Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/A278209A459511E9A18A751DC4F9AE02.roa
File:                     A278209A459511E9A18A751DC4F9AE02.roa (raw, json)
Hash identifier:          WZzGpRAd4XoMfH/jwUZ8nw8wW72moYT8CmB8ONx8UBI=
Subject key identifier:   2F:E6:89:55:99:08:02:30:2A:32:28:AE:23:1A:F7:41:B2:29:B9:5C
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       24B3
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/A278209A459511E9A18A751DC4F9AE02.roa
Signing time:             Tue 02 Aug 2022 04:22:44 +0000
ROA not before:           Tue 02 Aug 2022 04:22:44 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     138558
IP address blocks:        2402:9e80:46::/47 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9395 (0x24b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Aug  2 04:22:44 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=62e8a694-017a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cc:4c:0e:7d:e4:47:3a:f1:d7:78:52:1d:35:
                    45:9e:13:71:1b:aa:fd:f1:38:f9:b4:81:12:b2:e0:
                    73:b2:d4:a2:b8:c4:6f:d0:0d:c4:df:bb:bf:7d:db:
                    88:43:77:43:64:0d:b9:f8:47:03:11:59:ae:87:d1:
                    bd:49:09:23:f3:b0:8a:e5:46:d5:a5:96:33:ed:9f:
                    f5:89:de:d1:4c:14:f5:ed:bb:f7:49:e1:2f:aa:6a:
                    ee:53:ea:58:44:f0:1f:13:0a:4f:73:35:19:1a:29:
                    c1:2d:41:8b:ca:4b:f2:b8:56:59:1f:2b:36:8b:4e:
                    cc:0c:aa:f6:6c:cc:61:02:7e:5e:f5:19:d5:b7:ba:
                    e0:5d:b5:b0:32:fa:9c:0f:0f:88:f8:62:1a:62:b2:
                    10:7a:9f:89:7c:d4:7e:53:0e:b3:1e:eb:ff:e1:c9:
                    2e:51:c1:cd:f9:31:3b:b1:da:f2:ea:33:78:55:fe:
                    a7:63:a7:ca:a0:fb:3c:85:b6:ed:33:dd:6a:f5:33:
                    88:75:ea:0e:1e:44:de:11:dc:08:c1:20:5c:1b:93:
                    db:c0:5e:a3:3c:02:11:a6:dc:f0:45:e5:e0:41:8f:
                    0a:70:d1:a8:46:5d:90:ce:5f:05:74:60:18:d9:77:
                    5a:e1:0a:65:e8:e1:a6:b0:2d:0c:fe:60:ae:f2:76:
                    f8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E6:89:55:99:08:02:30:2A:32:28:AE:23:1A:F7:41:B2:29:B9:5C
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/A278209A459511E9A18A751DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:9e80:46::/47

    Signature Algorithm: sha256WithRSAEncryption
         76:53:90:ac:7f:94:7f:7f:e2:57:ec:0d:2f:51:29:9a:04:f4:
         52:bb:a6:21:3d:46:f9:35:82:4b:07:1d:71:b2:d5:4c:38:12:
         1f:1a:38:90:21:77:bf:18:10:30:4f:02:6c:1d:39:a4:48:14:
         50:2c:ca:f5:1b:3b:c2:b8:3d:a5:a5:53:d6:de:92:bc:37:04:
         63:36:77:80:f0:30:78:27:56:15:98:70:9c:fc:98:71:7c:20:
         20:15:2d:6c:e4:eb:39:73:bc:51:bd:35:36:3f:a4:2b:56:9e:
         d6:78:5f:95:dc:0a:e8:75:ce:6b:8d:ed:4e:0d:ff:52:23:ed:
         1b:49:7e:ae:15:70:82:55:65:81:ad:1c:8f:9d:32:e3:ab:57:
         5e:c9:44:37:90:99:d0:f4:0c:d0:12:b6:95:bd:6a:06:b5:df:
         c0:a1:63:a2:fc:a2:6c:5c:da:f3:55:fc:f4:82:4b:d2:d9:f1:
         20:80:59:3f:56:d4:24:5b:f8:3c:82:9d:df:e1:8d:2b:9a:5a:
         03:b4:ef:51:00:1b:03:4a:3a:bc:d4:86:97:4e:52:b9:b4:ca:
         c5:69:c5:64:30:43:c8:fc:36:aa:ae:e3:d5:8b:3b:92:f8:57:
         b6:6f:cd:42:dd:46:77:01:6e:1e:43:55:b2:f4:a8:6e:7b:bc:
         7c:47:29:f6
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICJLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw
ODYzRDNEOTMwHhcNMjIwODAyMDQyMjQ0WhcNMjMwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmU4YTY5NC0wMTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr8xMDn3kRzrx13hSHTVFnhNxG6r98Tj5tIESsuBzstSiuMRv0A3E37u/fduI
Q3dDZA25+EcDEVmuh9G9SQkj87CK5UbVpZYz7Z/1id7RTBT17bv3SeEvqmruU+pY
RPAfEwpPczUZGinBLUGLykvyuFZZHys2i07MDKr2bMxhAn5e9RnVt7rgXbWwMvqc
Dw+I+GIaYrIQep+JfNR+Uw6zHuv/4ckuUcHN+TE7sdry6jN4Vf6nY6fKoPs8hbbt
M91q9TOIdeoOHkTeEdwIwSBcG5PbwF6jPAIRptzwReXgQY8KcNGoRl2Qzl8FdGAY
2Xda4Qpl6OGmsC0M/mCu8nb4PQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFC/miVWZ
CAIwKjIoriMa90GyKblcMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB
ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMyOEQvQkRBQjY3RjYzQTgwMTFFNUFFMzkwMTU1QzRGOUFFMDIvQTI3ODIwOUE0
NTk1MTFFOUExOEE3NTFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwEkAp6AAEYwDQYJKoZIhvcNAQELBQADggEBAHZTkKx/lH9/
4lfsDS9RKZoE9FK7piE9Rvk1gksHHXGy1Uw4Eh8aOJAhd78YEDBPAmwdOaRIFFAs
yvUbO8K4PaWlU9bekrw3BGM2d4DwMHgnVhWYcJz8mHF8ICAVLWzk6zlzvFG9NTY/
pCtWntZ4X5XcCuh1zmuN7U4N/1Ij7RtJfq4VcIJVZYGtHI+dMuOrV17JRDeQmdD0
DNAStpW9aga138ChY6L8omxc2vNV/PSCS9LZ8SCAWT9W1CRb+DyCnd/hjSuaWgO0
71EAGwNKOrzUhpdOUrm0ysVpxWQwQ8j8Nqqu49WLO5L4V7ZvzULdRncBbh5DVbL0
qG57vHxHKfY=
-----END CERTIFICATE-----