Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/C66D76987B9D11ED8D294686C4F9AE02.roa
File:                     C66D76987B9D11ED8D294686C4F9AE02.roa (raw, json)
Hash identifier:          2xptRlqYtBrWU+Q3IkAT2EBbcCPdJnqtx0MMqI0eyMY=
Subject key identifier:   07:FE:D9:B1:5A:3B:F4:0F:DF:24:8C:BA:D7:75:4F:F1:86:2B:B4:3D
Certificate issuer:       /CN=A9130F4B/serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50
Certificate serial:       0E47
Authority key identifier: 99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/C66D76987B9D11ED8D294686C4F9AE02.roa
Signing time:             Wed 14 Dec 2022 10:55:09 +0000
ROA not before:           Wed 14 Dec 2022 10:55:09 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     139005
IP address blocks:        103.138.130.0/23 maxlen: 24
                          2405:e40::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3655 (0xe47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130F4B/serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50
        Validity
            Not Before: Dec 14 10:55:09 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=6399ab8d-4faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ac:5b:1e:2c:50:e6:f7:8b:4a:f7:2b:98:30:
                    06:61:69:5c:ee:f0:20:0f:57:90:ca:df:e6:5e:9c:
                    2c:37:8b:d9:00:ca:da:27:c7:2a:c4:26:03:bf:d4:
                    a8:46:ce:cb:98:fa:6a:59:8c:32:37:37:37:73:17:
                    89:c6:e2:94:b4:c9:f8:b9:a7:d3:82:11:29:8e:7d:
                    00:93:35:7c:81:3c:1f:99:ae:e1:65:b5:5c:67:f2:
                    8d:c8:30:3e:69:be:24:b8:d0:8f:2e:46:4b:7e:02:
                    e9:88:a3:72:81:ae:87:44:24:0d:9f:c9:41:a5:fa:
                    93:a4:e5:22:42:13:1d:f6:8e:c4:c7:0c:df:d3:3e:
                    b0:12:93:cc:a5:e4:9f:61:24:26:62:61:98:5a:50:
                    ff:13:df:75:47:15:69:91:08:87:4e:3a:d4:51:8a:
                    be:d3:bf:2f:b3:49:6a:8d:e2:24:46:43:8b:91:ae:
                    46:1c:2f:e0:1f:3d:68:55:14:64:5a:63:73:03:51:
                    10:5d:cf:f7:58:ff:ab:39:7d:9a:a7:55:1d:54:5c:
                    86:79:6f:fe:2b:3d:95:07:1c:32:10:ca:78:95:ed:
                    af:df:cc:17:04:64:e4:51:ac:da:3f:0d:8d:ba:d4:
                    39:3c:cb:20:99:60:3a:68:c3:b6:45:cb:96:33:1b:
                    f6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FE:D9:B1:5A:3B:F4:0F:DF:24:8C:BA:D7:75:4F:F1:86:2B:B4:3D
            X509v3 Authority Key Identifier:
                keyid:99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/C66D76987B9D11ED8D294686C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.130.0/23
                IPv6:
                  2405:e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:20:11:d7:31:11:2e:70:30:80:b7:ee:c2:81:16:f7:1e:57:
         76:dd:8e:aa:47:b9:89:b9:50:cf:f0:49:0f:b8:25:c9:90:99:
         72:4f:d7:ce:53:f8:ea:80:ed:70:58:fc:53:92:00:46:0f:e1:
         af:fc:c8:f2:d2:ea:75:ba:56:39:80:02:9d:8d:b2:d5:2e:c7:
         1d:0e:6c:65:92:ca:bd:7d:67:6e:ac:fa:13:a1:e8:08:1f:8c:
         08:b0:05:ab:ad:86:c4:34:ff:fb:08:c1:53:97:4e:f3:56:18:
         27:9a:7a:c8:23:c8:e7:b1:25:09:9d:a4:26:e9:53:29:10:23:
         f4:ca:eb:5b:82:97:a3:04:ce:8e:d8:a2:32:c8:ae:e2:1c:6b:
         d4:83:64:93:bc:14:16:e4:44:8e:9d:3a:94:03:f8:93:a1:e7:
         7c:ed:92:82:6f:ad:1b:ae:d1:b9:4a:17:9d:41:c2:7f:fb:be:
         74:79:ea:92:ff:52:60:0f:f8:b2:b2:8f:98:39:c6:6d:6a:14:
         26:3e:81:18:16:f5:58:ac:d9:b0:c5:62:88:e7:53:44:81:6b:
         f1:cf:cc:55:b8:d0:08:75:58:e4:ce:ad:96:39:3f:4d:8b:65:
         5b:90:e1:a0:40:19:15:51:9c:65:e7:ac:ec:76:71:c5:8d:b9:
         8d:e1:c2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----