Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/CED3CA32EE4211EC8CA72A7DC4F9AE02.roa
File:                     CED3CA32EE4211EC8CA72A7DC4F9AE02.roa (raw, json)
Hash identifier:          c0oKFsIjoh8ZABjYWlKrhT4yq/i0PEGiR584oRGVssY=
Subject key identifier:   49:6E:36:AC:22:8A:E6:7B:06:48:F7:FB:3D:7F:AE:67:90:07:8E:39
Certificate issuer:       /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial:       0329
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/CED3CA32EE4211EC8CA72A7DC4F9AE02.roa
Signing time:             Sun 02 Oct 2022 03:22:37 +0000
ROA not before:           Sun 02 Oct 2022 03:22:37 +0000
ROA not after:            Fri 01 Dec 2023 00:00:00 +0000
asID:                     146989
IP address blocks:        103.172.134.0/23 maxlen: 23
                          2407:d340::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 809 (0x329)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
        Validity
            Not Before: Oct  2 03:22:37 2022 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=633903fd-0d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e8:2c:c4:98:a7:09:ce:a2:0c:77:48:1b:09:
                    eb:6e:0f:5f:74:2c:02:4d:f2:a4:c1:e6:6c:57:81:
                    82:30:5a:42:75:74:97:ba:2d:00:7e:04:72:66:82:
                    e4:28:45:97:da:8c:ad:e0:38:3c:b3:e4:15:fa:57:
                    0e:81:e2:a5:7c:50:0c:9b:fa:be:f8:aa:97:bc:5d:
                    14:71:4e:f8:70:f5:2a:ca:b7:03:fb:a8:30:d0:4f:
                    df:04:41:aa:69:66:7c:02:f3:f8:c6:b4:43:e1:ba:
                    63:ee:29:c1:b1:57:40:dd:51:f2:f7:42:e9:3e:7a:
                    a2:b3:b1:12:3e:56:14:90:56:b8:42:05:e7:1b:a1:
                    92:bc:de:dd:5c:d7:df:e0:37:df:f0:65:9a:6c:0f:
                    1c:14:6f:5c:c9:e4:c0:6c:cb:d8:01:ea:8b:5a:a5:
                    cc:83:6b:92:1e:f1:d0:0c:62:6d:5e:84:d5:06:12:
                    20:07:83:23:38:31:1c:a8:73:c7:c2:50:eb:a1:7b:
                    0c:df:d3:46:2c:c8:4f:d8:51:2c:6a:41:36:e5:1e:
                    5d:37:b0:80:79:1d:17:4f:20:79:49:84:8a:e5:84:
                    e0:8c:2e:29:18:93:be:f1:ee:1e:06:68:72:5c:cf:
                    59:8a:58:9f:e1:87:27:81:dd:81:60:16:0d:79:26:
                    f1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6E:36:AC:22:8A:E6:7B:06:48:F7:FB:3D:7F:AE:67:90:07:8E:39
            X509v3 Authority Key Identifier:
                keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/CED3CA32EE4211EC8CA72A7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.134.0/23
                IPv6:
                  2407:d340::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:ca:a8:f3:5c:b8:dd:71:00:73:fd:f6:ef:4b:a5:6f:70:c5:
         0b:3c:6f:3e:d8:65:28:26:98:3c:5b:c4:0d:de:9a:ae:c4:82:
         c8:97:fa:9d:c0:15:09:14:22:26:cc:5c:5a:b3:15:26:26:10:
         9c:cc:4a:63:5b:2d:ee:89:27:72:07:ac:8c:f9:8f:b9:1d:ad:
         d4:c9:38:4a:6c:19:2d:04:1b:e1:98:a9:05:7f:3b:58:ec:89:
         69:d5:76:92:a7:f0:6e:b7:1c:ce:5e:0c:ed:7a:d7:19:59:97:
         f6:de:51:6f:e8:b3:97:03:2f:23:4c:fb:5b:d8:c8:64:46:5f:
         63:e7:6c:c7:c4:ae:d6:af:ca:c8:8c:64:af:86:22:fb:57:47:
         19:21:57:cd:fc:f1:6f:a7:05:51:1d:16:01:00:e4:0a:b8:5d:
         08:12:f7:98:85:4a:2e:cf:a7:6b:33:25:e7:e0:fa:e9:bf:99:
         86:2a:af:33:db:b5:42:a2:5d:0e:ee:64:64:56:c8:21:ef:ce:
         62:be:3c:4a:9a:44:1e:a4:62:9d:1c:50:13:6b:df:a4:d2:35:
         38:ad:79:98:92:80:74:ad:57:ce:3b:52:eb:18:69:5e:3d:f1:
         c1:51:5a:d8:14:7d:e0:7e:a4:d7:f7:07:5a:c9:2f:51:7e:8c:
         00:f9:ab:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----