Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/9392E0E0337711EEB3CB232BC4F9AE02.roa
File:                     9392E0E0337711EEB3CB232BC4F9AE02.roa (raw, json)
Hash identifier:          CEAOBdSZAS0q9MuyvdphC2YkAEA/tyKxBDmSb4rghtg=
Subject key identifier:   23:C5:1A:86:99:BF:AF:AA:35:14:7D:C0:D6:17:46:4B:21:96:2F:4B
Certificate issuer:       /CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
Certificate serial:       02C4
Authority key identifier: BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/9392E0E0337711EEB3CB232BC4F9AE02.roa
Signing time:             Mon 07 Aug 2023 05:57:04 +0000
ROA not before:           Mon 07 Aug 2023 05:57:04 +0000
ROA not after:            Sun 31 Mar 2024 00:00:00 +0000
asID:                     149436
IP address blocks:        103.179.124.0/23 maxlen: 23
                          103.179.124.0/24 maxlen: 24
                          103.179.125.0/24 maxlen: 24
                          2001:df0:4c40::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 708 (0x2c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
        Validity
            Not Before: Aug  7 05:57:04 2023 GMT
            Not After : Mar 31 00:00:00 2024 GMT
        Subject: CN=64d087b0-ef35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f0:48:11:0f:ac:08:89:05:a3:51:e5:2c:a1:
                    1b:e9:99:98:15:7e:75:7b:0b:d5:e0:c7:de:b8:a6:
                    d9:c4:37:cc:2b:8e:37:56:33:41:4f:61:2b:15:00:
                    cc:12:6f:e0:ff:09:20:ca:3c:52:7f:51:69:db:1d:
                    da:59:6c:ba:c9:46:d2:79:f4:9a:c0:1a:e6:dc:68:
                    af:25:63:f9:df:ef:09:1d:28:f4:f9:4e:98:d4:0a:
                    c2:8d:c9:54:25:c2:2b:f0:16:25:a5:33:76:54:9d:
                    a8:0d:61:75:bb:d2:99:29:cb:e2:20:34:98:75:80:
                    a6:58:18:f1:74:c8:92:01:62:dc:b1:66:e8:2e:da:
                    03:6a:c6:af:cc:5a:2d:8c:7a:62:b1:26:4b:03:6c:
                    2a:e3:5f:ae:0f:10:0d:c3:ee:67:32:0c:73:4d:16:
                    cf:21:30:df:da:42:bc:20:d7:c2:d8:22:01:1f:37:
                    40:a9:43:01:8f:5f:c2:1f:26:a6:f1:ab:1e:e1:75:
                    f9:75:d1:7c:af:05:fc:58:bc:6d:cf:61:ea:55:55:
                    e0:0d:a4:f7:6f:b8:88:b2:b5:06:5b:96:dd:3d:d0:
                    62:e3:fd:4b:39:d5:15:f1:86:35:b8:ab:2c:9b:86:
                    a7:5a:5a:ca:55:35:e5:d5:b9:b1:80:18:4b:82:0a:
                    b9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C5:1A:86:99:BF:AF:AA:35:14:7D:C0:D6:17:46:4B:21:96:2F:4B
            X509v3 Authority Key Identifier:
                keyid:BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/9392E0E0337711EEB3CB232BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.124.0/23
                IPv6:
                  2001:df0:4c40::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:01:fa:70:b1:f0:9e:61:53:ba:50:63:62:a6:97:d2:05:2a:
         2e:36:ea:85:d3:ea:cc:41:40:a6:9e:95:78:58:a1:ee:cd:17:
         64:5c:55:30:6b:66:aa:c8:d2:f6:2f:df:69:cc:67:b7:46:fc:
         02:b8:c4:af:23:0a:88:19:f1:fc:09:b8:b4:31:45:a8:8d:79:
         d4:e5:8f:95:31:12:98:9a:3b:a6:da:0d:e6:34:c5:62:6f:3b:
         66:db:e0:e9:47:79:7d:b0:06:5e:69:19:a3:f4:30:16:51:36:
         92:8a:cc:9d:c2:fb:b6:a4:68:51:cc:fb:b9:e0:1c:4e:dc:90:
         13:dd:01:70:80:b4:54:8f:17:16:e1:a1:5d:04:84:9a:c2:51:
         13:59:80:23:27:ec:df:18:c5:b0:58:d8:35:1c:41:10:31:a4:
         f2:7e:fe:72:ac:ff:ca:04:ba:9c:85:3e:0c:3e:87:c2:5f:fd:
         60:87:bd:bd:15:32:dc:96:e3:95:17:df:83:dc:83:d6:98:02:
         fa:5a:40:a7:d8:3e:86:4b:02:3f:e9:ae:ea:13:7a:40:65:98:
         3b:9a:3e:40:5c:22:68:a6:ef:86:8c:3b:83:10:7f:e9:91:72:
         ca:a8:1d:b6:52:88:2d:b5:09:14:c0:c4:6b:9f:1c:01:75:d6:
         7d:1e:f7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----