Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FB68130699DA11EE82C57A16C4F9AE02.roa
File:                     FB68130699DA11EE82C57A16C4F9AE02.roa (raw, json)
Hash identifier:          Nm+Q6FhdYjN+EspFKG/rYB52ys7SYZCeNQ4PVPiDy+g=
Subject key identifier:   9A:C7:F4:9B:90:66:0A:42:B2:E5:06:06:2C:18:99:1D:4C:69:3D:5E
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4136
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FB68130699DA11EE82C57A16C4F9AE02.roa
Signing time:             Wed 13 Dec 2023 17:14:34 +0000
ROA not before:           Wed 13 Dec 2023 17:14:34 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     135921
IP address blocks:        103.45.232.0/22 maxlen: 24
                          103.69.188.0/22 maxlen: 22
                          103.98.148.0/22 maxlen: 22
                          2407:f1c0::/32 maxlen: 48

Validation:               Failed, certificate revoked on Thu 14 Dec 2023 14:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16694 (0x4136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Dec 13 17:14:34 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=6579e67a-68b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7d:ae:c8:fc:b0:a8:00:82:09:84:da:23:f6:
                    07:a0:85:40:6c:5c:94:d6:b1:86:82:dd:f4:a3:a7:
                    65:2a:3b:8f:e9:d6:6c:fe:c1:7c:14:07:d1:f9:fc:
                    dc:5c:c4:d1:7d:3c:1c:ee:9f:99:c3:6d:a6:51:a7:
                    9d:aa:ba:60:f0:90:c8:20:6c:49:4b:1b:fb:8d:5d:
                    08:4a:ef:fa:33:4f:e0:f4:a0:65:11:2e:e2:b5:2d:
                    55:e3:fe:0f:33:66:42:64:3c:b0:cd:90:7c:50:e5:
                    1e:d3:28:8c:da:60:9b:55:82:b7:3d:8c:ea:f8:91:
                    f6:fa:3c:5e:90:b6:ce:d8:f1:59:0a:57:1e:2a:89:
                    ad:30:e5:97:fd:36:f4:c4:63:90:ac:b9:57:fe:7c:
                    ef:10:06:58:56:86:b6:b0:04:eb:00:e4:c4:e4:09:
                    b1:e7:f2:55:81:05:eb:d9:e3:75:d6:a2:ed:c9:3f:
                    57:42:e9:97:d0:16:15:38:37:e2:92:a3:fb:83:9e:
                    4a:18:a0:e1:21:c4:c3:d8:46:9c:58:ac:55:98:46:
                    fd:08:1e:c9:d9:2e:a3:83:9a:91:bb:e0:0a:72:d3:
                    1f:f8:9d:df:01:59:16:7b:7f:a5:ec:60:f7:ba:e2:
                    d5:73:79:57:92:82:77:ef:30:7e:66:7e:68:2a:0f:
                    0b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C7:F4:9B:90:66:0A:42:B2:E5:06:06:2C:18:99:1D:4C:69:3D:5E
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FB68130699DA11EE82C57A16C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.45.232.0/22
                  103.69.188.0/22
                  103.98.148.0/22
                IPv6:
                  2407:f1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:e5:10:16:f7:45:21:f4:22:39:be:bc:42:ec:ad:fc:b8:bf:
         86:14:fa:97:28:ba:03:ff:11:34:fa:bf:3b:34:d1:3b:91:e9:
         e2:c4:2a:7d:72:f9:d0:00:cb:df:41:58:11:a5:0d:26:fe:c6:
         fa:e0:01:d1:f2:9e:54:6c:27:18:3e:a2:b3:33:94:c5:b5:3d:
         81:0f:93:47:e8:be:f7:05:75:c1:c2:e2:5e:a2:3f:23:e9:94:
         94:55:70:9c:88:31:73:4b:18:4d:b7:53:93:38:74:94:48:d9:
         70:66:0f:fe:cc:06:93:64:e8:26:eb:0d:07:ea:f1:dc:1e:2e:
         a2:74:17:ff:ed:ed:1d:0b:d2:27:16:d3:de:c1:4f:eb:04:51:
         dc:5c:f3:f1:d9:69:b9:1e:81:12:26:fc:bd:17:27:b7:f1:49:
         09:6b:28:66:4e:14:36:ae:92:27:24:c3:31:17:64:02:ad:f3:
         d7:9e:a2:66:6f:02:49:0a:7b:60:6c:a2:6d:a4:c4:cf:8a:69:
         c1:ab:1e:38:e2:f7:fd:98:ad:44:d8:5f:87:33:f8:ea:3d:08:
         e3:2b:6e:3c:13:6a:9d:ba:d9:9d:ad:c2:fc:eb:59:c9:ae:0e:
         b7:ab:74:61:44:33:3d:19:67:2f:c6:42:5e:87:5a:95:29:f0:
         e2:81:a6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----