Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/29DFAE8C223011EA87A22757C4F9AE02.roa
File:                     29DFAE8C223011EA87A22757C4F9AE02.roa (raw, json)
Hash identifier:          SATjmeepVQ9R4JJUTRosjgayh46O8j2S876Ilf0pRm8=
Subject key identifier:   CC:D9:20:20:AC:12:F6:53:CB:A5:B4:97:38:B2:1A:03:05:20:D6:C7
Certificate issuer:       /CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
Certificate serial:       1DA7
Authority key identifier: 25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/29DFAE8C223011EA87A22757C4F9AE02.roa
Signing time:             Sun 16 Apr 2023 11:13:19 +0000
ROA not before:           Sun 16 Apr 2023 11:13:19 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     137187
IP address blocks:        103.211.150.0/24 maxlen: 24
                          103.211.151.0/24 maxlen: 24
                          124.41.244.0/22 maxlen: 22
                          124.41.244.0/24 maxlen: 24
                          124.41.245.0/24 maxlen: 24
                          124.41.246.0/24 maxlen: 24
                          124.41.247.0/24 maxlen: 24
                          2400:1a00:cd01::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7591 (0x1da7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F731E/serialNumber=2585243D6805F2EA8BC3F63B82364BA991F330B9
        Validity
            Not Before: Apr 16 11:13:19 2023 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=643bd84e-cf74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:23:d4:51:29:f2:78:84:db:99:87:47:a3:d5:
                    ae:f4:75:1e:4a:40:ae:c4:f5:08:ca:cc:3f:5a:1e:
                    84:c8:a4:3f:f7:2d:a0:6e:9b:b6:db:19:34:eb:e2:
                    70:a4:0e:c3:e5:ab:09:8b:90:06:bd:24:cd:22:19:
                    74:ef:64:2f:3d:a3:1d:a4:0e:e8:bc:91:9c:03:9d:
                    93:b8:19:08:f4:2d:c0:62:2d:18:e5:06:00:1f:f4:
                    b8:80:ad:4b:03:b8:90:db:08:4f:39:05:91:df:4f:
                    a1:ae:9b:a3:9d:2f:46:b2:83:7c:20:3f:03:64:d0:
                    4d:e5:42:6f:03:d5:3f:f1:31:12:e7:e2:79:e3:cb:
                    0c:fb:71:b5:7c:2b:22:f5:48:e6:c5:e5:b1:af:b1:
                    41:89:79:0d:98:b8:1a:8d:b8:e8:e3:8c:99:45:92:
                    11:74:5f:08:7d:66:31:2c:1f:25:c8:a1:10:7d:6a:
                    8c:0a:b8:d9:c2:62:5e:f9:cb:a1:e7:b1:fe:0b:05:
                    60:4a:bc:7b:6e:7e:24:b8:de:e1:1b:80:e0:39:13:
                    56:d0:89:df:b2:05:d5:e4:c6:fb:f3:cf:ee:42:26:
                    7d:fc:48:14:e8:76:b3:23:2b:a0:de:9d:2c:0f:a2:
                    9e:1e:57:7e:2f:b0:b2:5a:55:8a:9d:5e:0e:8f:07:
                    21:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D9:20:20:AC:12:F6:53:CB:A5:B4:97:38:B2:1A:03:05:20:D6:C7
            X509v3 Authority Key Identifier:
                keyid:25:85:24:3D:68:05:F2:EA:8B:C3:F6:3B:82:36:4B:A9:91:F3:30:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYUkPWgF8uqLw_Y7gjZLqZHzMLk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F731E/F5967E6C5EF111E6A7D1AF26C4F9AE02/29DFAE8C223011EA87A22757C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.150.0/23
                  124.41.244.0/22
                IPv6:
                  2400:1a00:cd01::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:30:19:89:7e:05:9b:a2:77:30:0c:cf:03:df:02:76:15:11:
         2b:09:da:1c:7a:a8:1d:d5:ba:f7:17:53:31:26:a2:6d:a6:99:
         3b:ca:72:53:1e:03:00:b9:d3:23:1e:d1:ef:c7:74:f7:12:98:
         04:46:a6:ab:75:4c:8d:c3:26:6e:4a:98:42:a6:de:23:f7:f0:
         cb:2e:97:33:d4:63:b7:eb:61:21:8a:b5:1c:f8:c5:4d:1f:f7:
         13:6d:83:c9:70:2d:f6:17:b4:da:97:6e:72:a3:86:1f:bc:68:
         77:7e:01:b5:4d:52:6f:d2:ee:b0:23:2c:be:4b:84:d8:ca:61:
         38:cb:f7:dd:91:19:60:41:26:71:d7:8c:79:fc:eb:d9:8b:59:
         d7:30:4d:8c:92:bb:1b:ca:33:72:4e:d0:0e:b9:bd:61:d1:8b:
         de:de:e5:b0:ae:fd:d3:5e:e5:34:52:3a:d8:53:f5:3f:38:c0:
         83:ce:c2:d5:c1:b3:cc:53:e5:79:d5:e0:76:79:79:94:89:6f:
         a0:44:dc:cd:86:f3:bb:1d:0f:3b:8e:7b:c2:bd:7f:b3:b4:28:
         b2:cf:dc:8f:9a:0a:d7:3c:41:ef:99:0f:5d:c8:ee:5c:3b:c0:
         e7:46:12:f8:28:3a:89:6d:44:33:87:bc:a7:29:52:2f:d3:1b:
         98:0f:80:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----