Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5D345312EBF711ECA5209279C4F9AE02.roa
File:                     5D345312EBF711ECA5209279C4F9AE02.roa (raw, json)
Hash identifier:          9snFJ+nrmzOF/FXrpdK0c6j4ti9d1lirzMelD0SGCVo=
Subject key identifier:   8B:CC:8D:20:35:52:D3:AF:7E:27:90:1A:EC:97:0D:4D:A6:61:9D:0B
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       07D1
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5D345312EBF711ECA5209279C4F9AE02.roa
Signing time:             Tue 14 Jun 2022 15:33:40 +0000
ROA not before:           Tue 14 Jun 2022 15:33:39 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     38547
IP address blocks:        115.167.0.0/24 maxlen: 24
                          115.167.1.0/24 maxlen: 24
                          115.167.2.0/24 maxlen: 24
                          115.167.3.0/24 maxlen: 24
                          115.167.4.0/24 maxlen: 24
                          115.167.5.0/24 maxlen: 24
                          115.167.6.0/24 maxlen: 24
                          115.167.20.0/22 maxlen: 24
                          115.167.49.0/24 maxlen: 24
                          115.167.72.0/22 maxlen: 24
                          115.167.100.0/22 maxlen: 24
                          115.167.120.0/22 maxlen: 24
                          175.110.68.0/22 maxlen: 24
                          175.110.72.0/22 maxlen: 24
                          175.110.80.0/21 maxlen: 24
                          175.110.88.0/22 maxlen: 24
                          175.110.96.0/24 maxlen: 24
                          175.110.97.0/24 maxlen: 24
                          175.110.104.0/24 maxlen: 24
                          175.110.107.2/32 maxlen: 32
                          175.110.107.14/32 maxlen: 32
                          175.110.107.114/32 maxlen: 32
                          175.110.108.0/22 maxlen: 23
                          175.110.108.0/23 maxlen: 24
                          175.110.110.0/24 maxlen: 24
                          202.92.16.0/24 maxlen: 24
                          202.92.17.0/24 maxlen: 24
                          202.92.18.0/24 maxlen: 24
                          202.92.19.0/24 maxlen: 24
                          202.92.20.0/24 maxlen: 24
                          202.92.21.0/24 maxlen: 24
                          202.92.23.0/24 maxlen: 24
                          202.92.24.0/24 maxlen: 24
                          202.92.24.32/27 maxlen: 27
                          202.92.25.0/24 maxlen: 24
                          202.92.26.0/24 maxlen: 24
                          202.92.27.0/24 maxlen: 24
                          202.92.28.0/24 maxlen: 24
                          202.92.29.0/24 maxlen: 24
                          202.92.30.0/24 maxlen: 24
                          202.92.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2001 (0x7d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jun 14 15:33:39 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=62a8aa53-4713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:18:14:87:e0:33:c9:33:00:20:fb:23:83:04:
                    6d:aa:72:65:f8:31:82:d3:8b:19:a3:a1:35:64:ed:
                    40:61:95:fd:7d:e6:70:c3:80:ec:25:95:cf:9a:07:
                    73:64:75:06:87:d2:b0:4c:8c:ca:f8:e6:cd:59:94:
                    9e:b1:3f:46:d4:d1:37:12:00:7c:ec:7a:0a:0c:8a:
                    b7:c5:7d:35:b4:1a:f5:a1:77:6b:7e:2e:1e:0f:a8:
                    ba:be:cc:7b:93:b4:73:38:fb:a3:f6:a4:af:63:df:
                    09:11:03:f2:8d:c6:2b:00:4e:71:04:29:fa:c9:92:
                    cf:38:b0:cb:d8:7b:15:66:46:91:d4:23:57:41:b4:
                    79:32:a4:7d:8d:b8:4f:49:0b:b7:aa:86:e9:5b:bc:
                    5a:b0:73:81:59:bc:a4:a3:ec:b6:77:e3:5d:d7:27:
                    af:df:1d:69:55:d2:06:f9:1c:29:d6:1f:58:00:15:
                    1c:74:fb:4a:62:1a:51:35:6b:bc:00:a0:83:78:c0:
                    eb:79:22:57:86:f6:6f:73:c4:2d:66:32:99:e0:18:
                    4f:48:80:da:8f:10:e3:ed:9d:ec:9a:34:51:10:0f:
                    c8:36:f3:07:7b:5b:d7:d1:6a:68:fd:c1:19:6b:cc:
                    14:c4:78:3e:0b:32:86:d2:7a:da:b8:45:77:3b:90:
                    c5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CC:8D:20:35:52:D3:AF:7E:27:90:1A:EC:97:0D:4D:A6:61:9D:0B
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5D345312EBF711ECA5209279C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.0.0-115.167.6.255
                  115.167.20.0/22
                  115.167.49.0/24
                  115.167.72.0/22
                  115.167.100.0/22
                  115.167.120.0/22
                  175.110.68.0-175.110.75.255
                  175.110.80.0-175.110.91.255
                  175.110.96.0/23
                  175.110.104.0/24
                  175.110.107.2/32
                  175.110.107.14/32
                  175.110.107.114/32
                  175.110.108.0/22
                  202.92.16.0-202.92.21.255
                  202.92.23.0-202.92.31.255

    Signature Algorithm: sha256WithRSAEncryption
         27:08:c1:34:28:1f:9d:63:8e:f3:f2:43:72:90:51:5d:2a:97:
         71:4b:d4:a1:54:f8:77:31:81:ee:f1:58:d0:c7:c4:8f:41:d1:
         d2:00:57:91:6f:f9:53:74:37:f1:7f:45:dc:ae:b6:af:58:af:
         75:02:17:c1:5a:fb:95:f1:3f:d3:26:1d:00:81:fa:ff:19:49:
         da:34:6e:49:50:49:47:3d:9d:77:a5:49:6b:9c:e5:6d:4f:4f:
         4a:de:e0:3c:26:fe:39:e0:38:2d:58:2c:4a:28:ab:97:49:29:
         bc:88:b0:d4:29:c6:f4:22:4c:b8:8d:14:84:51:2c:e2:af:07:
         74:93:72:92:bf:69:33:6e:b6:bb:89:16:c5:ca:11:7b:c9:fe:
         91:d0:6c:fd:8f:60:56:8a:9d:4a:a5:00:bb:2c:90:10:43:1f:
         87:da:39:81:f4:e5:86:d6:0b:82:7e:c8:5d:e2:df:47:c6:0f:
         59:9a:3f:3f:0e:4d:9b:db:cb:9b:28:31:b2:f7:04:78:1e:af:
         65:2e:a3:ea:fc:e9:3c:75:61:57:8d:a2:ed:bd:cd:fa:92:30:
         5f:5f:d6:e7:78:9f:df:25:16:76:09:49:0a:6f:f3:28:f6:b7:
         1b:5f:26:a8:3e:54:1a:96:b8:6b:a0:64:aa:7f:5d:6c:45:29:
         19:62:fb:27
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgICB9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjIwNjE0MTUzMzM5WhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmE4YWE1My00NzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxRgUh+AzyTMAIPsjgwRtqnJl+DGC04sZo6E1ZO1AYZX9feZww4DsJZXPmgdz
ZHUGh9KwTIzK+ObNWZSesT9G1NE3EgB87HoKDIq3xX01tBr1oXdrfi4eD6i6vsx7
k7RzOPuj9qSvY98JEQPyjcYrAE5xBCn6yZLPOLDL2HsVZkaR1CNXQbR5MqR9jbhP
SQu3qobpW7xasHOBWbyko+y2d+Nd1yev3x1pVdIG+Rwp1h9YABUcdPtKYhpRNWu8
AKCDeMDreSJXhvZvc8QtZjKZ4BhPSIDajxDj7Z3smjRREA/INvMHe1vX0Wpo/cEZ
a8wUxHg+CzKG0nrauEV3O5DFmQIDAQABo4IDHjCCAxowHQYDVR0OBBYEFIvMjSA1
UtOvfieQGuyXDU2mYZ0LMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNUQzNDUzMTJF
QkY3MTFFQ0E1MjA5Mjc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgacGCCsGAQUFBwEHAQH/
BIGXMIGUMIGRBAIAATCBijALAwMAc6cDBABzpwYDBAJzpxQDBABzpzEDBAJzp0gD
BAJzp2QDBAJzp3gwDAMEAq9uRAMEAq9uSDAMAwQEr25QAwQCr25YAwQBr25gAwQA
r25oAwUAr25rAgMFAK9uaw4DBQCvbmtyAwQCr25sMAwDBATKXBADBAHKXBQwDAME
AMpcFwMEBcpcADANBgkqhkiG9w0BAQsFAAOCAQEAJwjBNCgfnWOO8/JDcpBRXSqX
cUvUoVT4dzGB7vFY0MfEj0HR0gBXkW/5U3Q38X9F3K62r1ivdQIXwVr7lfE/0yYd
AIH6/xlJ2jRuSVBJRz2dd6VJa5zlbU9PSt7gPCb+OeA4LVgsSiirl0kpvIiw1CnG
9CJMuI0UhFEs4q8HdJNykr9pM262u4kWxcoRe8n+kdBs/Y9gVoqdSqUAuyyQEEMf
h9o5gfTlhtYLgn7IXeLfR8YPWZo/Pw5Nm9vLmygxsvcEeB6vZS6j6vzpPHVhV42i
7b3N+pIwX1/W53if3yUWdglJCm/zKPa3G18mqD5UGpa4a6Bkqn9dbEUpGWL7Jw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-ams.rpki-client.org