Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9C52/6B7151620D7E11EC9C0B5F75C4F9AE02/784AFA66A7BD11EDBF487823C4F9AE02.roa
File:                     784AFA66A7BD11EDBF487823C4F9AE02.roa (raw, json)
Hash identifier:          WkQaUR9AlfPIWsiuAj+mz2HXQaw0D4cRJQj2O/WGYfc=
Subject key identifier:   9A:0E:46:ED:2D:AF:23:B4:29:B3:D6:BB:D3:7E:56:17:0A:4E:20:F9
Certificate issuer:       /CN=A91B9C52/serialNumber=7905553FECA59030D51918372F1EE17274949FB5
Certificate serial:       035D
Authority key identifier: 79:05:55:3F:EC:A5:90:30:D5:19:18:37:2F:1E:E1:72:74:94:9F:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQVVP-ylkDDVGRg3Lx7hcnSUn7U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9C52/6B7151620D7E11EC9C0B5F75C4F9AE02/784AFA66A7BD11EDBF487823C4F9AE02.roa
Signing time:             Wed 08 Feb 2023 14:32:53 +0000
ROA not before:           Wed 08 Feb 2023 14:32:53 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     140607
IP address blocks:        103.151.237.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861 (0x35d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9C52/serialNumber=7905553FECA59030D51918372F1EE17274949FB5
        Validity
            Not Before: Feb  8 14:32:53 2023 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=63e3b295-eb88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:14:ce:3f:f7:dd:e6:2b:f7:0e:47:fd:9a:fc:
                    78:6c:dd:49:c7:78:9a:2c:02:ee:82:ef:58:c6:7b:
                    1e:21:16:a4:39:67:58:54:8b:d6:7c:2d:c2:17:56:
                    f6:12:7d:84:12:e6:53:59:f2:78:70:81:8a:b5:c6:
                    ab:4f:f6:87:7d:e3:ed:c9:cd:73:a6:db:79:91:1e:
                    62:0f:b2:8c:35:a3:0c:27:30:ff:6b:75:c0:9f:7b:
                    44:5f:92:3e:88:7a:3f:4a:ab:46:4f:7b:60:03:b2:
                    6b:8f:20:cc:20:f8:f2:0d:8c:e9:f1:6f:2e:34:92:
                    b0:6d:d7:87:9f:1f:86:30:a7:83:b8:a3:ca:8d:c5:
                    30:79:7f:9b:ba:82:9d:8a:f7:33:0c:5e:b9:3b:43:
                    ff:a4:75:a6:a2:70:29:f1:2b:6a:71:c2:17:a3:f6:
                    8c:ae:43:e0:bc:0c:f8:7c:0f:9f:40:89:bd:fb:87:
                    ae:2c:e1:69:45:b1:6e:43:6d:68:ae:4f:a6:1a:ee:
                    3b:d7:c9:a5:61:bc:7c:f9:42:fb:52:be:f3:2e:11:
                    82:5d:37:b7:cc:4f:49:07:21:c5:5f:0d:4f:19:38:
                    4a:cf:a0:15:cb:f1:e4:26:5c:20:98:0d:ac:59:99:
                    8d:76:38:a1:f1:ae:2d:74:0e:61:0a:0f:28:b0:a3:
                    7f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0E:46:ED:2D:AF:23:B4:29:B3:D6:BB:D3:7E:56:17:0A:4E:20:F9
            X509v3 Authority Key Identifier:
                keyid:79:05:55:3F:EC:A5:90:30:D5:19:18:37:2F:1E:E1:72:74:94:9F:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9C52/6B7151620D7E11EC9C0B5F75C4F9AE02/eQVVP-ylkDDVGRg3Lx7hcnSUn7U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eQVVP-ylkDDVGRg3Lx7hcnSUn7U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9C52/6B7151620D7E11EC9C0B5F75C4F9AE02/784AFA66A7BD11EDBF487823C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:0d:c7:37:35:0b:d9:4c:36:11:68:d8:56:32:44:c4:97:a2:
         64:ef:7d:d1:fb:1f:d9:52:17:dd:b4:9b:e0:e5:03:f1:17:ea:
         c0:ea:a3:93:ea:82:f6:92:17:df:ce:a0:18:e4:9a:2f:db:f0:
         08:35:3a:32:fa:53:7f:ce:ce:4a:87:c9:27:f5:2d:b2:a2:c2:
         9f:31:4b:3b:ec:0f:ae:c9:ce:af:c0:48:f3:9a:e6:c3:7e:8d:
         03:8f:0c:b6:00:2e:4a:f2:05:c2:47:c1:ff:39:40:b2:45:7d:
         36:bf:b6:a1:c0:0d:57:17:e2:5a:2d:b1:9b:58:e2:6b:37:de:
         44:2d:ad:d2:45:23:e1:aa:2b:60:90:7e:d6:e5:18:1a:f9:11:
         ea:55:42:ef:ed:f9:02:56:94:a1:8f:eb:d3:a6:51:af:df:cb:
         f3:31:4a:30:f7:46:87:1c:86:1c:bc:3f:b8:bd:26:ea:24:bf:
         ce:ed:24:ff:e5:be:7b:79:53:bb:fc:a5:a1:12:25:52:b8:42:
         8b:2d:5f:b9:ef:2f:78:44:73:18:82:02:17:1f:ab:7a:66:af:
         c1:f8:bf:73:dc:77:9e:19:c9:5a:7b:97:2f:13:37:69:4b:75:
         fa:e3:07:73:5a:49:ea:7a:56:e8:66:76:d3:f3:47:e2:66:1d:
         b1:5d:7f:26
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjlDNTIxMTAvBgNVBAUTKDc5MDU1NTNGRUNBNTkwMzBENTE5MTgzNzJGMUVFMTcy
NzQ5NDlGQjUwHhcNMjMwMjA4MTQzMjUzWhcNMjMwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2UzYjI5NS1lYjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4BTOP/fd5iv3Dkf9mvx4bN1Jx3iaLALugu9YxnseIRakOWdYVIvWfC3CF1b2
En2EEuZTWfJ4cIGKtcarT/aHfePtyc1zptt5kR5iD7KMNaMMJzD/a3XAn3tEX5I+
iHo/SqtGT3tgA7JrjyDMIPjyDYzp8W8uNJKwbdeHnx+GMKeDuKPKjcUweX+buoKd
ivczDF65O0P/pHWmonAp8StqccIXo/aMrkPgvAz4fA+fQIm9+4euLOFpRbFuQ21o
rk+mGu4718mlYbx8+UL7Ur7zLhGCXTe3zE9JByHFXw1PGThKz6AVy/HkJlwgmA2s
WZmNdjih8a4tdA5hCg8osKN/EwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJoORu0t
ryO0KbPWu9N+VhcKTiD5MB8GA1UdIwQYMBaAFHkFVT/spZAw1RkYNy8e4XJ0lJ+1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUM1Mi82QjcxNTE2MjBE
N0UxMUVDOUMwQjVGNzVDNEY5QUUwMi9lUVZWUC15bGtERFZHUmczTHg3aGNuU1Vu
N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VRVlZQLXlsa0REVkdSZzNMeDdoY25TVW43VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjlDNTIvNkI3MTUxNjIwRDdFMTFFQzlDMEI1Rjc1QzRGOUFFMDIvNzg0QUZBNjZB
N0JEMTFFREJGNDg3ODIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnl+0wDQYJKoZIhvcNAQELBQADggEBAIINxzc1C9lMNhFo
2FYyRMSXomTvfdH7H9lSF920m+DlA/EX6sDqo5PqgvaSF9/OoBjkmi/b8Ag1OjL6
U3/OzkqHySf1LbKiwp8xSzvsD67Jzq/ASPOa5sN+jQOPDLYALkryBcJHwf85QLJF
fTa/tqHADVcX4lotsZtY4ms33kQtrdJFI+GqK2CQftblGBr5EepVQu/t+QJWlKGP
69OmUa/fy/MxSjD3Rocchhy8P7i9Juokv87tJP/lvnt5U7v8paESJVK4QostX7nv
L3hEcxiCAhcfq3pmr8H4v3Pcd54ZyVp7ly8TN2lLdfrjB3NaSep6VuhmdtPzR+Jm
HbFdfyY=
-----END CERTIFICATE-----