Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C82/8352D712DA3211EBA1E28B1CC4F9AE02/91ECF152DA3411EBB76EB61DC4F9AE02.roa
File:                     91ECF152DA3411EBB76EB61DC4F9AE02.roa (raw, json)
Hash identifier:          uJ5xEKO+RZTcP8GdBdNXO58kmTsD3ORpgFBJ3zlsVX4=
Subject key identifier:   5A:DB:B2:7A:14:DC:78:EF:C0:A7:A3:3A:F3:1E:BE:8B:9D:05:FE:B1
Certificate issuer:       /CN=A91A5C82/serialNumber=8D27CCE1FC2693BF623EB11DE60E87AD579B8AF1
Certificate serial:       03BB
Authority key identifier: 8D:27:CC:E1:FC:26:93:BF:62:3E:B1:1D:E6:0E:87:AD:57:9B:8A:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jSfM4fwmk79iPrEd5g6HrVebivE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5C82/8352D712DA3211EBA1E28B1CC4F9AE02/91ECF152DA3411EBB76EB61DC4F9AE02.roa
Signing time:             Wed 21 Dec 2022 02:42:17 +0000
ROA not before:           Wed 21 Dec 2022 02:42:17 +0000
ROA not after:            Wed 31 Jan 2024 00:00:00 +0000
asID:                     131111
IP address blocks:        103.78.208.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 955 (0x3bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5C82/serialNumber=8D27CCE1FC2693BF623EB11DE60E87AD579B8AF1
        Validity
            Not Before: Dec 21 02:42:17 2022 GMT
            Not After : Jan 31 00:00:00 2024 GMT
        Subject: CN=63a27289-a04c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7a:01:51:17:8f:d3:c0:b8:d6:72:28:7d:9c:
                    4c:5a:49:19:f2:f3:23:de:e3:8b:c7:6f:4d:1c:53:
                    51:dd:12:57:2f:ef:63:4a:7f:12:6e:f1:ab:0a:ff:
                    d6:b2:e6:2c:d5:02:78:ce:f7:48:c6:41:d0:dc:44:
                    49:74:f3:37:81:d3:d2:5e:ea:da:87:09:d2:7b:c6:
                    df:39:68:2a:65:92:45:37:3b:30:07:6f:40:2e:5a:
                    51:65:28:87:9e:d6:22:24:4b:7d:7d:da:2e:f8:e5:
                    bd:2b:8d:67:de:81:16:2d:18:2e:87:51:58:e0:16:
                    1d:4a:32:9a:ae:f6:d3:4a:8c:03:74:db:3d:49:a9:
                    ca:2c:bf:3f:a9:c4:a8:29:db:df:cb:56:ad:33:73:
                    5e:21:54:57:95:cc:23:4a:16:7c:c9:5d:6f:b6:37:
                    a2:b7:f6:98:0c:3f:4b:0b:a0:86:71:11:b1:6e:af:
                    99:36:4a:67:67:51:79:35:96:08:8a:12:cd:79:71:
                    76:85:b2:b8:f4:29:ac:04:0b:8c:5d:f0:ab:0a:5f:
                    30:48:b1:85:23:3f:df:50:41:18:60:5f:05:fe:5e:
                    9e:44:a8:ca:e2:ff:bb:1b:c0:3c:9f:a0:00:66:6b:
                    65:21:f8:16:1d:09:fc:aa:d8:bb:2e:d5:a3:14:16:
                    88:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:DB:B2:7A:14:DC:78:EF:C0:A7:A3:3A:F3:1E:BE:8B:9D:05:FE:B1
            X509v3 Authority Key Identifier:
                keyid:8D:27:CC:E1:FC:26:93:BF:62:3E:B1:1D:E6:0E:87:AD:57:9B:8A:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5C82/8352D712DA3211EBA1E28B1CC4F9AE02/jSfM4fwmk79iPrEd5g6HrVebivE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jSfM4fwmk79iPrEd5g6HrVebivE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C82/8352D712DA3211EBA1E28B1CC4F9AE02/91ECF152DA3411EBB76EB61DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:5d:61:16:fa:ff:99:3c:9a:1b:00:02:c8:be:fc:80:ab:31:
         f7:67:15:b6:7e:e1:71:17:72:04:61:2a:2a:60:a6:05:d8:9b:
         73:39:08:64:67:27:59:58:bc:22:2d:94:c9:ce:2f:2a:1e:c7:
         ed:b8:05:a3:b3:b9:52:88:f2:21:c5:73:a7:28:04:1a:d2:d4:
         10:d8:f4:4a:9c:ed:e6:65:a9:af:92:16:9c:cf:ac:56:f7:a8:
         01:e7:5d:27:dd:cc:5e:e7:af:8f:06:e8:b0:90:c8:9e:f1:b4:
         e5:c9:f5:2e:03:31:84:7f:fe:f5:69:64:ac:f2:c1:e8:b2:5e:
         5f:c2:8d:e7:9e:82:7f:4a:90:54:48:fb:a7:37:41:9a:dc:c1:
         d9:82:bb:dc:98:0f:4e:70:00:bc:a4:f5:e9:01:78:d3:0e:6f:
         65:7e:64:82:a4:e5:df:75:ee:31:1b:39:bc:3e:cf:49:0b:8c:
         a5:4d:c6:ca:bd:bf:a3:ab:f6:25:4b:dc:66:d9:c5:72:e5:35:
         3e:39:ab:2c:fe:f6:b5:5b:e4:5c:eb:05:f6:a0:3d:b1:a2:dc:
         95:74:ca:87:d1:c4:74:93:2e:6f:9c:1c:32:61:6f:84:a3:cb:
         97:50:b4:e3:ad:77:a1:b7:a9:69:8c:71:0b:90:a1:dd:7f:de:
         a1:af:f8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 06:38:51 2023 by rpki-client on console-ams.rpki-client.org