Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/612F9ED857C611ECA26CD331C4F9AE02.roa
File:                     612F9ED857C611ECA26CD331C4F9AE02.roa (raw, json)
Hash identifier:          Qrgn8nfvxm5y3Fe4sK3znKxXUeC5Mt52f+P33+DNrt4=
Subject key identifier:   D1:A9:35:5A:85:61:D8:12:A3:ED:9D:1C:BA:8F:2C:C0:39:56:BC:2C
Certificate issuer:       /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial:       3155
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/612F9ED857C611ECA26CD331C4F9AE02.roa
Signing time:             Wed 08 Dec 2021 01:30:09 +0000
ROA not before:           Wed 08 Dec 2021 01:30:09 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     131107
IP address blocks:        202.125.96.0/24 maxlen: 24
                          2001:df2:ee00::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12629 (0x3155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
        Validity
            Not Before: Dec  8 01:30:09 2021 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=61b00aa1-8421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:80:4b:79:fa:c0:43:e0:13:3f:88:4a:3b:d8:
                    a5:33:35:43:64:b9:4f:00:20:69:21:86:5c:bb:b2:
                    e4:ac:41:ca:1b:62:20:59:75:e4:8d:c1:03:eb:06:
                    48:8c:e1:7a:0e:07:02:81:a0:66:fd:02:d5:85:26:
                    16:57:85:3a:cb:ce:dd:60:a3:e0:4a:12:ef:26:4e:
                    e1:a0:c5:02:3d:e0:a1:b4:47:0b:47:13:67:ce:46:
                    65:5d:e9:92:9e:46:a3:4e:ba:87:1f:f1:db:fc:3c:
                    35:67:ad:6c:54:47:4c:97:ff:ad:8a:ad:ba:e9:c3:
                    32:98:c2:7a:d6:60:e3:2b:7b:35:b8:7b:c0:79:ca:
                    85:22:33:51:4e:d3:f1:ca:d3:a5:f4:db:22:bf:88:
                    07:d9:4d:2b:0d:c4:67:88:51:38:7e:fc:d1:60:d2:
                    47:2e:3c:f2:c6:30:d7:f2:9f:4b:9b:2d:2d:e3:49:
                    6e:3e:e7:90:aa:61:d8:77:3a:1b:15:ef:05:de:57:
                    91:cc:81:63:7f:62:16:3c:ee:1d:23:37:31:be:ca:
                    8f:8b:27:b2:64:1e:0e:62:07:30:1d:ab:e9:c7:b2:
                    26:36:4d:23:53:74:56:4f:a6:34:c5:62:5f:1a:b3:
                    70:c0:79:a8:25:db:cf:b7:02:26:f1:95:65:28:d6:
                    8c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A9:35:5A:85:61:D8:12:A3:ED:9D:1C:BA:8F:2C:C0:39:56:BC:2C
            X509v3 Authority Key Identifier:
                keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/612F9ED857C611ECA26CD331C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.125.96.0/24
                IPv6:
                  2001:df2:ee00::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:b7:64:32:20:ae:a9:79:e6:d8:15:40:91:87:a3:14:bf:11:
         ff:4d:3d:74:69:a4:9b:9b:a1:c2:ed:8b:7d:1f:57:a9:eb:f8:
         b1:72:45:cb:0e:b0:ac:38:71:ef:8f:a1:29:3b:df:1e:14:95:
         92:f1:62:07:c3:11:56:83:39:90:4e:81:8d:51:10:7e:6d:c7:
         31:61:84:66:93:26:51:c8:42:b9:c8:31:ee:a4:96:cb:62:36:
         1e:bd:27:19:4c:e8:4e:a5:f4:bc:aa:97:43:af:d4:88:75:0b:
         08:ec:03:a4:5a:88:63:66:c2:43:8c:ef:f6:d2:a4:ad:32:25:
         4e:7d:55:76:af:66:9c:d6:64:9d:39:9d:8d:80:08:ad:2c:5a:
         b0:ec:cb:7a:19:6b:fa:1a:e7:ea:5b:d0:9a:9c:a3:0b:3f:19:
         2e:15:bb:c2:d8:ef:78:00:d9:37:a4:a6:13:e1:8c:eb:a4:17:
         54:61:82:55:43:de:dd:1e:a1:24:ca:55:ab:14:3c:07:de:be:
         19:38:be:34:c3:dc:a7:ac:6d:28:6b:90:e8:8a:cf:e9:ed:ad:
         a5:04:0a:87:b3:03:76:f9:7f:7f:01:38:20:44:63:9c:f2:fc:
         d5:75:7b:93:8b:1b:98:72:20:ab:29:ae:8f:a3:8e:56:ae:89:
         a6:85:49:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----