Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/CBCCC54682D811EABA510680C4F9AE02.roa
File:                     CBCCC54682D811EABA510680C4F9AE02.roa (raw, json)
Hash identifier:          LWx0Y+agRBG7HrbXnBstQjb7ZFaNNF9OWwkXRsqFJ1U=
Subject key identifier:   27:C0:11:2D:FD:79:7C:DD:6B:F5:77:3E:F6:89:00:CA:93:98:D9:0B
Certificate issuer:       /CN=A91DA898/serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83
Certificate serial:       3223
Authority key identifier: 1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/CBCCC54682D811EABA510680C4F9AE02.roa
Signing time:             Tue 19 Jul 2022 03:00:33 +0000
ROA not before:           Tue 19 Jul 2022 03:00:33 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     10219
IP address blocks:        103.23.48.0/22 maxlen: 22
                          103.23.48.0/24 maxlen: 24
                          103.23.49.0/24 maxlen: 24
                          103.23.50.0/24 maxlen: 24
                          103.23.51.0/24 maxlen: 24
                          112.72.0.0/20 maxlen: 20
                          112.72.0.0/24 maxlen: 24
                          112.72.1.0/24 maxlen: 24
                          112.72.2.0/24 maxlen: 24
                          112.72.3.0/24 maxlen: 24
                          112.72.4.0/24 maxlen: 24
                          112.72.5.0/24 maxlen: 24
                          112.72.6.0/24 maxlen: 24
                          112.72.7.0/24 maxlen: 24
                          112.72.8.0/24 maxlen: 24
                          112.72.9.0/24 maxlen: 24
                          112.72.10.0/24 maxlen: 24
                          112.72.11.0/24 maxlen: 24
                          112.72.12.0/24 maxlen: 24
                          112.72.13.0/24 maxlen: 24
                          112.72.14.0/24 maxlen: 24
                          112.72.15.0/24 maxlen: 24
                          202.9.40.0/21 maxlen: 21
                          202.9.40.0/24 maxlen: 24
                          202.9.41.0/24 maxlen: 24
                          202.9.42.0/24 maxlen: 24
                          202.9.43.0/24 maxlen: 24
                          202.9.44.0/24 maxlen: 24
                          202.9.45.0/24 maxlen: 24
                          202.9.46.0/24 maxlen: 24
                          202.9.47.0/24 maxlen: 24
                          202.55.176.0/20 maxlen: 20
                          202.55.176.0/24 maxlen: 24
                          202.55.177.0/24 maxlen: 24
                          202.55.178.0/24 maxlen: 24
                          202.55.179.0/24 maxlen: 24
                          202.55.180.0/24 maxlen: 24
                          202.55.181.0/24 maxlen: 24
                          202.55.182.0/24 maxlen: 24
                          202.55.183.0/24 maxlen: 24
                          202.55.184.0/24 maxlen: 24
                          202.55.185.0/24 maxlen: 24
                          202.55.186.0/24 maxlen: 24
                          202.55.187.0/24 maxlen: 24
                          202.55.188.0/24 maxlen: 24
                          202.55.189.0/24 maxlen: 24
                          202.55.190.0/24 maxlen: 24
                          202.55.191.0/24 maxlen: 24
                          2405:ae00::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12835 (0x3223)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA898/serialNumber=1A55DB627A2A2E4B26672EE0E1D7512F86414E83
        Validity
            Not Before: Jul 19 03:00:33 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=62d61e50-b351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1b:30:e0:ef:9b:72:26:dd:19:cb:6a:0d:8f:
                    3a:44:e6:5f:fc:a7:66:86:4d:a2:85:8e:83:69:ca:
                    03:e8:32:84:95:5d:c2:0d:38:be:23:9a:2f:4d:a4:
                    9f:56:d4:cc:6c:e3:77:02:f5:e8:16:bb:1d:3f:12:
                    54:2a:d1:45:2f:c8:d5:2f:fa:bf:ee:33:75:33:0c:
                    b4:da:5b:ec:e1:a1:6a:ba:1b:e6:c1:34:8c:4a:10:
                    ad:d1:38:7b:ac:56:9e:f8:97:8a:85:c8:20:7f:d3:
                    b7:d8:86:9b:19:70:33:e0:c7:cc:49:ce:e1:ab:0d:
                    5a:0b:21:55:ac:56:21:2e:26:3b:25:1e:41:f4:74:
                    7e:86:e1:48:06:6a:70:2b:f5:f3:24:0b:3e:bc:2d:
                    4a:8c:ab:2c:25:2f:2c:48:9d:b4:e5:c6:51:12:5f:
                    9d:f6:10:a4:45:3d:66:ab:b5:91:b5:72:b9:a6:d9:
                    f9:0f:a8:65:d0:48:de:45:e4:7b:69:09:35:99:0c:
                    89:2e:6a:6d:55:aa:26:c2:39:1b:f4:37:d9:98:10:
                    d1:07:68:8d:91:4f:44:b1:f6:89:ad:28:88:95:b1:
                    31:f4:4e:83:5c:e9:35:82:5d:1e:53:a6:57:ea:1d:
                    d4:67:7a:49:fd:6e:e6:01:f0:c0:a8:e3:6f:25:46:
                    64:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C0:11:2D:FD:79:7C:DD:6B:F5:77:3E:F6:89:00:CA:93:98:D9:0B
            X509v3 Authority Key Identifier:
                keyid:1A:55:DB:62:7A:2A:2E:4B:26:67:2E:E0:E1:D7:51:2F:86:41:4E:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/GlXbYnoqLksmZy7g4ddRL4ZBToM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GlXbYnoqLksmZy7g4ddRL4ZBToM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/69ADC19E1D8C11E286B69EE708B02CD2/CBCCC54682D811EABA510680C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.48.0/22
                  112.72.0.0/20
                  202.9.40.0/21
                  202.55.176.0/20
                IPv6:
                  2405:ae00::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:7a:70:9b:89:8d:f8:f6:0d:16:ad:82:12:97:99:af:6a:08:
         e7:ca:11:10:dc:60:19:ef:ae:2c:29:45:b6:e6:6e:61:f6:8f:
         1f:6c:e5:36:fe:8a:0f:a2:c8:4c:31:02:6f:1e:c1:99:2d:8d:
         53:d6:96:83:2e:22:20:fa:ac:fc:29:b4:6a:22:44:ab:73:43:
         2b:94:1b:9e:b2:8a:0c:b3:0a:85:1e:8a:f7:b2:b7:00:f0:60:
         7b:1d:be:86:58:8c:87:84:0a:a8:e2:b5:bc:c2:70:03:c2:e9:
         e5:a5:4a:50:35:af:e4:45:71:ab:a0:10:24:9d:f2:12:20:34:
         72:e7:96:5b:21:77:ff:24:45:a4:6a:bb:6d:d1:28:fe:fb:a3:
         f2:05:6e:45:12:4a:f7:67:fa:03:86:b0:a5:07:5e:15:e4:6b:
         57:83:27:06:8c:d4:03:51:86:94:7d:6a:2a:56:e3:6e:8b:7e:
         71:9b:5d:a0:16:0d:5f:d8:d1:30:41:54:fc:5d:d3:8d:fd:40:
         6d:fa:f4:ff:43:eb:b7:2d:64:be:94:4e:d5:2e:21:0c:68:6a:
         00:5d:d7:1c:af:75:9b:32:fc:81:4d:c8:e8:20:e7:9a:bb:b9:
         49:69:7b:5c:eb:53:2a:f6:3b:0a:3a:77:08:47:c0:9d:11:64:
         36:4b:b5:ef
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICMiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REE4OTgxMTAvBgNVBAUTKDFBNTVEQjYyN0EyQTJFNEIyNjY3MkVFMEUxRDc1MTJG
ODY0MTRFODMwHhcNMjIwNzE5MDMwMDMzWhcNMjMwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmQ2MWU1MC1iMzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzxsw4O+bcibdGctqDY86ROZf/Kdmhk2ihY6DacoD6DKElV3CDTi+I5ovTaSf
VtTMbON3AvXoFrsdPxJUKtFFL8jVL/q/7jN1Mwy02lvs4aFquhvmwTSMShCt0Th7
rFae+JeKhcggf9O32IabGXAz4MfMSc7hqw1aCyFVrFYhLiY7JR5B9HR+huFIBmpw
K/XzJAs+vC1KjKssJS8sSJ205cZREl+d9hCkRT1mq7WRtXK5ptn5D6hl0EjeReR7
aQk1mQyJLmptVaomwjkb9DfZmBDRB2iNkU9EsfaJrSiIlbEx9E6DXOk1gl0eU6ZX
6h3UZ3pJ/W7mAfDAqONvJUZk4QIDAQABo4ICtjCCArIwHQYDVR0OBBYEFCfAES39
eXzda/V3PvaJAMqTmNkLMB8GA1UdIwQYMBaAFBpV22J6Ki5LJmcu4OHXUS+GQU6D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTg5OC82OUFEQzE5RTFE
OEMxMUUyODZCNjlFRTcwOEIwMkNEMi9HbFhiWW5vcUxrc21aeTdnNGRkUkw0WkJU
b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dsWGJZbm9xTGtzbVp5N2c0ZGRSTDRaQlRvTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REE4OTgvNjlBREMxOUUxRDhDMTFFMjg2QjY5RUU3MDhCMDJDRDIvQ0JDQ0M1NDY4
MkQ4MTFFQUJBNTEwNjgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E
MTAvMB4EAgABMBgDBAJnFzADBARwSAADBAPKCSgDBATKN7AwDQQCAAIwBwMFACQF
rgAwDQYJKoZIhvcNAQELBQADggEBAHR6cJuJjfj2DRatghKXma9qCOfKERDcYBnv
riwpRbbmbmH2jx9s5Tb+ig+iyEwxAm8ewZktjVPWloMuIiD6rPwptGoiRKtzQyuU
G56yigyzCoUeiveytwDwYHsdvoZYjIeECqjitbzCcAPC6eWlSlA1r+RFcaugECSd
8hIgNHLnllshd/8kRaRqu23RKP77o/IFbkUSSvdn+gOGsKUHXhXka1eDJwaM1ANR
hpR9aipW426LfnGbXaAWDV/Y0TBBVPxd0439QG369P9D67ctZL6UTtUuIQxoagBd
1xyvdZsy/IFNyOgg55q7uUlpe1zrUyr2Owo6dwhHwJ0RZDZLte8=
-----END CERTIFICATE-----