Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FEC85E6080F611ECBA97BC4DC4F9AE02.roa
File:                     FEC85E6080F611ECBA97BC4DC4F9AE02.roa (raw, json)
Hash identifier:          6mlGpSeVEkGxNXSll1kRI6mTtqUG4hWG4UMGI3mDgUg=
Subject key identifier:   66:75:E0:68:CD:E6:08:E7:CB:41:E4:5C:17:72:E0:F7:F1:E2:58:3A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7AB9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FEC85E6080F611ECBA97BC4DC4F9AE02.roa
Signing time:             Mon 25 Sep 2023 12:30:12 +0000
ROA not before:           Mon 25 Sep 2023 12:30:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     134866
IP address blocks:        103.119.192.0/24 maxlen: 24
                          103.119.193.0/24 maxlen: 24
                          103.119.194.0/24 maxlen: 24
                          103.119.195.0/24 maxlen: 24
                          2403:49c0::/32 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31417 (0x7ab9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Sep 25 12:30:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=65117d54-0c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:19:d7:1b:4c:7a:65:f3:e4:73:7d:4a:86:d8:
                    b2:f1:52:6f:e7:14:fb:61:5d:b9:ac:b4:02:c9:60:
                    61:f3:12:c8:ad:05:5a:d4:15:33:46:91:68:6d:b8:
                    89:a5:04:5a:8b:f9:b2:67:e3:c1:36:4d:b4:d3:a5:
                    07:67:75:cf:b1:e0:6c:fa:b0:5a:76:b9:0a:8b:20:
                    df:2a:94:11:80:1c:29:68:d8:c7:f5:e2:33:35:0d:
                    33:b0:05:46:fc:bf:d1:5c:72:a1:9e:de:e1:29:06:
                    7f:f9:01:ae:9f:fb:eb:14:d8:0d:1a:ae:4b:ad:cd:
                    a2:6b:da:6b:da:31:50:41:46:83:47:9e:09:ca:70:
                    ea:d7:ee:dd:64:97:1a:16:17:db:bc:06:96:7e:06:
                    64:92:49:be:0b:b4:93:35:14:94:f9:56:89:e3:e7:
                    4d:48:8d:93:b5:ff:5b:5d:97:7d:c3:60:87:e6:68:
                    b9:4c:6c:b2:8a:e7:55:1b:69:88:66:f9:9a:61:1e:
                    00:74:6e:bb:0e:1e:6b:75:73:66:79:46:4e:80:d6:
                    30:92:8c:8c:70:a9:aa:4f:45:e4:f0:ae:5b:5d:cf:
                    33:f9:95:b7:0a:e4:78:f6:28:db:6b:af:28:2f:fd:
                    9d:a6:86:d8:fd:8a:44:1e:cf:23:68:5a:13:65:2c:
                    2d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:75:E0:68:CD:E6:08:E7:CB:41:E4:5C:17:72:E0:F7:F1:E2:58:3A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FEC85E6080F611ECBA97BC4DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.192.0/22
                IPv6:
                  2403:49c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:08:7a:07:0b:a1:62:b4:d1:c2:90:e9:eb:b6:b7:69:8c:ae:
         93:92:82:e9:d0:90:28:ca:f7:32:90:2f:3c:bf:ee:97:a9:1a:
         d5:a6:73:60:e7:a8:6a:a6:3f:30:bc:8e:32:2a:55:20:3a:39:
         9b:82:67:95:4c:68:33:11:00:5e:8e:70:57:1e:a0:0c:0f:36:
         7c:69:93:26:07:70:79:2b:c3:7a:8d:75:3c:77:3a:52:41:af:
         31:51:c1:7c:1f:b3:43:9f:28:c6:9a:85:65:45:f4:da:cc:ec:
         3e:26:64:bf:31:89:5b:3b:53:65:ad:93:fb:bb:05:d0:39:10:
         ef:7f:b0:c3:7e:c5:47:d8:5c:f1:ba:97:5d:4b:76:11:45:c6:
         6e:1d:49:80:3a:52:65:7c:c1:84:3d:30:36:e5:83:13:7c:0a:
         a0:93:38:33:22:72:72:91:5a:d3:23:ba:5b:22:1c:9c:14:74:
         be:68:10:40:f3:d3:9c:9f:2c:18:aa:26:a1:8d:93:b2:7c:0d:
         29:d0:14:09:01:0a:81:c8:02:bc:0b:43:5e:97:e1:16:50:2c:
         02:b6:45:5b:08:73:68:3c:5f:1c:05:a7:8d:66:df:cd:3d:8c:
         b7:83:38:d1:1f:a6:e7:26:05:14:30:ec:d9:13:10:16:0f:9d:
         36:b8:7d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----