Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/934D8A544F6811EB8E7B045AC4F9AE02.roa
File:                     934D8A544F6811EB8E7B045AC4F9AE02.roa (raw, json)
Hash identifier:          HHONt1SsVFQKkVw6K3Y693HvkjC3+CKTqlVYdTkRfRo=
Subject key identifier:   56:C9:AB:70:93:B9:72:71:1F:86:FF:18:02:53:97:8B:7E:C9:F3:85
Certificate issuer:       /CN=A914F521/serialNumber=2976876753D65562A7CA85E3E9E8DF750797C948
Certificate serial:       0AB4
Authority key identifier: 29:76:87:67:53:D6:55:62:A7:CA:85:E3:E9:E8:DF:75:07:97:C9:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/934D8A544F6811EB8E7B045AC4F9AE02.roa
Signing time:             Fri 10 Jun 2022 07:28:30 +0000
ROA not before:           Fri 10 Jun 2022 07:28:30 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     140616
IP address blocks:        103.115.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2740 (0xab4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F521/serialNumber=2976876753D65562A7CA85E3E9E8DF750797C948
        Validity
            Not Before: Jun 10 07:28:30 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=62a2f29e-62e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:09:f0:2e:c6:b0:7f:7e:9d:3a:2d:ac:8b:74:
                    2b:8a:ac:ac:f6:1a:05:02:5d:b6:32:f8:01:9e:33:
                    d7:7c:4f:98:ef:c9:32:ac:2a:55:57:1c:8d:3f:a1:
                    91:9a:41:35:9f:51:06:cf:9f:90:67:81:04:1e:89:
                    b9:be:98:89:17:35:ad:f0:ac:d7:23:ac:7d:9c:be:
                    ab:a5:31:5a:bf:52:7a:bd:66:41:f2:cf:51:39:48:
                    e0:c6:d7:35:9a:f7:f4:b4:34:27:2c:59:98:b5:cf:
                    cb:d3:2f:39:45:17:4e:f5:79:68:ee:b0:80:7f:76:
                    76:dc:ec:82:26:b9:9c:3a:d2:3a:f9:eb:a7:83:5f:
                    72:f6:61:4f:f9:99:b5:84:cc:10:dd:98:85:c5:a7:
                    7f:d3:60:aa:02:e0:d6:38:5e:c1:c8:ff:32:cf:d8:
                    51:22:50:b6:86:fe:fd:c3:3a:32:d3:90:30:45:12:
                    75:57:76:64:2d:61:1e:03:0c:8d:83:a8:75:ab:46:
                    02:62:ef:1c:e7:02:d1:7d:96:9c:93:d0:f2:9e:ff:
                    0c:83:29:14:ea:7e:8e:32:66:47:87:e2:d3:63:af:
                    41:c5:2f:e8:37:cc:b1:13:49:d8:4f:fe:e8:11:ab:
                    0e:9f:19:ec:1d:54:a0:21:07:ce:6a:80:b3:9d:8d:
                    d9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C9:AB:70:93:B9:72:71:1F:86:FF:18:02:53:97:8B:7E:C9:F3:85
            X509v3 Authority Key Identifier:
                keyid:29:76:87:67:53:D6:55:62:A7:CA:85:E3:E9:E8:DF:75:07:97:C9:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KXaHZ1PWVWKnyoXj6ejfdQeXyUg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F521/21658820C67E11E9AF3BA765C4F9AE02/934D8A544F6811EB8E7B045AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:c1:0b:72:d0:08:b3:d6:e0:9c:ee:ee:62:42:b6:a5:b2:4d:
         b7:9e:f8:43:cb:82:0f:80:b4:89:ae:1f:86:24:fe:3f:8c:a4:
         2c:78:c4:ac:76:cf:40:45:75:b6:3c:5c:0f:fd:9a:ce:2f:ba:
         99:84:4a:d5:ad:d7:6f:f9:07:77:33:d1:8c:2e:74:fd:52:67:
         a1:d2:15:51:c2:e1:bb:84:db:d1:4e:2e:37:39:ff:8d:0a:6a:
         27:30:8b:fd:8c:32:8e:7a:58:20:ad:33:0f:c2:44:35:c0:3f:
         82:5f:f5:bb:be:5c:f8:47:91:15:47:e9:b3:68:f7:54:76:5c:
         9c:a8:0a:f2:6b:c5:fa:8d:33:75:1e:81:c9:4f:b4:9e:5d:63:
         0d:b6:79:2e:f2:d2:e6:8f:bc:54:32:80:ab:c8:6e:18:33:f1:
         cc:da:d0:06:6e:fc:1f:14:0d:2a:85:04:e2:12:72:88:53:fb:
         2a:e3:1e:43:f2:8b:95:9c:cd:e4:fc:d3:de:64:f6:17:cd:1c:
         1e:fa:73:f5:0b:03:6a:22:2f:25:8b:91:7c:c7:1f:be:d3:18:
         bb:35:fa:bd:9c:32:33:7a:2c:96:0e:f1:4e:8a:40:44:c7:a5:
         cc:1e:00:07:e8:07:6f:66:52:dd:40:1a:00:85:78:38:47:0c:
         f7:84:23:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----