Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/73A8DF285C9211EBAE499866C4F9AE02.roa
File:                     73A8DF285C9211EBAE499866C4F9AE02.roa (raw, json)
Hash identifier:          ZVBJeyEetDzsfPiEJNDCbtqdEQFe3uC/5sWgFw6ALFE=
Subject key identifier:   B3:8D:8E:0F:A2:38:1F:00:16:4F:92:DC:32:F5:9B:77:CE:12:DA:A5
Certificate issuer:       /CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Certificate serial:       0623
Authority key identifier: 78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/73A8DF285C9211EBAE499866C4F9AE02.roa
Signing time:             Tue 18 Jul 2023 22:39:35 +0000
ROA not before:           Tue 18 Jul 2023 22:39:35 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     134520
IP address blocks:        103.42.212.0/24 maxlen: 24
                          103.42.213.0/24 maxlen: 24
                          103.42.214.0/24 maxlen: 24
                          103.42.215.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 20 Nov 2023 19:26:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1571 (0x623)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
        Validity
            Not Before: Jul 18 22:39:35 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64b714a7-6ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:81:d6:8c:e1:28:44:3c:9b:ca:de:d3:89:2d:
                    0e:8b:38:69:39:f7:80:ab:45:d1:99:9b:55:a3:46:
                    0e:16:ef:14:5a:6d:0c:d7:73:24:e3:02:af:ad:34:
                    22:5a:5c:34:04:8c:0a:25:2c:e0:76:07:4d:5f:15:
                    1c:80:a5:33:6c:48:23:ef:65:54:65:9e:26:c9:a9:
                    08:de:01:83:d6:30:7e:ed:37:63:9c:30:ad:3d:61:
                    58:0c:ac:51:7c:3b:f7:42:e0:38:70:8a:45:11:a7:
                    9a:21:8a:83:4d:67:dd:7f:99:f5:da:b6:66:59:b1:
                    58:8a:10:a8:3c:f9:04:b0:99:09:c4:df:c3:21:31:
                    9d:d7:d4:8a:7c:c9:d7:37:e5:b4:44:bf:01:aa:31:
                    12:2b:0a:17:de:a3:05:5e:26:a9:b0:17:f9:ca:af:
                    cc:f8:56:82:be:fd:c6:a9:71:ca:d1:3c:00:07:4b:
                    cf:df:54:e4:0e:d1:f4:64:17:52:a3:72:9e:b4:fd:
                    7d:2e:60:70:3b:b4:52:0c:4b:f2:95:c2:64:85:53:
                    3e:07:58:0a:22:d1:92:42:e7:82:6e:be:0d:3e:5b:
                    e6:41:cf:6a:f9:3a:76:c9:7b:36:86:8a:ba:50:16:
                    eb:98:b6:8f:8c:05:0e:7d:83:10:81:36:bd:6c:0a:
                    b9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8D:8E:0F:A2:38:1F:00:16:4F:92:DC:32:F5:9B:77:CE:12:DA:A5
            X509v3 Authority Key Identifier:
                keyid:78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/73A8DF285C9211EBAE499866C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:ee:0c:0f:47:e5:9c:a2:7d:af:ef:22:e9:f9:1d:ae:7b:54:
         27:fe:b7:ed:36:9a:e6:f1:b4:91:7a:0c:ef:8b:82:3e:59:8c:
         09:ec:72:68:66:29:92:28:d3:d7:5c:d7:20:83:ee:79:13:72:
         3d:4c:19:ba:ad:cb:ee:f6:62:f2:f4:59:d3:90:fc:e3:76:34:
         44:31:22:59:81:13:2c:f4:b6:1b:16:45:9f:b3:68:cb:4b:f9:
         43:bf:dc:e2:16:4e:4b:18:63:4e:c2:d1:ba:91:04:15:52:84:
         c1:03:42:66:f4:d5:31:94:3f:1d:e0:3c:31:90:5e:b8:c0:25:
         05:d2:71:b7:c2:cc:e9:58:0b:e4:7e:68:e4:1b:ca:8b:fd:7a:
         19:75:ce:fb:70:63:69:3a:7b:98:f8:10:13:19:26:b2:53:f6:
         b2:d8:93:89:3d:8a:66:9e:0e:90:67:3b:8e:8f:68:f4:36:a3:
         55:16:30:8c:2b:ff:f3:87:51:03:03:51:b2:c6:62:cf:28:1b:
         cf:f0:01:91:ae:5a:58:72:4f:56:17:5a:69:f3:e2:30:dc:0f:
         ca:8a:ca:af:b5:c4:2e:23:9f:b9:0e:fc:1f:d0:3e:5d:f1:c9:
         c5:55:a2:f9:c5:43:6e:8b:35:4c:eb:74:6e:e8:38:9b:f2:aa:
         72:9b:01:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----