Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/6C9CFD808C1B11ED91FF3972C4F9AE02.roa
File:                     6C9CFD808C1B11ED91FF3972C4F9AE02.roa (raw, json)
Hash identifier:          G4WpgW++/aqwTeqiiDQQ+GgGzxx1LzBnNRbxLT9U87Y=
Subject key identifier:   ED:71:22:58:4E:03:5C:CF:D7:32:EC:C8:57:BE:A6:96:5C:EB:A5:81
Certificate issuer:       /CN=A9120CDE/serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A
Certificate serial:       0FCD
Authority key identifier: 11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/6C9CFD808C1B11ED91FF3972C4F9AE02.roa
Signing time:             Wed 04 Jan 2023 10:34:53 +0000
ROA not before:           Wed 04 Jan 2023 10:34:53 +0000
ROA not after:            Sat 30 Dec 2023 00:00:00 +0000
asID:                     65275
IP address blocks:        103.123.6.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4045 (0xfcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120CDE/serialNumber=116F920F873066747A8CEDDAFFE84BCFBDB0351A
        Validity
            Not Before: Jan  4 10:34:53 2023 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=63b5564d-2903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9d:19:cd:3c:6b:8f:9e:f3:35:01:dc:d9:ab:
                    2d:f2:68:5d:0f:ab:e5:37:2a:cf:f5:e6:72:fd:30:
                    d4:de:46:ae:be:5a:0f:10:88:42:8b:cf:f1:95:ff:
                    27:53:1e:03:27:8f:6d:99:8b:ea:ef:71:86:b6:9c:
                    10:0c:96:a1:ad:13:3b:be:b3:01:8a:1f:1f:28:a4:
                    85:48:a2:49:28:09:7f:2f:15:dc:61:09:88:78:70:
                    05:19:a2:c6:f1:9c:65:fe:9a:2c:80:e3:48:28:d2:
                    41:e9:6c:63:fc:81:16:89:0d:a4:09:01:e5:d9:65:
                    67:85:73:d1:8a:25:66:f7:43:94:6b:3c:b4:f5:61:
                    54:34:4f:39:ef:be:a2:20:7a:a5:01:f6:8c:7b:3a:
                    58:0b:1d:6e:15:07:ff:48:99:62:97:b1:ae:68:93:
                    d0:67:08:b4:4b:48:1c:66:82:b7:81:a4:20:20:32:
                    3a:a1:7a:3b:53:f5:0d:8d:7a:5a:d9:0d:b9:c3:ec:
                    55:85:f0:e4:ed:65:5c:db:fb:45:28:21:63:5e:61:
                    b7:ea:f5:34:b1:e3:3e:f7:6c:e8:b9:1e:28:74:64:
                    fa:b1:36:66:b9:7c:9b:91:86:4a:06:8f:eb:32:d5:
                    6f:b2:da:62:ae:fc:b0:d3:c1:b8:7e:39:72:fc:b6:
                    4b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:71:22:58:4E:03:5C:CF:D7:32:EC:C8:57:BE:A6:96:5C:EB:A5:81
            X509v3 Authority Key Identifier:
                keyid:11:6F:92:0F:87:30:66:74:7A:8C:ED:DA:FF:E8:4B:CF:BD:B0:35:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/EW-SD4cwZnR6jO3a_-hLz72wNRo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EW-SD4cwZnR6jO3a_-hLz72wNRo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120CDE/23D8566EFBDB11E8920CB044C4F9AE02/6C9CFD808C1B11ED91FF3972C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:18:ac:cf:57:9e:2e:5c:c1:49:8e:ff:19:18:fa:b6:d3:0f:
         ff:75:a2:2f:67:ef:d3:25:fd:e8:75:01:b6:b9:08:db:6d:af:
         e9:cf:f4:80:1b:72:ee:ca:d5:04:a1:a5:2d:1e:f9:ac:de:ef:
         76:10:a5:26:ca:4d:3d:e9:34:ad:f8:42:80:b6:6c:91:b6:28:
         ff:ea:9d:12:64:cb:1b:4a:4a:d3:79:4d:cc:6a:26:fd:54:b0:
         6e:77:e2:78:2d:aa:a6:90:ea:27:64:0f:e2:8d:63:f3:d3:15:
         6a:fd:60:5d:8a:1a:af:f3:7d:94:aa:08:21:db:28:fa:5a:ae:
         f8:f9:a5:67:33:f9:34:78:65:1b:b2:3f:01:94:32:3c:8b:5b:
         29:ff:52:b3:45:f5:7f:5e:3c:d2:71:5d:b6:dc:07:11:00:59:
         8f:1b:07:2d:ca:03:30:fa:cc:72:62:e6:59:35:4f:df:2e:d8:
         2e:ba:a7:76:d7:09:c3:21:9d:a8:a0:c7:25:8b:d2:9c:40:14:
         cd:40:3e:28:97:ac:ca:50:eb:af:2b:b5:e9:60:88:84:5f:0e:
         cc:e8:fe:bc:d0:7c:9d:be:dc:8f:fb:c2:3f:5f:11:06:1b:92:
         87:25:92:5b:3b:41:20:06:69:fe:c8:57:83:17:d3:db:66:e3:
         0c:89:1d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----