Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/C8EBE7107D5511EDBBAB4363C4F9AE02.roa
File:                     C8EBE7107D5511EDBBAB4363C4F9AE02.roa (raw, json)
Hash identifier:          e0UJaMPR+p8Gl7BmIz1RusYqcnP23vb9qVvdqqumrbs=
Subject key identifier:   AA:11:4D:3F:9F:AB:DE:EE:A9:AF:75:5A:35:11:16:28:22:32:60:A8
Certificate issuer:       /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial:       9F
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/C8EBE7107D5511EDBBAB4363C4F9AE02.roa
Signing time:             Tue 29 Aug 2023 04:24:17 +0000
ROA not before:           Tue 29 Aug 2023 04:24:17 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     211432
IP address blocks:        103.230.11.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
        Validity
            Not Before: Aug 29 04:24:17 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64ed72f0-ce99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:60:07:7f:2a:93:dc:44:d0:fb:b9:e8:eb:0b:
                    1f:3e:c9:ab:f5:3d:cb:1b:da:90:46:f0:e5:16:1e:
                    8d:57:76:d9:28:ce:64:b6:cd:11:d2:8e:ff:f3:e7:
                    5d:13:64:08:14:41:f8:b9:e3:f6:0f:38:c4:de:15:
                    7e:39:d2:33:3f:9b:2f:78:34:88:88:c5:49:0e:57:
                    4c:52:40:9e:de:ad:6a:81:e6:f6:f4:4b:5f:3b:35:
                    ca:58:cd:9c:d8:43:8d:c5:57:5c:7e:14:38:ed:a5:
                    21:de:ef:6d:8d:a4:7f:5d:39:0f:60:e5:73:24:b8:
                    80:8c:63:f5:87:8b:54:6c:d9:a4:06:77:69:24:40:
                    8e:51:1c:88:d0:42:2e:e4:d6:1c:78:0d:24:97:a9:
                    fb:e4:c2:7d:86:e9:a9:3e:ad:91:21:9b:6d:79:a3:
                    a7:00:60:3f:9e:a5:f4:1a:12:a9:ac:52:da:9c:86:
                    a7:35:e8:30:79:bb:4e:35:79:9d:bb:2c:ec:27:7e:
                    4e:b4:93:30:80:c4:f7:10:81:d0:97:ed:17:61:36:
                    37:76:07:96:1f:8f:f7:20:67:87:64:a7:5f:81:0c:
                    f9:6c:db:2e:d8:af:6f:77:55:e8:c1:b0:41:1b:bc:
                    26:44:01:31:66:f4:ed:84:dc:3d:be:56:1a:ce:7c:
                    36:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:11:4D:3F:9F:AB:DE:EE:A9:AF:75:5A:35:11:16:28:22:32:60:A8
            X509v3 Authority Key Identifier:
                keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/C8EBE7107D5511EDBBAB4363C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:33:36:80:da:3c:03:ae:c3:48:2c:43:90:28:83:7c:6f:bf:
         e8:9e:57:6a:fb:08:95:bc:94:e2:7f:11:4b:d9:77:70:ad:b5:
         f4:b4:9e:06:21:05:7e:73:f9:fa:a3:03:30:cd:63:1e:04:5e:
         3b:74:23:4d:82:1d:af:ab:e2:ad:6d:bd:77:26:72:54:f0:8b:
         01:52:1e:a3:60:37:5d:20:13:3e:4d:7e:26:e4:a2:c7:f6:6a:
         60:c2:0c:04:3b:66:c2:94:49:5f:af:89:d6:fe:7c:ff:26:8b:
         f8:a0:2a:19:be:59:bf:29:c1:bf:43:66:78:7a:1b:f8:ef:f2:
         96:71:0b:42:c8:97:52:53:1a:b9:ad:fd:19:07:1b:cf:e7:03:
         e4:e0:32:3b:6c:b7:4f:cf:d3:52:9a:9f:dd:cb:e8:dd:99:52:
         0b:7b:34:a8:5d:15:fa:8d:2e:77:a7:26:a9:a9:83:e6:79:a6:
         2b:2f:e5:b3:3d:7b:d6:4a:fe:ac:51:7c:06:8e:4e:0c:57:af:
         0e:3a:5e:ec:4b:d0:b6:02:b7:21:1a:cd:ce:ee:6c:70:a6:d7:
         c8:0d:d0:23:52:eb:70:da:ed:ba:ef:ff:52:12:8d:ba:ee:5d:
         24:56:ec:53:49:c9:f8:7a:5d:71:b4:df:96:f3:a0:2a:2c:df:
         d0:1f:e6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----