Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/40A986CC236A11ED8018D62BC4F9AE02.roa
File:                     40A986CC236A11ED8018D62BC4F9AE02.roa (raw, json)
Hash identifier:          g5HyykGrOCnkCM7sev2DYLoYcKQu3BxV+VrReG7JixU=
Subject key identifier:   D7:07:36:9F:AB:A2:2D:ED:33:23:D5:CF:35:AE:67:3A:A9:B9:9E:27
Certificate issuer:       /CN=A919DFF7/serialNumber=C588DE70F2AC63EC161DDA9CDC20038AB0472A45
Certificate serial:       7E
Authority key identifier: C5:88:DE:70:F2:AC:63:EC:16:1D:DA:9C:DC:20:03:8A:B0:47:2A:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xYjecPKsY-wWHdqc3CADirBHKkU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/40A986CC236A11ED8018D62BC4F9AE02.roa
Signing time:             Fri 23 Dec 2022 06:04:45 +0000
ROA not before:           Fri 23 Dec 2022 06:04:45 +0000
ROA not after:            Wed 31 Jan 2024 00:00:00 +0000
asID:                     133441
IP address blocks:        103.144.148.0/24 maxlen: 24
                          103.144.149.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DFF7/serialNumber=C588DE70F2AC63EC161DDA9CDC20038AB0472A45
        Validity
            Not Before: Dec 23 06:04:45 2022 GMT
            Not After : Jan 31 00:00:00 2024 GMT
        Subject: CN=63a544fd-202e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:93:08:25:b1:bb:43:14:26:ac:3c:4d:1b:f7:
                    93:f8:bd:6e:4b:f9:f1:c0:7a:12:e6:8c:8b:e6:74:
                    e9:20:8a:3c:8e:b6:34:40:80:3d:da:4c:38:78:7a:
                    15:84:8e:f8:d1:51:ae:26:ad:43:73:34:d5:78:36:
                    89:4d:7e:b2:1f:3e:93:96:33:29:69:b6:99:1d:2a:
                    1f:58:02:71:16:7a:f5:e4:71:fa:62:28:49:53:34:
                    fe:dd:aa:c6:50:c5:a4:51:25:95:65:48:1f:26:e3:
                    ee:bb:60:02:87:80:a2:c9:3c:68:80:6f:5d:38:63:
                    b3:65:22:16:4f:30:dc:16:6c:39:ee:f6:e6:ce:04:
                    c8:68:f9:f0:02:44:1f:52:d4:d3:07:e3:c5:10:57:
                    23:41:e7:d7:86:a2:bd:0f:dc:15:d4:c1:75:a8:38:
                    91:04:cd:9d:33:7f:7e:d2:83:f6:7e:1e:e6:67:ed:
                    36:7b:17:b8:94:d4:37:fc:82:63:81:34:9b:a4:f3:
                    c8:14:93:e4:4e:29:b4:f1:c8:40:28:2f:f6:7e:9a:
                    93:f2:10:d6:be:c2:c4:9c:93:65:ca:e5:14:52:15:
                    f7:e5:e8:cc:76:23:a1:94:ca:b1:5f:f7:d9:4b:0c:
                    19:ca:57:1c:8d:d2:1d:4c:a5:9a:8a:78:de:44:93:
                    15:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:07:36:9F:AB:A2:2D:ED:33:23:D5:CF:35:AE:67:3A:A9:B9:9E:27
            X509v3 Authority Key Identifier:
                keyid:C5:88:DE:70:F2:AC:63:EC:16:1D:DA:9C:DC:20:03:8A:B0:47:2A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/xYjecPKsY-wWHdqc3CADirBHKkU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xYjecPKsY-wWHdqc3CADirBHKkU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DFF7/332D0ED6236711EDA8AC1F28C4F9AE02/40A986CC236A11ED8018D62BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d4:3f:e6:56:76:fb:ac:60:70:72:8e:b2:1d:98:ab:a4:a6:71:
         cb:78:60:34:1e:f8:cb:eb:55:7c:c2:5d:4a:9d:a9:a2:9f:ca:
         da:19:2c:b9:bd:94:5e:38:90:8f:f1:8e:cd:e2:37:a3:7e:f4:
         4c:3b:e8:75:27:5c:78:ac:db:4b:de:fc:31:79:12:4c:ad:32:
         cc:6f:a5:02:a6:71:0a:82:df:20:6b:d6:95:0d:e9:f8:73:06:
         7b:7a:cc:4d:a4:62:5c:6b:01:84:8a:3d:7a:a9:be:e5:c5:22:
         b7:1c:b0:d9:6d:31:b2:f4:a2:73:3d:57:50:cf:f0:53:3d:f9:
         e6:35:21:0a:f0:e8:76:61:7e:a5:9a:39:f6:94:6c:93:ef:66:
         40:df:56:80:86:1a:7b:14:8b:40:2e:10:a1:2f:1f:1c:d6:68:
         ae:70:1f:0f:f2:74:65:db:70:68:ec:89:29:da:76:71:ba:19:
         01:0a:9b:fc:2c:f3:e4:98:ff:90:42:69:4f:d3:de:c2:49:39:
         ca:d1:c6:95:87:40:4d:7c:e9:45:d2:8c:7e:43:f4:45:c1:e3:
         a2:3a:50:ee:1f:1c:2b:6c:fa:82:86:8d:3b:7f:c7:b0:3c:6a:
         7e:0b:84:62:e3:0d:84:94:45:e7:34:8d:01:e0:77:f9:b6:93:
         ed:5f:e6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----