Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/9FD9C994570411EE88655A66C4F9AE02.roa
File:                     9FD9C994570411EE88655A66C4F9AE02.roa (raw, json)
Hash identifier:          SrMXRjn70Bt6GspSR8ndhVXJqSjNGatC3drISzQRSV8=
Subject key identifier:   E1:99:C0:EA:4E:3D:9A:ED:BD:9F:DE:18:4C:33:00:48:2F:5D:7F:4A
Certificate issuer:       /CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
Certificate serial:       0185
Authority key identifier: 3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/9FD9C994570411EE88655A66C4F9AE02.roa
Signing time:             Tue 19 Sep 2023 15:53:07 +0000
ROA not before:           Tue 19 Sep 2023 15:53:07 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     136969
IP address blocks:        103.190.23.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A646/serialNumber=3FB3582470ED03F19435E69B2C19B4074770F097
        Validity
            Not Before: Sep 19 15:53:07 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=6509c3e3-5761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6a:47:0c:d7:94:9d:65:24:81:2d:82:b3:75:
                    cb:3d:f4:1f:e7:15:e7:dd:01:db:d6:d8:5e:44:80:
                    48:63:f4:38:5e:26:59:5e:f5:80:36:aa:29:24:df:
                    22:66:ce:42:74:48:1f:ac:39:3d:1b:25:b8:eb:1e:
                    8b:ad:01:96:05:70:67:60:4c:a1:e4:bd:12:6e:99:
                    a6:30:6b:a2:1a:c6:fe:9a:6f:a4:fc:d5:76:29:e5:
                    8a:27:ed:ac:ef:b2:e2:9b:c4:42:b7:c9:8a:37:bf:
                    7e:3f:c0:e9:24:3e:ab:f1:a7:2b:04:50:fe:38:5d:
                    f6:68:08:44:8e:28:b4:70:54:89:d1:54:88:66:a4:
                    11:34:e9:5d:85:a7:35:13:ff:0a:c6:56:c4:e9:5d:
                    73:28:f6:0b:a4:29:bc:af:0e:8e:d3:83:ed:8c:c9:
                    2f:54:c1:e5:5c:6e:34:43:e9:bb:13:96:38:b8:42:
                    74:76:b2:0c:2c:e0:0a:e3:88:91:fc:46:d9:00:f2:
                    42:24:d6:7f:5a:62:f8:b9:93:cb:3d:4a:67:7f:9a:
                    b6:31:ea:4d:68:c9:c6:57:3d:d0:dd:f8:36:b0:7e:
                    e3:b2:b3:32:a7:fe:65:fa:7c:31:b0:1a:b3:c2:50:
                    9f:28:65:74:19:b5:1e:92:75:33:77:51:31:fe:84:
                    b7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:99:C0:EA:4E:3D:9A:ED:BD:9F:DE:18:4C:33:00:48:2F:5D:7F:4A
            X509v3 Authority Key Identifier:
                keyid:3F:B3:58:24:70:ED:03:F1:94:35:E6:9B:2C:19:B4:07:47:70:F0:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/P7NYJHDtA_GUNeabLBm0B0dw8Jc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7NYJHDtA_GUNeabLBm0B0dw8Jc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A646/2F639EB0F58511EC87F6FE13C4F9AE02/9FD9C994570411EE88655A66C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:e1:4c:68:c4:d2:fd:1c:a2:ca:4c:64:f1:1e:e3:71:5f:0d:
         08:69:bb:0c:29:13:83:d8:93:7f:59:2b:df:be:be:6c:b4:03:
         7e:c8:23:43:a7:1a:8d:1e:c0:3d:15:db:af:f5:cb:78:af:4d:
         f7:f2:c8:0c:fa:87:d9:0e:33:c5:fa:e0:3c:12:01:3a:7d:ca:
         83:55:e4:93:5d:9e:1f:4e:d6:b7:c7:7e:b0:ad:20:81:82:26:
         86:2b:19:9a:3f:1c:22:b0:29:4e:b5:31:5a:1d:97:90:df:fe:
         73:3a:9f:78:5c:0e:8b:61:5c:ac:56:13:2e:85:69:0a:11:25:
         80:93:d7:de:fa:f1:c8:d5:bd:3f:ed:59:1d:59:94:2b:12:64:
         d3:4e:4f:2f:50:29:0c:08:38:4f:15:d4:57:e0:89:06:01:bf:
         8c:37:5d:8d:1f:47:44:9c:dd:88:a4:49:f3:09:b4:3a:be:e9:
         bc:b5:71:9b:f5:c2:5b:d4:13:0d:72:3a:94:f8:86:e9:49:bf:
         23:3f:9c:2d:de:f4:38:8d:8a:da:8c:88:49:62:a7:0a:ba:97:
         e9:9e:f6:9e:c6:f1:f4:08:b0:47:44:03:f2:76:71:8c:e1:e8:
         7a:ec:72:4c:5d:98:e9:40:7d:dc:e6:98:19:32:d5:9f:ed:69:
         6d:2b:e9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----