
asID:                     135003
IP address blocks:        103.86.132.0/22 maxlen: 24
                          203.6.208.0/22 maxlen: 24
                          2400:bf40::/32 maxlen: 32
                          2400:bf40::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5580 (0x15cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154AFB/serialNumber=D4E3176CB9F4893E74C4E805FA7FB5D90A4A7B0A
        Validity
            Not Before: Jul 13 09:32:56 2023 GMT
            Not After : May 29 00:00:00 2024 GMT
        Subject: CN=64afc4c8-efbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ea:91:02:60:ce:36:1a:0c:de:49:38:df:76:
                    ef:4b:dc:a2:18:b4:38:1f:a4:0a:8f:f3:ac:d9:b9:
                    00:64:a0:96:46:eb:de:d1:84:52:ae:ff:06:59:a0:
                    92:16:47:9b:e9:bb:b0:a4:74:3f:01:0f:6b:11:05:
                    cf:72:06:53:5d:42:46:85:77:e0:1a:de:db:9c:e1:
                    22:f0:61:7b:4a:69:14:bf:2c:e9:3a:12:88:42:e4:
                    c8:7d:4c:b0:2f:72:93:16:56:f3:ec:9b:86:10:d1:
                    45:0c:31:45:05:12:33:87:05:cf:63:e6:77:26:90:
                    df:c9:91:67:0a:41:9b:0a:d9:e2:67:0a:c9:cd:f7:
                    65:d8:bf:72:fd:7f:6b:a8:54:81:84:59:ae:47:a7:
                    ca:20:37:7c:9b:31:c3:36:15:9c:5a:61:11:46:1b:
                    ab:a0:aa:58:17:40:db:65:05:c2:e5:73:af:d6:65:
                    17:d8:39:03:05:ed:9d:98:73:02:5c:d4:db:9a:2c:
                    09:3a:cc:95:a1:99:d4:cb:2c:91:62:6b:a0:df:3e:
                    74:3f:42:52:19:64:ab:8b:00:23:a3:90:cb:62:a8:
                    05:18:52:bf:e1:4a:fe:3e:06:5f:5c:c6:1b:9e:43:
                    ef:06:b5:94:2d:77:98:db:4f:67:37:8b:10:2a:25:
                    23:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0B:29:C8:A4:A8:A0:D0:4A:E0:BB:B1:F4:8B:FE:CA:BD:E9:91:FA
            X509v3 Authority Key Identifier:
                keyid:D4:E3:17:6C:B9:F4:89:3E:74:C4:E8:05:FA:7F:B5:D9:0A:4A:7B:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/1OMXbLn0iT50xOgF-n-12QpKewo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OMXbLn0iT50xOgF-n-12QpKewo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154AFB/78A04E4CE32F11E7B6CED42FC4F9AE02/220A2886E33011E791814D30C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.132.0/22
                  203.6.208.0/22
                IPv6:
                  2400:bf40::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:6e:b5:f5:94:06:1c:01:41:80:e2:28:0c:79:db:e5:bc:9d:
         b5:9a:e2:2b:c7:e8:e5:b1:21:2f:98:75:8a:fa:84:4e:ab:26:
         07:95:e6:3e:11:16:a8:7a:26:d3:67:10:4b:9b:bc:ad:87:b0:
         55:1a:4d:aa:f0:fe:52:ed:bc:a1:15:59:db:26:80:12:f7:d2:
         9d:ce:a4:f6:8f:b7:b5:7d:22:44:df:bc:31:ac:f9:b3:24:45:
         73:23:9e:f2:88:c6:3b:52:14:1e:3f:d2:6e:83:a0:ff:64:aa:
         59:df:83:d0:0c:ef:e5:b8:ae:af:a5:c9:05:9d:f4:33:f7:c6:
         8b:8b:1c:4c:63:74:c8:5b:e8:1b:2f:cf:57:60:f4:a1:bc:d2:
         6a:31:a6:79:9d:80:27:8a:d2:6c:54:cf:05:1b:9a:4f:0f:40:
         dd:c5:15:79:a6:13:fc:bd:ec:62:e8:bb:6a:b0:86:17:7f:d0:
         eb:73:71:1a:44:51:00:aa:02:ee:9c:88:f0:30:30:98:81:c3:
         96:f2:87:3c:72:a3:b3:1b:73:ed:1f:70:02:cd:01:c6:f7:9c:
         1a:72:30:21:24:0a:7f:b2:cd:4b:99:57:b3:e1:21:2a:1a:de:
         9d:6a:b8:c7:3f:04:c5:2d:19:dc:03:e4:4d:11:74:2a:75:a0:
         97:73:93:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----