Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/BAC6F9EEBE2A11ECA952CE14C4F9AE02.roa
File:                     BAC6F9EEBE2A11ECA952CE14C4F9AE02.roa (raw, json)
Hash identifier:          +7MUVVvEuY5OsgtDzgNJy/HjcMOQosKrxTpEBqvh09g=
Subject key identifier:   7B:7B:D3:54:74:9B:5F:78:B6:21:E6:F1:64:5F:A5:DA:BF:D7:1C:2A
Certificate issuer:       /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial:       0DE7
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/BAC6F9EEBE2A11ECA952CE14C4F9AE02.roa
Signing time:             Wed 03 Aug 2022 19:05:54 +0000
ROA not before:           Wed 03 Aug 2022 19:05:54 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     141011
IP address blocks:        2404:f4c0:f5c0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3559 (0xde7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
        Validity
            Not Before: Aug  3 19:05:54 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=62eac712-4a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:92:5b:4c:3d:cf:fb:61:8c:f0:a8:35:d5:86:
                    37:f5:44:a0:27:7e:41:fd:fc:9a:b0:9f:61:11:9e:
                    a5:be:95:7f:99:f7:96:e9:e1:97:d5:5b:4d:55:29:
                    53:2b:51:73:b8:62:dc:cd:fa:2a:df:5e:c5:18:4e:
                    32:0d:a4:fd:d6:fb:1c:b6:ed:b6:c7:23:63:42:14:
                    2e:60:a9:ba:46:a8:2b:7c:a4:77:30:06:54:b4:88:
                    5e:92:b2:98:54:4f:02:89:6f:70:60:6f:29:97:95:
                    24:82:92:39:9f:b5:50:d3:5b:76:cd:ae:aa:07:af:
                    2b:05:66:49:98:65:50:15:1f:44:5b:38:f4:fe:49:
                    4a:16:83:02:96:d9:62:a3:96:c6:b4:64:2d:5a:b7:
                    0d:65:fa:39:e7:af:0c:b2:0f:a0:b5:7c:8a:2b:f4:
                    1b:0b:2d:a8:74:71:a6:a8:71:ed:72:fb:c9:8a:b0:
                    26:23:ac:f5:34:89:ca:0a:88:f0:62:7b:8a:23:34:
                    6b:6a:50:b6:2b:6b:41:65:b8:f4:47:dc:0c:b1:2c:
                    28:c8:79:26:c1:f6:13:88:71:21:f5:76:a6:87:b0:
                    93:b7:a0:83:7a:bb:1f:c6:37:e3:dd:3b:a6:1e:72:
                    9c:e3:f3:38:41:39:d0:d8:be:1f:ee:26:7d:85:8a:
                    5a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7B:D3:54:74:9B:5F:78:B6:21:E6:F1:64:5F:A5:DA:BF:D7:1C:2A
            X509v3 Authority Key Identifier:
                keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/BAC6F9EEBE2A11ECA952CE14C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:f4c0:f5c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         bb:e6:a8:9c:c1:af:02:d9:b7:a5:5a:82:ea:5b:32:dd:37:e6:
         17:1c:ab:c9:5b:c1:f9:10:17:b9:4d:5f:47:af:fe:53:49:42:
         b0:0d:d0:ec:53:b1:cb:8e:80:31:b9:31:02:c0:18:85:42:a9:
         50:98:57:1d:0d:7c:cf:89:85:31:d0:8e:b5:d6:4a:cf:01:a4:
         b6:f6:3e:f7:3f:d9:e6:1b:eb:54:a2:9e:70:da:68:70:5b:c3:
         a6:1d:66:7c:7e:55:a7:89:e3:bb:64:96:94:d4:80:50:9e:f3:
         5c:f9:91:c6:10:1b:0c:99:fb:6c:0b:8a:e1:3d:de:52:ee:dc:
         8c:50:42:86:b7:fd:f5:d4:86:27:c7:39:4e:29:66:25:7b:8c:
         03:f3:16:10:3f:c5:5b:19:ca:0b:6b:42:15:d1:ed:12:23:79:
         dc:97:ac:2a:98:48:24:7f:d3:71:66:eb:51:f8:91:01:fe:05:
         9a:2f:61:1a:fc:67:90:52:c2:b2:ff:f4:60:1a:95:be:65:1d:
         88:d4:83:b9:f2:0a:85:bc:b2:ff:7f:e8:21:8d:09:8a:10:69:
         0c:31:db:9f:b6:bd:f0:85:56:20:d5:37:2f:53:af:3c:30:d8:
         4d:78:62:e8:ab:26:c1:54:a7:69:df:0f:c1:59:27:cd:d4:77:
         82:02:61:c5
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICDecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5
RDNGRDdCNjAwHhcNMjIwODAzMTkwNTU0WhcNMjMwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmVhYzcxMi00YTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAupJbTD3P+2GM8Kg11YY39USgJ35B/fyasJ9hEZ6lvpV/mfeW6eGX1VtNVSlT
K1FzuGLczfoq317FGE4yDaT91vsctu22xyNjQhQuYKm6RqgrfKR3MAZUtIhekrKY
VE8CiW9wYG8pl5UkgpI5n7VQ01t2za6qB68rBWZJmGVQFR9EWzj0/klKFoMCltli
o5bGtGQtWrcNZfo5568Msg+gtXyKK/QbCy2odHGmqHHtcvvJirAmI6z1NInKCojw
YnuKIzRralC2K2tBZbj0R9wMsSwoyHkmwfYTiHEh9Xamh7CTt6CDersfxjfj3Tum
HnKc4/M4QTnQ2L4f7iZ9hYpa2QIDAQABo4ICmDCCApQwHQYDVR0OBBYEFHt701R0
m194tiHm8WRfpdq/1xwqMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE
RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll
MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvQkFDNkY5RUVC
RTJBMTFFQ0E5NTJDRTE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwQkBPTA9cAwDQYJKoZIhvcNAQELBQADggEBALvmqJzBrwLZ
t6VagupbMt035hccq8lbwfkQF7lNX0ev/lNJQrAN0OxTscuOgDG5MQLAGIVCqVCY
Vx0NfM+JhTHQjrXWSs8BpLb2Pvc/2eYb61SinnDaaHBbw6YdZnx+VaeJ47tklpTU
gFCe81z5kcYQGwyZ+2wLiuE93lLu3IxQQoa3/fXUhifHOU4pZiV7jAPzFhA/xVsZ
ygtrQhXR7RIjedyXrCqYSCR/03Fm61H4kQH+BZovYRr8Z5BSwrL/9GAalb5lHYjU
g7nyCoW8sv9/6CGNCYoQaQwx25+2vfCFViDVNy9Trzww2E14YuirJsFUp2nfD8FZ
J83Ud4ICYcU=
-----END CERTIFICATE-----