Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/32BF03FEF84D11ECA3CB9E0FC4F9AE02.roa
File:                     32BF03FEF84D11ECA3CB9E0FC4F9AE02.roa (raw, json)
Hash identifier:          cKArDyHB3kXDXdD8A2gBl0cHZhRdHx/hnVGbGo37jDE=
Subject key identifier:   7B:24:98:C6:BA:01:3A:09:DD:88:B8:4E:E3:2C:BD:1B:6A:EB:22:40
Certificate issuer:       /CN=A91C83F1/serialNumber=5A5A330994A66CFA1284F32606E39E195C7CA967
Certificate serial:       0382
Authority key identifier: 5A:5A:33:09:94:A6:6C:FA:12:84:F3:26:06:E3:9E:19:5C:7C:A9:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WlozCZSmbPoShPMmBuOeGVx8qWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/32BF03FEF84D11ECA3CB9E0FC4F9AE02.roa
Signing time:             Thu 14 Jul 2022 02:10:58 +0000
ROA not before:           Thu 14 Jul 2022 02:10:58 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     204333
IP address blocks:        103.166.246.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898 (0x382)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C83F1/serialNumber=5A5A330994A66CFA1284F32606E39E195C7CA967
        Validity
            Not Before: Jul 14 02:10:58 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=62cf7b32-88f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:af:dd:db:ec:37:ca:05:ea:04:64:1c:9f:b5:
                    d8:a5:a0:32:20:92:72:e2:eb:6f:b2:32:b7:ff:26:
                    fe:f4:18:c0:fe:8f:31:84:f8:19:4f:ec:c9:71:84:
                    e5:e6:27:e3:b0:6e:87:13:e8:d0:f1:98:9e:af:ee:
                    76:00:c1:75:b3:b9:66:13:3b:be:1a:dd:80:ce:df:
                    c3:e5:01:a1:b5:c7:eb:df:10:8a:8d:59:46:cf:7d:
                    b8:0b:dc:71:46:b7:28:54:91:78:1a:55:f5:08:1b:
                    55:41:61:98:f4:c7:14:74:42:04:a2:fb:f1:9c:0f:
                    01:22:2f:96:11:0c:3d:f5:92:ec:5a:cd:94:2d:eb:
                    a5:2b:74:d7:be:aa:e8:b7:40:d8:66:89:59:17:cd:
                    fd:64:bf:e0:fa:dc:eb:66:57:93:1d:92:7a:dd:0b:
                    94:ba:86:b5:cc:75:41:ed:c0:5f:60:ef:d9:50:c0:
                    4f:08:2f:10:5e:c9:f1:72:df:44:c5:e1:51:99:9c:
                    12:4c:51:63:9a:72:b6:56:ad:b1:95:82:e2:37:74:
                    ba:10:8e:f8:db:cb:c3:0d:b2:39:95:ff:83:90:9f:
                    0f:47:41:a1:7f:d2:3e:c1:e1:82:0b:08:6a:c3:06:
                    89:c8:47:a3:7d:65:f6:e4:2a:94:9f:7b:4a:8d:bd:
                    11:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:24:98:C6:BA:01:3A:09:DD:88:B8:4E:E3:2C:BD:1B:6A:EB:22:40
            X509v3 Authority Key Identifier:
                keyid:5A:5A:33:09:94:A6:6C:FA:12:84:F3:26:06:E3:9E:19:5C:7C:A9:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/WlozCZSmbPoShPMmBuOeGVx8qWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WlozCZSmbPoShPMmBuOeGVx8qWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C83F1/0D43B1F0AFA711EB8AF34435C4F9AE02/32BF03FEF84D11ECA3CB9E0FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:eb:46:6d:d5:51:82:b9:ef:cc:42:d0:1d:8b:df:82:d7:29:
         d6:86:aa:78:ac:c2:fe:1b:e1:8d:d9:fb:7d:0f:70:2c:f9:fb:
         ae:0f:36:4e:99:a0:56:3f:6e:35:c3:06:e9:32:7a:61:7e:d8:
         ba:fb:33:96:4a:e7:5f:04:4d:e8:a9:27:aa:5f:83:c4:66:4e:
         c8:1d:79:f4:4d:82:7e:10:96:ac:23:e9:f7:70:34:38:e9:07:
         e4:11:7a:20:42:72:18:f3:d4:71:a4:6d:a5:70:15:bd:bf:2b:
         9a:d2:14:62:6f:53:bc:3f:b9:ab:68:2b:48:3b:c6:7e:f8:19:
         7f:c9:09:1f:e6:66:5f:f1:ae:8a:98:e7:2d:88:1b:fc:e2:8b:
         de:12:dd:ce:83:77:4e:7a:88:d4:18:81:49:12:c7:60:f3:a5:
         fa:8d:5b:63:81:3f:c9:2a:ff:0c:c9:c7:db:23:32:fa:50:cf:
         8c:39:ef:ac:48:5a:26:fa:6b:b2:cb:52:59:9a:af:96:da:97:
         e4:03:07:d9:e7:82:d7:ad:27:23:3e:01:c0:42:f0:4e:91:10:
         f7:12:ee:bb:4b:f8:bf:d4:88:cf:d5:2e:43:b9:14:59:ca:ac:
         06:79:7d:8d:a6:a6:aa:3e:22:63:97:f5:a5:e5:d9:6d:44:a1:
         03:67:a7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----