Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150E4D/49715B7A337E11EEA310AF83C4F9AE02/CBB9909039BC11EEBD0AA933C4F9AE02.roa
File:                     CBB9909039BC11EEBD0AA933C4F9AE02.roa (raw, json)
Hash identifier:          YrCE67zO725dzuCNwWTvNgo06rTjriQcnHQYmyLrFB4=
Subject key identifier:   D6:EA:06:5A:31:32:50:D0:BA:39:18:15:8B:83:38:BF:A5:E7:BA:33
Certificate issuer:       /CN=A9150E4D/serialNumber=C08C543BC8CA91962166AF12730CEE4BE5B2B6FD
Certificate serial:       0F
Authority key identifier: C0:8C:54:3B:C8:CA:91:96:21:66:AF:12:73:0C:EE:4B:E5:B2:B6:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wIxUO8jKkZYhZq8ScwzuS-Wytv0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150E4D/49715B7A337E11EEA310AF83C4F9AE02/CBB9909039BC11EEBD0AA933C4F9AE02.roa
Signing time:             Sun 13 Aug 2023 09:38:46 +0000
ROA not before:           Sun 13 Aug 2023 09:38:46 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     147020
IP address blocks:        103.248.50.0/23 maxlen: 24
                          2401:2060:2000::/48 maxlen: 48
                          2401:2060:2001::/48 maxlen: 48
                          2401:2060:2002::/48 maxlen: 48
                          2401:2060:2003::/48 maxlen: 48
                          2401:2060:2004::/48 maxlen: 48
                          2401:2060:2fff::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E4D/serialNumber=C08C543BC8CA91962166AF12730CEE4BE5B2B6FD
        Validity
            Not Before: Aug 13 09:38:46 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=64d8a4a6-c93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:35:76:db:88:06:9e:42:04:58:ef:91:9a:65:
                    27:d2:42:18:10:c0:d7:af:3a:84:dd:20:a3:82:07:
                    93:42:28:b6:ac:ac:f9:74:61:7c:69:f9:35:bd:02:
                    43:00:ff:75:51:29:9e:b7:05:ae:2e:73:36:9a:46:
                    2c:fe:b3:e1:e3:6e:96:32:74:16:91:46:43:77:ea:
                    c1:1d:12:67:b7:e6:e8:f6:90:8d:9c:43:44:13:d8:
                    f6:e5:f0:34:99:8d:1e:f2:8c:24:54:32:73:a9:9d:
                    45:aa:75:03:fc:1d:6a:90:48:b4:e2:71:27:9b:fa:
                    a4:95:91:f6:39:dd:c7:76:5d:b1:00:18:9d:94:7c:
                    95:a5:c7:cc:07:90:2d:a7:42:de:09:e8:d0:47:02:
                    0d:90:4e:1b:7c:db:c8:bb:70:e2:87:0e:b4:c6:c8:
                    0c:90:b5:72:e1:c1:c0:1e:78:f0:2d:a2:b6:38:8e:
                    0b:25:7b:88:57:74:41:f6:c7:c9:a0:94:ff:03:36:
                    57:8a:d7:a5:ae:58:be:d7:ec:1a:c3:30:57:2e:c3:
                    78:b1:d4:a4:a5:81:07:7e:a1:f2:0a:ac:7f:6e:5c:
                    f2:39:89:41:1a:af:b0:5d:a1:ba:28:d1:b9:26:9c:
                    25:2c:63:bc:a8:86:28:03:98:35:fc:2f:ea:28:48:
                    38:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EA:06:5A:31:32:50:D0:BA:39:18:15:8B:83:38:BF:A5:E7:BA:33
            X509v3 Authority Key Identifier:
                keyid:C0:8C:54:3B:C8:CA:91:96:21:66:AF:12:73:0C:EE:4B:E5:B2:B6:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150E4D/49715B7A337E11EEA310AF83C4F9AE02/wIxUO8jKkZYhZq8ScwzuS-Wytv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wIxUO8jKkZYhZq8ScwzuS-Wytv0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150E4D/49715B7A337E11EEA310AF83C4F9AE02/CBB9909039BC11EEBD0AA933C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.50.0/23
                IPv6:
                  2401:2060:2000::-2401:2060:2004:ffff:ffff:ffff:ffff:ffff
                  2401:2060:2fff::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:40:89:6e:3b:f9:77:0b:63:10:c6:5e:07:ff:45:f0:fa:21:
         4d:cf:df:7b:25:1a:00:5d:24:4d:0e:ed:2b:ec:ab:01:8f:56:
         21:f7:e3:f1:b7:bd:02:8f:9f:4c:df:16:22:07:4f:7c:6a:e1:
         dc:cb:8c:82:60:07:ee:e9:c4:6b:54:45:f9:d4:f5:e4:22:a8:
         e9:ab:e3:8e:8d:84:3e:1b:fa:6a:61:19:36:72:1c:52:2d:7f:
         29:8a:08:a5:be:b5:66:a4:04:14:1a:9d:9a:58:b3:5c:a3:e7:
         19:1c:4a:df:2b:78:52:5f:83:3d:c0:bd:06:ac:c9:a5:02:44:
         66:6f:ac:36:e4:01:d6:cc:f9:3e:28:90:72:5e:06:9f:75:9d:
         63:92:a4:ae:2a:5e:16:4d:5c:e6:4f:6a:16:76:8f:ab:b5:70:
         21:49:0b:46:be:20:57:2b:3e:00:13:07:16:84:3c:7f:c0:c8:
         02:3d:f8:15:29:bf:d5:eb:07:8a:35:2a:e7:e6:3b:41:07:01:
         6a:94:99:f2:a4:db:41:49:8e:97:ec:b8:65:05:ea:dd:fa:9c:
         21:6d:71:0f:05:11:e8:f1:f4:9e:28:c3:ce:3c:8c:51:d9:51:
         ce:36:af:40:c4:69:2e:3d:a3:f6:2e:e7:5f:ca:34:8f:f3:31:
         d2:0b:88:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----