Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/78B22B6008B611EDACE57065C4F9AE02.roa
File:                     78B22B6008B611EDACE57065C4F9AE02.roa (raw, json)
Hash identifier:          JWS2tyiOeuBw6foSgtIR0W5l2x2wOmz92aaKBu2o920=
Subject key identifier:   2B:E1:6A:BC:CB:F5:72:46:75:13:0D:C0:BC:A2:FF:B1:0B:48:62:18
Certificate issuer:       /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial:       045A
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/78B22B6008B611EDACE57065C4F9AE02.roa
Signing time:             Tue 29 Aug 2023 01:02:24 +0000
ROA not before:           Tue 29 Aug 2023 01:02:24 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     55451
IP address blocks:        110.164.167.0/24 maxlen: 24
                          2403:6200:792c::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 15 Nov 2023 03:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1114 (0x45a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
        Validity
            Not Before: Aug 29 01:02:24 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ed43a0-d95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:43:5c:be:b9:69:d1:a4:fc:bd:83:26:b3:91:
                    14:77:c1:9e:fc:e9:b4:28:d1:48:6b:8f:c6:8b:cb:
                    31:11:a1:98:e9:07:a6:ee:d3:9c:c3:8b:06:1d:36:
                    34:b6:f9:01:e3:56:5a:cc:98:72:25:aa:32:2b:60:
                    ee:e7:92:f9:d7:94:76:33:54:02:da:16:ea:51:4c:
                    d0:33:9c:07:9b:c9:e7:58:b2:c4:59:56:23:2f:b5:
                    69:97:7f:6e:a9:d5:11:6a:2b:3f:fe:3c:d3:56:6d:
                    ec:10:34:7c:dc:5e:f0:60:72:21:8b:94:35:fa:f5:
                    da:76:76:12:b6:1b:8c:5f:ea:48:91:dd:95:18:d4:
                    82:6d:11:e3:c0:aa:f0:bd:c1:a0:96:6a:45:76:a3:
                    a6:3c:a9:58:b9:a1:69:f9:7b:c3:0f:28:4c:17:9a:
                    d4:97:a6:f6:ce:b1:8c:51:62:7c:c7:67:81:33:af:
                    3f:53:8c:ca:91:7f:6f:b1:04:be:86:d4:f7:ee:ba:
                    b9:ab:5c:0b:7c:43:dc:9b:0d:05:5f:2d:75:b4:34:
                    d5:d3:aa:19:75:cd:97:14:ea:1d:e3:ad:55:9f:fc:
                    e8:f5:79:31:d9:29:a6:08:36:e2:b2:42:63:1b:53:
                    40:00:3a:92:87:4f:c7:fb:79:5d:cd:2e:56:0a:4a:
                    8a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E1:6A:BC:CB:F5:72:46:75:13:0D:C0:BC:A2:FF:B1:0B:48:62:18
            X509v3 Authority Key Identifier:
                keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/78B22B6008B611EDACE57065C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.164.167.0/24
                IPv6:
                  2403:6200:792c::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:08:f5:1a:83:86:fe:fd:42:d8:59:73:ce:71:49:ed:dc:d6:
         45:4e:53:14:88:24:5c:21:cb:d2:89:c3:73:68:b2:ca:8e:78:
         9e:85:9f:84:32:a7:b1:c0:98:7a:9e:d6:20:71:f0:ad:ef:95:
         2b:4e:aa:26:e7:21:e2:99:78:e9:1d:62:89:5f:a1:3b:40:9e:
         61:dd:c0:1e:b4:37:83:3b:2e:88:ca:ec:a8:be:38:78:aa:5a:
         cb:a1:22:43:db:cf:a8:72:2c:35:f1:88:01:7a:19:d7:4f:00:
         1c:7d:05:8a:e4:50:df:b5:f3:7e:1c:ab:12:77:0f:18:d7:6b:
         95:07:ac:a6:1b:03:71:27:1f:e1:ad:32:b7:ef:36:93:33:fd:
         59:64:b7:1f:fd:f1:f8:f3:4a:39:92:ac:6e:15:b4:63:42:73:
         54:3a:a5:9f:34:6a:4c:53:34:20:7f:b6:7b:cb:3c:68:ce:86:
         91:a4:90:86:e4:7f:84:fe:e4:d8:e4:85:40:7a:82:e3:db:fa:
         e2:26:59:99:d3:b1:3b:c9:f4:54:6c:ae:e9:48:34:4f:dc:92:
         0a:38:30:1f:4c:e5:80:ea:11:da:60:01:69:02:df:31:f8:f5:
         d4:bd:f3:81:61:0b:3b:74:97:b0:81:86:5c:d4:86:58:da:93:
         a9:22:5e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----