Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/F0B6222A303811ED89A0A519C4F9AE02.roa
File:                     F0B6222A303811ED89A0A519C4F9AE02.roa (raw, json)
Hash identifier:          GebynLNLKl+9p8Qv1ZokU27TNU7lTDjT5c6Hzs0mthY=
Subject key identifier:   62:24:43:3D:03:04:82:BA:99:16:FD:F6:B3:01:62:0C:64:31:06:BC
Certificate issuer:       /CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
Certificate serial:       12D2
Authority key identifier: 12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/F0B6222A303811ED89A0A519C4F9AE02.roa
Signing time:             Fri 09 Sep 2022 12:56:25 +0000
ROA not before:           Fri 09 Sep 2022 12:56:25 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     53340
IP address blocks:        103.114.191.0/24 maxlen: 24
                          2402:d240:1776::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4818 (0x12d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
        Validity
            Not Before: Sep  9 12:56:25 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=631b37f9-f24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:27:1c:5e:fb:8e:b8:8d:c7:4d:36:aa:18:15:
                    f6:1f:91:73:3a:35:67:49:98:2d:f5:2b:7c:76:32:
                    19:36:3f:17:f6:4f:c1:32:bc:ab:4f:f3:d3:a8:d9:
                    92:09:e1:99:42:9d:10:99:85:51:24:a6:04:43:1f:
                    7d:ae:ae:97:cf:35:81:44:92:fc:81:32:d5:39:ae:
                    78:77:a7:46:4f:2c:57:23:c9:30:c5:91:8b:d5:79:
                    a4:59:13:fb:07:4e:bf:15:e9:2d:79:74:6f:35:17:
                    cf:58:3c:0b:01:97:37:06:90:81:7f:27:b6:b8:45:
                    ce:4a:46:09:f5:20:9a:e7:41:19:66:e4:45:1d:98:
                    76:ce:a7:23:be:fb:c7:5f:8d:fd:9a:44:71:3c:eb:
                    ad:b0:27:13:45:95:f4:3c:f8:bc:83:52:48:74:35:
                    2b:ba:f5:1d:9f:8e:ea:98:d9:13:5e:3d:3b:01:fa:
                    29:5e:5d:9b:f5:ea:45:a1:2f:90:93:be:c6:d7:41:
                    9a:ec:bc:08:93:17:f3:c4:fc:98:14:11:62:84:37:
                    0e:24:ef:74:12:d3:36:52:e2:71:e4:0f:5a:a3:62:
                    00:82:47:3f:ab:45:bd:14:93:11:bf:50:46:e0:85:
                    2d:af:f2:e1:63:92:e8:f4:72:01:5b:26:b1:79:61:
                    c2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:24:43:3D:03:04:82:BA:99:16:FD:F6:B3:01:62:0C:64:31:06:BC
            X509v3 Authority Key Identifier:
                keyid:12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/F0B6222A303811ED89A0A519C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.191.0/24
                IPv6:
                  2402:d240:1776::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:d0:2c:b7:5f:8c:54:61:5f:a0:f5:a6:e6:e1:a1:23:6d:cc:
         b1:c8:83:d9:59:aa:d0:8d:1b:90:12:9a:9d:27:71:87:bb:3c:
         66:f2:27:cc:ab:34:7e:80:48:2b:d6:ae:53:15:e1:d6:0b:e9:
         55:6f:2e:bd:c2:84:48:0a:3e:1a:7b:ae:8f:25:cb:b1:57:46:
         22:6c:81:66:27:28:e9:7a:17:83:6e:a6:be:c6:cb:19:ad:33:
         1b:89:29:d4:51:00:40:aa:c8:18:8f:13:ca:71:51:ca:b4:7f:
         78:2d:c7:13:32:f2:40:1e:f5:31:37:33:6e:07:12:00:ad:fb:
         b7:60:3d:cc:4e:b0:ff:c4:8f:c8:9f:7e:f0:5f:14:cd:d2:7a:
         77:10:d1:4d:0b:b7:e9:75:ab:16:7e:e6:e0:e6:bb:e2:41:1e:
         90:d6:a1:a7:34:6e:b4:48:39:c5:7e:1c:6a:f1:d8:19:67:cf:
         98:f6:1c:8f:b6:cd:1e:ff:46:95:c8:a9:3d:44:a4:87:fa:d9:
         57:ac:45:4c:46:f5:10:c5:01:31:6f:7d:18:4c:a7:e0:f0:6d:
         bd:29:f2:1d:91:77:4f:f3:78:65:2d:d7:91:2d:ae:80:97:1a:
         ed:99:55:d6:42:34:03:e1:65:04:93:77:94:c5:06:91:31:82:
         84:0c:ab:fe
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICEtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjU5RkMxMTAvBgNVBAUTKDEyRUE4MkFFMEE5NDMxMDlCMUY0RjM0OTg0RTlDMzZE
NEM2RDU3MUYwHhcNMjIwOTA5MTI1NjI1WhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzFiMzdmOS1mMjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAviccXvuOuI3HTTaqGBX2H5FzOjVnSZgt9St8djIZNj8X9k/BMryrT/PTqNmS
CeGZQp0QmYVRJKYEQx99rq6XzzWBRJL8gTLVOa54d6dGTyxXI8kwxZGL1XmkWRP7
B06/FekteXRvNRfPWDwLAZc3BpCBfye2uEXOSkYJ9SCa50EZZuRFHZh2zqcjvvvH
X439mkRxPOutsCcTRZX0PPi8g1JIdDUruvUdn47qmNkTXj07AfopXl2b9epFoS+Q
k77G10Ga7LwIkxfzxPyYFBFihDcOJO90EtM2UuJx5A9ao2IAgkc/q0W9FJMRv1BG
4IUtr/LhY5Lo9HIBWyaxeWHCzwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFGIkQz0D
BIK6mRb99rMBYgxkMQa8MB8GA1UdIwQYMBaAFBLqgq4KlDEJsfTzSYTpw21MbVcf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlGQy84MTA0NUUzQTU2
NjAxMUU4QkYzRkQ1MjdDNEY5QUUwMi9FdXFDcmdxVU1RbXg5UE5KaE9uRGJVeHRW
eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0V1cUNyZ3FVTVFteDlQTkpoT25EYlV4dFZ4OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjU5RkMvODEwNDVFM0E1NjYwMTFFOEJGM0ZENTI3QzRGOUFFMDIvRjBCNjIyMkEz
MDM4MTFFRDg5QTBBNTE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABncr8wDwQCAAIwCQMHACQC0kAXdjANBgkqhkiG9w0BAQsF
AAOCAQEABdAst1+MVGFfoPWm5uGhI23MsciD2Vmq0I0bkBKanSdxh7s8ZvInzKs0
foBIK9auUxXh1gvpVW8uvcKESAo+GnuujyXLsVdGImyBZico6XoXg26mvsbLGa0z
G4kp1FEAQKrIGI8TynFRyrR/eC3HEzLyQB71MTczbgcSAK37t2A9zE6w/8SPyJ9+
8F8UzdJ6dxDRTQu36XWrFn7m4Oa74kEekNahpzRutEg5xX4cavHYGWfPmPYcj7bN
Hv9GlcipPUSkh/rZV6xFTEb1EMUBMW99GEyn4PBtvSnyHZF3T/N4ZS3XkS2ugJca
7ZlV1kI0A+FlBJN3lMUGkTGChAyr/g==
-----END CERTIFICATE-----