Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32342d3234203d3e2039343439.roa
File:                     3130332e3136302e3131362e302f32342d3234203d3e2039343439.roa (raw, json)
Hash identifier:          +17vx779yAl9Bj++Q7UCMilyLMTiEZ3bNuxHgYhKN+4=
Subject key identifier:   55:A6:8E:1C:56:0E:31:4E:71:FF:15:2D:77:BD:DB:6A:53:87:F2:B4
Certificate issuer:       /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial:       7FD8868A0A277E07C2FD2A779CDBA44D841DDEB3
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32342d3234203d3e2039343439.roa
Signing time:             Sun 01 Jan 2023 03:43:38 +0000
ROA not before:           Sun 01 Jan 2023 03:38:38 +0000
ROA not after:            Sun 31 Dec 2023 03:43:38 +0000
asID:                     9449
IP address blocks:        103.160.116.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d8:86:8a:0a:27:7e:07:c2:fd:2a:77:9c:db:a4:4d:84:1d:de:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
        Validity
            Not Before: Jan  1 03:38:38 2023 GMT
            Not After : Dec 31 03:43:38 2023 GMT
        Subject: CN=55A68E1C560E314E71FF152D77BDDB6A5387F2B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e5:b3:f9:b3:61:ff:5c:bf:52:d1:e7:0b:51:
                    1a:38:6e:e5:bd:7e:66:07:76:eb:8c:b3:6a:18:84:
                    36:a8:b5:e1:97:25:0c:45:3e:3c:6b:a7:a4:c5:85:
                    78:ea:7e:8f:29:2d:a8:35:08:f5:aa:f6:9c:23:d9:
                    c3:19:0b:e9:33:15:47:c1:23:c8:0c:75:3c:7e:2c:
                    df:22:ed:cd:07:a8:a2:50:44:14:e3:9d:48:9d:49:
                    85:cb:67:0e:94:47:1c:a2:5f:f6:a1:3b:67:fe:36:
                    47:8d:5f:1b:d9:be:73:c6:7d:31:bf:06:39:2f:a1:
                    97:aa:b0:04:33:22:6c:66:9a:7c:09:3a:5e:55:ce:
                    49:54:f1:26:38:4c:4c:34:57:36:e9:96:5e:71:44:
                    ae:a2:a1:08:5b:fe:d8:8d:89:2a:25:b1:c8:81:7f:
                    4a:82:9d:c4:1f:43:31:cc:aa:64:34:59:31:22:e3:
                    4a:4d:fe:af:da:e3:e0:50:ed:98:87:d9:5e:ea:85:
                    0b:23:bf:a8:aa:6f:dd:7c:e9:da:47:2c:ab:4a:53:
                    4a:9e:55:a6:62:a3:e5:6a:bd:92:58:11:ba:36:81:
                    66:9a:d3:b4:34:a0:73:41:44:d9:26:5e:a4:bd:38:
                    0b:f0:3f:f2:49:c4:a6:dd:b0:c6:ae:86:fb:0f:6d:
                    94:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A6:8E:1C:56:0E:31:4E:71:FF:15:2D:77:BD:DB:6A:53:87:F2:B4
            X509v3 Authority Key Identifier:
                keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32342d3234203d3e2039343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:97:03:ec:6b:fe:12:35:d0:a6:41:ce:a0:d8:f7:29:8d:60:
         99:d9:7b:77:ff:e5:1f:c6:fb:42:1b:98:4e:04:de:39:95:e4:
         74:7c:16:53:04:ba:74:57:a2:77:84:a6:c1:86:40:4b:75:d8:
         b2:0e:69:4b:a9:dc:ea:69:2f:4a:13:6f:25:0b:03:94:c5:d0:
         6c:1b:8e:bf:b9:cb:07:9a:ac:8c:08:11:2e:16:2c:74:c4:04:
         b6:2f:d5:9b:2a:76:63:9b:19:42:7d:ba:48:fd:50:4a:8a:01:
         58:1e:5f:64:57:91:a9:f2:1c:cc:c6:ee:09:2f:05:d9:ec:41:
         53:09:83:8f:9d:66:f1:c8:56:2d:7a:6d:f6:47:ad:ba:19:e3:
         bd:bf:6d:62:2a:64:6e:5d:6a:07:c4:3b:e9:fb:5d:5f:ae:3a:
         42:97:4b:e8:c4:36:35:d7:a5:35:f4:98:dc:69:9b:2d:54:94:
         c8:75:67:b2:78:62:57:82:4e:73:ac:0f:a9:c8:eb:0a:9e:33:
         27:ad:cf:5e:63:2e:96:67:a0:ab:92:b5:b3:85:24:cb:0b:75:
         4a:67:22:56:f3:cc:2a:f4:96:fc:f6:6b:3f:e6:15:f3:77:94:
         e3:5e:e0:8f:f9:97:af:ff:7a:9d:13:58:0d:21:af:be:41:51:
         1b:13:16:9f
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUf9iGigonfgfC/Sp3nNukTYQd3rMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOTA1MzAwMDAwMTEwLwYDVQQFEygzMDM1NkVGNDZE
NTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0UwMB4XDTIzMDEwMTAzMzgzOFoX
DTIzMTIzMTAzNDMzOFowMzExMC8GA1UEAxMoNTVBNjhFMUM1NjBFMzE0RTcxRkYx
NTJENzdCRERCNkE1Mzg3RjJCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM/ls/mzYf9cv1LR5wtRGjhu5b1+Zgd264yzahiENqi14ZclDEU+PGunpMWF
eOp+jyktqDUI9ar2nCPZwxkL6TMVR8EjyAx1PH4s3yLtzQeoolBEFOOdSJ1Jhctn
DpRHHKJf9qE7Z/42R41fG9m+c8Z9Mb8GOS+hl6qwBDMibGaafAk6XlXOSVTxJjhM
TDRXNumWXnFErqKhCFv+2I2JKiWxyIF/SoKdxB9DMcyqZDRZMSLjSk3+r9rj4FDt
mIfZXuqFCyO/qKpv3Xzp2kcsq0pTSp5VpmKj5Wq9klgRujaBZprTtDSgc0FE2SZe
pL04C/A/8knEpt2wxq6G+w9tlBUCAwEAAaOCAhEwggINMB0GA1UdDgQWBBRVpo4c
Vg4xTnH/FS13vdtqU4fytDAfBgNVHSMEGDAWgBQwNW70bVlNpXx2lwERg6z/4EYT
4DAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvMC8zMDM1NkVG
NDZENTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0UwLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NRFZ1OUcxWlRh
VjhkcGNCRVlPc18tQkdFLUEuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUH
MAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTA1
MzAwMDAwLzAvMzEzMDMzMmUzMTM2MzAyZTMxMzEzNjJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDM5MzQzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6B0MA0GCSqGSIb3DQEBCwUAA4IB
AQBrlwPsa/4SNdCmQc6g2PcpjWCZ2Xt3/+UfxvtCG5hOBN45leR0fBZTBLp0V6J3
hKbBhkBLddiyDmlLqdzqaS9KE28lCwOUxdBsG46/ucsHmqyMCBEuFix0xAS2L9Wb
KnZjmxlCfbpI/VBKigFYHl9kV5Gp8hzMxu4JLwXZ7EFTCYOPnWbxyFYtem32R626
GeO9v21iKmRuXWoHxDvp+11frjpCl0voxDY116U19JjcaZstVJTIdWeyeGJXgk5z
rA+pyOsKnjMnrc9eYy6WZ6CrkrWzhSTLC3VKZyJW88wq9Jb89ms/5hXzd5TjXuCP
+Zev/3qdE1gNIa++QVEbExaf
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:40 2023 by rpki-client on console-fra.rpki-client.org