Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/FC42B142B34211EEB0536D78C4F9AE02.roa
File:                     FC42B142B34211EEB0536D78C4F9AE02.roa (raw, json)
Hash identifier:          fJMLzIf5leHJHv8dMEi/yXxYOfdngPjDbi9GkpksTdw=
Subject key identifier:   76:AA:4D:2D:4C:03:AF:9F:AC:30:9C:82:DF:74:8C:2D:1A:F1:1C:A6
Certificate issuer:       /CN=A91C911D/serialNumber=475B62A5F233ED05AC72D8781234E109BF3A908C
Certificate serial:       05CC
Authority key identifier: 47:5B:62:A5:F2:33:ED:05:AC:72:D8:78:12:34:E1:09:BF:3A:90:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1tipfIz7QWscth4EjThCb86kIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/FC42B142B34211EEB0536D78C4F9AE02.roa
Signing time:             Mon 15 Jan 2024 01:11:18 +0000
ROA not before:           Mon 15 Jan 2024 01:11:18 +0000
ROA not after:            Wed 29 May 2024 00:00:00 +0000
asID:                     134711
IP address blocks:        160.202.140.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 15 Jan 2024 02:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1484 (0x5cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C911D/serialNumber=475B62A5F233ED05AC72D8781234E109BF3A908C
        Validity
            Not Before: Jan 15 01:11:18 2024 GMT
            Not After : May 29 00:00:00 2024 GMT
        Subject: CN=65a48635-fcc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a4:56:57:f7:73:64:d7:2d:45:17:d9:a7:e7:
                    3e:31:30:18:e6:80:6e:42:8e:39:b5:ec:5a:e6:8e:
                    51:d5:50:13:f7:0d:54:4a:96:20:9c:a2:c5:04:1f:
                    dd:42:2b:a2:4b:97:92:a6:45:36:12:68:09:ca:8e:
                    d7:b4:96:42:40:1f:52:8c:fe:43:fc:92:31:7d:ea:
                    fa:0b:2f:66:16:b6:72:ee:97:a2:ad:e2:0c:f8:0e:
                    42:f6:10:91:82:ef:3c:86:b4:7c:a4:d3:53:f0:58:
                    ab:03:4d:d2:41:15:6e:4f:f7:a2:30:22:96:9f:70:
                    bd:e1:32:8e:9d:f2:72:5d:77:95:3d:8b:ed:7c:fc:
                    ab:c9:3b:0a:eb:4a:f9:92:d7:d5:e2:14:f8:2c:2e:
                    3b:97:f6:13:b7:eb:35:29:dc:23:5f:51:e0:6c:6e:
                    26:a1:80:dd:27:d8:f8:d9:3e:21:fe:31:10:2a:58:
                    a3:e7:97:ba:89:9c:d2:1a:c1:d9:8e:dc:62:d5:0b:
                    4c:23:29:13:45:af:0c:ee:be:8f:b2:36:21:16:fa:
                    80:ed:8d:97:a2:ef:fe:6a:09:83:46:86:cb:6d:19:
                    06:ef:4f:c5:ca:8a:3a:ae:fd:79:4e:bc:fe:fa:3c:
                    d9:10:e4:f0:52:cf:9f:5b:08:9d:65:4a:0c:1a:92:
                    e1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AA:4D:2D:4C:03:AF:9F:AC:30:9C:82:DF:74:8C:2D:1A:F1:1C:A6
            X509v3 Authority Key Identifier:
                keyid:47:5B:62:A5:F2:33:ED:05:AC:72:D8:78:12:34:E1:09:BF:3A:90:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/R1tipfIz7QWscth4EjThCb86kIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1tipfIz7QWscth4EjThCb86kIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/FC42B142B34211EEB0536D78C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.202.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:fa:96:8b:4b:ec:bc:32:9a:66:a9:26:da:ec:0d:c8:7d:18:
         3e:80:c4:5a:9b:0d:bc:5d:d8:9e:42:8c:25:9a:75:c1:6c:82:
         49:0e:82:18:ef:8b:84:56:07:63:cf:29:98:e7:c1:62:9b:88:
         08:c2:78:37:b2:9e:47:57:ac:d0:8a:3a:4e:28:b6:b2:c6:c9:
         f9:4e:7b:b2:bd:2a:9e:c7:69:d8:26:a4:22:37:22:8e:ba:f8:
         16:d7:c6:7d:ee:47:8b:5f:6e:2d:69:77:a1:a2:9e:27:ac:5e:
         04:27:11:94:45:63:71:a6:a8:0b:aa:d2:91:d9:0f:f2:38:02:
         7e:5b:bd:86:29:26:5e:3d:48:3e:3f:c5:d6:8b:33:11:bd:f9:
         2d:b2:ee:a4:3a:27:81:a5:dd:36:49:62:9e:45:4e:de:dc:72:
         90:6a:8d:40:11:99:9c:bc:c6:6f:1c:d0:35:8d:5e:1e:ca:84:
         94:a2:e1:4a:ef:d9:b6:a4:95:83:32:fc:b7:15:e5:79:db:1c:
         f2:1a:30:72:32:53:35:55:98:1a:7a:86:82:54:1d:77:a7:64:
         cf:a2:23:18:a8:1a:3f:fd:96:fe:48:77:93:a4:a6:f3:7a:0e:
         2c:ff:ff:8c:9a:9b:d9:95:16:77:ef:52:24:bb:3f:bc:68:c7:
         5d:f0:07:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----