Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185EFE/1E42DE001D7811EDB5585E1EC4F9AE02/4755215C1D7A11ED8483001FC4F9AE02.roa
File:                     4755215C1D7A11ED8483001FC4F9AE02.roa (raw, json)
Hash identifier:          wZFRdks3ykjwzzKSX9mTRKBh0Yn6H2GKqqwlr8od1O0=
Subject key identifier:   E7:5F:CD:CD:D5:CB:99:F2:15:6D:DC:9B:3E:00:D1:6E:C1:B4:E5:1A
Certificate issuer:       /CN=A9185EFE/serialNumber=7EE8CE64A7B4005121460AA3BA59443C956E35D0
Certificate serial:       02
Authority key identifier: 7E:E8:CE:64:A7:B4:00:51:21:46:0A:A3:BA:59:44:3C:95:6E:35:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fujOZKe0AFEhRgqjullEPJVuNdA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185EFE/1E42DE001D7811EDB5585E1EC4F9AE02/4755215C1D7A11ED8483001FC4F9AE02.roa
Signing time:             Tue 16 Aug 2022 15:44:14 +0000
ROA not before:           Tue 16 Aug 2022 15:44:14 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     140682
IP address blocks:        103.141.36.0/23 maxlen: 24
                          2001:df1:2340::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185EFE/serialNumber=7EE8CE64A7B4005121460AA3BA59443C956E35D0
        Validity
            Not Before: Aug 16 15:44:14 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=62fbbb4e-1702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:06:62:02:a2:02:b6:50:61:ff:d7:ff:8b:24:
                    4c:e5:89:81:dc:e1:be:a4:50:60:54:5d:93:23:99:
                    8b:97:ac:94:e1:99:99:f1:b6:32:fb:9d:91:fd:4a:
                    73:58:5a:6f:8e:c8:6a:f5:4f:c1:cf:d5:c8:17:ba:
                    9e:c9:42:99:86:f7:01:a1:da:98:df:e1:e3:28:2d:
                    8c:00:04:87:0c:ab:a5:a6:ce:0c:77:23:67:9b:af:
                    28:a9:82:b4:df:4d:93:97:24:31:58:88:da:76:74:
                    bb:66:af:40:99:67:0c:eb:92:c8:0c:4a:c6:36:f9:
                    1d:74:a3:49:b5:94:c5:17:5e:e8:21:5f:8c:66:d0:
                    4b:1d:58:7c:49:f0:23:d8:9a:78:62:5d:6f:65:be:
                    74:5f:9d:bb:b0:77:35:12:de:07:bb:a4:95:bd:91:
                    cf:10:e8:89:ba:87:72:08:88:4d:e4:b5:99:dd:c5:
                    ab:5f:74:49:9d:e1:e7:d4:ba:73:71:b2:a2:b4:5f:
                    24:1b:a9:da:fd:bf:01:2d:ea:4b:6c:1e:0b:55:5b:
                    22:f2:74:c3:9f:03:29:72:d1:b6:2b:84:98:b8:8c:
                    66:f5:65:fc:9d:24:2f:78:c2:bd:0f:d8:19:ee:36:
                    c6:72:f1:fb:a1:4d:09:41:4c:ca:b7:a3:42:e4:75:
                    02:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5F:CD:CD:D5:CB:99:F2:15:6D:DC:9B:3E:00:D1:6E:C1:B4:E5:1A
            X509v3 Authority Key Identifier:
                keyid:7E:E8:CE:64:A7:B4:00:51:21:46:0A:A3:BA:59:44:3C:95:6E:35:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185EFE/1E42DE001D7811EDB5585E1EC4F9AE02/fujOZKe0AFEhRgqjullEPJVuNdA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fujOZKe0AFEhRgqjullEPJVuNdA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185EFE/1E42DE001D7811EDB5585E1EC4F9AE02/4755215C1D7A11ED8483001FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.36.0/23
                IPv6:
                  2001:df1:2340::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:39:cd:c5:3c:b1:e5:bb:64:4f:dd:22:ef:6d:d5:3f:08:d7:
         9b:20:bb:26:fd:aa:f0:91:82:e8:f1:ec:3f:6a:e8:86:f9:dd:
         e6:3b:a8:7f:8a:c5:47:30:7b:a6:9c:56:62:20:25:7f:dc:b4:
         d9:d9:65:73:ca:83:1c:31:77:b0:a7:1b:fe:6b:d4:a5:97:cc:
         d2:2a:ce:ea:88:6e:4c:33:d2:60:0e:ad:80:f0:57:5d:3f:d5:
         61:cf:c8:f8:74:d3:4c:75:1d:bb:bd:b2:3d:ec:df:14:f4:00:
         c3:24:59:bc:4d:d4:9a:a5:f4:e8:1b:d2:e8:7a:a8:00:1b:53:
         26:44:b1:5b:4f:02:0c:f6:32:49:87:2f:e9:55:90:ef:1a:7b:
         04:5a:9e:ac:20:9d:5d:48:1b:11:2d:6c:92:c5:d2:62:91:55:
         0a:40:a1:40:ca:99:58:a0:56:25:34:4f:c4:1a:1c:fc:4d:0d:
         c8:f8:93:0d:aa:3e:54:b9:a9:63:84:40:77:b2:91:da:f9:1e:
         e3:ee:c0:03:1c:56:e3:3e:d4:9b:eb:62:8b:6c:dd:29:e2:fc:
         91:0e:04:8c:91:b1:7b:64:11:fa:22:c2:34:73:a4:62:d4:a2:
         ac:e7:cb:17:2f:28:5f:22:7b:ae:51:48:1b:5f:69:fa:c9:6d:
         69:71:cb:59
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
NUVGRTExMC8GA1UEBRMoN0VFOENFNjRBN0I0MDA1MTIxNDYwQUEzQkE1OTQ0M0M5
NTZFMzVEMDAeFw0yMjA4MTYxNTQ0MTRaFw0yMzEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYyZmJiYjRlLTE3MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJBmICogK2UGH/1/+LJEzliYHc4b6kUGBUXZMjmYuXrJThmZnxtjL7nZH9SnNY
Wm+OyGr1T8HP1cgXup7JQpmG9wGh2pjf4eMoLYwABIcMq6Wmzgx3I2ebryipgrTf
TZOXJDFYiNp2dLtmr0CZZwzrksgMSsY2+R10o0m1lMUXXughX4xm0EsdWHxJ8CPY
mnhiXW9lvnRfnbuwdzUS3ge7pJW9kc8Q6Im6h3IIiE3ktZndxatfdEmd4efUunNx
sqK0XyQbqdr9vwEt6ktsHgtVWyLydMOfAyly0bYrhJi4jGb1ZfydJC94wr0P2Bnu
NsZy8fuhTQlBTMq3o0LkdQLbAgMBAAGjggKmMIICojAdBgNVHQ4EFgQU51/NzdXL
mfIVbdybPgDRbsG05RowHwYDVR0jBBgwFoAUfujOZKe0AFEhRgqjullEPJVuNdAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg1RUZFLzFFNDJERTAwMUQ3
ODExRURCNTU4NUUxRUM0RjlBRTAyL2Z1ak9aS2UwQUZFaFJncWp1bGxFUEpWdU5k
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZnVqT1pLZTBBRkVoUmdxanVsbEVQSlZ1TmRBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NUVGRS8xRTQyREUwMDFENzgxMUVEQjU1ODVFMUVDNEY5QUUwMi80NzU1MjE1QzFE
N0ExMUVEODQ4MzAwMUZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAWeNJDAPBAIAAjAJAwcAIAEN8SNAMA0GCSqGSIb3DQEBCwUA
A4IBAQB4Oc3FPLHlu2RP3SLvbdU/CNebILsm/arwkYLo8ew/auiG+d3mO6h/isVH
MHumnFZiICV/3LTZ2WVzyoMcMXewpxv+a9Sll8zSKs7qiG5MM9JgDq2A8FddP9Vh
z8j4dNNMdR27vbI97N8U9ADDJFm8TdSapfToG9LoeqgAG1MmRLFbTwIM9jJJhy/p
VZDvGnsEWp6sIJ1dSBsRLWySxdJikVUKQKFAyplYoFYlNE/EGhz8TQ3I+JMNqj5U
ualjhEB3spHa+R7j7sADHFbjPtSb62KLbN0p4vyRDgSMkbF7ZBH6IsI0c6Ri1KKs
58sXLyhfInuuUUgbX2n6yW1pcctZ
-----END CERTIFICATE-----