Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B805FCB655DA11EE95D1CF4EC4F9AE02.roa
File:                     B805FCB655DA11EE95D1CF4EC4F9AE02.roa (raw, json)
Hash identifier:          teAOvXMUNaZsHUYBfe3ARf3UWOGwoYBtvJAN2uFVmAY=
Subject key identifier:   0A:2B:FA:D6:91:42:CA:F5:1D:A5:99:8D:12:12:63:B4:42:E3:C2:D0
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0D30
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B805FCB655DA11EE95D1CF4EC4F9AE02.roa
Signing time:             Mon 18 Sep 2023 04:20:37 +0000
ROA not before:           Mon 18 Sep 2023 04:20:37 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     138241
IP address blocks:        103.151.27.0/24 maxlen: 24
                          115.167.49.0/24 maxlen: 24
                          115.167.78.0/24 maxlen: 24
                          175.110.97.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3376 (0xd30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Sep 18 04:20:37 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6507d015-a65d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5b:e5:2b:41:61:52:c8:91:39:ed:3d:81:b0:
                    c8:64:58:ba:a1:45:81:4b:8e:09:b7:53:be:27:d6:
                    a8:26:82:7a:3f:17:df:a3:dd:33:0b:26:f4:b8:89:
                    d2:54:e4:5f:d8:2c:d8:4f:96:79:64:2e:f3:e9:8a:
                    07:f9:dd:4f:3d:2f:fe:69:29:25:ee:3d:da:91:6d:
                    ce:81:7a:44:7c:32:13:7d:e9:48:e4:69:6f:e9:de:
                    0d:b7:09:d9:8e:26:4a:16:6c:f4:34:98:6e:af:db:
                    1b:59:bd:ba:5d:18:4a:16:29:fe:ca:e9:14:bc:45:
                    46:08:7e:93:cd:3f:ef:ad:fa:55:b7:a6:e3:26:65:
                    f2:18:24:40:64:26:26:fd:a1:14:c4:13:7f:a1:31:
                    e9:ba:6f:d1:f9:84:2f:7a:b7:e1:86:67:96:cd:7e:
                    7c:c8:be:32:4a:5e:43:92:3f:15:fb:d8:ac:4f:98:
                    17:ea:43:e8:f3:cf:db:0b:f4:16:c1:e8:ae:b4:e6:
                    12:92:8a:c7:ed:36:eb:d9:a9:e7:44:97:7e:3c:2c:
                    43:9e:c9:74:95:3a:0e:7d:25:be:78:a5:c2:16:4b:
                    09:78:b4:cf:04:d1:51:d8:3f:e7:00:f7:c7:f3:25:
                    44:c7:2d:ac:f9:6f:63:85:68:9c:c0:58:0b:ad:50:
                    96:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2B:FA:D6:91:42:CA:F5:1D:A5:99:8D:12:12:63:B4:42:E3:C2:D0
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B805FCB655DA11EE95D1CF4EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.27.0/24
                  115.167.49.0/24
                  115.167.78.0/24
                  175.110.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:a8:bc:e3:41:a2:47:20:43:f5:c0:bc:a0:1f:72:a3:d8:72:
         ce:45:d9:89:de:0a:7f:ba:c5:8d:8b:b5:25:5b:98:16:b8:30:
         3e:24:f0:5e:d8:4a:41:0b:47:38:77:4d:d9:6c:01:42:fb:8f:
         6c:64:a0:12:b1:29:ab:18:e1:7b:ee:37:39:f5:51:3e:1e:1b:
         ac:c1:89:aa:de:82:f6:dd:86:b0:00:fc:12:e6:25:41:0c:a2:
         72:37:00:40:b4:e7:7a:d3:26:b1:44:52:23:b3:bc:29:48:47:
         7a:70:1d:a7:2c:13:b2:3c:a9:08:21:4d:b3:3e:05:bc:32:8e:
         f9:5e:c2:51:5f:19:e2:5d:1f:85:3a:95:11:e5:25:31:1d:f8:
         57:e1:92:bf:22:e0:a5:b3:53:b5:05:ce:68:08:cb:1c:a2:b5:
         37:91:4d:a2:85:1a:88:3f:b7:24:46:af:6b:ca:33:ba:fe:23:
         17:a6:19:8e:18:93:0d:04:25:b1:50:76:c5:dd:01:c3:24:85:
         35:88:6b:2d:a1:4d:1a:89:1e:b6:dd:9b:0a:ad:fc:68:79:53:
         13:77:51:27:26:e0:f0:6d:84:d2:a6:44:02:bc:ab:d5:bd:58:
         51:7f:f2:6d:17:61:dd:c7:be:f3:98:d1:56:49:9f:eb:9d:c4:
         8d:dd:d7:a8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICDTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjMwOTE4MDQyMDM3WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTA3ZDAxNS1hNjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx1vlK0FhUsiROe09gbDIZFi6oUWBS44Jt1O+J9aoJoJ6Pxffo90zCyb0uInS
VORf2CzYT5Z5ZC7z6YoH+d1PPS/+aSkl7j3akW3OgXpEfDITfelI5Glv6d4NtwnZ
jiZKFmz0NJhur9sbWb26XRhKFin+yukUvEVGCH6TzT/vrfpVt6bjJmXyGCRAZCYm
/aEUxBN/oTHpum/R+YQverfhhmeWzX58yL4ySl5Dkj8V+9isT5gX6kPo88/bC/QW
weiutOYSkorH7Tbr2annRJd+PCxDnsl0lToOfSW+eKXCFksJeLTPBNFR2D/nAPfH
8yVExy2s+W9jhWicwFgLrVCWHQIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFAor+taR
Qsr1HaWZjRISY7RC48LQMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQjgwNUZDQjY1
NURBMTFFRTk1RDFDRjRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E
IjAgMB4EAgABMBgDBABnlxsDBABzpzEDBABzp04DBACvbmEwDQYJKoZIhvcNAQEL
BQADggEBAJCovONBokcgQ/XAvKAfcqPYcs5F2YneCn+6xY2LtSVbmBa4MD4k8F7Y
SkELRzh3TdlsAUL7j2xkoBKxKasY4XvuNzn1UT4eG6zBiaregvbdhrAA/BLmJUEM
onI3AEC053rTJrFEUiOzvClIR3pwHacsE7I8qQghTbM+BbwyjvlewlFfGeJdH4U6
lRHlJTEd+Ffhkr8i4KWzU7UFzmgIyxyitTeRTaKFGog/tyRGr2vKM7r+IxemGY4Y
kw0EJbFQdsXdAcMkhTWIay2hTRqJHrbdmwqt/Gh5UxN3UScm4PBthNKmRAK8q9W9
WFF/8m0XYd3HvvOY0VZJn+udxI3d16g=
-----END CERTIFICATE-----