Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/B50582922D3611EE96831F0BC4F9AE02.roa
File:                     B50582922D3611EE96831F0BC4F9AE02.roa (raw, json)
Hash identifier:          ArW15QylGQNkRJ+0aSU5+oYP0e0aP+2M9zqOnl/0B68=
Subject key identifier:   E0:78:7C:1C:EC:0A:AC:A4:02:4D:E1:44:06:A8:C7:10:08:90:5A:B5
Certificate issuer:       /CN=A91BB4C2/serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04
Certificate serial:       26
Authority key identifier: DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/B50582922D3611EE96831F0BC4F9AE02.roa
Signing time:             Fri 28 Jul 2023 11:05:48 +0000
ROA not before:           Fri 28 Jul 2023 11:05:48 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     151391
IP address blocks:        103.213.36.0/24 maxlen: 24
                          103.213.37.0/24 maxlen: 24
                          2401:5e0::/32 maxlen: 32
                          2401:5e0::/36 maxlen: 36
                          2401:5e0:1000::/36 maxlen: 36
                          2401:5e0:1000::/48 maxlen: 48
                          2401:5e0:1001::/48 maxlen: 48
                          2401:5e0:1002::/48 maxlen: 48
                          2401:5e0:1003::/48 maxlen: 48
                          2401:5e0:1004::/48 maxlen: 48
                          2401:5e0:2000::/36 maxlen: 36
                          2401:5e0:3000::/36 maxlen: 36
                          2401:5e0:4000::/36 maxlen: 36
                          2401:5e0:5000::/36 maxlen: 36
                          2401:5e0:6000::/36 maxlen: 36
                          2401:5e0:7000::/36 maxlen: 36
                          2401:5e0:8000::/36 maxlen: 36
                          2401:5e0:9000::/36 maxlen: 36
                          2401:5e0:a000::/36 maxlen: 36
                          2401:5e0:b000::/36 maxlen: 36
                          2401:5e0:c000::/36 maxlen: 36
                          2401:5e0:d000::/36 maxlen: 36
                          2401:5e0:e000::/36 maxlen: 36
                          2401:5e0:f000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB4C2/serialNumber=DC23A69EA1EFC1A379492C13E9AC147C49F5AD04
        Validity
            Not Before: Jul 28 11:05:48 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64c3a10c-6f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:23:90:78:86:80:a5:96:3f:c9:0e:2c:3e:12:
                    a1:12:a8:c6:fb:ae:bd:89:64:fd:63:50:4f:0b:40:
                    25:5d:5d:cf:4e:a9:f9:8b:63:32:32:54:62:ed:88:
                    7e:a1:fb:0f:1a:f5:2a:47:54:ef:5b:2e:6d:ca:48:
                    5b:49:84:d8:cd:69:21:b2:67:8a:a0:b4:40:0f:45:
                    b5:1f:ba:9a:32:68:7c:95:6b:11:a0:13:70:e9:a8:
                    cf:3a:09:6b:d3:ea:5c:7d:c8:b8:bb:b4:c5:58:04:
                    f4:20:82:f6:d2:6a:14:77:4c:d3:05:06:35:b3:05:
                    f6:f0:af:25:b3:04:68:3e:17:c1:1f:9e:47:56:21:
                    fa:6e:6a:70:45:0d:e2:4e:d2:25:9e:ea:0f:67:60:
                    1a:09:24:1e:10:37:5b:db:2d:03:fd:9e:27:de:4a:
                    9a:58:46:7b:3f:6b:5c:4e:c9:5a:42:ea:b5:9a:8a:
                    e5:63:a8:2f:4f:d1:57:04:db:f1:b2:73:62:33:b7:
                    f0:e7:5c:02:33:05:2f:30:54:c9:65:d5:25:69:b5:
                    ce:59:7e:68:69:34:97:2f:71:a9:3b:b2:f8:ef:ca:
                    06:f6:c4:02:5e:3f:78:1d:2b:f3:f7:4a:25:93:97:
                    0d:2f:06:87:e2:60:6a:32:51:0f:e1:0d:0f:e8:77:
                    d2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:78:7C:1C:EC:0A:AC:A4:02:4D:E1:44:06:A8:C7:10:08:90:5A:B5
            X509v3 Authority Key Identifier:
                keyid:DC:23:A6:9E:A1:EF:C1:A3:79:49:2C:13:E9:AC:14:7C:49:F5:AD:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/3COmnqHvwaN5SSwT6awUfEn1rQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3COmnqHvwaN5SSwT6awUfEn1rQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB4C2/B17E95D6037011EE9BB62C2FC4F9AE02/B50582922D3611EE96831F0BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.36.0/23
                IPv6:
                  2401:5e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:06:7b:46:69:79:ac:5c:e4:42:db:e8:74:47:fb:96:1b:48:
         07:2d:da:3c:a7:54:5a:cc:82:78:6f:6a:20:3d:09:52:c8:a7:
         2c:f3:1d:13:63:94:d4:61:68:b6:58:da:bd:76:fb:3f:ab:66:
         cd:81:ec:31:50:c2:6d:5e:8b:d5:17:17:0d:1e:6d:2b:04:9e:
         c3:1d:4e:1b:d1:c4:f1:40:5c:9d:02:58:ee:b8:a8:52:a3:e9:
         55:3e:48:e4:e2:05:44:33:0c:61:2e:86:6f:67:2c:fb:78:1e:
         e4:62:8d:40:60:44:10:20:f2:6e:de:70:6b:1e:a6:e9:6b:2e:
         18:0b:91:a6:73:82:63:32:33:09:90:b8:24:f6:6e:4f:1a:0c:
         12:94:46:62:ca:ef:ff:8c:aa:1f:cf:e5:c2:2e:6b:2d:f4:d0:
         ef:da:7b:c8:90:dd:db:96:8a:bf:b4:13:ee:30:a2:23:64:3f:
         2f:ea:b9:ce:f3:6e:e9:c7:72:7d:41:2d:51:e4:ba:ec:f0:99:
         87:d8:bb:d6:84:f7:31:db:fc:2e:7a:db:f0:2a:6f:68:d6:22:
         f0:ea:44:c9:14:fc:d7:25:6a:3a:24:65:11:2c:1a:1e:ea:11:
         67:d8:8e:fb:e6:77:8c:60:47:96:b9:52:f8:0b:6a:93:12:66:
         49:9b:8f:be
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
QjRDMjExMC8GA1UEBRMoREMyM0E2OUVBMUVGQzFBMzc5NDkyQzEzRTlBQzE0N0M0
OUY1QUQwNDAeFw0yMzA3MjgxMTA1NDhaFw0yNDA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0YzNhMTBjLTZmMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDXI5B4hoCllj/JDiw+EqESqMb7rr2JZP1jUE8LQCVdXc9OqfmLYzIyVGLtiH6h
+w8a9SpHVO9bLm3KSFtJhNjNaSGyZ4qgtEAPRbUfupoyaHyVaxGgE3DpqM86CWvT
6lx9yLi7tMVYBPQggvbSahR3TNMFBjWzBfbwryWzBGg+F8EfnkdWIfpuanBFDeJO
0iWe6g9nYBoJJB4QN1vbLQP9nifeSppYRns/a1xOyVpC6rWaiuVjqC9P0VcE2/Gy
c2Izt/DnXAIzBS8wVMll1SVptc5ZfmhpNJcvcak7svjvygb2xAJeP3gdK/P3SiWT
lw0vBofiYGoyUQ/hDQ/od9JRAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQU4Hh8HOwK
rKQCTeFEBqjHEAiQWrUwHwYDVR0jBBgwFoAU3COmnqHvwaN5SSwT6awUfEn1rQQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCNEMyL0IxN0U5NUQ2MDM3
MDExRUU5QkI2MkMyRkM0RjlBRTAyLzNDT21ucUh2d2FONVNTd1Q2YXdVZkVuMXJR
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvM0NPbW5xSHZ3YU41U1N3VDZhd1VmRW4xclFRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjRDMi9CMTdFOTVENjAzNzAxMUVFOUJCNjJDMkZDNEY5QUUwMi9CNTA1ODI5MjJE
MzYxMUVFOTY4MzFGMEJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAWfVJDANBAIAAjAHAwUAJAEF4DANBgkqhkiG9w0BAQsFAAOC
AQEAHQZ7Rml5rFzkQtvodEf7lhtIBy3aPKdUWsyCeG9qID0JUsinLPMdE2OU1GFo
tljavXb7P6tmzYHsMVDCbV6L1RcXDR5tKwSewx1OG9HE8UBcnQJY7rioUqPpVT5I
5OIFRDMMYS6Gb2cs+3ge5GKNQGBEECDybt5wax6m6WsuGAuRpnOCYzIzCZC4JPZu
TxoMEpRGYsrv/4yqH8/lwi5rLfTQ79p7yJDd25aKv7QT7jCiI2Q/L+q5zvNu6cdy
fUEtUeS67PCZh9i71oT3Mdv8Lnrb8CpvaNYi8OpEyRT81yVqOiRlESwaHuoRZ9iO
++Z3jGBHlrlS+AtqkxJmSZuPvg==
-----END CERTIFICATE-----