Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/4DC3DBB67D6F11EB9D8BB419C4F9AE02.roa
File:                     4DC3DBB67D6F11EB9D8BB419C4F9AE02.roa (raw, json)
Hash identifier:          7L++sAqFUBd+4r7C3fuIetlcaVjGZBjzJf0vvTxTclA=
Subject key identifier:   12:74:2C:26:E9:AC:45:7D:36:A8:A7:E1:AC:A1:47:FB:2C:B9:83:A1
Certificate issuer:       /CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D
Certificate serial:       050E
Authority key identifier: E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/4DC3DBB67D6F11EB9D8BB419C4F9AE02.roa
Signing time:             Wed 12 Jul 2023 23:20:24 +0000
ROA not before:           Wed 12 Jul 2023 23:20:24 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     137549
IP address blocks:        103.139.218.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1294 (0x50e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D
        Validity
            Not Before: Jul 12 23:20:24 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64af3537-4f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:38:99:51:c3:93:85:f8:9e:ef:1b:2e:49:c1:
                    28:64:cc:84:36:36:1f:ce:e2:2e:18:b4:1a:0e:b8:
                    0a:6b:20:07:4b:14:ff:03:fa:b4:d4:8c:a2:07:15:
                    1f:ae:54:bb:0a:39:97:96:ae:f4:a6:ef:24:39:1e:
                    8e:ba:2b:25:f2:db:a8:9c:42:9c:eb:39:7d:07:09:
                    5f:8f:1d:7d:e4:4c:53:01:0f:50:b3:23:4a:0e:d0:
                    12:fe:f3:da:08:77:a4:e0:83:7b:89:2c:01:9b:26:
                    cf:aa:36:af:eb:1e:43:0b:c5:7c:45:2b:be:b1:7a:
                    d4:df:b7:c2:9b:57:c1:70:9e:2a:67:2b:13:fa:37:
                    1f:f5:14:d4:88:e4:01:a7:2b:ad:31:93:9d:95:a0:
                    34:d9:cf:96:b6:4a:c3:24:c3:d1:65:c3:10:55:bd:
                    f0:8d:46:ff:e5:52:82:b9:0b:af:7d:45:eb:b4:6c:
                    2b:c1:92:cf:bb:a4:1c:a2:99:1a:14:cf:c3:f5:aa:
                    5b:99:da:47:86:4b:b5:12:b1:a8:59:1b:f3:db:79:
                    c9:59:f4:31:e2:39:cd:89:21:75:9f:28:51:2b:8f:
                    77:3a:db:71:26:e9:c8:f1:d6:ac:76:e0:56:97:c4:
                    57:79:37:79:9f:9a:d7:c2:85:25:6b:22:71:15:3e:
                    26:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:74:2C:26:E9:AC:45:7D:36:A8:A7:E1:AC:A1:47:FB:2C:B9:83:A1
            X509v3 Authority Key Identifier:
                keyid:E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/4DC3DBB67D6F11EB9D8BB419C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:ac:77:13:20:39:0f:d9:3b:21:36:b3:b9:91:ac:f9:60:fd:
         e7:57:0c:3c:86:f4:3e:2d:2e:90:c8:05:0b:21:15:c8:9e:8c:
         09:84:bd:58:be:3b:ef:4c:42:73:db:d4:2f:a0:20:71:07:05:
         16:3c:18:55:40:19:92:c9:aa:22:d7:69:fa:9b:2c:df:29:49:
         c0:a1:81:70:5c:e6:67:4e:b2:8f:2a:20:01:42:e3:74:5a:94:
         4c:21:f5:90:06:26:cb:73:ea:7c:a7:46:6d:7c:2e:5b:72:18:
         e1:4c:46:74:38:a2:1c:2c:fb:23:df:b6:d8:c6:7f:97:4f:22:
         0b:75:ce:5a:d3:93:2e:51:dc:a7:40:eb:26:5b:33:62:80:9f:
         e1:c3:7e:59:fd:8f:9f:74:c0:f6:2c:a9:5c:60:29:bb:8c:9f:
         44:79:f7:46:03:1e:b6:49:f5:47:4f:5b:4d:61:c8:cd:b8:46:
         55:63:db:17:34:44:5f:03:32:3d:d7:15:68:74:02:79:1b:eb:
         1d:d7:49:9e:f5:75:69:44:9e:8e:a0:96:99:ec:c5:91:d7:9d:
         a4:c9:cf:22:2c:2c:a7:95:ed:20:be:2a:78:d3:79:41:d8:32:
         a9:71:6d:6a:b8:f5:eb:02:1b:5c:19:a6:b8:5e:a0:18:d6:2f:
         40:37:67:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----