Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/6D60EBBE86B411E6BAEB2614C4F9AE02.roa
File:                     6D60EBBE86B411E6BAEB2614C4F9AE02.roa (raw, json)
Hash identifier:          91HLSI1mokKPPekoFuzswQHf720McHF/vw3mAj/wdGs=
Subject key identifier:   EA:58:2D:6C:BD:3E:6B:0C:69:04:C4:9F:26:5D:2E:4A:B3:99:EB:4C
Certificate issuer:       /CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
Certificate serial:       2E5F
Authority key identifier: 68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/6D60EBBE86B411E6BAEB2614C4F9AE02.roa
Signing time:             Thu 11 Feb 2021 14:20:09 +0000
ROA not before:           Thu 11 Feb 2021 14:20:09 +0000
ROA not after:            Mon 31 Mar 2031 00:00:00 +0000
asID:                     1281
IP address blocks:        103.10.232.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11871 (0x2e5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
        Validity
            Not Before: Feb 11 14:20:09 2021 GMT
            Not After : Mar 31 00:00:00 2031 GMT
        Subject: CN=60253d18-f6be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:65:b2:04:6e:42:90:5e:ae:d3:c5:75:8c:9e:
                    59:11:a3:13:a9:f8:4d:9f:77:d7:02:70:2b:06:9f:
                    88:fc:61:19:e4:15:ca:8b:47:c9:6d:71:70:cc:1b:
                    39:81:a6:5f:a4:88:83:2f:04:68:c8:67:80:69:dc:
                    8e:e9:d2:a3:c3:d6:e6:06:68:0d:23:46:53:60:01:
                    55:be:da:c4:ea:ca:02:d5:95:f3:c8:f3:37:6c:a8:
                    a5:27:44:78:e2:26:56:75:2b:1b:5e:02:45:3c:36:
                    42:bc:59:fc:0f:a0:f3:74:d8:30:50:bf:c7:41:41:
                    97:2f:4b:fc:32:1f:e3:0d:bd:13:7a:1e:6f:ef:82:
                    2f:ac:27:a8:ed:33:f5:c7:3d:f2:a7:5d:5b:4c:3e:
                    f4:66:12:e8:77:da:f8:36:ff:fa:4b:66:6d:15:12:
                    8c:66:3a:cf:0f:64:c8:f8:35:d1:98:e2:5b:56:8a:
                    40:48:f1:d1:3a:b9:fa:50:a8:71:cc:d7:aa:0a:38:
                    43:38:33:16:df:cc:98:27:8e:7b:62:8c:a6:80:cd:
                    a1:94:d4:59:5d:10:6d:5a:14:fb:fe:1b:25:8f:dd:
                    d6:41:4d:91:9f:64:67:66:1f:bf:d4:6a:ba:fc:0d:
                    e0:73:6e:31:24:2a:6e:99:6b:cd:37:10:2a:d2:94:
                    22:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:58:2D:6C:BD:3E:6B:0C:69:04:C4:9F:26:5D:2E:4A:B3:99:EB:4C
            X509v3 Authority Key Identifier:
                keyid:68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/6D60EBBE86B411E6BAEB2614C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:e5:a5:73:a4:9f:31:19:43:fb:d2:0a:09:30:d0:5f:c6:be:
         92:24:b0:0e:af:d5:fa:32:f7:ca:b2:74:aa:59:e9:b6:42:20:
         d3:8a:c2:47:50:c7:92:17:63:59:6d:c1:4b:66:b6:3e:48:f8:
         c3:9f:df:23:e1:17:3f:fb:53:0e:cc:9b:56:ae:25:f4:95:49:
         4d:ae:ef:99:a4:d8:d7:97:78:1d:8f:7d:80:65:6f:da:32:46:
         b9:b8:ea:ef:ef:a6:83:42:21:64:ae:e3:0a:e7:69:3d:63:df:
         17:c5:44:73:ba:84:d1:7c:d6:04:ad:c3:a9:08:d2:69:28:8b:
         21:a5:62:7d:d1:92:02:80:ca:11:55:f7:81:f5:ee:66:87:8f:
         1a:9e:06:2c:07:94:3a:27:71:38:19:94:01:17:e7:c7:70:2e:
         56:25:23:82:7d:f5:10:bb:7d:a6:82:e4:53:d1:58:4d:d1:69:
         5b:1d:27:01:09:5d:42:66:f1:84:21:9a:25:9a:88:91:97:d9:
         07:f3:80:95:f5:0f:3c:05:1f:e6:46:2e:94:6a:83:94:57:e3:
         f6:6a:65:5f:d6:1a:39:0a:b4:6f:14:58:0b:86:56:46:d0:38:
         8b:ab:ca:48:1d:dd:64:ee:ec:e2:1c:19:f6:1a:6a:ff:29:18:
         db:49:4b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----