Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0CF234E4170F11ED879F1627C4F9AE02.roa
File:                     0CF234E4170F11ED879F1627C4F9AE02.roa (raw, json)
Hash identifier:          odGmDlwEBYQFRX5Db4zJtjSl75jOwnGEAL/x+9DlBac=
Subject key identifier:   75:A1:1D:89:06:42:D3:A2:90:C8:29:61:F8:E2:A9:96:3F:72:26:98
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       720E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0CF234E4170F11ED879F1627C4F9AE02.roa
Signing time:             Mon 15 May 2023 05:32:13 +0000
ROA not before:           Mon 15 May 2023 05:32:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     141529
IP address blocks:        103.155.208.0/23 maxlen: 24
                          103.160.64.0/23 maxlen: 24
                          103.160.187.0/24 maxlen: 24
                          103.196.0.0/24 maxlen: 24
                          103.196.1.0/24 maxlen: 24
                          2001:df5:c680::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29198 (0x720e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 15 05:32:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6461c3dd-ce6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:00:0d:79:63:92:58:cd:be:cb:43:1d:45:94:
                    69:ee:55:e1:78:98:a0:ac:97:d2:b6:30:e4:4b:56:
                    54:34:2b:a6:5c:63:ee:e6:19:c5:dd:fe:f6:52:98:
                    43:d3:12:e6:6c:75:20:c7:a3:bb:c6:53:90:3f:aa:
                    20:34:67:bb:f8:39:b3:f2:b5:53:54:26:c5:21:1b:
                    d0:d9:f9:f4:1c:58:f8:6a:3b:9b:4e:0d:96:fd:f2:
                    db:b9:41:fc:67:54:54:f4:37:c6:f0:03:ba:0f:ab:
                    38:c6:14:89:66:d6:11:7d:c7:ed:07:22:1b:a9:d6:
                    90:64:12:8a:e3:98:99:8b:57:f7:d1:10:f3:24:b8:
                    de:ad:92:d2:02:60:bc:a8:f0:ea:2a:8f:71:67:2a:
                    9b:af:35:c4:c0:82:71:73:11:92:c4:91:df:a5:e0:
                    e7:b1:1c:4e:0a:0e:05:39:f6:36:40:31:f9:09:17:
                    b4:47:12:23:d0:97:23:e7:ea:89:83:09:40:f8:f4:
                    e8:59:94:6d:1d:56:43:fe:df:74:f1:33:36:5e:ed:
                    04:32:ee:6d:37:9b:54:67:f5:5a:88:58:d5:b5:90:
                    e6:aa:3d:53:24:d3:ac:f2:d5:12:25:8e:55:5a:93:
                    dd:22:5b:6b:9c:a1:9c:dc:e0:11:26:13:4e:c3:37:
                    21:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A1:1D:89:06:42:D3:A2:90:C8:29:61:F8:E2:A9:96:3F:72:26:98
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0CF234E4170F11ED879F1627C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.208.0/23
                  103.160.64.0/23
                  103.160.187.0/24
                  103.196.0.0/23
                IPv6:
                  2001:df5:c680::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:70:53:de:5b:db:23:ce:68:57:e4:3c:64:f6:fe:c2:29:f0:
         81:b3:93:3f:18:67:9f:84:a2:e6:c2:7b:36:21:55:f7:c5:d8:
         28:d6:60:d8:2f:ce:80:c2:52:a4:bb:26:ab:b4:08:43:56:9d:
         31:24:63:84:1b:b3:95:4b:60:8c:76:39:15:21:2d:ff:98:bb:
         42:1d:fc:8e:b6:88:7c:14:70:3a:b6:4f:6c:70:8b:50:f8:46:
         27:5a:42:85:4b:22:42:24:51:7d:96:fd:fd:79:9d:58:b7:6d:
         a1:24:ad:08:f3:8d:2b:44:1e:8f:e1:ec:6b:8f:b8:b5:25:57:
         f4:9b:66:b8:3d:c5:4e:ef:a2:3a:c8:47:ed:34:3c:db:6f:0d:
         d5:1b:c3:f5:c7:89:e8:1d:df:57:ca:c5:65:57:ac:7b:34:0f:
         c2:f5:e3:86:c8:0b:3c:a6:31:d3:b1:6c:8c:0b:eb:69:dc:c8:
         d7:4f:34:d2:a1:32:c0:86:ea:8a:3f:b7:ad:eb:0e:30:82:ba:
         22:95:99:5e:aa:c0:93:0b:fa:3e:3c:87:d6:2d:bb:a8:b5:9d:
         fa:c6:43:64:e0:f9:b7:e2:12:ca:02:2e:ac:a7:f7:d7:30:59:
         91:ab:f1:c0:d6:24:ba:dc:bb:b3:5f:62:ec:6f:78:7c:d4:c1:
         86:13:5a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----