Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/BE96E2AA49BC11ED861A2D66C4F9AE02.roa
File:                     BE96E2AA49BC11ED861A2D66C4F9AE02.roa (raw, json)
Hash identifier:          Jh6NYXUAjAV63zf71lMljvXnERd8f/D2f0ZqvM1kR6w=
Subject key identifier:   8B:B7:39:44:E8:92:FD:D4:CA:8C:6B:BF:73:90:85:13:A2:93:C0:2B
Certificate issuer:       /CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
Certificate serial:       0490
Authority key identifier: 9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/BE96E2AA49BC11ED861A2D66C4F9AE02.roa
Signing time:             Tue 11 Oct 2022 23:30:52 +0000
ROA not before:           Tue 11 Oct 2022 23:30:52 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     49466
IP address blocks:        103.151.41.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1168 (0x490)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7C0E/serialNumber=9FD2E866B1EB82277AB6F562FE32E08359B30165
        Validity
            Not Before: Oct 11 23:30:52 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=6345fcac-b5a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:da:ce:51:11:b7:8a:c2:06:0d:47:d4:86:49:
                    15:11:49:98:33:fc:b4:ed:0c:4c:e7:70:1b:aa:34:
                    31:d1:36:06:54:a1:62:96:84:3f:53:06:1f:3a:b6:
                    fa:9b:cb:8a:01:61:74:64:26:98:79:88:b4:bc:0c:
                    32:44:04:d9:d9:04:da:0f:fc:eb:a5:7f:d6:8e:60:
                    1c:a8:ec:94:56:82:36:a5:ae:31:46:92:65:d2:8d:
                    f5:74:40:38:d6:13:c8:48:20:ef:14:97:a0:08:a5:
                    8f:e8:36:3c:3d:f5:1a:57:ba:29:14:07:47:07:07:
                    f1:a7:2c:3e:d3:f8:48:c4:89:d1:f1:2c:d9:06:be:
                    d8:e7:0b:1b:16:f6:25:1e:b7:16:cd:ff:3d:a9:7b:
                    98:c6:44:ec:74:55:b2:a8:d7:63:f7:1c:22:70:2a:
                    a9:8b:fa:26:c1:30:05:ca:a4:30:1a:d9:ee:41:4a:
                    4d:4e:01:cc:62:e2:7f:75:5b:04:ba:ec:4e:4c:66:
                    69:cd:cd:29:6a:1f:03:87:e9:bd:47:bb:5d:f5:36:
                    48:a9:7d:33:c6:46:6a:52:e2:a6:6e:ac:2d:86:67:
                    55:47:d1:fc:53:9b:f5:ae:91:ae:e2:d7:44:86:f1:
                    2b:59:a8:c0:62:18:12:8c:5d:89:33:eb:5e:ad:3a:
                    2f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B7:39:44:E8:92:FD:D4:CA:8C:6B:BF:73:90:85:13:A2:93:C0:2B
            X509v3 Authority Key Identifier:
                keyid:9F:D2:E8:66:B1:EB:82:27:7A:B6:F5:62:FE:32:E0:83:59:B3:01:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/n9LoZrHrgid6tvVi_jLgg1mzAWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n9LoZrHrgid6tvVi_jLgg1mzAWU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7C0E/EE59E7F480F911EB985F433AC4F9AE02/BE96E2AA49BC11ED861A2D66C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:1c:3b:f0:3c:ff:3b:44:ce:ce:87:f0:10:90:5d:98:b9:09:
         95:f3:e6:34:61:7e:18:ad:06:34:7d:b7:bf:d5:c4:30:06:4c:
         51:d6:a1:b1:bb:09:fd:28:4d:60:ad:d4:02:ba:f0:8e:cb:99:
         5e:f9:b5:a1:c1:2e:a5:79:4c:88:26:42:45:a6:3c:bf:06:9c:
         87:99:d9:55:3d:49:5e:fb:67:b5:dc:ad:2c:9e:ce:5d:26:7e:
         13:96:d5:c3:59:ff:3b:0a:90:63:64:83:e8:2b:2e:e7:54:aa:
         a7:4d:58:36:89:68:0d:68:7e:72:de:0a:57:c9:16:c1:e0:4b:
         22:20:06:76:7d:c6:64:62:14:08:5a:ed:d6:dd:90:5e:d7:d7:
         e6:8f:52:ec:d2:a5:db:fc:f3:53:00:b5:4e:9d:da:5a:25:ca:
         8b:a7:10:d3:3b:6f:d9:85:9d:39:90:42:57:88:1d:0c:3b:82:
         c9:9c:66:a5:fb:3e:60:a6:b6:3d:af:77:4a:87:aa:8f:69:5a:
         6f:2b:61:f3:d0:fb:c7:36:97:c9:9c:15:24:89:fa:9f:e0:c8:
         2b:d6:8a:64:7c:67:3d:f4:b1:0e:16:a9:fb:3a:c5:a1:f1:16:
         6e:61:f8:64:5f:ae:6e:98:30:f6:b9:55:d1:f2:a3:d8:89:6e:
         dd:92:95:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----