Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/5D4B1EB6458A11EDA4A20925C4F9AE02.roa
File:                     5D4B1EB6458A11EDA4A20925C4F9AE02.roa (raw, json)
Hash identifier:          siDCU5kLP4vanAiYPRJXiHoF6Xp7LvQSPRtlpqZqhuI=
Subject key identifier:   89:BD:D1:84:98:16:56:C9:3F:6E:3E:85:E8:27:F6:C6:49:2D:4B:A0
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       3C5B
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/5D4B1EB6458A11EDA4A20925C4F9AE02.roa
Signing time:             Fri 07 Oct 2022 03:40:09 +0000
ROA not before:           Fri 07 Oct 2022 03:40:09 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     3970
IP address blocks:        103.171.218.0/24 maxlen: 24
                          103.171.219.0/24 maxlen: 24
                          2001:df7:5380::/48 maxlen: 48
                          2001:df7:5381::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15451 (0x3c5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: Oct  7 03:40:09 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=633f9f99-f33f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e6:95:e5:9b:d5:f7:0c:c5:89:b7:dd:85:a1:
                    a4:d3:f0:26:3e:d4:c5:5b:2e:d3:f3:12:53:f7:4c:
                    05:a4:90:0b:d7:24:27:dc:54:7b:2b:81:bb:f9:bb:
                    39:5d:14:ba:f6:6b:6f:58:1b:23:08:26:d4:15:13:
                    31:71:a0:dc:de:e9:56:04:90:72:cf:11:2a:a6:d9:
                    19:42:3e:8b:5b:3b:2d:1b:ba:80:cd:f3:d1:95:c2:
                    ee:11:3d:7a:10:28:2e:9b:b5:90:aa:1d:01:42:35:
                    da:c1:15:32:36:9e:9a:56:52:f7:00:e3:dc:ce:2d:
                    a2:70:f8:58:8f:45:67:f4:ad:3a:1f:95:bd:f9:c7:
                    3d:1b:a7:42:91:dc:73:19:ce:b7:52:07:6e:98:7f:
                    1b:48:d7:da:30:86:f6:1c:10:84:35:d5:b4:3e:ba:
                    71:e2:2e:d8:5c:96:cb:29:8f:7c:e3:e4:7a:40:bd:
                    df:15:3a:f2:62:ff:67:4d:33:ee:10:9a:b4:60:77:
                    cb:65:2e:67:01:5c:09:58:68:1e:1d:ba:04:3d:93:
                    3a:00:7c:1b:e7:65:48:f4:6e:23:01:fe:f9:a8:0d:
                    4a:24:78:36:7a:26:5c:a9:2a:d3:8b:af:c2:25:87:
                    15:a1:bf:81:c2:8c:42:58:c6:77:69:37:9b:a7:0c:
                    d3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BD:D1:84:98:16:56:C9:3F:6E:3E:85:E8:27:F6:C6:49:2D:4B:A0
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/5D4B1EB6458A11EDA4A20925C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.218.0/23
                IPv6:
                  2001:df7:5380::/47

    Signature Algorithm: sha256WithRSAEncryption
         53:fc:f2:d7:cf:dc:55:04:aa:89:a5:91:7d:1d:91:ff:20:26:
         1c:85:f7:8c:40:7e:ee:01:45:95:31:48:c2:8c:23:e0:8f:30:
         b1:db:a8:b9:3c:36:86:ea:ae:4a:2a:4d:be:6b:e7:00:a3:25:
         63:31:86:d0:b1:da:ef:91:13:c0:16:ba:cd:1f:f4:3d:26:21:
         35:dc:11:64:c3:f9:27:ec:ce:64:31:0b:63:ac:d0:e2:9c:01:
         39:74:8c:6d:25:4f:be:a1:4d:a6:77:db:2d:4d:f6:27:5e:63:
         af:ac:06:db:ea:37:7b:c7:d1:60:fb:92:11:7a:f5:e0:68:27:
         c6:4f:d9:63:09:fe:73:56:66:cb:4e:39:22:bb:9f:6a:31:c7:
         85:64:66:52:f7:89:0a:37:00:40:5a:6f:f6:39:71:5e:84:ad:
         e0:b7:bb:dd:02:a4:2f:7f:27:e9:d2:b9:b4:20:ea:b7:33:3a:
         d4:8e:7c:58:ee:c7:74:77:b0:5f:f4:21:36:ce:14:ef:c0:8f:
         b6:84:0e:8f:9d:e2:95:76:96:a8:90:f9:99:ca:05:8f:e3:28:
         3c:a1:0a:16:d1:0a:5d:c8:c7:dd:0b:59:1c:83:8e:eb:ef:31:
         25:3d:e4:76:b2:30:2d:cb:f4:82:23:f5:83:32:27:5f:1b:6d:
         a1:9b:9b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----