Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C3918600E4C311ED8A8CDA83C4F9AE02.roa
File:                     C3918600E4C311ED8A8CDA83C4F9AE02.roa (raw, json)
Hash identifier:          BzL91tfgwvlkzpR8jL1OI1hL/7ON0ii9UoIm5D/kVjo=
Subject key identifier:   ED:8A:D6:1E:C2:28:F8:57:7B:C1:FC:27:A1:C6:AA:90:5D:59:F8:FD
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0B37
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C3918600E4C311ED8A8CDA83C4F9AE02.roa
Signing time:             Thu 27 Apr 2023 06:40:54 +0000
ROA not before:           Thu 27 Apr 2023 06:40:54 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     7018
IP address blocks:        103.11.61.0/24 maxlen: 24
                          113.203.208.0/24 maxlen: 24
                          113.203.210.0/24 maxlen: 24
                          113.203.218.0/24 maxlen: 24
                          113.203.220.0/24 maxlen: 24
                          113.203.222.0/24 maxlen: 24
                          113.203.223.0/24 maxlen: 24
                          113.203.224.0/24 maxlen: 24
                          113.203.225.0/24 maxlen: 24
                          113.203.227.0/24 maxlen: 24
                          113.203.233.0/24 maxlen: 24
                          113.203.245.0/24 maxlen: 24
                          113.203.252.0/22 maxlen: 24
                          115.167.68.0/22 maxlen: 24
                          115.167.108.0/22 maxlen: 24
                          175.110.76.0/22 maxlen: 24
                          175.110.92.0/22 maxlen: 24
                          175.110.98.0/24 maxlen: 24
                          180.178.148.0/24 maxlen: 24
                          180.178.151.0/24 maxlen: 24
                          180.178.162.0/24 maxlen: 24
                          180.178.173.0/24 maxlen: 24
                          180.178.179.0/24 maxlen: 24
                          223.29.226.0/24 maxlen: 24
                          223.29.235.0/24 maxlen: 24
                          223.29.236.0/24 maxlen: 24
                          223.29.237.0/24 maxlen: 24
                          223.29.238.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2871 (0xb37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Apr 27 06:40:54 2023 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=644a18f6-4488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:29:95:09:f0:e6:ad:c9:c8:2a:c4:3f:90:83:
                    59:ab:38:17:09:e3:7f:58:5c:74:a8:5f:54:1b:16:
                    83:fc:89:ea:13:36:5e:85:2e:83:09:57:95:c3:d4:
                    15:46:d0:ab:e7:0f:8c:cb:39:69:5f:f1:39:a5:3d:
                    03:ca:df:ee:01:96:e0:c9:95:22:12:f4:59:39:fa:
                    96:6b:34:53:b6:d7:13:cd:be:02:36:c1:3a:02:d6:
                    f3:14:46:e4:59:a3:44:98:33:92:11:9b:2b:ca:87:
                    c3:14:20:19:00:24:62:9a:cd:e7:2a:a9:6a:74:ff:
                    c6:fb:40:00:c1:ae:bd:ae:c0:92:77:49:4b:a0:ea:
                    77:52:f3:5e:85:1e:16:6e:67:96:a1:6b:33:bd:7e:
                    db:7b:4d:4b:9a:6a:37:c5:d4:04:5c:44:a2:b5:83:
                    76:00:db:7e:09:d6:a9:47:2f:03:5b:ad:43:8b:a7:
                    60:d4:35:80:c2:8e:cb:12:4c:9e:bb:8c:f9:7f:c4:
                    09:a8:43:5b:40:58:3e:b1:b9:5b:fa:20:cb:eb:98:
                    cc:70:b7:79:06:1e:16:7a:59:70:85:1e:14:41:14:
                    2b:61:a9:3d:c1:dd:d9:5f:2b:3b:6c:ff:e5:a4:07:
                    c8:9f:13:1c:e2:5d:fe:b4:85:5c:c4:e1:41:4b:c6:
                    5a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8A:D6:1E:C2:28:F8:57:7B:C1:FC:27:A1:C6:AA:90:5D:59:F8:FD
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C3918600E4C311ED8A8CDA83C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.61.0/24
                  113.203.208.0/24
                  113.203.210.0/24
                  113.203.218.0/24
                  113.203.220.0/24
                  113.203.222.0-113.203.225.255
                  113.203.227.0/24
                  113.203.233.0/24
                  113.203.245.0/24
                  113.203.252.0/22
                  115.167.68.0/22
                  115.167.108.0/22
                  175.110.76.0/22
                  175.110.92.0/22
                  175.110.98.0/24
                  180.178.148.0/24
                  180.178.151.0/24
                  180.178.162.0/24
                  180.178.173.0/24
                  180.178.179.0/24
                  223.29.226.0/24
                  223.29.235.0-223.29.238.255

    Signature Algorithm: sha256WithRSAEncryption
         a4:ef:8d:63:dc:28:5a:42:d8:79:8c:5d:96:9e:92:4a:68:92:
         d3:06:60:22:a2:e6:4b:50:65:e6:33:c4:ab:ff:18:27:48:f6:
         b0:1c:39:cd:5a:02:8f:3d:3e:5c:7b:16:4d:4f:29:01:8c:c0:
         79:a0:8d:55:45:f0:3b:84:03:88:c3:1b:b5:fb:01:50:13:45:
         07:f6:ea:63:c2:6b:56:15:7c:a9:74:19:ff:0c:ff:3f:82:fc:
         d1:03:4c:80:ad:ae:f6:0f:65:d7:82:2b:b9:7d:e5:20:cb:f2:
         03:59:52:24:f6:57:2f:20:42:f8:6a:4b:d5:35:a6:bd:0c:ce:
         53:c0:2d:5e:3f:bd:76:d2:21:a2:f6:40:94:48:b8:af:66:bf:
         cc:11:8c:97:66:43:6d:0e:5d:7c:6c:c7:8d:ac:b3:ae:98:9b:
         33:61:df:ca:af:d0:08:61:cd:07:b2:5c:a9:7b:73:42:4c:10:
         f4:90:ba:f8:81:81:1b:88:0a:92:08:ef:76:c7:14:f3:ed:04:
         a3:49:de:bc:8c:82:dd:2c:8e:00:71:47:f4:1a:fa:41:ca:ed:
         48:66:b3:d1:28:f2:ea:c3:bb:ab:73:1e:f5:df:5a:af:2e:85:
         d9:63:cd:86:c4:d3:c2:7a:9c:cf:92:7c:41:d2:ca:b2:20:ed:
         ec:26:8d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:10 2023 by rpki-client on console-ams.rpki-client.org