Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91954C1/50C6E732E84011EA8A6B9980C4F9AE02/EC1822CCFD1E11EE9596981DC4F9AE02.roa
File:                     EC1822CCFD1E11EE9596981DC4F9AE02.roa (raw, json)
Hash identifier:          EJiTkyB0nA5gdAl3H8wUpo/Y6a/MvPurkq3YS4xRaZQ=
Subject key identifier:   4D:5B:D1:BF:2F:7A:9D:0C:38:F1:1D:55:F2:8B:5C:0A:EC:D7:F1:FE
Certificate issuer:       /CN=A91954C1/serialNumber=4531A273C2C4EA68B67B98ADE55B4623EF9375A4
Certificate serial:       072A
Authority key identifier: 45:31:A2:73:C2:C4:EA:68:B6:7B:98:AD:E5:5B:46:23:EF:93:75:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTGic8LE6mi2e5it5VtGI--TdaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91954C1/50C6E732E84011EA8A6B9980C4F9AE02/EC1822CCFD1E11EE9596981DC4F9AE02.roa
Signing time:             Thu 18 Apr 2024 06:39:09 +0000
ROA not before:           Thu 18 Apr 2024 06:39:09 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     131314
IP address blocks:        103.28.144.0/22 maxlen: 24
                          2403:cc0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 23 May 2024 01:56:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1834 (0x72a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91954C1/serialNumber=4531A273C2C4EA68B67B98ADE55B4623EF9375A4
        Validity
            Not Before: Apr 18 06:39:09 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=6620c00c-8de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bb:fb:bf:3d:6a:21:79:78:3c:b7:77:ba:7c:
                    b2:5f:8d:6c:f5:26:bb:93:5d:07:fa:61:d2:2c:ce:
                    35:19:25:09:45:31:35:2e:50:1d:b7:fe:77:f2:92:
                    02:41:e1:7a:cd:c4:a8:54:d0:28:26:ab:c2:1c:b6:
                    e0:a2:47:21:9c:ad:b9:61:10:4b:0d:b3:90:8f:c5:
                    62:72:31:1e:e3:3a:f9:78:40:9c:60:b1:bc:cf:b3:
                    09:63:9c:75:d0:ca:d6:d5:a7:fd:d2:89:c2:29:56:
                    1a:a4:63:e8:ca:26:ca:7d:cb:b7:9e:56:5a:98:c9:
                    1b:5f:b9:87:de:a3:35:97:6e:89:bc:10:55:74:ff:
                    2e:d9:2d:91:66:9e:98:7b:c6:1d:60:fe:ee:df:d1:
                    32:3b:10:4d:55:e0:46:80:49:75:bf:c4:59:3c:ca:
                    f4:22:12:3f:eb:6e:d2:62:32:a8:bc:18:49:a8:81:
                    71:f6:5c:58:79:fd:bd:bb:fa:74:ec:e2:83:36:13:
                    19:d0:94:cb:68:70:9c:fd:d1:f0:b4:09:b1:31:01:
                    a2:74:ba:9c:bf:66:cd:3c:54:4f:ff:27:a9:f8:4d:
                    c0:1e:fc:b2:78:dc:76:6a:3b:d0:69:ff:0b:cb:a5:
                    77:ce:97:1f:26:b4:8e:39:26:06:3e:07:1b:45:88:
                    77:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5B:D1:BF:2F:7A:9D:0C:38:F1:1D:55:F2:8B:5C:0A:EC:D7:F1:FE
            X509v3 Authority Key Identifier:
                keyid:45:31:A2:73:C2:C4:EA:68:B6:7B:98:AD:E5:5B:46:23:EF:93:75:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91954C1/50C6E732E84011EA8A6B9980C4F9AE02/RTGic8LE6mi2e5it5VtGI--TdaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RTGic8LE6mi2e5it5VtGI--TdaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954C1/50C6E732E84011EA8A6B9980C4F9AE02/EC1822CCFD1E11EE9596981DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.144.0/22
                IPv6:
                  2403:cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:fd:09:05:2d:c1:9f:f9:cb:61:fb:02:59:22:17:dc:29:a3:
         9a:07:6c:2b:af:85:3c:af:01:40:76:ad:78:e0:1b:73:68:39:
         c8:03:39:7f:5f:64:31:f3:97:ec:97:96:77:aa:31:de:d5:6f:
         b0:da:f2:2f:b7:bd:c7:b6:32:d9:ed:fb:88:fd:f6:25:d1:26:
         f2:f5:68:e7:b8:d7:19:cd:07:73:66:6b:71:9f:b9:f4:5f:11:
         a5:5d:e5:32:c9:be:0d:5c:e9:af:df:8b:4d:1a:30:b8:e9:44:
         20:9c:94:35:ad:cc:e3:d3:8d:00:4f:09:2e:fa:5e:96:4d:13:
         f0:74:13:c1:93:d7:64:d6:22:88:51:69:17:43:32:c6:e5:5c:
         7a:89:37:5a:13:f9:d0:ff:eb:44:1e:8f:a3:05:fe:a1:39:2c:
         ca:16:ed:de:d0:ba:4c:64:e1:5b:05:3d:88:c0:24:fe:46:d7:
         cf:e3:68:06:0f:09:fc:1e:54:fc:84:4a:62:0b:27:69:f8:73:
         5f:9d:38:26:e7:67:f2:4f:5a:d1:45:3d:62:0e:50:08:be:27:
         de:c2:4d:5b:f8:f3:f0:0c:0b:f7:62:32:f7:66:16:0b:0a:76:
         18:1b:30:41:d0:ac:88:2a:5f:88:b6:a3:3a:f4:10:ec:b2:0a:
         32:7a:fb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----