Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/A3A8CF2C6BAC11EE90182566C4F9AE02.roa
File:                     A3A8CF2C6BAC11EE90182566C4F9AE02.roa (raw, json)
Hash identifier:          6wW4neK2YTbiqS9ZXgIhsfgDFhrM5uyd7jwpRBSQqFA=
Subject key identifier:   B0:EA:77:F4:46:9C:D6:A5:31:F4:E1:C8:38:C2:B6:27:BA:10:A0:C1
Certificate issuer:       /CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Certificate serial:       06A7
Authority key identifier: 7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/A3A8CF2C6BAC11EE90182566C4F9AE02.roa
Signing time:             Sun 15 Oct 2023 22:46:12 +0000
ROA not before:           Sun 15 Oct 2023 22:46:12 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     198100
IP address blocks:        103.238.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1703 (0x6a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
        Validity
            Not Before: Oct 15 22:46:12 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=652c6bb4-08c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8b:39:b1:c3:c9:b3:a3:6c:60:88:05:fa:ef:
                    77:cc:f0:51:6d:2f:23:e4:c8:ed:18:ae:2a:f0:6d:
                    84:91:32:d6:b7:9e:61:b6:1e:61:7b:18:69:d6:87:
                    e2:dc:b1:2f:a6:0b:7f:70:b9:f5:18:ae:34:a2:98:
                    17:f0:a7:1e:00:f5:73:28:fb:9a:b8:3f:80:18:01:
                    48:57:8c:2f:75:3f:74:7f:91:6a:e4:19:93:c5:92:
                    9d:38:72:d9:b6:54:f8:d1:93:3f:a3:a8:ef:09:14:
                    c5:96:97:c8:27:93:11:c2:b1:f6:0c:83:d2:1f:6e:
                    5f:e5:f1:5e:1b:a8:96:26:13:b7:4c:d2:07:ef:3c:
                    97:57:6f:a0:ce:48:3e:fb:56:09:f2:b2:c3:31:ad:
                    4d:de:4a:54:d8:0a:d1:66:01:4b:c5:80:cf:2e:5e:
                    f4:bf:9e:3e:92:4f:31:b8:bd:6e:68:b2:b2:76:fb:
                    70:ec:4b:22:c3:5e:63:88:21:80:2c:d5:39:d4:6f:
                    16:3b:04:67:a8:93:46:05:e0:29:fb:8f:75:f0:05:
                    c9:f3:a1:7e:80:4c:58:63:84:84:7c:bc:7d:43:00:
                    26:59:c1:2e:92:2f:08:08:ee:8b:c1:c0:2d:be:ca:
                    7b:27:5c:fb:91:83:39:bb:95:54:c7:aa:69:42:41:
                    0e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EA:77:F4:46:9C:D6:A5:31:F4:E1:C8:38:C2:B6:27:BA:10:A0:C1
            X509v3 Authority Key Identifier:
                keyid:7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/ewWczGC6qvz28UEhbv3WjocMJVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/A3A8CF2C6BAC11EE90182566C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:af:5b:0b:e5:5a:ec:bf:b4:ab:85:71:c2:3e:1c:da:94:15:
         ba:38:77:9d:19:b7:6b:9a:d4:57:f2:62:a3:3d:8d:15:b2:cc:
         79:94:a1:dd:d6:2e:74:31:5b:07:2d:7f:00:c9:20:2a:16:ef:
         d1:29:93:1c:f1:c3:f4:d6:b8:de:32:8e:0a:47:91:f6:4c:51:
         5d:36:b7:65:0e:80:f4:9a:7a:be:65:e6:c1:74:e3:b2:45:ef:
         92:81:e9:a4:d2:6c:7f:04:24:a4:f7:93:7c:fa:3f:b6:7a:93:
         81:d0:cc:5d:99:ee:fb:2f:51:76:11:a0:e3:55:d3:54:93:d3:
         aa:73:43:60:18:94:09:c4:93:12:b1:3a:01:02:53:af:37:47:
         f6:60:b3:0d:4d:22:53:d7:6b:c7:11:c9:3a:f2:31:6f:bc:c3:
         02:73:7b:6a:44:07:b2:ca:4c:81:a3:89:dd:01:05:70:22:97:
         08:3a:2c:b8:16:37:8d:10:be:06:d4:f5:e1:ce:50:c1:f5:73:
         7c:5a:35:6b:e5:8f:93:ad:3f:22:15:4e:d9:35:89:5f:d8:0a:
         0c:40:5f:d4:d8:cd:40:43:27:31:a3:e2:17:79:ee:53:d2:78:
         60:4c:29:5a:d7:c4:4b:30:32:03:cf:81:d5:4b:f9:99:36:da:
         48:f7:a0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----