Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/93413E041E0D11EE8BCD4926C4F9AE02.roa
File:                     93413E041E0D11EE8BCD4926C4F9AE02.roa (raw, json)
Hash identifier:          Av0rzuzb6bm6okBMDGdzka+3UFxNRh+/78+yZUv7is8=
Subject key identifier:   E4:63:1C:35:BF:EC:58:35:20:DB:2C:71:83:21:DE:DE:0B:16:5A:06
Certificate issuer:       /CN=A91D61DF/serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C
Certificate serial:       04
Authority key identifier: 15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/93413E041E0D11EE8BCD4926C4F9AE02.roa
Signing time:             Sun 09 Jul 2023 04:03:35 +0000
ROA not before:           Sun 09 Jul 2023 04:03:35 +0000
ROA not after:            Wed 01 May 2024 00:00:00 +0000
asID:                     141199
IP address blocks:        103.160.146.0/24 maxlen: 24
                          2001:df1:ea40::/48 maxlen: 50

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D61DF/serialNumber=15BF210B73781D5CC0BE99BD39D70B2FEB4EB86C
        Validity
            Not Before: Jul  9 04:03:35 2023 GMT
            Not After : May  1 00:00:00 2024 GMT
        Subject: CN=64aa3197-e7ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3a:e9:5b:bd:9f:7a:a9:63:b0:c6:ef:61:89:
                    e2:34:bf:90:fd:c1:f0:b9:26:3d:2f:81:22:49:53:
                    7e:b4:95:ad:57:5b:8e:dd:4e:e5:07:ff:9f:de:c3:
                    13:35:3a:06:c8:4b:96:6a:66:eb:dd:74:93:fb:2d:
                    46:d3:1b:46:74:a4:dd:e1:74:ee:a6:2a:5b:53:4b:
                    f6:36:94:ce:e5:50:bf:13:6a:64:f1:90:43:2c:95:
                    ac:79:8d:a2:17:66:68:a8:f9:cf:ec:6d:50:9e:e1:
                    b8:64:57:2d:1a:7d:88:8a:29:22:29:fb:97:7c:34:
                    bd:bb:15:93:72:ca:5e:af:86:1d:d9:4a:95:60:3d:
                    f0:c3:22:4c:eb:bd:40:15:e6:d3:98:47:8b:72:99:
                    61:31:13:3b:a5:a3:40:6f:71:6d:d9:e6:1e:b0:78:
                    42:77:c0:35:39:77:f6:93:3b:78:e4:a8:cb:36:67:
                    e1:6f:9d:21:70:5c:3c:27:fb:86:76:51:ec:f5:a1:
                    a0:a4:6a:d9:2f:88:2d:a6:79:f0:f0:17:e7:56:50:
                    02:d3:36:dc:0e:7e:61:23:3e:f5:d2:2e:ff:30:bd:
                    49:c5:c7:50:45:96:2a:23:1b:9e:37:bb:db:49:80:
                    27:15:43:b8:db:31:ea:4b:56:3a:6d:5f:27:9d:31:
                    7f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:63:1C:35:BF:EC:58:35:20:DB:2C:71:83:21:DE:DE:0B:16:5A:06
            X509v3 Authority Key Identifier:
                keyid:15:BF:21:0B:73:78:1D:5C:C0:BE:99:BD:39:D7:0B:2F:EB:4E:B8:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fb8hC3N4HVzAvpm9OdcLL-tOuGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D61DF/0D0C5F741C6611EE9A132B84C4F9AE02/93413E041E0D11EE8BCD4926C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.146.0/24
                IPv6:
                  2001:df1:ea40::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:a9:42:b9:b4:7d:d5:7b:4f:48:34:cd:eb:cf:d4:f0:97:5e:
         39:5b:3c:fa:cc:da:06:30:33:42:e7:09:2e:6e:56:89:6d:21:
         d9:0f:25:fa:a6:52:7f:ca:c8:14:89:42:d4:95:66:ba:d8:1d:
         0e:62:14:6e:02:87:6b:62:0d:83:ba:da:da:f3:71:54:e9:d0:
         09:e3:79:32:71:13:86:c3:c2:7a:31:5a:f0:1a:63:d4:66:47:
         69:08:63:19:dd:21:90:82:47:96:eb:c8:ce:a9:0b:36:41:13:
         42:26:ce:45:59:f7:58:96:d6:54:ac:c4:84:46:17:0c:ad:01:
         fe:9c:ad:59:58:04:4e:a1:e8:e0:ab:72:7f:f9:d7:75:14:1f:
         39:45:c9:fa:0b:b1:75:a6:8e:34:db:e2:e8:85:46:69:b8:26:
         23:fd:ad:15:1c:ea:0a:2b:24:cb:39:2c:ec:f6:7c:c9:99:c0:
         e7:69:5f:b6:af:46:78:be:24:bd:30:93:52:47:ac:0a:65:43:
         0e:dd:48:10:66:1e:68:da:1e:91:34:0d:60:7d:99:63:81:c5:
         4b:f5:b0:31:3a:10:29:84:93:6e:ec:b6:a4:b7:9d:f0:ec:dd:
         9b:30:b6:a7:a2:a5:30:e8:57:77:88:b9:a5:7a:3b:62:3c:b0:
         5b:df:67:0c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
NjFERjExMC8GA1UEBRMoMTVCRjIxMEI3Mzc4MUQ1Q0MwQkU5OUJEMzlENzBCMkZF
QjRFQjg2QzAeFw0yMzA3MDkwNDAzMzVaFw0yNDA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0YWEzMTk3LWU3YWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCnOulbvZ96qWOwxu9hieI0v5D9wfC5Jj0vgSJJU360la1XW47dTuUH/5/ewxM1
OgbIS5ZqZuvddJP7LUbTG0Z0pN3hdO6mKltTS/Y2lM7lUL8TamTxkEMslax5jaIX
Zmio+c/sbVCe4bhkVy0afYiKKSIp+5d8NL27FZNyyl6vhh3ZSpVgPfDDIkzrvUAV
5tOYR4tymWExEzulo0BvcW3Z5h6weEJ3wDU5d/aTO3jkqMs2Z+FvnSFwXDwn+4Z2
Uez1oaCkatkviC2mefDwF+dWUALTNtwOfmEjPvXSLv8wvUnFx1BFliojG543u9tJ
gCcVQ7jbMepLVjptXyedMX//AgMBAAGjggKmMIICojAdBgNVHQ4EFgQU5GMcNb/s
WDUg2yxxgyHe3gsWWgYwHwYDVR0jBBgwFoAUFb8hC3N4HVzAvpm9OdcLL+tOuGww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2MURGLzBEMEM1Rjc0MUM2
NjExRUU5QTEzMkI4NEM0RjlBRTAyL0ZiOGhDM040SFZ6QXZwbTlPZGNMTC10T3VH
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRmI4aEMzTjRIVnpBdnBtOU9kY0xMLXRPdUd3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NjFERi8wRDBDNUY3NDFDNjYxMUVFOUExMzJCODRDNEY5QUUwMi85MzQxM0UwNDFF
MEQxMUVFOEJDRDQ5MjZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAGegkjAPBAIAAjAJAwcAIAEN8epAMA0GCSqGSIb3DQEBCwUA
A4IBAQAGqUK5tH3Ve09INM3rz9Twl145Wzz6zNoGMDNC5wkublaJbSHZDyX6plJ/
ysgUiULUlWa62B0OYhRuAodrYg2Dutra83FU6dAJ43kycROGw8J6MVrwGmPUZkdp
CGMZ3SGQgkeW68jOqQs2QRNCJs5FWfdYltZUrMSERhcMrQH+nK1ZWAROoejgq3J/
+dd1FB85Rcn6C7F1po402+LohUZpuCYj/a0VHOoKKyTLOSzs9nzJmcDnaV+2r0Z4
viS9MJNSR6wKZUMO3UgQZh5o2h6RNA1gfZljgcVL9bAxOhAphJNu7Lakt53w7N2b
MLanoqUw6Fd3iLmlejtiPLBb32cM
-----END CERTIFICATE-----