Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/511EE9A639FE11E982779C51C4F9AE02.roa
File:                     511EE9A639FE11E982779C51C4F9AE02.roa (raw, json)
Hash identifier:          BqYgLiq6rsZhYqbi2iHpYE4mjT9zkyMDzhF8SCMtuFo=
Subject key identifier:   61:85:FE:4D:EB:57:52:F0:A6:44:04:BA:BA:00:97:48:8F:14:3F:A1
Certificate issuer:       /CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
Certificate serial:       3340
Authority key identifier: 4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/511EE9A639FE11E982779C51C4F9AE02.roa
Signing time:             Mon 30 Jan 2023 14:20:09 +0000
ROA not before:           Mon 30 Jan 2023 14:20:09 +0000
ROA not after:            Sun 31 Mar 2024 00:00:00 +0000
asID:                     132040
IP address blocks:        103.23.16.0/22 maxlen: 24
                          110.173.160.0/20 maxlen: 20
                          202.8.44.0/22 maxlen: 24
                          218.100.21.0/24 maxlen: 24
                          218.100.23.0/24 maxlen: 24
                          2001:4410::/32 maxlen: 40
                          2001:4410:1000::/45 maxlen: 48
                          2001:4410:2000::/43 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13120 (0x3340)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527
        Validity
            Not Before: Jan 30 14:20:09 2023 GMT
            Not After : Mar 31 00:00:00 2024 GMT
        Subject: CN=63d7d218-0b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a4:c7:30:54:2e:85:5e:21:9c:ba:5a:3c:e6:
                    b9:84:4a:3b:19:cd:42:3c:d8:26:c4:fc:c2:84:df:
                    84:67:ae:24:65:52:18:33:37:04:56:1c:74:86:f4:
                    ca:d6:43:03:ce:91:75:8c:a0:7a:76:e2:0b:fc:3f:
                    fc:a4:d4:b9:7d:1d:1f:83:fc:35:04:29:e3:92:ab:
                    8f:28:86:e4:9f:88:45:53:c2:03:7f:70:fe:e0:bb:
                    e5:3e:1c:46:90:19:b6:69:cd:e1:1c:b0:8e:88:15:
                    c5:d1:5d:1d:1e:97:11:59:6e:f5:34:2d:a8:75:4f:
                    70:68:7e:b4:54:3a:2e:65:5e:09:20:98:bb:69:4b:
                    d4:d6:03:5b:15:ce:3a:be:a3:42:a9:bf:be:d8:d4:
                    6f:8d:a7:90:d7:bf:99:ba:a7:73:8f:a6:71:e1:5a:
                    74:7c:0d:55:97:8c:f3:7f:a9:d1:cc:8b:3e:d4:6b:
                    39:a8:96:ec:83:97:b3:60:93:61:59:d7:95:3a:97:
                    1e:09:e6:c4:d2:f3:41:d8:f5:29:19:40:31:c8:c1:
                    ef:f1:61:72:b1:8c:c0:ae:47:0d:36:c9:3f:45:75:
                    7c:2f:90:c6:bd:52:24:e1:0f:19:68:0d:a9:46:a0:
                    8a:d9:14:18:1d:65:70:35:b5:1f:01:5b:ba:fa:6c:
                    a0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:85:FE:4D:EB:57:52:F0:A6:44:04:BA:BA:00:97:48:8F:14:3F:A1
            X509v3 Authority Key Identifier:
                keyid:4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/511EE9A639FE11E982779C51C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.16.0/22
                  110.173.160.0/20
                  202.8.44.0/22
                  218.100.21.0/24
                  218.100.23.0/24
                IPv6:
                  2001:4410::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:80:3a:5d:8a:2e:f5:53:a9:0d:e4:93:29:58:74:1e:48:87:
         6d:50:3e:04:d0:b1:bf:e1:4d:21:3f:96:6c:de:af:c8:86:b0:
         ed:1d:40:bf:ba:73:bb:ac:8c:a7:22:7d:e5:a8:2a:79:38:47:
         b4:90:73:4f:8a:95:b0:cb:e8:64:7a:02:41:04:45:32:56:cd:
         06:17:e8:f6:db:63:ce:e9:98:92:d2:6e:0a:f2:eb:8c:46:06:
         2d:de:04:4b:92:7b:29:57:56:ed:1c:d4:0e:2d:45:ff:af:b6:
         12:c9:20:f9:97:fa:7f:e1:0d:cf:26:43:d1:bd:d4:bb:2e:27:
         57:50:63:53:43:45:cf:5e:39:0e:98:62:56:b7:9d:57:b0:19:
         85:d6:1e:35:1a:2f:fd:78:48:30:ee:0e:37:82:8f:a6:19:83:
         d5:2d:14:45:f8:bf:2a:cc:5c:a3:0b:24:79:05:02:85:87:90:
         12:ca:0d:5d:b3:d8:87:1c:a1:d3:ad:a2:ff:f3:8d:aa:ba:e5:
         03:25:a2:ac:69:9d:6e:46:94:0f:c7:7d:ef:99:a3:eb:ae:11:
         bb:ef:d1:a2:91:4d:3e:3e:ae:8c:83:a3:38:70:2a:df:07:71:
         50:2e:34:71:a7:e2:cb:72:c1:29:38:d7:0e:d4:7a:14:41:2c:
         79:31:80:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----