Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/81DD6C5099E411EB8B298058C4F9AE02.roa
File:                     81DD6C5099E411EB8B298058C4F9AE02.roa (raw, json)
Hash identifier:          pzYeTITRn371RzScIsDzq0FF4Blf/bUwUVjN96A04bw=
Subject key identifier:   E1:18:00:66:E2:F0:C4:42:D7:5E:B6:7D:C3:46:95:3D:90:7E:61:C5
Certificate issuer:       /CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4
Certificate serial:       061E
Authority key identifier: 2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/81DD6C5099E411EB8B298058C4F9AE02.roa
Signing time:             Wed 27 Jul 2022 22:48:22 +0000
ROA not before:           Wed 27 Jul 2022 22:48:22 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     137425
IP address blocks:        103.152.212.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1566 (0x61e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178E49/serialNumber=2D3DFB5E2212B2905868B177167D548B0DFE3CF4
        Validity
            Not Before: Jul 27 22:48:22 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=62e1c0b6-7b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:80:09:99:66:45:ab:2f:a9:67:72:bd:50:bd:
                    3e:54:b2:e7:39:ad:45:9a:d4:95:fb:a7:0e:2a:72:
                    61:6b:53:2d:9c:3b:73:42:45:0b:49:1d:60:53:10:
                    57:64:f6:35:f8:f6:1f:0d:77:95:63:4a:95:83:e4:
                    67:ff:4b:64:9f:59:6e:78:b5:41:73:04:8d:71:56:
                    97:10:34:89:f0:06:02:fd:11:f8:69:58:b3:49:7a:
                    67:83:9c:27:5d:53:e3:dd:ae:ed:a7:94:f4:5a:68:
                    4d:17:4d:b8:72:ad:2c:93:ed:5d:18:03:87:01:0f:
                    42:87:0f:0d:4a:54:87:56:96:3c:f9:20:6d:ba:c4:
                    76:e2:c0:0e:7f:d5:2f:f4:6f:07:66:7d:5c:5b:bc:
                    51:5d:59:d9:1e:04:0f:83:4c:97:a3:5a:71:60:24:
                    18:d5:bd:ab:20:65:02:0b:12:ac:e5:ff:5a:a9:e8:
                    2d:0b:c3:37:d9:8b:30:1b:ad:95:2c:91:bb:7a:a5:
                    7b:98:da:6d:0e:80:2f:ad:ec:00:95:e1:a9:86:f1:
                    f7:20:7a:43:34:a4:02:bb:cc:f9:db:b3:fe:90:42:
                    bc:18:17:c8:00:8b:2b:27:0d:56:00:79:1c:ef:e1:
                    c9:b5:75:46:1f:fc:ce:6b:ed:89:fa:22:8f:e7:18:
                    73:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:18:00:66:E2:F0:C4:42:D7:5E:B6:7D:C3:46:95:3D:90:7E:61:C5
            X509v3 Authority Key Identifier:
                keyid:2D:3D:FB:5E:22:12:B2:90:58:68:B1:77:16:7D:54:8B:0D:FE:3C:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/LT37XiISspBYaLF3Fn1Uiw3-PPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT37XiISspBYaLF3Fn1Uiw3-PPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178E49/3F020246BE1211EABB60A282C4F9AE02/81DD6C5099E411EB8B298058C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:b5:fd:4a:50:0f:1d:91:fe:38:cc:d5:75:c4:9b:73:3d:7e:
         18:d4:68:e1:5b:07:52:cf:3a:ea:c6:2c:42:7c:af:1c:1c:4e:
         40:76:e3:82:3d:f8:08:6a:aa:be:2c:b4:84:ea:1a:44:2f:95:
         11:71:9a:02:4c:00:6d:72:dd:e5:b3:e0:90:ae:5d:e1:5e:17:
         e3:65:71:e0:bd:93:38:e5:63:5c:e0:d8:de:3b:8c:2e:4a:30:
         1f:65:ba:44:bf:1a:2d:dc:1c:0f:ce:a9:b4:5e:90:74:62:6b:
         1b:d5:b9:04:d4:af:e3:dc:5c:50:e1:4c:a8:a9:97:24:df:95:
         15:6a:25:0d:38:de:ab:1d:e8:04:9a:46:b8:0b:15:ac:ae:ed:
         ff:ab:84:c9:d9:d9:94:c3:bf:e0:a5:99:05:d5:49:70:9f:b7:
         91:69:67:bf:c3:db:24:27:dd:05:55:b0:c1:6f:ee:92:0d:6c:
         1c:36:29:f4:97:cf:26:8f:ab:4c:fa:9e:d1:44:17:5e:46:17:
         c5:8f:67:1b:dc:fb:7a:62:19:ce:76:88:f4:c1:c4:25:25:7e:
         3b:2b:f6:8b:91:1d:7e:cc:ac:a2:77:63:80:af:ba:40:c1:09:
         fd:cf:c0:5d:58:04:e1:cf:87:c6:50:3c:8f:1b:8a:07:b5:c7:
         74:61:27:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----