Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1F8F7D22B41E11ECAFDA1F1AC4F9AE02.roa
File:                     1F8F7D22B41E11ECAFDA1F1AC4F9AE02.roa (raw, json)
Hash identifier:          WFpe+E5I1AqQpb/yBkaf1O1A3pN4GOK6WwvYp59CG/E=
Subject key identifier:   5F:65:E8:17:E1:D7:2C:14:10:63:30:8E:D4:96:43:C0:3D:9F:4C:65
Certificate issuer:       /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Certificate serial:       0454
Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1F8F7D22B41E11ECAFDA1F1AC4F9AE02.roa
Signing time:             Fri 20 May 2022 00:46:29 +0000
ROA not before:           Fri 20 May 2022 00:46:29 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     206092
IP address blocks:        103.54.155.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1108 (0x454)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
        Validity
            Not Before: May 20 00:46:29 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=6286e4e5-e11d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4d:f9:7a:08:f9:7d:24:8b:cc:65:52:c1:fc:
                    be:af:81:8b:6c:44:ed:41:2b:35:98:ad:50:c3:ec:
                    5a:2c:b8:43:eb:22:82:d1:77:a5:ea:75:1a:4c:b9:
                    e5:7e:71:d5:cf:9c:eb:05:0e:f4:d0:c4:e6:b7:71:
                    29:72:39:62:a9:c4:ff:7d:c3:54:32:94:7a:49:80:
                    ff:ca:c1:0f:a3:a8:79:07:a6:13:ac:f2:2b:aa:99:
                    3f:a9:df:0d:1c:57:87:20:04:07:34:d0:75:da:83:
                    72:88:48:b2:4f:e3:11:aa:a6:24:1d:c1:4f:64:4a:
                    88:9c:a8:f2:26:94:33:24:b6:13:f0:af:ea:77:6b:
                    2a:ad:d3:6f:8d:d6:85:d4:fe:45:cd:48:15:5d:b8:
                    98:e7:91:34:c7:f5:05:f9:08:b5:d2:5a:4d:78:ad:
                    e7:e5:24:27:18:03:47:b8:5b:49:b6:e9:57:49:c2:
                    76:6e:10:74:ad:0e:59:f7:2a:37:ec:0a:40:7b:69:
                    57:ce:5a:86:f2:ef:bd:71:ea:60:d8:94:c0:91:b4:
                    6b:42:aa:ae:c4:4d:73:2a:16:49:88:16:47:ca:03:
                    8b:ea:95:f8:bc:14:99:f9:dd:fa:eb:41:64:43:e9:
                    74:25:83:d7:33:e4:72:68:22:13:51:e6:d4:07:14:
                    6c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:65:E8:17:E1:D7:2C:14:10:63:30:8E:D4:96:43:C0:3D:9F:4C:65
            X509v3 Authority Key Identifier:
                keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1F8F7D22B41E11ECAFDA1F1AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:04:7b:b4:ea:87:eb:e0:be:ef:35:38:e0:92:5d:5f:79:c2:
         31:36:12:2a:0a:d8:42:b9:5c:a1:ae:e5:44:21:2f:51:52:52:
         e8:b5:3e:3d:4c:89:38:88:96:97:c5:53:0f:1a:f3:6a:0e:3c:
         eb:4a:43:4c:46:1a:6c:78:d5:c7:ea:17:fd:ff:d3:36:be:89:
         9a:9a:35:4b:37:b7:ce:39:f2:16:be:02:2f:61:39:a5:10:5b:
         19:35:a1:9a:fd:43:d1:7c:7a:54:f2:48:d7:39:b2:86:58:8e:
         e3:26:73:0f:f1:2e:89:c6:1c:d8:f6:ae:71:bc:50:20:ca:4e:
         3b:4c:82:48:36:9f:05:df:8b:65:c5:61:81:79:13:91:70:b4:
         a8:1d:8d:63:81:65:91:9e:86:08:90:d2:09:2a:99:7b:79:cb:
         44:17:45:02:92:e3:dc:cb:0c:43:9d:89:ce:a7:a7:2c:f8:ea:
         5b:ca:28:22:51:c8:59:3e:07:d7:62:56:de:e6:32:61:4f:9a:
         0e:63:45:c2:f4:23:b5:7a:b8:74:41:57:54:58:33:97:46:34:
         a2:b0:ca:0f:ad:85:6f:b8:49:0b:fe:d4:55:ac:d8:ac:d8:ec:
         37:f5:2c:42:59:12:e4:c4:40:66:3c:26:ec:2d:64:7e:e1:a0:
         b2:bd:0f:9b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQwRDIxMTAvBgNVBAUTKEQ1RTUzQUYxMTU5OTdDN0ZBM0I4NjU1MkY5NUY1MTE0
QUYzNDA1RTkwHhcNMjIwNTIwMDA0NjI5WhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02Mjg2ZTRlNS1lMTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo035egj5fSSLzGVSwfy+r4GLbETtQSs1mK1Qw+xaLLhD6yKC0Xel6nUaTLnl
fnHVz5zrBQ700MTmt3EpcjliqcT/fcNUMpR6SYD/ysEPo6h5B6YTrPIrqpk/qd8N
HFeHIAQHNNB12oNyiEiyT+MRqqYkHcFPZEqInKjyJpQzJLYT8K/qd2sqrdNvjdaF
1P5FzUgVXbiY55E0x/UF+Qi10lpNeK3n5SQnGANHuFtJtulXScJ2bhB0rQ5Z9yo3
7ApAe2lXzlqG8u+9cepg2JTAkbRrQqquxE1zKhZJiBZHygOL6pX4vBSZ+d3660Fk
Q+l0JYPXM+RyaCITUebUBxRsaQIDAQABo4IClTCCApEwHQYDVR0OBBYEFF9l6Bfh
1ywUEGMwjtSWQ8A9n0xlMB8GA1UdIwQYMBaAFNXlOvEVmXx/o7hlUvlfURSvNAXp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDBEMi81OTM3RDQzRTM1
QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZILWp1R1ZTLVY5UkZLODBC
ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFlVTY4UldaZkgtanVHVlMtVjlSRks4MEJlay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkQwRDIvNTkzN0Q0M0UzNUFEMTFFQjgxRUVBRDEyQzRGOUFFMDIvMUY4RjdEMjJC
NDFFMTFFQ0FGREExRjFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnNpswDQYJKoZIhvcNAQELBQADggEBAJwEe7Tqh+vgvu81
OOCSXV95wjE2EioK2EK5XKGu5UQhL1FSUui1Pj1MiTiIlpfFUw8a82oOPOtKQ0xG
Gmx41cfqF/3/0za+iZqaNUs3t8458ha+Ai9hOaUQWxk1oZr9Q9F8elTySNc5soZY
juMmcw/xLonGHNj2rnG8UCDKTjtMgkg2nwXfi2XFYYF5E5FwtKgdjWOBZZGehgiQ
0gkqmXt5y0QXRQKS49zLDEOdic6npyz46lvKKCJRyFk+B9diVt7mMmFPmg5jRcL0
I7V6uHRBV1RYM5dGNKKwyg+thW+4SQv+1FWs2KzY7Df1LEJZEuTEQGY8JuwtZH7h
oLK9D5s=
-----END CERTIFICATE-----