Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/93ECA1824EB911ED928CE410C4F9AE02.roa
File:                     93ECA1824EB911ED928CE410C4F9AE02.roa (raw, json)
Hash identifier:          vNmAki9Q4OGbTguEK1zm0ljJka16yJ9gc/KdCuG/+HY=
Subject key identifier:   EC:FC:BC:EB:03:E0:29:54:57:FB:FC:D1:7E:30:45:D6:CD:CA:23:72
Certificate issuer:       /CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
Certificate serial:       0495
Authority key identifier: 9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/93ECA1824EB911ED928CE410C4F9AE02.roa
Signing time:             Tue 18 Oct 2022 07:50:48 +0000
ROA not before:           Tue 18 Oct 2022 07:50:48 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     13335
IP address blocks:        103.151.41.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1173 (0x495)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
        Validity
            Not Before: Oct 18 07:50:48 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=634e5ad7-edb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:05:01:34:5e:a9:5a:f5:e6:a8:28:af:00:54:
                    fb:a2:a1:5b:a2:6c:29:53:18:34:ab:f2:3b:be:b7:
                    60:4b:ae:c2:35:75:4d:ab:91:2a:34:61:1c:1b:c9:
                    ea:e0:62:a2:0e:a8:e7:ae:b7:d3:a6:fe:c6:70:81:
                    e8:3d:5f:0c:42:11:63:65:24:72:5a:36:8b:c0:39:
                    bc:27:61:60:68:23:df:88:63:5a:99:b6:85:65:fd:
                    aa:a6:76:ff:d0:6c:87:aa:d6:3c:a0:66:0e:d6:ba:
                    c9:dd:bb:e7:c2:eb:76:ff:0c:b9:cf:81:1e:c7:fa:
                    41:b8:94:4c:dd:e9:43:df:ce:37:10:9c:72:ab:82:
                    10:97:a3:af:e3:98:a9:13:1c:08:d1:55:03:00:21:
                    7c:d8:c3:25:ff:4e:cc:cc:3a:74:51:44:c2:e7:1e:
                    c2:6d:5d:ca:f3:bf:70:56:60:09:91:20:b3:a5:ee:
                    d4:42:a8:ce:fc:41:bd:c5:48:c2:0d:b4:71:4d:21:
                    e2:a0:9a:2c:ac:d5:55:cf:9e:d7:2f:79:ff:35:c8:
                    48:22:e7:f0:0d:18:fc:4c:50:16:df:45:03:ea:75:
                    6c:e1:2e:12:05:27:13:49:e1:65:4d:ca:61:51:87:
                    c7:eb:96:79:61:54:25:28:84:7f:2c:cb:08:6f:12:
                    38:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FC:BC:EB:03:E0:29:54:57:FB:FC:D1:7E:30:45:D6:CD:CA:23:72
            X509v3 Authority Key Identifier:
                keyid:9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/93ECA1824EB911ED928CE410C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:3f:b2:e4:e3:4d:5f:e4:50:55:ef:9c:b1:68:61:09:da:6e:
         0d:f8:b9:4b:46:3f:37:e4:23:4e:bd:b0:07:56:9f:12:35:49:
         58:3c:19:18:e8:06:71:fe:fc:cb:85:74:17:60:94:1b:ec:5d:
         36:8c:26:b6:cb:e5:4f:2d:50:16:07:93:be:0f:d2:a6:76:ea:
         40:42:b4:2d:f0:29:61:3f:86:af:b9:8c:dc:33:18:87:50:dc:
         80:82:31:16:56:58:f4:ac:05:c9:27:ea:e6:dd:a1:0a:77:f4:
         ee:21:6e:67:22:06:c2:80:40:eb:90:0a:0c:3c:4e:c1:e5:cc:
         e7:02:17:64:c9:34:94:23:2e:0f:f2:4d:1b:bd:55:ac:ba:b6:
         37:ad:3b:cb:b0:e6:8b:c3:58:c5:1e:06:bc:f3:7b:bd:b5:0b:
         8d:3e:64:ab:23:d1:83:5d:b6:79:ff:4a:4a:66:47:6a:a1:94:
         0e:ac:d6:83:79:28:b2:d8:48:65:c6:cb:59:2c:05:81:2f:e5:
         0b:16:7d:2d:94:ad:3e:26:88:66:2e:68:97:37:c6:48:dd:7a:
         f7:5c:dd:de:ec:d7:64:27:ad:f9:86:c7:40:00:90:6a:ad:50:
         8b:89:f0:6d:fd:f3:60:cc:82:bc:67:57:01:60:dc:ec:25:25:
         33:43:7b:60
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjdDMEUxMTAvBgNVBAUTKDlGRDJFODY2QjFFQjgyMjc3QUI2RjU2MkZFMzJFMDgz
NTlCMzAxNjUwHhcNMjIxMDE4MDc1MDQ4WhcNMjMwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzRlNWFkNy1lZGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7gUBNF6pWvXmqCivAFT7oqFbomwpUxg0q/I7vrdgS67CNXVNq5EqNGEcG8nq
4GKiDqjnrrfTpv7GcIHoPV8MQhFjZSRyWjaLwDm8J2FgaCPfiGNambaFZf2qpnb/
0GyHqtY8oGYO1rrJ3bvnwut2/wy5z4Eex/pBuJRM3elD3843EJxyq4IQl6Ov45ip
ExwI0VUDACF82MMl/07MzDp0UUTC5x7CbV3K879wVmAJkSCzpe7UQqjO/EG9xUjC
DbRxTSHioJosrNVVz57XL3n/NchIIufwDRj8TFAW30UD6nVs4S4SBScTSeFlTcph
UYfH65Z5YVQlKIR/LMsIbxI4FwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOz8vOsD
4ClUV/v80X4wRdbNyiNyMB8GA1UdIwQYMBaAFJ/S6Gax64Inerb1Yv4y4INZswFl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0MwRS9FRTU5RTdGNDgw
RjkxMUVCOTg1RjQzM0FDNEY5QUUwMi9uOUxvWnJIcmdpZDZ0dlZpX2pMZ2cxbXpB
V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL245TG9ackhyZ2lkNnR2VmlfakxnZzFtekFXVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjdDMEUvRUU1OUU3RjQ4MEY5MTFFQjk4NUY0MzNBQzRGOUFFMDIvOTNFQ0ExODI0
RUI5MTFFRDkyOENFNDEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnlykwDQYJKoZIhvcNAQELBQADggEBADU/suTjTV/kUFXv
nLFoYQnabg34uUtGPzfkI069sAdWnxI1SVg8GRjoBnH+/MuFdBdglBvsXTaMJrbL
5U8tUBYHk74P0qZ26kBCtC3wKWE/hq+5jNwzGIdQ3ICCMRZWWPSsBckn6ubdoQp3
9O4hbmciBsKAQOuQCgw8TsHlzOcCF2TJNJQjLg/yTRu9Vay6tjetO8uw5ovDWMUe
Brzze721C40+ZKsj0YNdtnn/SkpmR2qhlA6s1oN5KLLYSGXGy1ksBYEv5QsWfS2U
rT4miGYuaJc3xkjdevdc3d7s12QnrfmGx0AAkGqtUIuJ8G3982DMgrxnVwFg3Owl
JTNDe2A=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:02 2023 by rpki-client on console-ams.rpki-client.org