Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/0CA7D07CF89511ECB1E9FF6BC4F9AE02.roa
File:                     0CA7D07CF89511ECB1E9FF6BC4F9AE02.roa (raw, json)
Hash identifier:          GWrKShWedsBBd2CivH2k1f1QCZCkug+55MnoR9vDiQ4=
Subject key identifier:   89:80:81:6D:3C:49:E3:5A:08:51:CD:84:6C:62:4C:2F:E9:86:31:0F
Certificate issuer:       /CN=A911C756/serialNumber=0D562AADC1C0498DAEE2610C1A7DA875BE635CEA
Certificate serial:       02
Authority key identifier: 0D:56:2A:AD:C1:C0:49:8D:AE:E2:61:0C:1A:7D:A8:75:BE:63:5C:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/0CA7D07CF89511ECB1E9FF6BC4F9AE02.roa
Signing time:             Thu 30 Jun 2022 16:52:39 +0000
ROA not before:           Thu 30 Jun 2022 16:52:39 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     149821
IP address blocks:        103.187.22.0/24 maxlen: 24
                          103.187.23.0/24 maxlen: 24
                          2400:7920::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C756/serialNumber=0D562AADC1C0498DAEE2610C1A7DA875BE635CEA
        Validity
            Not Before: Jun 30 16:52:39 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=62bdd4d7-10cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:df:35:b5:89:e1:99:5c:57:00:ac:70:8a:44:
                    7b:01:d8:b5:94:19:f5:c6:b4:08:b3:db:7c:75:e1:
                    f2:96:4f:a0:85:7c:91:54:6d:95:80:2c:b5:13:3a:
                    1c:bf:5d:19:50:a0:95:34:4e:4d:b5:81:c0:e3:41:
                    fe:f9:1b:59:32:d6:7f:73:d1:49:d1:c2:c3:86:68:
                    2b:e9:57:6d:bd:24:90:41:71:35:1b:56:7b:a2:90:
                    72:53:41:a9:29:6f:be:68:6d:25:a1:a3:76:c8:59:
                    df:2e:7f:11:67:df:65:f4:d9:fb:d5:54:8b:5f:24:
                    cb:d7:b6:43:ea:06:af:dc:db:8e:49:0a:9a:0d:6b:
                    78:8f:b5:ec:e8:fb:07:f3:2c:42:06:3c:25:53:25:
                    f2:cd:63:8e:5c:cd:4c:74:6c:a1:5c:e4:2d:70:47:
                    7b:5a:ed:f0:4b:05:93:b4:6c:96:ee:86:a7:fd:f7:
                    34:e1:d4:8d:ac:0a:43:a9:74:3a:25:dd:dc:ab:b5:
                    e1:25:f1:ac:c5:4a:92:8c:83:b1:d1:f5:48:4d:66:
                    6c:75:77:6d:d3:58:b3:f5:9f:51:40:46:0a:49:f0:
                    96:c1:d3:19:42:71:0e:af:65:d6:93:2e:44:ae:c9:
                    90:48:a7:6e:77:11:f6:2f:d4:c8:c5:2b:ca:ee:c1:
                    06:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:80:81:6D:3C:49:E3:5A:08:51:CD:84:6C:62:4C:2F:E9:86:31:0F
            X509v3 Authority Key Identifier:
                keyid:0D:56:2A:AD:C1:C0:49:8D:AE:E2:61:0C:1A:7D:A8:75:BE:63:5C:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/DVYqrcHASY2u4mEMGn2odb5jXOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVYqrcHASY2u4mEMGn2odb5jXOo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C756/91906852F89111EC87EDEC6AC4F9AE02/0CA7D07CF89511ECB1E9FF6BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.22.0/23
                IPv6:
                  2400:7920::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:2a:06:02:77:1a:9f:61:e0:10:cd:1a:02:fa:0f:9a:26:60:
         75:0e:e1:a2:fc:67:bf:a7:d3:78:85:49:8b:59:3d:b8:04:c9:
         9a:d5:d4:a2:9c:52:38:fe:93:06:04:52:94:6d:6a:84:39:fc:
         9b:ff:21:8f:26:7d:46:fc:f2:2f:95:b0:64:f8:56:4f:74:b3:
         be:aa:c5:ee:62:c5:4b:c9:05:ec:40:df:51:f4:fd:5a:11:06:
         61:67:2b:e4:42:4c:86:e8:0f:87:bc:21:9b:ee:8f:3d:53:9e:
         35:75:6e:ae:27:d0:c5:44:de:d4:c2:87:13:81:07:94:e9:42:
         ad:83:81:91:58:ca:45:85:d2:66:8d:7c:19:8d:d5:9d:b2:3d:
         dc:14:76:3a:a4:72:74:3a:2a:aa:5e:13:84:9a:62:61:45:6b:
         e9:bf:e6:64:82:0e:e7:1b:ee:d2:1c:f5:8e:73:1e:c2:c4:df:
         91:ca:fd:77:3e:ee:6a:b1:94:f4:98:5b:f4:1e:a2:eb:13:ed:
         05:8c:45:81:b8:78:6b:97:6d:79:00:d8:46:f5:26:4f:fb:d7:
         98:5d:b8:26:22:6b:63:99:df:cc:61:b2:9c:45:a6:cd:21:4d:
         85:df:c9:e8:69:f6:1a:d4:cd:ab:7b:a0:26:68:e2:4f:59:7c:
         3f:a4:d5:92
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
Qzc1NjExMC8GA1UEBRMoMEQ1NjJBQURDMUMwNDk4REFFRTI2MTBDMUE3REE4NzVC
RTYzNUNFQTAeFw0yMjA2MzAxNjUyMzlaFw0yMzA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYyYmRkNGQ3LTEwY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDb3zW1ieGZXFcArHCKRHsB2LWUGfXGtAiz23x14fKWT6CFfJFUbZWALLUTOhy/
XRlQoJU0Tk21gcDjQf75G1ky1n9z0UnRwsOGaCvpV229JJBBcTUbVnuikHJTQakp
b75obSWho3bIWd8ufxFn32X02fvVVItfJMvXtkPqBq/c245JCpoNa3iPtezo+wfz
LEIGPCVTJfLNY45czUx0bKFc5C1wR3ta7fBLBZO0bJbuhqf99zTh1I2sCkOpdDol
3dyrteEl8azFSpKMg7HR9UhNZmx1d23TWLP1n1FARgpJ8JbB0xlCcQ6vZdaTLkSu
yZBIp253EfYv1MjFK8ruwQYFAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUiYCBbTxJ
41oIUc2EbGJML+mGMQ8wHwYDVR0jBBgwFoAUDVYqrcHASY2u4mEMGn2odb5jXOow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDNzU2LzkxOTA2ODUyRjg5
MTExRUM4N0VERUM2QUM0RjlBRTAyL0RWWXFyY0hBU1kydTRtRU1HbjJvZGI1alhP
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRFZZcXJjSEFTWTJ1NG1FTUduMm9kYjVqWE9vLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Qzc1Ni85MTkwNjg1MkY4OTExMUVDODdFREVDNkFDNEY5QUUwMi8wQ0E3RDA3Q0Y4
OTUxMUVDQjFFOUZGNkJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAWe7FjANBAIAAjAHAwUAJAB5IDANBgkqhkiG9w0BAQsFAAOC
AQEAgCoGAncan2HgEM0aAvoPmiZgdQ7hovxnv6fTeIVJi1k9uATJmtXUopxSOP6T
BgRSlG1qhDn8m/8hjyZ9RvzyL5WwZPhWT3SzvqrF7mLFS8kF7EDfUfT9WhEGYWcr
5EJMhugPh7whm+6PPVOeNXVurifQxUTe1MKHE4EHlOlCrYOBkVjKRYXSZo18GY3V
nbI93BR2OqRydDoqql4ThJpiYUVr6b/mZIIO5xvu0hz1jnMewsTfkcr9dz7uarGU
9Jhb9B6i6xPtBYxFgbh4a5dteQDYRvUmT/vXmF24JiJrY5nfzGGynEWmzSFNhd/J
6Gn2GtTNq3ugJmjiT1l8P6TVkg==
-----END CERTIFICATE-----