Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/45E227368AE411EB9FA47119C4F9AE02.roa
File:                     45E227368AE411EB9FA47119C4F9AE02.roa (raw, json)
Hash identifier:          hETc3xizNZepLgaeYCwupGyEA3/J2vvc+8PD0N1jOo4=
Subject key identifier:   63:57:81:87:29:15:31:E5:FD:86:1F:26:AA:6A:7C:27:67:EC:4F:EC
Certificate issuer:       /CN=A91CD98D/serialNumber=BFE461375DC223D4F7B27055E2B34745FE6101D4
Certificate serial:       054C
Authority key identifier: BF:E4:61:37:5D:C2:23:D4:F7:B2:70:55:E2:B3:47:45:FE:61:01:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/45E227368AE411EB9FA47119C4F9AE02.roa
Signing time:             Sat 25 Feb 2023 00:50:42 +0000
ROA not before:           Sat 25 Feb 2023 00:50:42 +0000
ROA not after:            Sun 31 Mar 2024 00:00:00 +0000
asID:                     138544
IP address blocks:        103.161.107.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1356 (0x54c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD98D/serialNumber=BFE461375DC223D4F7B27055E2B34745FE6101D4
        Validity
            Not Before: Feb 25 00:50:42 2023 GMT
            Not After : Mar 31 00:00:00 2024 GMT
        Subject: CN=63f95b62-4333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8a:c5:43:14:ff:64:6e:f4:77:9b:f4:e7:22:
                    34:dc:52:eb:b7:1c:f0:92:86:97:0d:6f:5d:15:7a:
                    dd:0d:a6:5a:c9:90:97:06:0f:4d:ff:37:95:83:a3:
                    a1:65:66:f6:4a:b9:cf:c8:7f:5f:4c:0f:44:b0:3c:
                    8e:3e:91:d1:1c:2a:c9:df:ba:76:6d:1c:e0:d9:89:
                    44:39:f4:f2:aa:7f:06:f7:03:31:ce:c4:de:e8:af:
                    d3:a2:7e:f5:b0:73:3f:f5:96:a5:7f:24:0f:72:1d:
                    0b:45:42:95:50:e9:97:43:e1:4c:e7:44:69:49:bb:
                    d1:11:90:a3:75:db:51:c2:f6:9c:2e:cf:58:b5:6a:
                    f9:9f:37:f3:bc:2d:3f:4e:9d:a2:1f:9b:7d:9b:51:
                    25:66:36:09:ba:12:bc:55:f2:59:6b:0f:07:52:89:
                    4b:cc:83:63:64:b4:57:c9:ed:7f:b4:b1:07:7f:65:
                    d9:23:18:ae:e3:d5:21:cf:08:b6:19:66:6f:43:46:
                    61:32:db:21:bc:98:ba:42:46:90:f6:46:1d:92:90:
                    4e:83:6f:ae:c8:50:d4:3f:9e:32:92:be:ca:90:f6:
                    e9:41:6f:13:47:3e:f5:02:1e:e4:f7:05:c0:08:2b:
                    31:0e:b8:dd:d7:84:09:8b:15:8d:80:bf:ee:6d:4d:
                    0d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:57:81:87:29:15:31:E5:FD:86:1F:26:AA:6A:7C:27:67:EC:4F:EC
            X509v3 Authority Key Identifier:
                keyid:BF:E4:61:37:5D:C2:23:D4:F7:B2:70:55:E2:B3:47:45:FE:61:01:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/v-RhN13CI9T3snBV4rNHRf5hAdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v-RhN13CI9T3snBV4rNHRf5hAdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD98D/461457B4500C11EBA72DBE24C4F9AE02/45E227368AE411EB9FA47119C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:19:52:02:e3:03:d5:91:7a:d9:2a:d5:cf:8a:98:b0:71:ee:
         88:ad:76:81:38:4a:61:e8:25:ad:2e:1b:75:15:ae:53:9b:4b:
         95:b3:9d:d3:d6:cb:e2:5e:17:8b:58:dc:8a:c4:57:98:98:d4:
         70:a7:71:59:8a:bd:ba:86:6b:b8:77:77:f6:18:55:0a:fa:f3:
         c3:f2:96:32:cd:e2:f3:13:0f:c1:87:5d:ee:cb:05:00:84:2b:
         5f:fe:f6:54:cc:11:86:3f:d4:64:01:52:1f:a2:89:2c:b6:45:
         bf:97:5a:0d:01:1d:92:28:1d:64:55:e2:c0:0b:88:66:dc:82:
         37:30:58:f2:57:cb:be:13:4c:b0:56:dd:e9:9e:8b:bc:29:8a:
         db:d1:be:ec:14:8c:10:8b:d4:01:20:9d:17:04:4d:43:5e:f8:
         63:22:b8:49:81:33:5d:bc:d5:e0:7f:28:58:86:69:0e:fc:af:
         95:61:b5:f2:c0:1e:a2:5b:38:42:5f:fb:a6:a0:e2:94:bd:b3:
         3c:21:37:34:bf:fb:18:1f:97:27:52:ab:fd:82:a8:61:05:3d:
         bb:ee:92:67:d7:59:29:b0:d6:d6:33:71:d6:54:cd:32:ee:c5:
         44:0c:f8:61:2f:d9:f2:3b:41:48:d0:97:43:64:89:75:87:8f:
         a6:2f:5e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----