Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/4F980B2CD1AC11EDB0F8650EC4F9AE02.roa
File:                     4F980B2CD1AC11EDB0F8650EC4F9AE02.roa (raw, json)
Hash identifier:          /hEVQVpsFZzUz/kChIWuWHn3ZkVdTkNo7eRdjGK6ELw=
Subject key identifier:   85:86:29:2F:B4:3B:5D:A6:79:D2:4C:C7:15:A7:EA:02:D2:23:5B:46
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       71
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/4F980B2CD1AC11EDB0F8650EC4F9AE02.roa
Signing time:             Sun 02 Apr 2023 23:15:52 +0000
ROA not before:           Sun 02 Apr 2023 23:15:52 +0000
ROA not after:            Sat 30 Dec 2023 00:00:00 +0000
asID:                     61317
IP address blocks:        103.4.101.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Apr  2 23:15:52 2023 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=642a0ca8-a135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6f:82:8c:22:87:63:01:72:8d:1c:0a:b5:2c:
                    c0:fe:9c:0c:c3:ab:58:1d:71:3d:d6:19:9b:2b:bd:
                    51:5a:e9:c5:9b:30:d2:e7:43:05:6b:bf:23:13:45:
                    6d:31:d4:e2:02:e7:1d:0e:10:40:a4:20:f4:29:69:
                    be:0b:82:af:76:57:29:b0:f9:0a:57:ad:18:20:65:
                    9e:b5:65:c7:4f:74:d5:a2:95:a6:b9:06:1b:e4:52:
                    f8:bb:cb:ba:67:2d:5a:db:c1:4e:f4:ea:03:f9:b7:
                    9f:7d:4b:04:e9:cf:9e:67:c1:61:79:9d:8a:47:72:
                    fb:7c:07:36:09:d8:ac:ec:02:2c:ec:6f:2b:0f:67:
                    d1:1d:32:b9:4c:aa:aa:f2:9a:35:ca:f0:a9:9f:02:
                    6f:4d:d6:bf:09:df:ee:ee:c7:35:16:a1:35:be:94:
                    3c:4c:a7:02:99:c2:21:f2:46:54:6c:f0:19:27:74:
                    df:24:73:68:fb:92:89:37:86:9e:c3:ba:fc:b4:40:
                    e4:8e:45:ad:c5:12:43:9b:99:bb:71:79:e0:12:da:
                    7c:8b:03:08:92:a4:be:45:7c:07:13:b3:80:f3:3e:
                    60:b8:aa:16:41:3b:28:7a:fc:27:d5:6b:26:12:9a:
                    f9:4f:94:6a:83:62:13:b3:79:ab:45:b6:4c:3d:bb:
                    11:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:86:29:2F:B4:3B:5D:A6:79:D2:4C:C7:15:A7:EA:02:D2:23:5B:46
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/4F980B2CD1AC11EDB0F8650EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:a3:22:6d:5d:eb:12:0b:0c:d9:5c:42:d3:42:1a:01:ec:65:
         03:2a:fe:23:57:37:f4:3b:ad:bf:3b:3c:ea:b9:16:1b:db:26:
         88:90:fb:4e:38:20:cf:b6:39:92:e7:82:ef:8b:cc:71:a2:b8:
         cf:17:10:15:30:52:3d:03:b2:98:fe:01:1f:19:c2:1d:0b:28:
         23:e8:d9:7a:32:c2:d4:c9:68:b7:db:1f:2c:36:9e:0a:c3:3a:
         e4:5d:19:12:71:bd:a5:89:aa:fd:cc:e7:d0:96:50:b6:97:a9:
         f4:a6:27:64:91:86:79:0f:e9:df:c3:82:74:28:6a:6d:cc:36:
         b0:64:ba:7e:6c:34:3c:0a:df:df:ac:8d:ca:ab:93:c0:7b:cb:
         96:f0:f7:8e:c7:45:22:e2:17:14:8f:fe:44:28:17:3f:0e:49:
         c4:eb:1d:34:ff:9f:86:d9:00:32:20:93:84:ef:8d:5d:aa:b6:
         90:9e:97:ae:e2:0c:b2:02:20:c6:cf:41:b1:39:80:b6:90:b1:
         34:46:cb:2e:83:99:7a:05:c1:6f:23:8b:d2:64:41:7e:d0:11:
         22:6b:c1:b8:b0:f0:b1:16:cc:1c:5f:a4:b7:97:ba:3e:6e:84:
         35:19:40:39:f3:05:10:e8:ea:02:47:cd:6f:73:d6:27:4b:92:
         09:9f:13:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----