Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/10EEE482704011ECBD6F2E5BC4F9AE02.roa
File:                     10EEE482704011ECBD6F2E5BC4F9AE02.roa (raw, json)
Hash identifier:          pSqlSaSRG/nIq9PmHOuppKNpk1p9v9nTsOPz6F9/krg=
Subject key identifier:   42:61:3C:E9:B4:72:F2:70:51:E1:2E:D0:5F:34:DB:C0:86:DB:01:4B
Certificate issuer:       /CN=A911662A/serialNumber=D3E475DE9BA7B7372BD1936A906E86697C7EA33B
Certificate serial:       0288
Authority key identifier: D3:E4:75:DE:9B:A7:B7:37:2B:D1:93:6A:90:6E:86:69:7C:7E:A3:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0-R13puntzcr0ZNqkG6GaXx-ozs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/10EEE482704011ECBD6F2E5BC4F9AE02.roa
Signing time:             Mon 27 Jun 2022 15:19:42 +0000
ROA not before:           Mon 27 Jun 2022 15:19:42 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     136600
IP address blocks:        103.118.40.0/24 maxlen: 24
                          103.118.41.0/24 maxlen: 24
                          103.118.42.0/24 maxlen: 24
                          103.118.43.0/24 maxlen: 24
                          2403:27c0::/32 maxlen: 32
                          2403:27c0:1000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 648 (0x288)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911662A/serialNumber=D3E475DE9BA7B7372BD1936A906E86697C7EA33B
        Validity
            Not Before: Jun 27 15:19:42 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=62b9ca8d-6e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c3:49:78:06:8c:90:5d:42:45:16:ce:4f:99:
                    67:66:dd:fb:fb:36:7f:69:55:0f:fa:06:2d:30:37:
                    81:74:58:1e:e7:3e:29:55:c4:38:ac:77:49:ba:a2:
                    b2:07:5b:0e:04:4c:25:49:8e:02:26:5b:84:fd:b7:
                    81:c3:57:90:d1:be:54:68:07:5b:16:cf:75:00:d2:
                    c1:89:c0:fb:98:da:b2:bf:d4:6b:f9:47:f0:47:11:
                    49:a4:84:42:28:eb:18:fc:40:0b:49:ad:cd:a8:ce:
                    07:08:12:eb:a0:f8:4a:12:05:30:f4:f1:9a:04:65:
                    2f:65:e2:c1:8e:b3:18:f9:a7:a7:0d:3c:c8:19:49:
                    17:81:5e:ae:d2:4f:0b:33:37:eb:6a:ca:b1:a2:b9:
                    da:62:77:0d:11:d7:db:72:8b:ba:50:fe:13:db:aa:
                    07:33:17:5a:99:c9:c9:ca:ca:59:fe:0d:8a:0d:79:
                    74:dc:82:45:be:a4:c0:a0:16:a8:56:3b:b6:1b:bd:
                    67:2f:8a:3e:8e:6c:23:cc:7e:76:a9:c0:af:e4:c5:
                    f7:d2:8f:28:92:93:9b:b8:fb:ec:db:0e:3e:dd:22:
                    37:0d:21:7e:a2:09:0c:78:56:ed:b9:18:73:fc:ac:
                    1f:e1:da:0d:14:34:38:35:31:a9:45:8f:53:7a:2b:
                    6e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:61:3C:E9:B4:72:F2:70:51:E1:2E:D0:5F:34:DB:C0:86:DB:01:4B
            X509v3 Authority Key Identifier:
                keyid:D3:E4:75:DE:9B:A7:B7:37:2B:D1:93:6A:90:6E:86:69:7C:7E:A3:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/0-R13puntzcr0ZNqkG6GaXx-ozs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0-R13puntzcr0ZNqkG6GaXx-ozs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/10EEE482704011ECBD6F2E5BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.40.0/22
                IPv6:
                  2403:27c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:67:4d:03:0e:25:ae:ab:91:55:34:fd:78:7b:8b:0b:9a:b3:
         8d:d8:20:66:a2:3d:f5:b4:19:0b:a8:83:2b:0b:e5:ab:88:b5:
         5b:64:5a:cd:ee:92:44:63:2c:14:65:56:c4:b4:2a:23:ad:c0:
         9e:ab:94:6d:b5:c7:aa:5a:5f:82:9a:c0:ee:13:41:b3:74:5d:
         e3:78:6e:b1:78:b5:93:86:62:d8:af:ab:84:f2:eb:2e:a4:3d:
         a3:d0:58:52:3c:ca:11:17:89:63:6a:60:ca:c4:e0:3c:6b:e0:
         a1:81:e7:4c:34:8b:74:ce:47:c8:53:ae:85:cf:7c:bd:cd:e7:
         af:62:4d:55:1e:0b:f0:fa:25:d7:84:42:8a:1d:49:a8:1b:82:
         47:2f:35:05:c0:85:ae:d1:af:81:39:e0:b5:74:fe:96:60:30:
         32:83:fd:2e:14:13:93:e3:36:14:8e:12:d1:c0:2c:cf:a0:58:
         e6:22:3f:4b:7d:9e:2c:0c:5d:15:85:74:09:05:7e:b7:b3:0e:
         fb:e4:7c:ad:3a:a0:32:58:c8:13:ea:d0:82:28:fd:7d:51:2b:
         91:93:a7:6d:d6:be:09:8c:f8:00:86:08:bf:73:5c:4e:d8:a9:
         d1:fc:56:80:49:ab:c7:5a:f6:60:90:e2:e4:81:2e:cf:57:ad:
         3e:af:2a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----