Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/7917E186DBE611ED95D50C66C4F9AE02.roa
File:                     7917E186DBE611ED95D50C66C4F9AE02.roa (raw, json)
Hash identifier:          niLCLuAwqAn3y495onoTuOoPSXWYGYdr97z7fsDp1cU=
Subject key identifier:   DC:B4:F0:CE:7E:FC:C0:12:32:A1:31:21:E8:D9:5B:BA:88:FF:92:A4
Certificate issuer:       /CN=A917A82D/serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28
Certificate serial:       0A9A
Authority key identifier: EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/7917E186DBE611ED95D50C66C4F9AE02.roa
Signing time:             Sat 15 Apr 2023 23:37:24 +0000
ROA not before:           Sat 15 Apr 2023 23:37:24 +0000
ROA not after:            Fri 01 Mar 2024 00:00:00 +0000
asID:                     139872
IP address blocks:        103.145.209.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2714 (0xa9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A82D/serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28
        Validity
            Not Before: Apr 15 23:37:24 2023 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=643b3534-f2cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e5:5a:09:e6:60:d5:fb:7f:67:b4:f0:c4:d5:
                    37:43:65:e1:07:97:ed:57:6d:96:48:f7:26:54:f6:
                    c4:eb:ab:8f:14:6e:eb:84:82:ac:f7:da:a7:72:0c:
                    94:9d:43:8f:67:ce:f8:5e:ea:f7:0e:cb:21:08:3f:
                    3e:a7:fc:98:cd:e2:f1:2f:22:58:3f:95:6d:f0:2d:
                    6e:e2:fc:7f:c1:a8:83:68:92:e1:0c:16:a9:ac:37:
                    ba:12:53:98:40:74:bd:a6:8b:a9:d1:83:ee:e0:e2:
                    77:3d:e3:e1:17:29:9d:8e:eb:08:6d:1e:10:78:52:
                    e3:76:1e:a5:b8:63:cc:8b:b1:9b:eb:08:fc:ce:e9:
                    77:7f:94:86:50:43:97:49:a3:dd:d2:5a:ba:df:08:
                    a5:a5:f9:1d:25:4e:04:14:ae:f5:ef:ce:c7:b1:f0:
                    78:e9:54:bb:6c:19:60:bd:f4:82:5e:67:52:45:6e:
                    84:1b:04:16:66:1b:77:3c:63:8c:13:d5:3f:63:98:
                    ed:56:9a:3d:53:24:9f:46:6f:ed:66:3d:f3:c9:a4:
                    33:7f:b5:91:e4:f5:21:f6:8e:20:28:07:c5:b9:e0:
                    e1:c3:0a:39:53:1b:f6:0e:bc:2e:ad:49:19:64:50:
                    2c:9e:4f:51:b4:61:12:9c:2e:4f:94:8e:9c:d6:59:
                    53:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B4:F0:CE:7E:FC:C0:12:32:A1:31:21:E8:D9:5B:BA:88:FF:92:A4
            X509v3 Authority Key Identifier:
                keyid:EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/7917E186DBE611ED95D50C66C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:e2:45:ad:47:2d:26:ac:11:67:f2:fd:92:c7:02:2e:bf:71:
         2d:43:6a:0d:08:1c:2a:8b:06:d0:eb:2c:64:90:fd:2a:9f:fd:
         65:39:2a:40:3c:87:b0:19:a4:7f:40:52:5c:ad:8b:26:4e:4e:
         fa:af:a4:f9:bf:dc:53:9c:95:d4:54:63:82:ce:a5:e0:a9:0f:
         d8:d9:5c:9c:e2:9f:f9:8f:c5:df:62:09:ea:57:9e:09:51:b1:
         44:b8:b2:34:33:b2:74:b7:80:a0:e4:bf:35:7b:36:01:03:b1:
         ff:f3:60:0f:25:95:16:67:fa:2e:eb:ba:4e:ff:b6:d4:fa:dc:
         b6:4a:13:12:e4:04:55:a0:82:85:4f:66:61:7c:33:60:ce:92:
         ae:ee:bd:3d:da:94:15:85:fa:aa:e1:d6:29:ce:82:4c:7c:1a:
         48:52:cb:75:f3:28:0e:cf:2d:91:a2:8a:25:28:41:d4:fd:da:
         87:37:66:df:73:4e:f3:aa:af:da:59:34:a1:2f:d5:ff:03:80:
         e6:73:e8:2a:1e:ad:85:2a:77:ed:c8:d9:d2:3b:f3:ea:bd:a4:
         2d:c9:e7:97:cb:63:92:d8:4f:08:d8:f1:ed:f8:b5:da:f2:ad:
         52:0b:1c:cc:1c:60:65:fe:60:dc:d9:18:9b:d9:5d:f0:9a:8e:
         da:8a:aa:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----