Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/C27F6AA8044811EE93127287C4F9AE02.roa
File:                     C27F6AA8044811EE93127287C4F9AE02.roa (raw, json)
Hash identifier:          qc5JdnieT2dmqNvICk+ryycVSkAVpvkmNbsE6DrGspg=
Subject key identifier:   16:50:6A:6E:1B:98:7A:59:43:7C:86:AE:96:EF:A4:70:CC:70:89:B2
Certificate issuer:       /CN=A9146CB4/serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD
Certificate serial:       07
Authority key identifier: FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/C27F6AA8044811EE93127287C4F9AE02.roa
Signing time:             Tue 06 Jun 2023 09:01:44 +0000
ROA not before:           Tue 06 Jun 2023 09:01:44 +0000
ROA not after:            Wed 01 May 2024 00:00:00 +0000
asID:                     56301
IP address blocks:        103.85.184.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146CB4/serialNumber=FB16B19DFBF7CA6AC40A6B6A353F78578917E0FD
        Validity
            Not Before: Jun  6 09:01:44 2023 GMT
            Not After : May  1 00:00:00 2024 GMT
        Subject: CN=647ef5f8-ce9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c7:b2:a5:57:2f:9a:c6:56:18:c3:54:78:e1:
                    58:1f:12:41:33:bf:6a:fb:2e:ac:60:0e:9d:8a:57:
                    75:5d:49:2d:f4:22:cb:3d:cd:a3:19:ac:4b:5b:c8:
                    3e:b9:f1:5b:ee:a7:84:3c:7c:c5:ff:7a:c8:12:f5:
                    ba:a6:7c:e8:1e:20:bb:30:64:a7:02:01:e6:02:a8:
                    f6:91:66:a8:93:c4:e5:6c:84:cf:19:68:90:b3:6f:
                    bc:15:0a:35:73:ba:33:e6:1b:4d:ed:26:af:a7:6a:
                    3f:3b:16:b4:7a:f7:5c:b9:b2:2f:49:e7:2c:c9:19:
                    9c:7e:d4:6c:0c:5a:79:da:e9:46:45:9e:0b:a2:fa:
                    21:63:c4:46:9e:50:df:fe:fb:1d:9d:8e:90:15:91:
                    c3:da:0a:16:f7:6e:97:7a:9c:cf:c3:d1:09:6d:02:
                    bf:b8:61:65:f5:54:70:30:d8:1a:07:70:db:e3:c5:
                    b5:f4:78:ec:e2:e6:89:e6:e0:67:ba:db:0e:10:4b:
                    c5:c5:e4:5c:cd:89:00:fb:2e:e9:76:57:c5:09:fe:
                    be:41:37:09:b3:39:45:bd:29:f4:97:60:8b:cb:45:
                    11:ee:65:d8:30:62:31:8a:72:ca:32:6e:fd:8c:f4:
                    e2:85:1e:4d:a7:ca:b2:bb:b7:21:77:6c:7f:ea:aa:
                    70:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:50:6A:6E:1B:98:7A:59:43:7C:86:AE:96:EF:A4:70:CC:70:89:B2
            X509v3 Authority Key Identifier:
                keyid:FB:16:B1:9D:FB:F7:CA:6A:C4:0A:6B:6A:35:3F:78:57:89:17:E0:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/-xaxnfv3ymrECmtqNT94V4kX4P0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-xaxnfv3ymrECmtqNT94V4kX4P0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146CB4/2A84D1D8FDC811ED972EDB1EC4F9AE02/C27F6AA8044811EE93127287C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:af:f3:3a:f3:8d:1f:24:01:c9:80:3e:75:dc:9a:76:a4:97:
         4a:78:ec:c3:59:9f:86:00:f9:59:a8:a7:8f:d3:f2:9d:7d:1e:
         80:40:79:78:34:99:cd:1b:f2:94:31:f2:07:e6:04:bd:2e:ea:
         c6:20:f3:70:96:96:98:18:bd:a4:7e:82:21:04:4e:4a:60:ff:
         c3:02:90:34:e9:97:68:98:d1:0e:99:ca:bd:9b:31:d5:a2:56:
         dc:66:91:68:5e:fa:fe:35:e3:b6:d4:c7:5f:6c:8c:cc:0f:14:
         f2:fa:b8:64:4c:56:dc:92:a7:1e:eb:f0:86:3a:5d:6a:9f:9c:
         e2:68:1f:d8:d9:3f:b1:ee:9b:85:6c:e9:88:5d:c6:f1:a6:78:
         69:1e:c6:e7:4b:b4:0f:87:9a:eb:ec:ac:b5:03:2d:de:9f:a8:
         07:58:e7:c0:56:e1:0d:b1:6d:37:ad:6e:0f:4b:61:92:30:42:
         de:4f:8c:a5:f7:da:a9:7f:71:d3:8f:fa:04:ba:f3:9b:da:56:
         f7:a7:e3:5e:58:b6:fd:93:d4:d7:5f:a4:10:ca:49:13:37:89:
         7d:37:34:6d:d3:2f:25:5e:4e:a1:6d:fe:e2:ef:db:74:b9:c3:
         f2:a5:5a:94:02:4d:30:c7:5e:14:5e:b7:a2:8a:91:39:19:d1:
         8d:c4:6f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----