Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/F8F3876C012E11EE82429554C4F9AE02.roa
File:                     F8F3876C012E11EE82429554C4F9AE02.roa (raw, json)
Hash identifier:          mnHA23nK140zuN8iP1tSBcMM0IUOh9BUgMkFod3HxrQ=
Subject key identifier:   6B:84:5F:FF:37:EB:13:23:AD:B7:34:50:DD:C5:73:AD:43:0D:9D:E4
Certificate issuer:       /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Certificate serial:       07FE
Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/F8F3876C012E11EE82429554C4F9AE02.roa
Signing time:             Sun 17 Sep 2023 04:30:02 +0000
ROA not before:           Sun 17 Sep 2023 04:30:02 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     38074
IP address blocks:        103.152.178.0/24 maxlen: 24
                          103.160.48.0/24 maxlen: 24
                          2001:df4:1780::/47 maxlen: 47
                          2001:df4:1780::/48 maxlen: 48
                          2001:df4:1781::/48 maxlen: 48
                          2406:7ec0::/32 maxlen: 32
                          2406:7ec0::/33 maxlen: 33

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2046 (0x7fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
        Validity
            Not Before: Sep 17 04:30:02 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=650680c9-e81c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2c:68:9e:a8:5e:8f:a3:89:ca:4a:15:c5:48:
                    cd:1f:84:16:af:3d:ab:5a:9c:46:74:fb:28:03:cb:
                    b8:b4:d5:24:5d:c2:1f:31:35:03:af:61:04:21:91:
                    37:84:00:32:24:04:ea:2b:8a:b7:d0:69:bb:b4:1a:
                    e2:12:5b:78:f7:bf:af:35:da:41:05:80:71:d0:1f:
                    84:3c:97:ec:01:eb:25:09:0c:d9:6c:97:0d:ed:4d:
                    00:a8:89:2d:ca:bd:f5:9f:df:03:86:54:00:8e:aa:
                    3e:9e:41:ae:07:66:a1:f1:c1:2c:cd:0c:9b:1f:70:
                    a2:7c:bc:83:a6:d5:e6:94:7e:86:b0:dd:d4:e6:56:
                    4e:74:94:4a:50:98:6f:72:e9:0f:59:ee:e3:e8:60:
                    a7:fb:2d:8d:8b:b4:da:f2:50:57:37:0c:1f:9b:de:
                    e0:83:00:02:9c:09:68:45:c6:f1:d7:96:b5:f1:53:
                    2b:77:52:14:0f:53:92:db:03:82:ed:84:20:bd:61:
                    a4:62:bd:56:f6:cb:f1:e1:0b:68:bf:d7:23:7d:06:
                    59:43:59:23:03:5b:24:25:f1:a1:e6:d7:23:1b:28:
                    cb:c4:df:ad:b8:3b:9b:45:a7:29:13:cd:44:3c:45:
                    68:93:4f:98:a1:98:71:2a:b5:53:d3:39:c3:8b:f8:
                    7f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:84:5F:FF:37:EB:13:23:AD:B7:34:50:DD:C5:73:AD:43:0D:9D:E4
            X509v3 Authority Key Identifier:
                keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/F8F3876C012E11EE82429554C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.178.0/24
                  103.160.48.0/24
                IPv6:
                  2001:df4:1780::/47
                  2406:7ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:16:81:93:ad:fc:df:2b:40:36:99:fd:bf:c5:34:91:27:54:
         5d:a3:18:0f:70:07:98:6a:4d:8a:f3:d1:40:cf:45:ee:65:a8:
         7f:38:f1:a8:53:1e:a5:4a:a5:37:cf:3d:6d:ff:94:64:d4:24:
         79:f9:4d:2f:af:9f:76:5c:44:bb:a0:6e:4c:1a:82:3d:1a:bc:
         a7:40:ae:88:74:4a:8c:07:d0:20:bc:bb:58:89:34:b9:9e:97:
         08:b4:fd:a1:46:2d:0e:a7:7b:9d:68:7f:e3:ba:ea:ba:1c:b5:
         10:c2:74:f5:7e:2e:2b:cb:07:a6:c3:1c:b2:da:af:3d:00:5b:
         ea:0a:ae:44:5d:13:e5:57:f8:54:6c:8c:b1:7b:15:4d:f1:b8:
         02:98:99:a8:a3:8e:c1:83:7a:bb:a2:ee:c7:0a:8a:69:1e:06:
         7b:f9:d0:e2:a9:6d:53:8c:e7:50:57:36:37:7a:37:f7:bb:fe:
         97:2b:c6:0f:1f:1a:56:14:1b:7d:76:74:09:48:b2:12:8b:92:
         3a:cc:33:43:88:cd:a1:22:c7:d2:ad:06:f0:73:76:18:19:fc:
         b5:00:4e:0c:88:0d:e5:70:3e:80:01:07:71:41:63:11:6d:9d:
         27:15:e0:66:3e:db:aa:f1:b6:40:1f:67:cb:5e:87:7b:90:10:
         8e:67:82:a7
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgICB/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjc3NzAxMTAvBgNVBAUTKDdENTU0Njk5MjZEMUY5MzRGM0FGMjk2NDVFQjZDMTBC
QjYwNjlCQzkwHhcNMjMwOTE3MDQzMDAyWhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTA2ODBjOS1lODFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxCxonqhej6OJykoVxUjNH4QWrz2rWpxGdPsoA8u4tNUkXcIfMTUDr2EEIZE3
hAAyJATqK4q30Gm7tBriElt497+vNdpBBYBx0B+EPJfsAeslCQzZbJcN7U0AqIkt
yr31n98DhlQAjqo+nkGuB2ah8cEszQybH3CifLyDptXmlH6GsN3U5lZOdJRKUJhv
cukPWe7j6GCn+y2Ni7Ta8lBXNwwfm97ggwACnAloRcbx15a18VMrd1IUD1OS2wOC
7YQgvWGkYr1W9svx4Qtov9cjfQZZQ1kjA1skJfGh5tcjGyjLxN+tuDubRacpE81E
PEVok0+YoZhxKrVT0znDi/h/XQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFGuEX/83
6xMjrbc0UN3Fc61DDZ3kMB8GA1UdIwQYMBaAFH1VRpkm0fk0868pZF62wQu2BpvJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3MC9FNjgxMDQxMEMw
QUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1UVHpyeWxrWHJiQkM3WUdt
OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZWVkdtU2JSLVRUenJ5bGtYcmJCQzdZR204ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Qjc3NzAvRTY4MTA0MTBDMEFFMTFFQUI5NUFCNTcyQzRGOUFFMDIvRjhGMzg3NkMw
MTJFMTFFRTgyNDI5NTU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPQYIKwYBBQUHAQcBAf8E
LjAsMBIEAgABMAwDBABnmLIDBABnoDAwFgQCAAIwEAMHASABDfQXgAMFACQGfsAw
DQYJKoZIhvcNAQELBQADggEBAJwWgZOt/N8rQDaZ/b/FNJEnVF2jGA9wB5hqTYrz
0UDPRe5lqH848ahTHqVKpTfPPW3/lGTUJHn5TS+vn3ZcRLugbkwagj0avKdAroh0
SowH0CC8u1iJNLmelwi0/aFGLQ6ne51of+O66roctRDCdPV+LivLB6bDHLLarz0A
W+oKrkRdE+VX+FRsjLF7FU3xuAKYmaijjsGDerui7scKimkeBnv50OKpbVOM51BX
Njd6N/e7/pcrxg8fGlYUG312dAlIshKLkjrMM0OIzaEix9KtBvBzdhgZ/LUATgyI
DeVwPoABB3FBYxFtnScV4GY+26rxtkAfZ8teh3uQEI5ngqc=
-----END CERTIFICATE-----