Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/FAF70362387011EE8D54D351C4F9AE02.roa
File:                     FAF70362387011EE8D54D351C4F9AE02.roa (raw, json)
Hash identifier:          LjdU7HtNRVKsz7CAMxqLx2uFHxl5+yGqIGfPlFe3Tq4=
Subject key identifier:   B2:2D:AD:21:6C:F6:54:21:BF:D9:E1:25:90:97:70:5C:DF:88:F4:4C
Certificate issuer:       /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Certificate serial:       01D2
Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/FAF70362387011EE8D54D351C4F9AE02.roa
Signing time:             Fri 11 Aug 2023 18:00:39 +0000
ROA not before:           Fri 11 Aug 2023 18:00:39 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     149836
IP address blocks:        103.187.244.0/24 maxlen: 24
                          2001:df0:c240::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 14 Aug 2023 06:15:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 466 (0x1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
        Validity
            Not Before: Aug 11 18:00:39 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=64d67747-c134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:69:04:d7:83:e4:ff:f5:3c:12:c5:72:17:3c:
                    ba:cb:0e:e8:10:5d:6a:3c:4d:1b:b2:44:50:a4:4e:
                    24:9a:7e:d5:36:8e:49:14:e2:f0:15:cb:63:3a:7b:
                    b7:34:e5:44:c3:a8:20:f3:f9:04:86:b4:50:49:29:
                    49:b2:df:fe:df:c3:ab:4c:b5:ee:db:09:da:2e:5b:
                    71:c6:2e:47:bb:b2:e8:a3:c2:61:7a:60:a0:59:70:
                    e6:ab:f1:53:10:7d:0a:a4:31:c3:8a:3a:58:87:e2:
                    8e:4f:73:7d:67:01:fe:42:2d:31:19:a3:06:b7:b0:
                    3f:b1:6c:b1:de:7e:e6:98:9c:d9:3e:11:12:02:19:
                    da:c6:0a:33:c0:e7:16:4f:b3:80:9f:39:70:9d:4d:
                    55:77:7f:06:3f:d5:95:1e:9b:80:ba:8c:75:27:ce:
                    c6:6a:9f:51:8a:27:d2:17:52:49:5f:3d:92:10:eb:
                    dc:89:ff:45:ad:1b:03:35:e5:37:fd:c0:79:4f:52:
                    d4:ce:4f:83:70:ea:87:6c:3b:cd:7a:e2:64:2b:90:
                    c0:27:b8:95:72:02:4c:61:14:8d:1e:a7:da:76:1a:
                    c9:c6:a1:bd:8d:84:52:bc:0a:b8:9a:c9:4e:e1:1a:
                    15:9d:86:6e:56:d0:a0:82:89:ad:f9:eb:5c:a5:f5:
                    9c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2D:AD:21:6C:F6:54:21:BF:D9:E1:25:90:97:70:5C:DF:88:F4:4C
            X509v3 Authority Key Identifier:
                keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/FAF70362387011EE8D54D351C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.244.0/24
                IPv6:
                  2001:df0:c240::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:55:e2:a4:ae:d9:e1:b3:2d:9d:b4:bd:3b:0a:52:7b:de:1d:
         fd:7e:d6:1f:74:84:d5:8f:fb:4f:8c:7d:15:66:7a:f4:e9:b9:
         5f:cc:5f:84:14:05:ce:77:01:9b:3b:bf:8a:59:75:4a:40:ec:
         52:ac:f5:7a:93:3b:df:fe:44:b7:cd:76:9c:a1:24:1c:fb:ba:
         36:d7:a3:2c:b4:52:63:1c:f0:e8:f6:4d:55:ad:df:f6:55:54:
         d1:55:bd:8a:df:83:e9:0c:f2:f6:03:e4:c0:45:53:70:e0:3e:
         c9:a2:00:fb:e0:2f:d0:9b:6c:15:ee:f3:58:53:8d:52:67:11:
         e7:d8:30:3b:25:f4:2f:31:67:bc:cf:af:f5:22:fc:eb:bb:07:
         39:5a:ed:1b:03:59:2a:94:56:5d:f3:48:e9:fd:90:a6:e9:f7:
         84:58:96:71:02:86:f3:c7:ad:29:d4:30:65:23:90:2f:da:bd:
         60:a3:6e:69:8b:8f:7f:9b:82:83:79:bb:e6:c5:b5:f0:33:23:
         07:92:79:f9:fa:0e:82:9a:82:b1:b1:a9:6f:f4:09:1f:02:f9:
         9b:eb:97:a2:4c:9e:08:b4:28:ef:74:9b:10:f8:09:7e:b5:b3:
         33:6b:56:d5:65:77:be:f7:80:d0:c0:69:cf:17:bd:db:c0:d4:
         b1:15:22:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----