Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/40C832A2FFB011EDBFD7C87EC4F9AE02.roa
File:                     40C832A2FFB011EDBFD7C87EC4F9AE02.roa (raw, json)
Hash identifier:          8KO26JSy7XtCVSjHrg3CHeFYcyYNHVptbfa06BZ3P90=
Subject key identifier:   C2:75:28:34:02:51:6F:18:AF:D3:A6:AA:55:2B:27:23:E2:75:14:71
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0BF5
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/40C832A2FFB011EDBFD7C87EC4F9AE02.roa
Signing time:             Wed 31 May 2023 12:39:59 +0000
ROA not before:           Wed 31 May 2023 12:39:58 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     43072
IP address blocks:        113.203.220.0/24 maxlen: 24
                          113.203.227.0/24 maxlen: 24
                          113.203.252.0/24 maxlen: 24
                          113.203.253.0/24 maxlen: 24
                          113.203.254.0/24 maxlen: 24
                          113.203.255.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3061 (0xbf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May 31 12:39:58 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6477401e-a472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:64:7a:4a:9c:c5:20:84:1a:eb:62:b4:e0:d0:
                    ac:90:b9:f0:a0:08:aa:59:33:5b:c0:66:38:a2:01:
                    2b:8e:c2:ee:e4:42:ff:17:52:c4:f3:89:ed:92:53:
                    ca:62:5b:5a:ed:05:5b:69:e7:7d:b1:d4:9d:32:fd:
                    0c:61:9a:18:6c:6e:86:15:ea:2f:3f:58:c9:92:0e:
                    f4:70:8e:88:0a:cc:8e:2d:b4:7b:36:b6:46:13:25:
                    b4:5e:32:47:ac:ad:1a:77:7f:3d:f4:b2:fe:7a:2c:
                    ec:ec:0d:a5:92:46:e2:6f:4b:59:8e:61:60:bb:89:
                    b9:e3:85:98:a8:e3:84:69:91:f6:5e:1b:52:6f:f3:
                    20:3d:81:06:dc:f7:ea:f6:d2:c6:f1:eb:33:17:66:
                    de:6e:d1:74:ac:39:b4:95:91:35:a7:1a:8a:fe:43:
                    8c:aa:0e:f0:a2:1c:9c:e0:5b:be:95:10:1f:99:27:
                    cf:57:10:f5:20:cd:de:b9:bd:56:d2:02:30:55:40:
                    d0:73:32:3d:59:50:01:1d:f7:69:d4:cc:31:ca:56:
                    fa:03:a4:68:bc:db:5f:a0:9f:f0:bf:bc:ac:4c:a8:
                    da:fe:38:04:14:6c:27:d3:2c:fe:5b:fc:41:1b:7a:
                    f8:52:72:85:a0:e5:1f:f1:34:cd:7e:d1:77:dc:7e:
                    45:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:75:28:34:02:51:6F:18:AF:D3:A6:AA:55:2B:27:23:E2:75:14:71
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/40C832A2FFB011EDBFD7C87EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.203.220.0/24
                  113.203.227.0/24
                  113.203.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:39:bd:86:cd:06:ef:ca:d6:fe:da:99:7c:20:44:62:da:95:
         55:cc:58:a7:63:48:51:13:a5:22:9a:f3:93:a8:79:d2:41:f3:
         02:6d:ed:45:0b:21:d3:74:9f:cd:0f:41:2e:a6:4b:3d:7d:ec:
         c1:1e:18:d8:9c:ae:94:94:ad:80:23:c6:44:8c:ac:64:79:cd:
         0d:ad:99:2e:9f:72:fc:9d:ab:da:82:05:35:fc:5e:fa:93:bd:
         26:7b:69:e9:89:c2:cf:0a:7d:91:62:6f:b5:c2:79:2d:d7:fa:
         a4:70:6c:a0:3f:f9:f4:0c:99:61:50:b4:ff:8b:ef:40:c0:8a:
         d0:3d:2e:9f:09:fb:37:d4:6a:19:2a:b9:73:1a:38:71:7e:ec:
         0e:db:d4:bf:1e:4f:e6:33:b4:4c:1c:0e:34:2b:56:16:54:44:
         41:a3:3a:74:d4:84:14:b3:fd:d4:ed:22:9d:e6:21:02:3e:6d:
         4a:0e:3d:35:61:26:c2:23:4c:ba:31:d3:e2:dd:06:dd:5a:9a:
         65:3e:c0:b7:cb:3a:44:aa:fd:01:fa:c0:62:0f:98:75:ee:ef:
         39:b6:08:10:91:74:69:b1:eb:99:45:9f:bb:d9:b0:46:d0:41:
         1a:13:92:0b:4b:42:9d:78:b3:fc:10:d2:cd:43:a9:4b:64:f7:
         14:1e:73:91
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICC/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjMwNTMxMTIzOTU4WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDc3NDAxZS1hNDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy2R6SpzFIIQa62K04NCskLnwoAiqWTNbwGY4ogErjsLu5EL/F1LE84ntklPK
Ylta7QVbaed9sdSdMv0MYZoYbG6GFeovP1jJkg70cI6ICsyOLbR7NrZGEyW0XjJH
rK0ad3899LL+eizs7A2lkkbib0tZjmFgu4m544WYqOOEaZH2XhtSb/MgPYEG3Pfq
9tLG8eszF2bebtF0rDm0lZE1pxqK/kOMqg7wohyc4Fu+lRAfmSfPVxD1IM3eub1W
0gIwVUDQczI9WVABHfdp1Mwxylb6A6RovNtfoJ/wv7ysTKja/jgEFGwn0yz+W/xB
G3r4UnKFoOUf8TTNftF33H5FIwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFMJ1KDQC
UW8Yr9OmqlUrJyPidRRxMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNDBDODMyQTJG
RkIwMTFFREJGRDdDODdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBABxy9wDBABxy+MDBAJxy/wwDQYJKoZIhvcNAQELBQADggEB
AGY5vYbNBu/K1v7amXwgRGLalVXMWKdjSFETpSKa85OoedJB8wJt7UULIdN0n80P
QS6mSz197MEeGNicrpSUrYAjxkSMrGR5zQ2tmS6fcvydq9qCBTX8XvqTvSZ7aemJ
ws8KfZFib7XCeS3X+qRwbKA/+fQMmWFQtP+L70DAitA9Lp8J+zfUahkquXMaOHF+
7A7b1L8eT+YztEwcDjQrVhZUREGjOnTUhBSz/dTtIp3mIQI+bUoOPTVhJsIjTLox
0+LdBt1ammU+wLfLOkSq/QH6wGIPmHXu7zm2CBCRdGmx65lFn7vZsEbQQRoTkgtL
Qp14s/wQ0s1DqUtk9xQec5E=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:11 2023 by rpki-client on console-fra.rpki-client.org