Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/01ADE3665AFA11EC9B6A423CC4F9AE02.roa
File:                     01ADE3665AFA11EC9B6A423CC4F9AE02.roa (raw, json)
Hash identifier:          NkNiIGncGTPiKN9K2nr+J/s+rlWXRM4RS2LIIzJJVKA=
Subject key identifier:   D7:71:10:8D:84:9B:19:B1:4A:92:9C:60:F4:17:AA:79:C7:4A:B5:34
Certificate issuer:       /CN=A91B98F0/serialNumber=9ED2E1A2405C99EE75E7C3903DF7240CAAABFB25
Certificate serial:       08D3
Authority key identifier: 9E:D2:E1:A2:40:5C:99:EE:75:E7:C3:90:3D:F7:24:0C:AA:AB:FB:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntLhokBcme5158OQPfckDKqr-yU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/01ADE3665AFA11EC9B6A423CC4F9AE02.roa
Signing time:             Sun 02 Apr 2023 21:48:21 +0000
ROA not before:           Sun 02 Apr 2023 21:48:20 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     63023
IP address blocks:        103.149.144.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2259 (0x8d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B98F0/serialNumber=9ED2E1A2405C99EE75E7C3903DF7240CAAABFB25
        Validity
            Not Before: Apr  2 21:48:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6429f824-f03a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7c:9e:b3:87:32:d6:ad:0e:a0:dd:84:4a:b1:
                    f0:f7:8b:74:df:c4:88:e7:f5:78:e8:ad:20:a5:9b:
                    0a:44:ce:49:02:8c:8f:c0:f6:ef:29:24:00:bc:1c:
                    95:37:31:27:46:74:45:66:f7:a9:b0:f1:b2:62:27:
                    51:62:b6:54:5a:74:07:a9:af:1c:f1:bd:e9:2f:1a:
                    23:8c:ca:6d:2e:fb:ba:5b:f9:4d:8a:62:f3:b2:28:
                    de:69:49:f1:a1:28:31:cf:70:eb:e4:4e:b5:d1:ff:
                    b5:86:5a:83:91:b4:bd:4b:c1:4e:7c:a6:27:e6:55:
                    4f:78:de:4f:9b:09:b2:00:fc:23:19:c5:13:55:52:
                    6c:f7:eb:4e:c0:44:d8:08:e1:cf:24:9c:3e:b0:1d:
                    dc:99:64:bb:6b:9c:da:78:71:fc:fc:0a:2b:d1:4d:
                    29:09:f9:de:a5:b9:58:7b:3b:2f:34:73:25:d1:f8:
                    44:c5:12:11:2f:2d:84:61:6b:05:56:e0:88:47:0c:
                    92:ba:00:e4:c2:c9:89:29:f8:f5:23:c1:5c:28:6e:
                    81:0d:e7:a4:79:5d:a3:20:92:ca:2f:28:7d:71:9a:
                    fa:91:7b:87:8d:2f:5b:38:c1:16:2b:e5:9b:29:58:
                    bf:ff:c7:12:66:41:f2:da:09:02:d4:75:0a:c5:4a:
                    1d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:71:10:8D:84:9B:19:B1:4A:92:9C:60:F4:17:AA:79:C7:4A:B5:34
            X509v3 Authority Key Identifier:
                keyid:9E:D2:E1:A2:40:5C:99:EE:75:E7:C3:90:3D:F7:24:0C:AA:AB:FB:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/ntLhokBcme5158OQPfckDKqr-yU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntLhokBcme5158OQPfckDKqr-yU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B98F0/8A1AE1F4672C11EA8393DF25C4F9AE02/01ADE3665AFA11EC9B6A423CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:eb:e9:73:d5:18:e5:ce:59:b1:76:b8:c4:61:79:a7:e3:ae:
         1e:fc:b8:a6:b3:e7:de:4f:24:0c:58:8b:9a:53:78:97:f8:ab:
         4e:f2:b8:90:3d:f8:50:62:cf:40:5d:9b:4f:ef:3b:d4:3d:d5:
         bc:e3:3b:58:5a:90:bc:af:3d:b4:ed:c6:89:45:3e:e6:91:e9:
         c3:91:bb:14:c4:76:83:97:f4:d8:eb:90:c1:31:4e:7c:29:67:
         95:97:2c:74:12:94:1e:60:a1:64:f5:28:ef:de:b7:71:f7:09:
         cd:81:cc:9a:dd:e7:d5:fc:50:54:39:c4:d4:f1:33:c0:e5:63:
         58:a1:f5:d4:24:fd:20:c0:7e:bc:ff:22:53:48:0c:e6:92:18:
         87:89:4f:6f:45:dc:03:a6:a4:84:83:ba:c9:94:51:5f:44:86:
         6d:7a:ce:c8:e2:1c:8a:ff:3a:8e:d9:f8:24:72:d1:6c:fe:e3:
         88:96:d5:e6:e7:33:2f:f6:9b:4b:6b:f4:9b:c4:a4:3f:9c:6f:
         4d:6c:b0:a1:28:31:22:70:ff:f9:eb:85:a5:f5:e6:75:91:d0:
         d6:79:b6:6b:16:d8:4b:21:d1:4a:f4:b1:46:9a:2e:c3:d1:eb:
         8a:e1:b2:22:fc:91:c0:c9:2a:1d:11:a9:55:84:96:7e:92:9c:
         4a:72:b0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----