Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/934D8FE486E311EE9C5F0951C4F9AE02.roa
File:                     934D8FE486E311EE9C5F0951C4F9AE02.roa (raw, json)
Hash identifier:          yezO9gXIkfY6SkEdCdfUO+LOaUqIsMBFGlv1kGsbHR8=
Subject key identifier:   5D:03:0F:1F:22:F7:62:09:49:35:96:AD:00:98:8C:E5:FF:CF:4D:DB
Certificate issuer:       /CN=A9175D84/serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4
Certificate serial:       04
Authority key identifier: 94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/934D8FE486E311EE9C5F0951C4F9AE02.roa
Signing time:             Sun 19 Nov 2023 13:58:55 +0000
ROA not before:           Sun 19 Nov 2023 13:58:55 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     141045
IP address blocks:        203.145.36.0/23 maxlen: 24
                          2401:5020::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 02 Feb 2024 04:34:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175D84/serialNumber=949B647A5F8C79F6DA4AE36D9E00C44E02A9A7A4
        Validity
            Not Before: Nov 19 13:58:55 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=655a149f-972d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:23:6f:20:aa:9e:1b:d0:f5:95:6c:01:6a:5a:
                    84:01:2a:24:8d:14:34:31:ef:0c:f9:bf:8d:8a:d3:
                    bd:87:5b:cd:9d:9d:fe:c9:03:e1:bf:de:b5:e7:2a:
                    19:d3:63:0c:e0:23:68:7d:d5:fa:78:bd:98:c6:c5:
                    4b:ab:aa:50:bd:f9:1e:14:5a:69:5b:1f:53:16:1c:
                    1c:28:35:50:58:d1:a7:e8:24:66:c0:11:22:7f:4e:
                    09:72:ef:2a:17:ac:a4:5f:39:eb:cc:6e:91:70:a1:
                    d5:27:44:c3:a3:d3:8c:28:6e:3b:42:b1:5a:b4:bc:
                    b8:63:b1:54:1f:2c:f7:e7:f7:1e:1c:b8:b3:55:11:
                    7a:19:2e:24:c4:d7:94:c4:0e:41:d0:56:8b:fe:f6:
                    35:36:02:db:07:2a:2f:47:00:5e:c4:1e:ca:02:fc:
                    94:36:fa:6f:89:29:e5:19:f9:9c:5b:6a:4b:0c:95:
                    a8:32:58:f5:42:11:d1:26:b3:da:29:ef:99:25:a3:
                    8c:d3:e7:e3:2c:d0:6b:f4:bf:b3:2a:9b:b9:f2:d7:
                    3b:0c:19:55:8c:2d:eb:69:68:33:ee:09:0f:37:4d:
                    f7:d4:0e:ef:c4:a2:d5:67:e7:fa:da:8c:3e:47:d9:
                    f5:db:14:e7:70:bb:4d:bc:3e:f7:20:9c:42:63:20:
                    4f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:03:0F:1F:22:F7:62:09:49:35:96:AD:00:98:8C:E5:FF:CF:4D:DB
            X509v3 Authority Key Identifier:
                keyid:94:9B:64:7A:5F:8C:79:F6:DA:4A:E3:6D:9E:00:C4:4E:02:A9:A7:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/lJtkel-MefbaSuNtngDETgKpp6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lJtkel-MefbaSuNtngDETgKpp6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175D84/F806943C86C811EEAAD34414C4F9AE02/934D8FE486E311EE9C5F0951C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.145.36.0/23
                IPv6:
                  2401:5020::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:6b:9d:5c:68:9f:98:c2:e4:74:cc:0b:3b:46:2d:bd:ea:8f:
         e9:54:76:e3:c2:20:38:0f:81:35:21:27:71:1f:fd:e6:a5:88:
         84:15:9a:33:e9:a3:43:c7:e4:7c:3e:fc:06:cd:18:6f:f1:1e:
         ba:25:2e:ac:0a:12:32:62:ca:b2:04:3b:2c:ba:e2:6c:8c:ed:
         e9:26:e5:39:00:61:90:41:e2:bf:d8:ab:da:ca:67:7b:0e:ba:
         25:a1:4e:83:8c:95:9b:83:e6:ce:2d:50:36:cc:2e:7b:c6:3a:
         52:ac:5a:cd:28:fd:9f:cf:3e:47:b1:5a:4b:fc:d4:57:1d:ed:
         23:cd:11:c5:ed:5b:f6:70:fc:ad:78:b9:d5:b9:06:b0:7b:9d:
         b6:47:a1:8d:68:d3:8e:4b:66:26:3b:b0:2e:97:0d:27:fb:67:
         5e:8d:aa:89:d5:7e:7e:2b:9c:b1:07:b0:3a:93:30:2d:78:f2:
         a0:8a:48:f4:9a:86:82:1a:c6:80:62:04:e2:e8:d9:0b:12:5d:
         d2:dd:75:7c:6c:ef:e7:a3:4f:45:04:78:f0:5a:86:06:ba:65:
         31:49:2d:44:a6:e3:15:9d:5b:b4:4c:89:b6:69:93:fe:dd:a6:
         d9:e1:9e:48:6e:af:6b:dc:af:ea:71:45:8c:1e:f7:70:59:2f:
         b3:a5:b4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----