Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/DA569512509711EDABE48E81C4F9AE02.roa
File:                     DA569512509711EDABE48E81C4F9AE02.roa (raw, json)
Hash identifier:          49tuapBqCgL5MYFb5sCUaIY89rcs5KlhuhxrhoFn5CE=
Subject key identifier:   55:CC:B8:5E:35:F2:3A:A9:EA:7F:02:65:98:41:32:BC:98:17:D0:7E
Certificate issuer:       /CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
Certificate serial:       36
Authority key identifier: 74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/DA569512509711EDABE48E81C4F9AE02.roa
Signing time:             Thu 20 Oct 2022 16:54:25 +0000
ROA not before:           Thu 20 Oct 2022 16:54:25 +0000
ROA not after:            Sat 30 Dec 2023 00:00:00 +0000
asID:                     48
IP address blocks:        2400:ac20:1000::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914661C/serialNumber=74AEB63F2F1DA957D65820964FF79DF0F593800C
        Validity
            Not Before: Oct 20 16:54:25 2022 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=63517d41-dddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:97:83:da:01:dd:f3:d5:9c:c8:85:ed:5d:54:
                    4c:43:14:27:10:f5:3e:17:31:20:15:4b:29:1f:80:
                    d9:84:e0:25:55:08:b9:38:70:b8:0a:25:73:ac:84:
                    98:7a:f4:f3:4b:8c:74:e9:00:4e:e5:15:1a:ad:e8:
                    72:76:7d:03:45:e7:62:ba:1a:fe:f7:53:03:94:30:
                    ad:aa:a4:3a:96:7d:9a:d9:87:82:77:58:c8:1b:bc:
                    7a:ef:aa:4d:f3:35:bd:c4:c7:f0:aa:ea:0b:d2:ac:
                    28:c8:6e:e2:8c:36:3b:19:c3:b1:11:97:ca:05:bc:
                    70:dc:4c:f7:6e:75:52:de:a2:15:21:c9:c5:33:e3:
                    03:70:68:8c:d4:7d:53:db:69:fb:68:04:68:eb:ea:
                    97:8d:92:f8:88:82:8b:17:aa:75:83:34:0c:b6:ae:
                    1d:9f:fe:26:0b:db:a3:aa:cf:1b:ca:82:60:2e:c7:
                    c7:9e:00:ee:47:7b:c3:fd:6e:42:80:e3:d7:0d:05:
                    16:ed:f1:0c:1f:08:d8:5f:ca:b3:07:b4:6e:36:39:
                    81:60:47:44:ea:24:55:54:13:c7:5a:53:08:c3:30:
                    8a:0d:ff:d6:70:36:0d:63:6c:ec:28:55:de:44:c9:
                    7b:a7:ea:48:fb:82:5a:9d:1d:50:9d:c1:9c:82:d4:
                    af:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CC:B8:5E:35:F2:3A:A9:EA:7F:02:65:98:41:32:BC:98:17:D0:7E
            X509v3 Authority Key Identifier:
                keyid:74:AE:B6:3F:2F:1D:A9:57:D6:58:20:96:4F:F7:9D:F0:F5:93:80:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/dK62Py8dqVfWWCCWT_ed8PWTgAw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK62Py8dqVfWWCCWT_ed8PWTgAw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914661C/770CBE2436A611ED8FC1702CC4F9AE02/DA569512509711EDABE48E81C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:ac20:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:df:a9:94:a8:66:c9:4d:09:2f:fb:8c:39:ae:0e:ab:a1:14:
         f3:f9:25:33:27:f7:15:5b:d5:52:49:47:d5:c9:b4:0a:52:45:
         12:29:c5:dc:49:a2:9c:31:14:94:23:a5:12:4a:7c:8f:c7:f5:
         68:72:33:ab:98:b4:ea:5a:f9:fe:4a:5c:1e:db:cb:81:d3:66:
         b4:88:7d:e2:99:f0:1a:cd:8b:c6:84:96:00:af:e5:37:a9:4d:
         92:f5:04:2d:24:55:1d:59:94:b2:eb:7e:76:a4:23:a4:af:bd:
         b0:61:14:4d:86:ed:9e:67:02:de:2b:26:e6:f2:8d:eb:58:15:
         26:e4:38:7d:f4:b5:39:48:82:56:a0:64:ab:9a:84:9a:8f:f3:
         66:9e:43:6f:48:d0:2e:41:25:16:d5:16:89:cd:71:83:fd:00:
         b3:b6:fc:21:cb:a5:de:2f:84:4d:fb:8f:be:dc:83:12:fb:24:
         bc:b2:77:e2:a4:67:68:14:7f:51:d1:3e:28:bf:20:61:96:12:
         85:46:61:3f:1c:05:49:7f:75:f1:4e:67:c3:67:56:d1:d5:00:
         f1:95:86:34:49:45:3d:26:e6:86:2e:57:28:dc:95:6c:7d:a2:
         4c:2c:ea:95:1d:4a:34:15:2c:6d:cb:2a:d0:e0:49:23:8f:fc:
         c7:0e:dd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----