Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/6DB998C4F79511ECBC94AA7CC4F9AE02.roa
File:                     6DB998C4F79511ECBC94AA7CC4F9AE02.roa (raw, json)
Hash identifier:          N4NMO7tKmdvodVhuBNnnUszEZWCnMgsf4NRrVRQI0tA=
Subject key identifier:   72:4D:7A:D9:04:82:2B:B3:97:4E:DC:49:F4:C9:55:83:2C:80:88:71
Certificate issuer:       /CN=A9197202/serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B
Certificate serial:       0D
Authority key identifier: E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/6DB998C4F79511ECBC94AA7CC4F9AE02.roa
Signing time:             Wed 29 Jun 2022 10:22:51 +0000
ROA not before:           Wed 29 Jun 2022 10:22:51 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     55714
IP address blocks:        103.189.68.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197202/serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B
        Validity
            Not Before: Jun 29 10:22:51 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=62bc27fa-bb41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9d:10:89:1b:d1:cf:12:21:44:f3:36:aa:13:
                    e0:41:a1:a4:65:fd:0c:e7:6f:ee:51:ad:25:fe:04:
                    24:4f:20:7b:a2:b7:f3:a7:f5:03:d1:dd:a5:47:c9:
                    38:05:e6:d9:90:ac:53:0e:50:ff:e4:6e:c3:7b:91:
                    25:af:59:c5:4a:c5:dc:83:5a:11:2e:a5:38:37:44:
                    7a:e8:50:32:c2:55:8c:46:80:1f:23:68:2e:26:0b:
                    55:35:72:79:3f:8b:81:8e:72:60:00:4c:f3:8d:2e:
                    5b:e0:e6:3f:ce:cc:0d:29:33:b1:c9:e5:67:72:f3:
                    ca:1e:8f:8d:6a:a5:25:2a:df:94:3a:b4:31:09:ba:
                    03:ce:1a:8e:48:2e:f5:69:16:f7:b4:af:d0:df:18:
                    07:49:7a:2c:9a:c0:21:ff:cb:e1:77:6c:52:7a:07:
                    41:51:5b:6e:ed:ea:60:91:d0:cc:3a:38:16:f5:e7:
                    4b:32:4f:53:f1:82:ad:8c:01:d7:6b:70:e3:e5:e7:
                    22:fc:81:83:55:86:03:60:a4:4a:94:74:bc:6f:a3:
                    c9:2b:14:68:5b:c5:c5:43:49:25:08:1b:df:95:50:
                    fc:4b:50:30:a8:f6:ff:e8:06:33:d1:da:ee:7b:7d:
                    07:74:94:cb:b7:f3:56:96:ec:10:82:fe:00:76:4e:
                    94:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4D:7A:D9:04:82:2B:B3:97:4E:DC:49:F4:C9:55:83:2C:80:88:71
            X509v3 Authority Key Identifier:
                keyid:E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/6DB998C4F79511ECBC94AA7CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:51:4e:eb:13:50:c1:7b:1a:89:1a:b1:2d:60:3d:5a:e8:8d:
         43:d9:10:01:19:d6:08:4c:f2:8d:b4:e3:da:29:4e:9e:ef:99:
         15:d4:c2:db:bc:93:0c:e9:9f:8d:e3:5d:b8:36:1c:6f:0d:58:
         0e:13:53:d4:91:fd:0d:2a:7b:96:50:1b:88:4f:ed:90:4b:8f:
         1d:e4:11:a9:0f:a5:9c:c0:6f:9e:e7:0f:5a:20:2f:94:79:41:
         a1:5d:08:8f:83:f3:ee:aa:0e:d7:df:80:7a:2c:b6:5e:66:1b:
         47:e9:78:0f:82:50:af:ed:a2:64:7c:f2:9b:8f:b5:4c:bb:64:
         f3:cb:f9:0d:95:c7:d0:80:e1:9e:e4:52:ff:92:31:b6:ab:5d:
         26:1d:1d:11:fb:e7:dd:ec:56:74:12:d5:f1:29:84:fe:ce:bd:
         8b:6a:36:71:29:b5:24:44:0c:a1:38:51:a7:4a:2e:c7:75:71:
         5a:52:c2:99:b3:81:bc:bc:01:a9:b1:6c:67:4d:aa:89:7f:be:
         35:10:ac:70:a0:dd:97:0b:19:d2:5b:06:71:7b:62:2d:65:eb:
         c8:5f:e5:6d:81:a8:7d:ce:a4:0f:13:79:e2:35:f1:f5:4d:96:
         16:5f:e6:36:f5:31:ee:41:db:b7:19:7a:41:34:a8:f4:1e:13:
         24:66:3d:14
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
NzIwMjExMC8GA1UEBRMoRTNDRjQ1RjgwNTEwNjNCQkRCMzE3RkREMTUxMTMyQTk0
MDA0RkQ1QjAeFw0yMjA2MjkxMDIyNTFaFw0yMzA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYyYmMyN2ZhLWJiNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCgnRCJG9HPEiFE8zaqE+BBoaRl/Qznb+5RrSX+BCRPIHuit/On9QPR3aVHyTgF
5tmQrFMOUP/kbsN7kSWvWcVKxdyDWhEupTg3RHroUDLCVYxGgB8jaC4mC1U1cnk/
i4GOcmAATPONLlvg5j/OzA0pM7HJ5Wdy88oej41qpSUq35Q6tDEJugPOGo5ILvVp
Fve0r9DfGAdJeiyawCH/y+F3bFJ6B0FRW27t6mCR0Mw6OBb150syT1Pxgq2MAddr
cOPl5yL8gYNVhgNgpEqUdLxvo8krFGhbxcVDSSUIG9+VUPxLUDCo9v/oBjPR2u57
fQd0lMu381aW7BCC/gB2TpQ9AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUck162QSC
K7OXTtxJ9MlVgyyAiHEwHwYDVR0jBBgwFoAU489F+AUQY7vbMX/dFREyqUAE/Vsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3MjAyLzBBRkVDQTcwRjcw
ODExRUM5ODQ5RjM1RUM0RjlBRTAyLzQ4OUYtQVVRWTd2Yk1YX2RGUkV5cVVBRV9W
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNDg5Ri1BVVFZN3ZiTVhfZEZSRXlxVUFFX1ZzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzIwMi8wQUZFQ0E3MEY3MDgxMUVDOTg0OUYzNUVDNEY5QUUwMi82REI5OThDNEY3
OTUxMUVDQkM5NEFBN0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGe9RDANBgkqhkiG9w0BAQsFAAOCAQEADFFO6xNQwXsaiRqx
LWA9WuiNQ9kQARnWCEzyjbTj2ilOnu+ZFdTC27yTDOmfjeNduDYcbw1YDhNT1JH9
DSp7llAbiE/tkEuPHeQRqQ+lnMBvnucPWiAvlHlBoV0Ij4Pz7qoO19+Aeiy2XmYb
R+l4D4JQr+2iZHzym4+1TLtk88v5DZXH0IDhnuRS/5IxtqtdJh0dEfvn3exWdBLV
8SmE/s69i2o2cSm1JEQMoThRp0oux3VxWlLCmbOBvLwBqbFsZ02qiX++NRCscKDd
lwsZ0lsGcXtiLWXryF/lbYGofc6kDxN54jXx9U2WFl/mNvUx7kHbtxl6QTSo9B4T
JGY9FA==
-----END CERTIFICATE-----