Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/7C8D4A46717211E9AFB98847C4F9AE02.roa
File:                     7C8D4A46717211E9AFB98847C4F9AE02.roa (raw, json)
Hash identifier:          K0qNu/SlnGx8Zb7+Y2rH6b9CgNGp+ZRqB9c86d6s+Vo=
Subject key identifier:   DF:82:C7:42:A8:0D:F3:65:66:E5:6F:EA:15:7E:06:F8:2E:09:56:4B
Certificate issuer:       /CN=A91B6F47/serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752
Certificate serial:       334F
Authority key identifier: 53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/7C8D4A46717211E9AFB98847C4F9AE02.roa
Signing time:             Fri 14 Oct 2022 14:40:30 +0000
ROA not before:           Fri 14 Oct 2022 14:40:30 +0000
ROA not after:            Fri 01 Dec 2023 00:00:00 +0000
asID:                     38851
IP address blocks:        58.115.0.0/18 maxlen: 18
                          58.115.8.0/21 maxlen: 21
                          58.115.16.0/20 maxlen: 20
                          58.115.32.0/19 maxlen: 19
                          58.115.48.0/21 maxlen: 24
                          58.115.192.0/20 maxlen: 20
                          203.133.56.0/24 maxlen: 24
                          203.203.220.0/22 maxlen: 22
                          203.203.224.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13135 (0x334f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6F47/serialNumber=538B076E0AADD8FAE2970C9543E849A90FE73752
        Validity
            Not Before: Oct 14 14:40:30 2022 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=634974de-1fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b1:7c:75:a9:0a:82:46:31:9c:18:7a:bb:3a:
                    c7:e9:cd:47:33:41:b8:2e:57:09:dd:8d:e8:00:95:
                    72:b9:f2:a0:0e:07:f7:19:36:d6:c3:32:e6:28:12:
                    1b:3a:52:cd:ab:0b:14:fe:2a:e9:4d:e2:e2:74:0f:
                    4f:64:69:25:3c:73:40:e7:9a:6b:6e:b6:c7:62:e5:
                    2c:58:a6:ec:26:33:b5:78:6b:c6:b0:11:8e:07:92:
                    60:a9:ac:a3:84:dc:20:0b:fc:0c:40:b9:ba:16:ba:
                    74:48:42:96:01:eb:43:a7:da:82:85:73:d2:c0:6d:
                    44:4e:39:f4:a1:cd:44:96:95:6e:42:2b:dd:5e:0b:
                    ba:4c:d6:d1:a0:82:4b:12:eb:b8:74:5e:0f:83:41:
                    6a:f7:29:fd:95:2b:3d:db:2f:ed:28:15:ab:9d:f3:
                    9d:4b:d9:8d:44:8d:19:fb:3c:ed:7c:e2:bd:27:49:
                    73:06:3b:77:a5:4d:75:64:5c:0c:00:5f:38:ac:7b:
                    e0:db:5b:58:e3:c2:3b:3b:e8:42:b0:04:5b:03:b9:
                    7b:0e:c8:87:6f:39:34:7d:e5:71:41:b8:a4:ab:0f:
                    35:3d:cf:d9:d0:7c:16:d5:e6:b3:09:a0:f2:4c:8f:
                    8a:d3:31:e2:71:78:84:5a:98:aa:74:c8:a6:bc:4f:
                    16:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:82:C7:42:A8:0D:F3:65:66:E5:6F:EA:15:7E:06:F8:2E:09:56:4B
            X509v3 Authority Key Identifier:
                keyid:53:8B:07:6E:0A:AD:D8:FA:E2:97:0C:95:43:E8:49:A9:0F:E7:37:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4sHbgqt2PrilwyVQ-hJqQ_nN1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F47/B4A86C381D8411E2969FC5DA08B02CD2/7C8D4A46717211E9AFB98847C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.115.0.0/18
                  58.115.192.0/20
                  203.133.56.0/24
                  203.203.220.0-203.203.255.255

    Signature Algorithm: sha256WithRSAEncryption
         be:93:58:d9:9c:80:a9:4b:6e:a9:77:26:ef:05:41:bc:78:89:
         17:fd:74:ea:ff:53:df:b3:5b:1c:66:b3:2e:3a:69:b2:30:ad:
         d7:2b:ca:37:d8:cb:49:37:a6:3f:36:9a:39:98:e5:8b:11:cc:
         a1:bc:06:09:f1:50:ed:b0:74:3c:8a:35:e0:eb:f8:59:83:91:
         b9:85:d8:bf:fb:83:f4:18:93:34:61:41:80:4f:d0:da:d3:f8:
         93:e8:ba:ed:ff:1a:61:48:9e:6c:a2:f9:18:66:8d:78:02:58:
         49:50:bc:9a:be:43:22:e2:2b:d8:66:6d:fe:58:fe:b0:d1:57:
         03:b2:c2:c5:dc:33:98:13:af:4e:e0:01:f2:b7:c8:bf:64:1f:
         0a:e3:4b:2c:98:7b:42:ad:64:cb:7d:8c:ff:2a:33:e0:be:3a:
         2d:95:60:51:7d:9e:25:82:ff:fc:bb:59:49:7b:a4:2e:85:48:
         15:e7:5b:9a:cd:f4:26:3b:59:ad:15:76:2d:51:b4:4a:4a:2d:
         ae:bd:3a:27:7f:eb:28:e3:63:ed:a6:20:d7:ef:c8:de:ac:e3:
         63:2f:da:19:f9:e9:e9:7d:a8:fb:b4:b5:c6:1d:05:a7:73:de:
         6c:70:49:6c:fc:8f:8a:cd:6a:a5:ea:a2:9c:a1:3e:1a:2e:98:
         36:db:c7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----