Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/AC06300A255811EE8BABDB0AC4F9AE02.roa
File:                     AC06300A255811EE8BABDB0AC4F9AE02.roa (raw, json)
Hash identifier:          vR3ibV+swCvZJBixJHwO5Epad6nlx+7e1svks281GGs=
Subject key identifier:   3A:FB:B2:26:EB:82:DD:61:06:AB:77:4C:FD:65:E2:8E:96:49:EC:9F
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0C73
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/AC06300A255811EE8BABDB0AC4F9AE02.roa
Signing time:             Tue 18 Jul 2023 10:48:47 +0000
ROA not before:           Tue 18 Jul 2023 10:48:47 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     138241
IP address blocks:        43.254.12.0/22 maxlen: 24
                          115.167.48.0/24 maxlen: 24
                          115.167.77.0/24 maxlen: 24
                          115.167.78.0/24 maxlen: 24
                          180.178.164.0/22 maxlen: 24
                          202.92.21.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3187 (0xc73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jul 18 10:48:47 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64b66e0f-f826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:72:b0:be:68:89:cc:c2:56:5e:a5:a6:81:20:
                    ed:bf:35:fd:1f:25:6b:b7:ab:c0:f4:8f:e6:4d:de:
                    e3:cf:ef:5f:39:d6:bc:fe:9d:28:82:b1:0c:cf:7a:
                    3a:ce:ab:2c:1a:a4:75:59:a5:a4:12:e1:2c:37:0b:
                    b5:73:44:c7:ff:bd:0c:45:b0:1d:b4:00:13:db:9a:
                    63:10:52:e6:bd:c0:f3:48:d9:46:c9:17:66:4b:8b:
                    33:9c:a5:2c:7a:86:ae:e1:f9:aa:26:9c:28:9a:d4:
                    f6:8c:75:92:51:1a:f8:c0:b6:5e:23:92:de:48:54:
                    b3:27:42:b1:e5:1a:14:97:6c:35:52:97:55:df:9b:
                    5c:eb:11:42:6f:89:a4:3b:70:e4:79:86:83:3d:0b:
                    91:67:57:ae:77:53:e0:d7:11:42:0d:fe:f8:3a:91:
                    44:3c:b3:5b:22:e7:0d:42:7c:9e:16:8f:be:a3:37:
                    ee:14:9f:f0:7a:98:ae:12:a8:00:39:a3:73:8c:4e:
                    1a:32:fc:fd:be:24:64:05:4c:80:f8:7b:e6:5e:4e:
                    bc:67:12:c0:6d:d4:e4:ef:4d:7f:10:27:89:01:3f:
                    e4:3c:a7:51:40:29:37:44:33:3f:e0:de:70:6f:78:
                    b2:7b:4b:bb:56:1f:47:3b:c6:d9:7d:43:51:4a:28:
                    27:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FB:B2:26:EB:82:DD:61:06:AB:77:4C:FD:65:E2:8E:96:49:EC:9F
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/AC06300A255811EE8BABDB0AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.254.12.0/22
                  115.167.48.0/24
                  115.167.77.0-115.167.78.255
                  180.178.164.0/22
                  202.92.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:dd:0b:65:5a:75:59:3a:56:dd:93:a1:a3:7b:16:8a:a2:36:
         17:b3:13:3f:cb:2f:0c:98:c6:91:37:a8:ba:d8:ea:43:98:f0:
         3e:23:ba:a6:a0:97:b2:e1:75:9c:cc:57:40:48:0a:bd:ff:a9:
         d9:4a:23:40:32:fe:25:6f:55:a8:24:f4:8b:66:3e:1c:eb:b3:
         31:c0:9a:92:cb:94:e2:9c:65:e6:08:79:fa:3e:37:1d:10:fd:
         e7:bf:58:cb:79:af:aa:e5:75:63:57:42:c6:f7:ff:d6:19:de:
         40:cd:e0:ab:19:19:a6:6c:54:97:e5:b1:ad:69:41:69:8d:0e:
         76:16:e4:91:25:8a:8e:61:72:7d:81:10:88:63:e2:2a:c2:5e:
         99:b6:9a:76:48:33:f1:c8:11:a0:46:79:ca:e0:16:80:75:3b:
         ad:f9:da:82:ad:61:4e:e1:0f:0d:57:24:de:42:cb:19:91:8a:
         ea:d9:37:67:36:b0:cb:80:c4:93:30:fb:33:2b:27:43:17:38:
         0d:ba:d1:72:32:86:58:ee:a0:b6:89:3c:e2:e2:12:4b:91:d6:
         df:f7:26:49:a0:58:b2:3f:41:b7:86:e6:a5:2b:df:34:10:4a:
         ec:b0:02:a1:f7:74:a1:e8:bf:55:0d:96:20:2a:f4:99:27:01:
         1d:be:9b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----