Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/37D45962D09B11ED8D78BB6FC4F9AE02.roa
File:                     37D45962D09B11ED8D78BB6FC4F9AE02.roa (raw, json)
Hash identifier:          kcJGqEmaVBreoSpkomJgSDQ+7J9NcTEFf/hPH95l0Tg=
Subject key identifier:   F9:88:4B:DC:15:BF:26:0E:4D:0C:A2:39:36:E7:01:A9:EA:23:76:80
Certificate issuer:       /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial:       3332
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/37D45962D09B11ED8D78BB6FC4F9AE02.roa
Signing time:             Fri 19 May 2023 16:31:01 +0000
ROA not before:           Fri 19 May 2023 16:31:01 +0000
ROA not after:            Sat 30 Dec 2023 00:00:00 +0000
asID:                     834
IP address blocks:        103.21.138.0/24 maxlen: 24
                          103.21.139.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13106 (0x3332)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
        Validity
            Not Before: May 19 16:31:01 2023 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=6467a444-8583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ee:69:90:f3:1e:37:28:49:75:22:be:95:cb:
                    ef:f9:7c:28:10:f2:70:b0:f8:d3:5a:cb:7e:ce:27:
                    86:37:21:b7:e2:c8:6e:44:b8:4b:65:51:44:4c:03:
                    e4:5a:bc:8a:b9:3a:60:35:0d:57:74:c8:44:24:b8:
                    1e:5b:39:ea:7f:ad:50:53:94:2a:dd:7d:ae:e7:de:
                    ce:24:ee:7b:c7:a7:8c:4f:d5:20:b5:e9:27:2a:d7:
                    ec:b0:ca:61:35:1c:cc:38:dc:53:08:aa:0f:6a:3a:
                    d8:04:2e:1e:a7:47:b3:f2:c5:6b:a3:77:b9:4c:4f:
                    cd:30:84:ad:a7:fe:5d:51:f1:40:20:fa:59:e4:1e:
                    2e:f7:2c:06:ef:d6:64:fb:49:12:2a:f4:14:91:03:
                    ae:0a:2c:af:5c:97:69:13:56:de:47:23:1d:04:31:
                    8d:18:97:71:78:b5:5a:dd:5c:56:fb:bb:a8:e3:bf:
                    85:07:89:6a:2f:18:7d:22:a5:e5:c0:dc:4f:68:a8:
                    ac:da:ec:db:33:15:62:f6:26:33:ea:ad:cc:4b:06:
                    8b:47:b0:8c:e2:6c:db:ff:45:bc:c2:dc:a9:29:05:
                    13:40:91:0b:76:17:d9:2c:a6:ff:25:92:58:63:2c:
                    33:4f:83:9a:cb:ee:6f:eb:6d:23:85:78:1d:81:9a:
                    ed:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:88:4B:DC:15:BF:26:0E:4D:0C:A2:39:36:E7:01:A9:EA:23:76:80
            X509v3 Authority Key Identifier:
                keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/37D45962D09B11ED8D78BB6FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.21.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:b6:f9:64:d1:65:a6:53:42:b8:41:05:a0:d1:ab:b0:20:cd:
         8d:bd:96:34:25:67:61:da:58:3e:47:c9:00:52:39:6d:2b:56:
         c6:62:5b:60:03:36:af:36:3c:7c:73:ea:c8:a3:6e:ba:7a:4f:
         eb:ca:98:8c:da:96:b4:e8:e6:70:4f:de:1a:13:43:a8:36:1d:
         cc:a4:8e:d1:c7:5b:cb:b9:6d:4b:55:bd:76:77:fc:6d:19:89:
         56:be:8d:bb:4a:77:fb:39:f2:d0:79:55:5a:ce:7e:c2:3f:f1:
         70:77:46:c6:e9:1a:18:95:87:5d:aa:74:c8:86:11:46:ac:20:
         69:82:24:51:58:29:b8:21:a3:6e:5c:94:1e:46:fd:1c:c7:76:
         fe:17:0f:ba:a7:06:26:97:4e:53:1c:97:3b:6b:55:34:41:ca:
         84:35:bc:a5:7d:bf:4f:31:3a:6c:ef:fc:24:d2:f4:54:12:2f:
         ab:1c:fe:cb:94:be:a5:c6:85:76:1f:b8:65:f3:1d:f0:3f:05:
         5b:46:f6:99:59:5d:71:a1:bc:f3:fa:47:02:94:b5:90:7a:f6:
         e7:b9:cb:ff:eb:11:b0:14:08:b5:fd:e9:af:bf:e1:73:e3:1b:
         41:83:2a:89:32:62:3b:0f:7f:ca:d1:8c:9a:46:4c:8a:39:09:
         7e:8d:27:a9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICMzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJGNzYxMTAvBgNVBAUTKDYzRUM0RTYzODBGQUFFQTUxMTA3RTlDNDBDMkYxMDU4
RTA4Rjg1NkUwHhcNMjMwNTE5MTYzMTAxWhcNMjMxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDY3YTQ0NC04NTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxe5pkPMeNyhJdSK+lcvv+XwoEPJwsPjTWst+zieGNyG34shuRLhLZVFETAPk
WryKuTpgNQ1XdMhEJLgeWznqf61QU5Qq3X2u597OJO57x6eMT9UgteknKtfssMph
NRzMONxTCKoPajrYBC4ep0ez8sVro3e5TE/NMIStp/5dUfFAIPpZ5B4u9ywG79Zk
+0kSKvQUkQOuCiyvXJdpE1beRyMdBDGNGJdxeLVa3VxW+7uo47+FB4lqLxh9IqXl
wNxPaKis2uzbMxVi9iYz6q3MSwaLR7CM4mzb/0W8wtypKQUTQJELdhfZLKb/JZJY
YywzT4Oay+5v620jhXgdgZrtvQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPmIS9wV
vyYOTQyiOTbnAanqI3aAMB8GA1UdIwQYMBaAFGPsTmOA+q6lEQfpxAwvEFjgj4Vu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY3Ni85NDRFMzg5MjFE
QUIxMUUyQkIzMENBQTkwOEIwMkNEMi9ZLXhPWTRENnJxVVJCLW5FREM4UVdPQ1Bo
VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kteE9ZNEQ2cnFVUkItbkVEQzhRV09DUGhXNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUJGNzYvOTQ0RTM4OTIxREFCMTFFMkJCMzBDQUE5MDhCMDJDRDIvMzdENDU5NjJE
MDlCMTFFRDhENzhCQjZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnFYowDQYJKoZIhvcNAQELBQADggEBAIm2+WTRZaZTQrhB
BaDRq7AgzY29ljQlZ2HaWD5HyQBSOW0rVsZiW2ADNq82PHxz6sijbrp6T+vKmIza
lrTo5nBP3hoTQ6g2HcykjtHHW8u5bUtVvXZ3/G0ZiVa+jbtKd/s58tB5VVrOfsI/
8XB3RsbpGhiVh12qdMiGEUasIGmCJFFYKbgho25clB5G/RzHdv4XD7qnBiaXTlMc
lztrVTRByoQ1vKV9v08xOmzv/CTS9FQSL6sc/suUvqXGhXYfuGXzHfA/BVtG9plZ
XXGhvPP6RwKUtZB69ue5y//rEbAUCLX96a+/4XPjG0GDKokyYjsPf8rRjJpGTIo5
CX6NJ6k=
-----END CERTIFICATE-----