Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/13AFBD4CE81511ED8E3D6035C4F9AE02.roa
File:                     13AFBD4CE81511ED8E3D6035C4F9AE02.roa (raw, json)
Hash identifier:          c1bcDI0nkYG6gmIBiVnQVQ1k1nIlSoEcbFk8X0QuO1E=
Subject key identifier:   5A:FE:62:39:20:B0:57:2D:F8:57:E0:32:52:17:A3:40:ED:4A:53:CD
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0B58
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/13AFBD4CE81511ED8E3D6035C4F9AE02.roa
Signing time:             Mon 01 May 2023 11:41:14 +0000
ROA not before:           Mon 01 May 2023 11:41:14 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     18811
IP address blocks:        113.203.208.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2904 (0xb58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May  1 11:41:14 2023 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=644fa55a-53fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d6:95:56:8e:43:21:b0:76:92:35:0f:56:33:
                    b0:61:de:0e:f1:b8:9e:cc:f0:82:15:a8:42:4a:f0:
                    77:7a:21:4a:d1:e4:73:01:a8:7d:3b:21:5b:92:aa:
                    76:e0:19:ac:91:bf:62:4d:8c:4a:e3:9b:73:39:02:
                    e1:6b:8c:37:15:e4:0e:8c:1a:76:98:05:88:5e:9b:
                    6c:ba:c5:8d:f7:da:2a:2b:b3:8b:c5:53:12:47:9d:
                    74:30:45:a3:5b:47:50:bf:37:3b:20:14:4c:30:e4:
                    86:96:a8:a6:f8:11:c6:e4:b1:15:df:f9:fe:fe:37:
                    ec:2a:7c:b1:8d:82:23:e0:c8:49:5e:c6:9a:45:20:
                    c5:bb:d2:d6:26:61:ed:66:3b:ad:9b:36:f6:4c:62:
                    13:19:9c:03:9a:92:c0:7c:34:49:7a:df:1e:17:a3:
                    eb:be:60:ad:16:21:f5:df:bc:e2:86:7e:5b:53:d2:
                    b0:89:97:63:2e:fa:df:62:ba:17:f4:89:32:15:65:
                    8d:5e:cf:1d:83:10:3c:7a:6c:55:f7:77:4c:3f:6c:
                    84:61:0e:db:f9:0b:ea:a2:c4:ea:84:87:37:c0:6f:
                    45:d7:48:a2:0d:78:ec:e1:1f:f5:ac:d2:1d:37:bb:
                    31:8b:42:a4:5e:c1:af:e1:f2:6b:fe:25:5f:c9:01:
                    46:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FE:62:39:20:B0:57:2D:F8:57:E0:32:52:17:A3:40:ED:4A:53:CD
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/13AFBD4CE81511ED8E3D6035C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.203.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:d3:6c:51:8b:ea:71:b7:71:32:b8:a1:2a:12:a5:f6:fe:3f:
         87:43:24:59:ee:38:b1:44:da:9b:9d:2a:91:ab:24:57:69:5e:
         b6:dd:46:6a:9c:72:3c:35:9f:f5:83:cb:05:a6:43:a0:d8:a5:
         f7:fd:c8:cd:30:5e:67:6e:94:91:1c:77:9e:48:ce:38:93:c0:
         8a:61:71:20:41:75:4c:61:73:65:91:a5:e1:18:f0:1e:81:3c:
         cd:18:52:0e:fe:eb:6e:c8:11:e7:41:ae:96:d6:98:5e:f1:92:
         a2:7c:8d:70:ca:76:78:7d:d4:12:a9:d6:aa:bb:0a:11:53:9b:
         a5:31:41:c0:36:d6:08:bb:af:12:a5:9d:9b:20:d3:4b:14:35:
         31:b2:97:da:d6:79:19:8c:ec:b9:3a:da:17:d9:b3:c6:54:44:
         57:0d:2b:ae:19:da:a4:26:a1:68:e3:56:4f:b5:3f:65:ec:9d:
         0a:37:9a:57:ea:08:b2:ae:26:82:da:ca:87:0e:68:3a:db:29:
         e1:b4:e5:21:c4:18:14:28:8b:56:3c:15:b1:0c:83:9c:4f:2e:
         71:91:18:80:44:ca:42:c1:60:7a:08:6d:2a:2c:ab:06:20:a2:
         5d:b0:49:5f:87:03:c5:80:bd:cb:ad:56:b9:55:a4:28:1f:6a:
         50:db:3e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----