Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0755ACB8463011EEAAF7EC5AC4F9AE02.roa
File:                     0755ACB8463011EEAAF7EC5AC4F9AE02.roa (raw, json)
Hash identifier:          +VhYgOWDN8F3G2Ka8ZAEI0UPplqufe7Q/2MvCyio2a0=
Subject key identifier:   76:85:09:50:52:02:37:EF:75:02:11:FE:E9:21:5A:AC:52:95:20:6E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       78DA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0755ACB8463011EEAAF7EC5AC4F9AE02.roa
Signing time:             Tue 29 Aug 2023 05:50:59 +0000
ROA not before:           Tue 29 Aug 2023 05:50:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     132978
IP address blocks:        103.170.156.0/23 maxlen: 24
                          103.182.58.0/24 maxlen: 24
                          2001:df1:5b40::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30938 (0x78da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Aug 29 05:50:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=64ed8743-f23f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c7:65:5d:44:8c:e9:3c:27:52:b2:f8:22:0b:
                    f8:df:e8:fc:c3:37:eb:cf:ce:f6:a3:38:b2:a2:9b:
                    70:f6:8b:02:b2:5d:85:4a:ff:e0:63:fc:32:ef:57:
                    ae:61:64:30:ca:09:b5:f0:0a:cf:26:95:de:c8:4d:
                    a7:b5:14:bc:6a:e2:0a:8f:06:5e:97:2d:29:e0:dc:
                    15:20:e7:54:12:82:3d:44:5c:1e:bc:81:c9:bf:e8:
                    64:be:55:dd:92:52:ef:0b:db:ef:11:b7:9e:09:3d:
                    8c:75:c4:bd:08:96:9d:bd:8e:bf:34:2a:be:86:69:
                    64:9b:97:b0:47:70:08:1b:ee:c9:4c:25:97:87:28:
                    23:dd:1d:de:fb:27:ba:47:49:a3:9b:bf:2c:19:a2:
                    d8:81:e0:2e:12:a4:ca:ff:ac:89:2e:9a:32:c0:b3:
                    16:74:dd:6f:f7:6d:c4:3b:a8:6e:42:74:7c:47:44:
                    7e:28:77:24:82:25:1d:a1:3a:4c:f2:fd:95:2d:f3:
                    28:34:4c:e9:aa:d0:41:7d:69:ff:d1:d1:1c:24:c9:
                    bb:7c:f2:c4:3a:b6:e4:e7:be:d1:ef:87:ac:8a:13:
                    e1:bc:51:62:d4:9e:17:dd:40:70:62:f1:b1:96:59:
                    f8:26:3b:cf:5a:e7:de:2c:4c:83:4d:c9:6c:8a:bf:
                    46:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:85:09:50:52:02:37:EF:75:02:11:FE:E9:21:5A:AC:52:95:20:6E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0755ACB8463011EEAAF7EC5AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.156.0/23
                  103.182.58.0/24
                IPv6:
                  2001:df1:5b40::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:83:ff:e1:49:07:26:53:f3:05:78:5e:74:eb:da:1d:c2:9e:
         a8:ed:4b:d7:93:76:98:8a:27:6e:b0:15:fa:39:0f:da:60:ec:
         0c:c0:2f:c4:9d:db:dc:bb:8b:61:bb:95:4c:39:4d:59:20:0e:
         f9:05:93:38:b0:e9:2d:7b:ca:53:13:73:65:be:9d:53:b5:5b:
         f7:4d:6c:a6:23:b5:6a:86:6e:87:60:fe:c0:44:09:58:c8:eb:
         8d:a1:60:42:3f:42:d9:7b:39:96:f4:1d:6f:34:b5:77:10:29:
         a1:9b:1c:b9:0c:0e:6d:6e:cd:e0:cc:a6:6d:5b:1f:3e:ee:57:
         0e:62:98:9b:fa:82:ea:b0:b8:53:f7:ad:43:90:c6:36:8d:d5:
         3a:23:06:bb:be:e6:26:8c:85:2b:f0:fb:3b:d0:a8:c0:51:e7:
         9f:56:3a:23:56:fd:bc:83:60:0c:93:c5:28:15:d9:08:1c:81:
         ce:7f:02:de:8b:b5:08:54:4a:ff:ee:c0:9e:5f:56:ce:62:60:
         8e:83:20:41:7a:4c:e9:2b:92:8a:3e:e7:5c:53:02:b4:d4:cc:
         eb:33:a8:41:8d:5b:4a:69:5b:6a:08:66:12:85:27:fb:9f:02:
         e3:eb:93:47:76:70:3b:56:d1:33:b4:f6:c8:89:ef:27:56:07:
         e1:09:d5:7b
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgICeNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwODI5MDU1MDU5WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGVkODc0My1mMjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq8dlXUSM6TwnUrL4Igv43+j8wzfrz872oziyoptw9osCsl2FSv/gY/wy71eu
YWQwygm18ArPJpXeyE2ntRS8auIKjwZely0p4NwVIOdUEoI9RFwevIHJv+hkvlXd
klLvC9vvEbeeCT2MdcS9CJadvY6/NCq+hmlkm5ewR3AIG+7JTCWXhygj3R3e+ye6
R0mjm78sGaLYgeAuEqTK/6yJLpoywLMWdN1v923EO6huQnR8R0R+KHckgiUdoTpM
8v2VLfMoNEzpqtBBfWn/0dEcJMm7fPLEOrbk577R74esihPhvFFi1J4X3UBwYvGx
lln4JjvPWufeLEyDTclsir9GtQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFHaFCVBS
AjfvdQIR/ukhWqxSlSBuMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDc1NUFDQjg0
NjMwMTFFRUFBRjdFQzVBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E
JzAlMBIEAgABMAwDBAFnqpwDBABntjowDwQCAAIwCQMHACABDfFbQDANBgkqhkiG
9w0BAQsFAAOCAQEAF4P/4UkHJlPzBXhedOvaHcKeqO1L15N2mIonbrAV+jkP2mDs
DMAvxJ3b3LuLYbuVTDlNWSAO+QWTOLDpLXvKUxNzZb6dU7Vb901spiO1aoZuh2D+
wEQJWMjrjaFgQj9C2Xs5lvQdbzS1dxApoZscuQwObW7N4MymbVsfPu5XDmKYm/qC
6rC4U/etQ5DGNo3VOiMGu77mJoyFK/D7O9CowFHnn1Y6I1b9vINgDJPFKBXZCByB
zn8C3ou1CFRK/+7Anl9WzmJgjoMgQXpM6SuSij7nXFMCtNTM6zOoQY1bSmlbaghm
EoUn+58C4+uTR3ZwO1bRM7T2yInvJ1YH4QnVew==
-----END CERTIFICATE-----