Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/156057B035D011EE8540E373C4F9AE02.roa
File:                     156057B035D011EE8540E373C4F9AE02.roa (raw, json)
Hash identifier:          xXGAav9IJ76R/bhgaCfjEYlD63JBpEdvgT2kMA2CEF8=
Subject key identifier:   04:07:92:5A:D3:2E:B2:98:26:92:46:BB:A0:9D:E2:45:6D:61:95:6C
Certificate issuer:       /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial:       016A
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/156057B035D011EE8540E373C4F9AE02.roa
Signing time:             Sun 17 Sep 2023 09:36:45 +0000
ROA not before:           Sun 17 Sep 2023 09:36:45 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     834
IP address blocks:        103.26.8.0/24 maxlen: 24
                          103.26.10.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
        Validity
            Not Before: Sep 17 09:36:45 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=6506c8ad-4511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e1:fb:29:80:08:06:5b:77:c6:c7:ab:66:9c:
                    14:13:64:77:fe:e4:ae:b0:43:10:df:c6:39:54:1d:
                    da:f3:bd:33:20:4e:02:27:8b:25:12:8d:a4:f4:23:
                    7e:ab:12:4e:81:ef:06:0f:98:53:73:dd:67:24:9d:
                    49:1b:24:79:30:6f:2d:2e:95:e9:a4:e2:77:31:76:
                    c6:19:5b:cf:73:08:d7:2e:1b:1e:f1:53:e0:7c:e3:
                    9e:52:e2:8d:13:e0:3d:67:14:f6:80:c7:ec:47:e7:
                    f0:5d:67:fd:da:b2:5b:3a:2b:2e:a4:c2:71:0c:2c:
                    ce:56:43:35:5e:f1:8f:eb:a9:1b:f8:b2:ba:ce:fb:
                    23:1d:51:3d:3d:d6:cf:37:99:5a:ec:17:88:8a:c9:
                    62:9a:2b:20:ff:3e:eb:11:82:73:2c:6d:6e:1f:bd:
                    34:39:3e:6b:26:ae:f2:c8:aa:fc:7d:85:fd:79:86:
                    8c:c8:a7:37:2c:c8:09:20:ec:28:24:40:4a:61:77:
                    75:7e:3e:6e:12:4d:7e:e2:74:1c:73:3c:a6:2f:61:
                    da:f4:cf:0d:ed:57:9e:92:2d:67:29:ef:37:dc:54:
                    c4:e1:f2:b9:30:02:05:59:5e:3d:ab:d6:44:e8:0a:
                    0b:64:ef:44:34:15:cd:62:d0:3e:9c:59:b9:58:e1:
                    28:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:07:92:5A:D3:2E:B2:98:26:92:46:BB:A0:9D:E2:45:6D:61:95:6C
            X509v3 Authority Key Identifier:
                keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/156057B035D011EE8540E373C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.8.0/24
                  103.26.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:9e:1f:eb:f9:26:de:f2:17:86:72:d8:41:fc:53:d4:86:38:
         2a:9a:c9:10:58:16:0c:24:c8:f1:08:b4:02:ec:2f:e6:83:89:
         79:36:a6:8a:51:3d:65:55:40:28:cc:2d:a4:7d:bc:79:9c:9b:
         54:1e:73:16:8e:85:92:41:5e:35:75:6e:27:91:40:19:6c:35:
         bd:67:bc:33:4e:50:e4:02:f6:07:84:69:2a:98:ca:ee:b2:d4:
         a0:a1:53:0d:39:2d:02:0a:b7:d4:48:3c:38:ff:32:00:38:0c:
         01:aa:0a:2a:47:85:01:03:e7:b3:c8:08:a4:10:c2:52:53:94:
         6f:f1:4f:7b:8b:ee:45:a6:38:b1:58:fe:a1:53:29:e0:13:18:
         8e:41:36:1c:32:e8:8b:77:e3:92:60:91:8b:b1:a2:1a:49:fc:
         be:8f:68:68:b9:c8:e9:da:06:65:f0:14:a0:9b:0c:c1:52:90:
         aa:02:81:1a:cd:5a:ab:74:79:d2:b9:30:59:df:9e:97:a0:6b:
         4e:de:76:1d:6c:54:fe:5b:42:24:c7:b6:40:44:7b:d5:7f:da:
         4d:d5:03:8f:bc:7b:bd:07:18:bb:17:b0:51:e3:18:b7:af:5d:
         25:45:11:e9:d2:34:16:1b:3a:8a:49:5c:5b:d1:6f:cf:52:a2:
         3f:c0:09:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----