Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/C559313E86B511EDA0A79119C4F9AE02.roa
File:                     C559313E86B511EDA0A79119C4F9AE02.roa (raw, json)
Hash identifier:          g7WEDLjl04ufY+/6PZL9wcYVjjeP1B8Tm2IWxVCkn0w=
Subject key identifier:   0D:0D:9C:C3:EE:5B:6F:1F:3B:9F:C6:48:82:BE:38:9C:09:55:81:14
Certificate issuer:       /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134
Certificate serial:       18
Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/C559313E86B511EDA0A79119C4F9AE02.roa
Signing time:             Wed 28 Dec 2022 13:44:38 +0000
ROA not before:           Wed 28 Dec 2022 13:44:38 +0000
ROA not after:            Wed 31 Jan 2024 00:00:00 +0000
asID:                     138197
IP address blocks:        103.29.238.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134
        Validity
            Not Before: Dec 28 13:44:38 2022 GMT
            Not After : Jan 31 00:00:00 2024 GMT
        Subject: CN=63ac4845-15e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:4e:61:51:61:a8:d5:a8:b5:7f:c0:cb:e2:3c:
                    27:2d:00:c0:9b:97:8f:10:ae:d4:c6:35:c5:4d:46:
                    60:8d:7a:82:09:3f:af:91:8d:9a:37:99:b6:28:0c:
                    97:91:9d:68:23:f6:62:24:9d:f8:d4:8f:a2:97:1a:
                    25:ce:32:76:e1:74:e7:48:7c:74:fb:67:ac:b3:1a:
                    a0:d4:db:88:9c:b2:5f:6e:3a:4d:36:93:a8:04:31:
                    a1:ef:b7:7c:d2:ce:69:9c:7c:87:eb:bd:a2:b7:36:
                    6e:09:df:e6:66:49:d6:dc:a2:11:4a:43:f9:d3:20:
                    f5:18:0e:14:77:47:fa:d3:52:be:00:d2:f3:7e:91:
                    dc:be:8f:97:53:4c:ad:a2:da:3a:b4:ca:13:49:f3:
                    35:a9:12:ca:e7:cf:66:4c:71:9c:c2:6b:75:cc:1d:
                    4a:1e:c1:f2:e4:53:84:4c:db:84:c2:3e:d0:53:9e:
                    95:5c:b3:95:1c:56:2b:26:fe:a2:d8:d3:72:44:b8:
                    55:83:aa:c3:23:b9:fe:62:6f:64:d1:3d:e0:35:22:
                    ed:e7:21:4e:13:3c:6c:a8:62:04:82:87:91:00:b6:
                    ce:1d:b7:08:e9:96:f3:ea:4f:ae:08:5c:09:2b:25:
                    14:14:b0:24:94:16:f8:cf:22:ac:fd:9d:6e:23:27:
                    3c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0D:9C:C3:EE:5B:6F:1F:3B:9F:C6:48:82:BE:38:9C:09:55:81:14
            X509v3 Authority Key Identifier:
                keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/C559313E86B511EDA0A79119C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.29.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:56:77:60:45:12:02:bf:2d:b8:11:ff:38:4e:e5:3e:df:2c:
         74:44:5a:f3:4f:50:6a:2f:3b:5a:72:43:8f:f8:ca:65:00:a1:
         f3:92:ca:1a:b5:a9:94:ed:90:7a:cf:3a:35:33:c9:83:d5:ae:
         ab:f0:9b:b1:0f:63:45:8a:e6:f9:43:da:6e:01:d5:6b:11:6f:
         d8:ff:f6:b6:5b:33:ed:2a:90:dc:de:74:d7:22:1d:d4:cc:f8:
         71:d8:b1:2b:32:76:d7:78:03:13:3d:4a:b1:63:8e:db:44:5d:
         94:2a:c9:df:0d:5c:17:8b:8e:ac:62:14:72:b3:21:bc:db:48:
         c8:24:eb:7a:07:2c:c0:bf:2f:7b:c1:65:bc:ce:79:5a:16:ca:
         a6:8f:eb:8b:4b:bf:b8:f6:09:a9:4c:f8:ff:e6:1d:ec:dc:35:
         30:27:ca:9c:58:2c:44:70:c1:2a:3e:78:73:28:11:af:32:16:
         45:5e:ee:d5:58:05:15:72:e7:9d:37:3b:1a:ba:1a:08:59:bf:
         af:dc:5f:cc:15:ff:10:84:3b:d1:be:7f:fd:7d:4b:b0:7f:d5:
         04:ce:59:3f:41:31:26:11:1c:0d:29:fa:f3:e8:1f:d5:72:51:
         37:05:49:1f:ea:21:ba:d6:04:99:a8:c7:97:02:8c:66:f5:43:
         40:70:99:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----