Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BF372F80F14311EB8E3FD52EC4F9AE02.roa
File:                     BF372F80F14311EB8E3FD52EC4F9AE02.roa (raw, json)
Hash identifier:          gXKtvneukcwKhyaBitgO7A96382mNA3IGYGyZPi+4sM=
Subject key identifier:   E3:E2:02:57:8B:C1:6E:70:A8:F8:7D:50:8C:6C:D8:3F:1E:DD:B4:27
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0B30
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BF372F80F14311EB8E3FD52EC4F9AE02.roa
Signing time:             Tue 25 Apr 2023 10:39:41 +0000
ROA not before:           Tue 25 Apr 2023 10:39:41 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        103.11.61.0/24 maxlen: 24
                          113.203.208.0/24 maxlen: 24
                          113.203.210.0/24 maxlen: 24
                          113.203.218.0/24 maxlen: 24
                          113.203.220.0/24 maxlen: 24
                          113.203.222.0/24 maxlen: 24
                          113.203.223.0/24 maxlen: 24
                          113.203.224.0/24 maxlen: 24
                          113.203.225.0/24 maxlen: 24
                          113.203.227.0/24 maxlen: 24
                          113.203.233.0/24 maxlen: 24
                          113.203.245.0/24 maxlen: 24
                          113.203.252.0/22 maxlen: 24
                          115.167.68.0/22 maxlen: 24
                          115.167.108.0/22 maxlen: 24
                          175.110.76.0/22 maxlen: 24
                          175.110.92.0/22 maxlen: 24
                          175.110.98.0/24 maxlen: 24
                          180.178.148.0/24 maxlen: 24
                          180.178.151.0/24 maxlen: 24
                          180.178.162.0/24 maxlen: 24
                          180.178.173.0/24 maxlen: 24
                          180.178.179.0/24 maxlen: 24
                          223.29.226.0/24 maxlen: 24
                          223.29.235.0/24 maxlen: 24
                          223.29.236.0/24 maxlen: 24
                          223.29.237.0/24 maxlen: 24
                          223.29.238.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2864 (0xb30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Apr 25 10:39:41 2023 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=6447aded-9dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e4:74:b0:47:fc:24:58:52:fe:3d:29:0d:e7:
                    7f:61:46:25:1f:56:fe:be:65:d4:ce:1e:20:56:78:
                    b1:77:06:d6:99:dd:36:56:c2:b7:bf:09:e9:2d:4b:
                    f1:08:87:83:98:eb:13:75:5b:fc:c2:78:e6:8a:47:
                    40:55:e5:57:4a:e1:51:fa:c0:24:78:fa:ff:20:53:
                    0c:78:fc:c4:19:df:91:12:a4:2a:b7:0e:66:1f:77:
                    db:9e:ec:20:46:ae:0d:50:3e:6a:f7:5d:1f:af:a2:
                    23:e4:9a:3a:f5:b6:0d:79:81:c9:d2:4a:a7:af:57:
                    01:79:a5:b8:13:4c:54:22:cd:31:bf:d9:2c:a3:76:
                    16:88:ad:38:1a:ae:41:12:ca:8f:da:f8:a1:89:84:
                    70:3b:e6:86:e2:64:f9:bc:90:3a:ad:a4:86:08:02:
                    7b:58:1a:2b:7f:cd:72:0e:db:c6:83:86:d2:13:1a:
                    04:30:cd:25:b4:19:ee:c1:b5:d7:5c:34:d5:5b:1f:
                    8b:9a:cc:4a:ba:4e:72:cc:7e:70:12:16:55:59:ea:
                    58:5e:d4:2e:06:80:a7:cc:5a:ae:92:37:4c:6e:39:
                    31:33:2a:e8:c9:71:b0:78:c4:0b:a9:00:38:37:d9:
                    50:4d:cb:e6:c7:30:dc:72:cc:82:86:7e:82:82:82:
                    f7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E2:02:57:8B:C1:6E:70:A8:F8:7D:50:8C:6C:D8:3F:1E:DD:B4:27
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BF372F80F14311EB8E3FD52EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.61.0/24
                  113.203.208.0/24
                  113.203.210.0/24
                  113.203.218.0/24
                  113.203.220.0/24
                  113.203.222.0-113.203.225.255
                  113.203.227.0/24
                  113.203.233.0/24
                  113.203.245.0/24
                  113.203.252.0/22
                  115.167.68.0/22
                  115.167.108.0/22
                  175.110.76.0/22
                  175.110.92.0/22
                  175.110.98.0/24
                  180.178.148.0/24
                  180.178.151.0/24
                  180.178.162.0/24
                  180.178.173.0/24
                  180.178.179.0/24
                  223.29.226.0/24
                  223.29.235.0-223.29.238.255

    Signature Algorithm: sha256WithRSAEncryption
         1e:9f:75:e9:1c:e0:0e:b0:cf:82:1b:8a:65:e0:d2:2b:dd:11:
         0d:f5:d3:6c:42:e4:c5:dc:ca:09:b2:b9:2f:1f:de:58:00:2b:
         3d:a8:97:dd:c0:b3:a8:4f:9d:f2:f2:74:9a:ff:82:2b:d6:e3:
         26:1e:2d:74:de:06:c5:db:ad:ff:15:4f:78:d4:7a:29:6e:c4:
         b3:db:a6:02:23:bf:7c:5a:6c:3e:77:b3:56:5f:14:85:0f:ba:
         3b:9e:f9:a3:b2:98:bc:b8:1c:75:37:d1:a3:64:cf:83:ab:da:
         6e:cb:76:f6:24:cd:9f:8a:54:3e:b3:77:a5:88:31:b3:78:c6:
         90:69:fd:a7:2d:8f:f1:de:25:0a:dc:b2:8f:d9:ef:cc:91:ed:
         a0:08:ee:8a:4d:3d:db:a8:d1:c2:5e:8d:f9:7b:da:86:ed:2d:
         ae:de:ac:27:92:e4:cd:81:27:a9:08:5a:45:1e:be:f6:8c:be:
         9f:db:79:01:af:3c:8c:bc:69:1b:3e:8d:c1:6a:af:ba:26:ca:
         7e:0d:41:2b:ed:24:d6:d2:8f:8d:78:0b:e3:83:85:51:09:4c:
         54:cb:94:73:ad:1f:11:f6:60:8e:49:9d:e2:e6:2a:b7:d6:be:
         08:30:90:ad:5c:30:7b:c1:f2:a1:5b:d9:c1:4a:cf:d1:e0:e3:
         07:48:9e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-fra.rpki-client.org