Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3EB63C32EB5811ED973DD879C4F9AE02.roa
File:                     3EB63C32EB5811ED973DD879C4F9AE02.roa (raw, json)
Hash identifier:          mYJA0vx8Mz8l1Y7x+h0BS+b8QrF61ZbFtGjW1N84OQQ=
Subject key identifier:   49:09:D8:20:B4:DC:D2:AF:69:5A:0E:0B:DB:A4:B0:A6:D6:13:CA:AA
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0B6D
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3EB63C32EB5811ED973DD879C4F9AE02.roa
Signing time:             Mon 08 May 2023 08:21:16 +0000
ROA not before:           Mon 08 May 2023 08:21:16 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     9387
IP address blocks:        103.11.60.0/24 maxlen: 24
                          113.203.209.0/24 maxlen: 24
                          113.203.211.0/24 maxlen: 24
                          113.203.212.0/24 maxlen: 24
                          113.203.213.0/24 maxlen: 24
                          113.203.214.0/23 maxlen: 24
                          113.203.216.0/24 maxlen: 24
                          113.203.219.0/24 maxlen: 24
                          113.203.234.0/24 maxlen: 24
                          113.203.235.0/24 maxlen: 24
                          113.203.236.0/24 maxlen: 24
                          113.203.237.0/24 maxlen: 24
                          113.203.238.0/24 maxlen: 24
                          113.203.239.0/24 maxlen: 24
                          113.203.240.0/24 maxlen: 24
                          113.203.243.0/24 maxlen: 24
                          113.203.244.0/24 maxlen: 24
                          180.178.128.0/24 maxlen: 24
                          180.178.129.0/24 maxlen: 24
                          180.178.132.0/24 maxlen: 24
                          180.178.133.0/24 maxlen: 24
                          180.178.134.0/24 maxlen: 24
                          180.178.135.0/24 maxlen: 24
                          180.178.136.0/24 maxlen: 24
                          180.178.137.0/24 maxlen: 24
                          180.178.138.0/24 maxlen: 24
                          180.178.139.0/24 maxlen: 24
                          180.178.149.0/24 maxlen: 24
                          180.178.160.0/24 maxlen: 24
                          180.178.161.0/24 maxlen: 24
                          180.178.164.0/22 maxlen: 24
                          180.178.168.0/24 maxlen: 24
                          180.178.170.0/24 maxlen: 24
                          180.178.171.0/24 maxlen: 24
                          180.178.172.0/24 maxlen: 24
                          180.178.174.0/24 maxlen: 24
                          180.178.175.0/24 maxlen: 24
                          180.178.178.0/24 maxlen: 24
                          180.178.180.0/22 maxlen: 24
                          180.178.188.0/24 maxlen: 24
                          180.178.189.0/24 maxlen: 24
                          180.178.190.0/24 maxlen: 24
                          180.178.191.0/24 maxlen: 24
                          223.29.227.0/24 maxlen: 24
                          223.29.228.0/24 maxlen: 24
                          223.29.229.0/24 maxlen: 24
                          223.29.230.0/24 maxlen: 24
                          223.29.231.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2925 (0xb6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May  8 08:21:16 2023 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=6458b0fb-fc43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dd:1a:3c:a5:f3:ec:15:38:73:13:23:fb:bf:
                    c0:2d:09:35:15:bb:af:cc:92:62:79:38:f1:ee:cf:
                    a5:9f:27:64:c8:e0:38:d6:3c:b9:47:ba:cd:be:57:
                    ce:ea:c4:79:91:d2:a1:4d:2f:ba:16:84:72:ff:96:
                    5f:e3:55:c4:4e:24:ca:b8:64:38:71:1b:7d:0f:f9:
                    86:f8:b9:a4:7b:24:de:03:a6:72:c9:a8:41:a0:5a:
                    2d:e5:0d:a2:46:57:2e:f6:1d:05:b8:a8:cd:71:b1:
                    8c:26:c7:4b:22:bc:c8:bc:c8:6a:66:61:07:c3:a3:
                    33:ba:34:b2:b4:cc:be:c9:cd:59:b2:9a:e8:34:52:
                    19:15:b4:cb:b4:73:e3:13:a7:a7:b8:b1:64:ef:8b:
                    fa:97:38:a8:12:d7:c7:4a:c1:44:ed:67:bb:2c:69:
                    bc:58:73:74:ee:06:f9:8e:cf:70:49:a0:78:05:ea:
                    7b:e0:28:e0:fd:eb:2c:ae:91:16:c7:4d:22:68:e6:
                    9b:b9:81:cf:9e:f3:67:74:35:ae:3a:c4:5a:10:0d:
                    a2:c9:56:4f:0a:89:4a:26:79:e9:12:4c:b8:8c:2b:
                    dc:1a:41:1e:37:20:40:9a:e8:84:4f:12:c5:26:41:
                    8e:38:16:d4:68:0f:4b:26:78:9d:1b:ed:8f:cc:ab:
                    8d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:09:D8:20:B4:DC:D2:AF:69:5A:0E:0B:DB:A4:B0:A6:D6:13:CA:AA
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3EB63C32EB5811ED973DD879C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.60.0/24
                  113.203.209.0/24
                  113.203.211.0-113.203.216.255
                  113.203.219.0/24
                  113.203.234.0-113.203.240.255
                  113.203.243.0-113.203.244.255
                  180.178.128.0/23
                  180.178.132.0-180.178.139.255
                  180.178.149.0/24
                  180.178.160.0/23
                  180.178.164.0-180.178.168.255
                  180.178.170.0-180.178.172.255
                  180.178.174.0/23
                  180.178.178.0/24
                  180.178.180.0/22
                  180.178.188.0/22
                  223.29.227.0-223.29.231.255

    Signature Algorithm: sha256WithRSAEncryption
         2e:94:5f:b8:a6:d7:bc:df:be:43:71:be:07:a6:64:c6:7b:d5:
         ad:08:49:a8:2a:71:63:31:a2:4a:4a:2e:34:11:61:63:b5:c9:
         1b:9e:c6:8c:5f:36:16:6e:78:29:51:5e:12:ba:aa:86:71:7b:
         0d:88:41:f5:00:a5:2a:75:81:52:19:37:0e:e3:e0:ad:bd:a9:
         70:7e:56:95:d0:03:71:e8:8b:0f:db:d6:4c:0a:33:ba:30:b2:
         0a:53:77:38:b2:dc:6e:6c:4c:fb:27:ed:b2:09:a8:29:d1:93:
         17:3f:b7:f2:79:8d:b4:8b:2b:ad:78:2c:e3:83:c1:20:80:2d:
         aa:b5:04:e2:19:c2:46:74:04:71:c1:db:8e:98:a7:68:f4:39:
         04:71:73:4a:b9:21:62:dc:07:30:0f:75:b6:99:b6:40:eb:68:
         7a:13:28:55:e9:20:e1:33:c6:58:c2:dd:cc:28:31:f3:fe:76:
         a1:e7:13:8a:dd:ed:b0:4c:f5:a4:e7:b3:f9:6f:08:1e:05:17:
         4a:45:da:75:3d:a3:2d:f3:b3:59:6f:08:0a:74:86:f7:52:b4:
         2d:7b:97:b6:4d:aa:53:ef:74:1d:a4:6f:05:71:e7:ea:0f:a0:
         19:8c:8d:48:9c:06:48:fa:5f:6a:b0:61:4b:58:38:cd:07:2f:
         cc:61:22:d2
-----BEGIN CERTIFICATE-----
MIIGDjCCBPagAwIBAgICC20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjMwNTA4MDgyMTE2WhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDU4YjBmYi1mYzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvN0aPKXz7BU4cxMj+7/ALQk1FbuvzJJieTjx7s+lnydkyOA41jy5R7rNvlfO
6sR5kdKhTS+6FoRy/5Zf41XETiTKuGQ4cRt9D/mG+LmkeyTeA6ZyyahBoFot5Q2i
Rlcu9h0FuKjNcbGMJsdLIrzIvMhqZmEHw6MzujSytMy+yc1ZsproNFIZFbTLtHPj
E6enuLFk74v6lzioEtfHSsFE7We7LGm8WHN07gb5js9wSaB4Bep74Cjg/essrpEW
x00iaOabuYHPnvNndDWuOsRaEA2iyVZPColKJnnpEky4jCvcGkEeNyBAmuiETxLF
JkGOOBbUaA9LJnidG+2PzKuNzwIDAQABo4IDMjCCAy4wHQYDVR0OBBYEFEkJ2CC0
3NKvaVoOC9uksKbWE8qqMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvM0VCNjNDMzJF
QjU4MTFFRDk3M0REODc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgbsGCCsGAQUFBwEHAQH/
BIGrMIGoMIGlBAIAATCBngMEAGcLPAMEAHHL0TAMAwQAccvTAwQAccvYAwQAccvb
MAwDBAFxy+oDBABxy/AwDAMEAHHL8wMEAHHL9AMEAbSygDAMAwQCtLKEAwQCtLKI
AwQAtLKVAwQBtLKgMAwDBAK0sqQDBAC0sqgwDAMEAbSyqgMEALSyrAMEAbSyrgME
ALSysgMEArSytAMEArSyvDAMAwQA3x3jAwQD3x3gMA0GCSqGSIb3DQEBCwUAA4IB
AQAulF+4pte8375Dcb4HpmTGe9WtCEmoKnFjMaJKSi40EWFjtckbnsaMXzYWbngp
UV4SuqqGcXsNiEH1AKUqdYFSGTcO4+CtvalwflaV0ANx6IsP29ZMCjO6MLIKU3c4
stxubEz7J+2yCagp0ZMXP7fyeY20iyuteCzjg8EggC2qtQTiGcJGdARxwduOmKdo
9DkEcXNKuSFi3AcwD3W2mbZA62h6EyhV6SDhM8ZYwt3MKDHz/nah5xOK3e2wTPWk
57P5bwgeBRdKRdp1PaMt87NZbwgKdIb3UrQte5e2TapT73QdpG8FcefqD6AZjI1I
nAZI+l9qsGFLWDjNBy/MYSLS
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:11 2023 by rpki-client on console-fra.rpki-client.org