Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/EA51C8CA530611EEBED23D49C4F9AE02.roa
File:                     EA51C8CA530611EEBED23D49C4F9AE02.roa (raw, json)
Hash identifier:          O+rsqD3nFnQHd7V+SF/+4N9052uIy/aEW+zsjViD+C0=
Subject key identifier:   0A:E6:DB:0A:7D:7B:F9:75:12:42:2D:ED:9C:00:5A:03:A4:05:F9:87
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0D05
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/EA51C8CA530611EEBED23D49C4F9AE02.roa
Signing time:             Thu 14 Sep 2023 13:59:26 +0000
ROA not before:           Thu 14 Sep 2023 13:59:26 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     11938
IP address blocks:        113.203.252.0/24 maxlen: 24
                          113.203.255.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3333 (0xd05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Sep 14 13:59:26 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=650311be-03f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1f:9a:7d:86:75:23:a3:ba:50:b4:2b:ab:88:
                    a2:e0:b2:7a:d5:32:db:e9:e7:2b:59:cf:fe:66:a9:
                    37:bf:0e:68:c4:94:1e:49:45:df:42:46:41:9d:db:
                    c3:de:fa:70:5a:7f:00:d3:8f:0f:7b:d3:11:f6:6d:
                    e3:c4:9e:c6:5b:4c:ea:1a:4b:0a:0f:eb:e1:ec:20:
                    bd:5f:03:e4:20:5b:a1:10:ff:2d:5b:b8:5f:0a:cd:
                    dc:d5:4c:97:04:38:f0:45:c3:94:67:62:b2:37:e4:
                    e7:7a:29:7c:0c:9f:f5:a0:24:98:cc:a7:8e:c8:25:
                    9c:28:1f:79:bc:fa:60:6c:2d:a2:6a:91:b3:a3:9a:
                    95:6a:45:fc:ce:3e:06:47:50:39:b5:40:5e:b3:7f:
                    ff:65:4a:be:4d:d0:1b:30:a7:85:5a:7f:46:45:2d:
                    45:0b:6c:bc:fa:67:ed:f0:33:91:29:98:3b:b0:d7:
                    b4:61:9f:54:d2:d7:c3:c0:02:aa:02:b4:0c:e6:0b:
                    4f:8a:ee:58:e2:92:27:2e:5e:50:0f:b0:14:95:e9:
                    63:9c:fc:72:2b:05:42:43:26:13:9b:19:41:4b:4d:
                    8b:20:9b:76:f1:e4:d7:7f:fe:79:f8:e8:3e:33:2b:
                    e4:70:fe:90:ba:46:17:63:5e:6b:70:71:1d:f3:f4:
                    51:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E6:DB:0A:7D:7B:F9:75:12:42:2D:ED:9C:00:5A:03:A4:05:F9:87
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/EA51C8CA530611EEBED23D49C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.203.252.0/24
                  113.203.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:55:cd:2e:d8:f9:ff:e5:e8:ce:b5:91:4c:3c:37:18:54:17:
         64:6f:52:40:e2:bf:ce:ac:af:aa:58:0b:c0:84:e2:96:83:0e:
         14:7c:0e:bd:80:3c:c9:d1:84:03:69:ac:e0:95:9b:db:c0:d6:
         9b:d6:51:e0:fa:39:04:db:49:e2:0f:18:ee:29:a3:8a:ea:e3:
         d9:ff:81:53:37:86:a8:10:3a:16:36:a3:96:06:eb:bd:48:bc:
         2e:88:89:79:2e:74:04:32:72:a4:12:42:23:69:f8:38:3b:d8:
         fa:2e:00:39:e2:ce:d7:94:e2:ab:ad:e6:67:3c:88:be:5c:20:
         21:8c:86:33:90:4f:12:29:40:e4:f5:2f:be:dc:82:22:a9:68:
         3a:6a:70:5d:6d:15:a3:16:e7:6a:16:80:d7:e0:74:0f:0d:78:
         7a:50:a3:a4:8d:41:51:03:c9:03:6e:5a:91:42:7d:be:5f:36:
         fc:7a:0a:1c:84:5c:47:c9:bd:7b:99:e9:3e:16:d8:dd:0a:b4:
         78:e0:33:42:47:97:49:c2:20:5a:74:cd:fa:eb:ab:88:fe:41:
         14:aa:cf:52:35:b4:fb:e3:31:75:ab:23:3a:3c:90:34:3c:81:
         9e:4d:ae:38:d0:b4:63:87:40:da:59:38:a0:01:8c:ba:8b:f4:
         09:28:a8:a7
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICDQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjMwOTE0MTM1OTI2WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTAzMTFiZS0wM2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1B+afYZ1I6O6ULQrq4ii4LJ61TLb6ecrWc/+Zqk3vw5oxJQeSUXfQkZBndvD
3vpwWn8A048Pe9MR9m3jxJ7GW0zqGksKD+vh7CC9XwPkIFuhEP8tW7hfCs3c1UyX
BDjwRcOUZ2KyN+Tneil8DJ/1oCSYzKeOyCWcKB95vPpgbC2iapGzo5qVakX8zj4G
R1A5tUBes3//ZUq+TdAbMKeFWn9GRS1FC2y8+mft8DORKZg7sNe0YZ9U0tfDwAKq
ArQM5gtPiu5Y4pInLl5QD7AUleljnPxyKwVCQyYTmxlBS02LIJt28eTXf/55+Og+
MyvkcP6QukYXY15rcHEd8/RRzwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFArm2wp9
e/l1EkIt7ZwAWgOkBfmHMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvRUE1MUM4Q0E1
MzA2MTFFRUJFRDIzRDQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABxy/wDBABxy/8wDQYJKoZIhvcNAQELBQADggEBAANVzS7Y
+f/l6M61kUw8NxhUF2RvUkDiv86sr6pYC8CE4paDDhR8Dr2APMnRhANprOCVm9vA
1pvWUeD6OQTbSeIPGO4po4rq49n/gVM3hqgQOhY2o5YG671IvC6IiXkudAQycqQS
QiNp+Dg72PouADnizteU4qut5mc8iL5cICGMhjOQTxIpQOT1L77cgiKpaDpqcF1t
FaMW52oWgNfgdA8NeHpQo6SNQVEDyQNuWpFCfb5fNvx6ChyEXEfJvXuZ6T4W2N0K
tHjgM0JHl0nCIFp0zfrrq4j+QRSqz1I1tPvjMXWrIzo8kDQ8gZ5NrjjQtGOHQNpZ
OKABjLqL9AkoqKc=
-----END CERTIFICATE-----