Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/6FA2526223A411EDA68BA212C4F9AE02.roa
File:                     6FA2526223A411EDA68BA212C4F9AE02.roa (raw, json)
Hash identifier:          bLBRhUCf73P7089e67G2Ze8BBQ2s9sBb06Jek0cK9f4=
Subject key identifier:   4F:20:B7:69:41:DB:92:EC:60:26:93:7F:CC:72:9B:EA:E1:31:B6:CA
Certificate issuer:       /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Certificate serial:       039B
Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/6FA2526223A411EDA68BA212C4F9AE02.roa
Signing time:             Wed 24 Aug 2022 12:01:07 +0000
ROA not before:           Wed 24 Aug 2022 12:01:07 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     133178
IP address blocks:        103.90.172.0/24 maxlen: 24
                          123.253.226.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 923 (0x39b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
        Validity
            Not Before: Aug 24 12:01:07 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=63061303-1b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:62:0f:ba:56:71:85:09:57:8e:24:eb:7b:2a:
                    24:bd:1f:21:97:03:fc:a3:fc:90:22:d7:29:ec:35:
                    ba:c1:74:cd:86:32:f7:d1:50:58:79:fe:dc:8b:21:
                    bd:4c:d0:3d:e1:10:73:58:a0:11:3d:2f:35:a9:19:
                    af:3a:34:19:81:78:f7:4f:2c:8f:7c:86:36:ec:2a:
                    96:31:d7:47:0b:72:51:0b:d6:33:72:87:33:55:ec:
                    41:7c:a9:e7:c6:37:cd:7d:57:f4:2e:d7:17:e1:5c:
                    15:3a:34:60:38:98:84:e0:01:76:dc:8d:6f:bb:97:
                    57:65:db:ce:5a:a2:fd:b6:6b:ae:4b:e9:fd:a1:2b:
                    db:1e:8a:02:98:1f:64:92:07:8f:8d:fd:44:c6:89:
                    07:1d:25:a2:21:16:b1:ff:7f:44:66:a6:35:31:2a:
                    28:7d:9d:25:54:b3:34:b3:a1:91:22:4d:83:87:14:
                    f7:75:30:9e:81:97:5c:85:4f:43:df:7c:1c:77:0a:
                    17:4b:cd:ab:a9:66:9b:ea:2d:39:8b:22:d6:05:31:
                    34:ef:c2:e1:44:06:70:18:2d:ee:cf:b7:a9:5b:b8:
                    9a:8c:92:6b:cd:b6:b6:9f:fa:e3:60:65:49:29:5d:
                    15:33:ec:fa:0a:be:22:a1:32:8b:22:b0:65:18:5f:
                    20:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:20:B7:69:41:DB:92:EC:60:26:93:7F:CC:72:9B:EA:E1:31:B6:CA
            X509v3 Authority Key Identifier:
                keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/6FA2526223A411EDA68BA212C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.172.0/24
                  123.253.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e3:f5:9e:5e:66:90:d3:19:92:f2:86:0b:a6:e5:12:c2:bb:5b:
         9c:73:cf:63:52:db:23:e4:e3:28:41:bf:5f:d5:38:f4:57:ea:
         98:c5:96:c4:e1:7d:1d:89:3b:49:a8:4c:de:96:34:f9:bf:df:
         cb:ca:9a:ee:94:ea:32:38:e8:8e:86:0f:15:d0:1a:dd:24:6a:
         0b:ab:8d:42:29:de:48:80:3c:25:64:a8:ef:a2:b8:65:69:9e:
         72:32:70:45:db:da:a0:0d:2b:04:d9:98:9c:ec:85:11:2a:21:
         cb:fc:87:3c:7b:60:76:4d:9a:cf:e4:2d:5c:40:96:ad:dc:b9:
         fc:bc:2f:2d:73:41:43:31:eb:4c:29:ed:00:e3:86:0c:db:65:
         4c:df:8f:c1:4a:05:ab:12:e7:18:7a:99:e4:44:af:5d:0e:fc:
         ae:59:50:2b:8c:25:5e:e5:d4:fb:5e:95:a9:7b:91:ae:ba:ce:
         9c:5c:ec:d9:e8:ff:14:b1:b9:27:ed:68:ad:83:0c:c0:3c:4b:
         da:8b:ba:36:74:42:76:13:91:bc:1d:3c:07:f1:87:55:1b:68:
         22:eb:b5:f9:28:74:c9:72:d2:67:a7:49:65:6b:b2:e2:bd:9d:
         44:04:e6:89:4f:e0:2d:ca:f1:c4:57:92:26:a4:c5:1d:1f:a3:
         63:08:71:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----