Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/364816C26E1411ED8852ED68C4F9AE02.roa
File:                     364816C26E1411ED8852ED68C4F9AE02.roa (raw, json)
Hash identifier:          3SxggufbJ+lHONkbTY7gLZbbYOul1mkb/diOm+9m4O4=
Subject key identifier:   31:51:84:D2:68:1F:F8:74:78:4D:7C:C2:35:25:18:B0:89:4C:4E:AD
Certificate issuer:       /CN=A91C9025/serialNumber=06DF1B524BD0DDDDA179B0450627EAF7F8D94C00
Certificate serial:       084B
Authority key identifier: 06:DF:1B:52:4B:D0:DD:DD:A1:79:B0:45:06:27:EA:F7:F8:D9:4C:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bt8bUkvQ3d2hebBFBifq9_jZTAA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/364816C26E1411ED8852ED68C4F9AE02.roa
Signing time:             Thu 02 Feb 2023 22:28:22 +0000
ROA not before:           Thu 02 Feb 2023 22:28:22 +0000
ROA not after:            Sun 31 Mar 2024 00:00:00 +0000
asID:                     54600
IP address blocks:        103.82.216.0/24 maxlen: 24
                          103.82.217.0/24 maxlen: 24
                          103.82.218.0/24 maxlen: 24
                          123.108.72.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2123 (0x84b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9025/serialNumber=06DF1B524BD0DDDDA179B0450627EAF7F8D94C00
        Validity
            Not Before: Feb  2 22:28:22 2023 GMT
            Not After : Mar 31 00:00:00 2024 GMT
        Subject: CN=63dc3906-1a57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c4:31:ca:d4:62:31:dc:5f:d5:c4:b1:28:d5:
                    73:8e:d0:ae:e1:d4:2d:14:ee:ce:d2:f9:ec:a0:86:
                    60:02:f8:4a:24:8c:2f:f1:ea:5c:a7:ea:ec:46:b6:
                    2f:96:d2:ca:4d:28:03:ed:a4:2c:ad:db:52:ac:06:
                    02:e4:1a:96:54:55:db:e7:28:21:a1:b9:50:cd:5f:
                    df:0a:56:36:52:17:54:1a:6d:05:e5:c3:4f:71:d6:
                    d5:28:36:56:35:29:6e:ca:a3:d3:78:c7:f2:c4:98:
                    5a:93:38:8d:f7:4f:0c:b9:11:1b:86:20:6d:5f:b6:
                    75:2c:0c:ab:a0:c1:51:8d:c3:92:7b:f5:e5:f5:6a:
                    81:81:51:08:20:28:05:c5:da:4f:b1:76:8e:27:f6:
                    da:45:e1:0a:b9:98:da:08:12:a1:77:bb:f2:c1:24:
                    e8:b1:81:cf:30:e1:b5:1d:30:c1:9d:f1:92:4b:dc:
                    a8:e8:d1:ef:ac:bd:98:6c:82:d0:70:80:71:02:10:
                    d0:e4:1e:d3:ce:92:d5:3e:cd:95:5b:01:82:d5:22:
                    f1:1c:c2:fb:eb:a1:4f:ac:e9:e0:50:1f:9a:c5:1b:
                    36:5b:0e:1a:73:9a:91:48:85:60:3b:16:76:35:1f:
                    74:b7:dd:e9:b3:52:8c:92:41:5b:5f:b9:f0:87:35:
                    c0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:51:84:D2:68:1F:F8:74:78:4D:7C:C2:35:25:18:B0:89:4C:4E:AD
            X509v3 Authority Key Identifier:
                keyid:06:DF:1B:52:4B:D0:DD:DD:A1:79:B0:45:06:27:EA:F7:F8:D9:4C:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/Bt8bUkvQ3d2hebBFBifq9_jZTAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bt8bUkvQ3d2hebBFBifq9_jZTAA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9025/10D771C2788411EAADA51310C4F9AE02/364816C26E1411ED8852ED68C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.216.0-103.82.218.255
                  123.108.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:46:4c:6f:21:ad:30:2f:04:99:76:3b:5e:04:1f:bb:29:a9:
         2d:78:37:e7:ad:a8:02:1d:2c:e8:81:c9:a2:fe:56:c8:b1:3c:
         d5:45:2d:97:a1:fb:ea:9c:9e:fd:e6:db:3f:19:f3:c7:93:8c:
         ad:a0:c9:b8:2d:6a:4f:cc:3e:c6:e2:ae:5b:29:ff:4e:2c:7e:
         0c:d6:3e:79:7f:d4:2d:54:be:95:91:4b:53:0c:5e:f8:c6:34:
         a8:a9:30:c1:c0:0f:0e:66:98:46:1d:b1:7b:d8:a5:e8:64:35:
         64:8a:85:cd:af:43:05:50:a7:b1:f0:81:70:48:70:09:b8:6a:
         c5:17:3f:1c:ea:ab:92:b4:25:fa:86:17:19:da:79:1a:07:96:
         01:cb:1a:bc:ca:ca:04:93:43:17:17:67:1c:98:84:e4:cb:a0:
         ff:c3:e7:3e:96:12:db:ea:ad:37:0a:ae:8d:2a:77:1f:3f:80:
         55:6a:0f:f7:46:c9:98:93:30:f1:65:d5:77:b6:1d:17:b3:c1:
         c6:b3:6b:04:74:b8:b5:bc:3c:55:d3:59:72:c0:25:73:25:e0:
         26:2c:2a:dd:37:1f:c6:28:6f:07:a6:e9:11:fd:c3:51:24:a5:
         b2:22:e5:28:ab:c6:f0:cb:3b:d3:12:db:59:8d:38:26:a7:3b:
         8d:00:db:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----