Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/7DC02464B3FF11EDBD07863AC4F9AE02.roa
File:                     7DC02464B3FF11EDBD07863AC4F9AE02.roa (raw, json)
Hash identifier:          2GLA960uUnJmxmTwBOUPhGaV8wY9nkvOhLYSAQlhsMg=
Subject key identifier:   4E:63:D6:F3:13:9E:BC:B3:D1:74:0D:4D:79:FD:A4:54:A2:53:25:E2
Certificate issuer:       /CN=A91105F6/serialNumber=69C56E26D764F1AE4F468628E57531D3734AC027
Certificate serial:       02
Authority key identifier: 69:C5:6E:26:D7:64:F1:AE:4F:46:86:28:E5:75:31:D3:73:4A:C0:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acVuJtdk8a5PRoYo5XUx03NKwCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/7DC02464B3FF11EDBD07863AC4F9AE02.roa
Signing time:             Fri 24 Feb 2023 04:55:43 +0000
ROA not before:           Fri 24 Feb 2023 04:55:43 +0000
ROA not after:            Sun 31 Mar 2024 00:00:00 +0000
asID:                     141400
IP address blocks:        163.233.128.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91105F6/serialNumber=69C56E26D764F1AE4F468628E57531D3734AC027
        Validity
            Not Before: Feb 24 04:55:43 2023 GMT
            Not After : Mar 31 00:00:00 2024 GMT
        Subject: CN=63f8434e-46b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:ce:7b:7d:70:50:40:ea:d0:35:29:fa:b7:
                    37:d1:ac:af:65:b6:62:57:a9:d8:b4:a6:df:10:f2:
                    50:33:d2:a9:b7:b8:81:47:7e:d6:48:d7:f4:ab:5e:
                    e1:4b:4f:d2:16:3a:b0:19:99:e3:72:50:9a:58:b8:
                    4b:bb:5c:30:43:09:ef:c2:84:b1:ef:5d:f6:63:6a:
                    53:e1:3c:38:b9:0e:07:1a:7b:0b:4f:66:a9:26:37:
                    55:16:40:7b:5e:a2:ac:69:44:cc:6f:ca:48:74:52:
                    14:8c:bd:19:3b:ea:4e:94:8f:21:4e:9a:76:25:28:
                    7c:66:5b:c1:bc:b3:83:4e:ee:c6:2d:64:9e:74:2a:
                    54:51:a9:c9:84:db:66:6f:ab:8e:17:93:4e:0c:61:
                    23:57:46:22:5f:a3:83:c3:34:de:5d:29:8d:b4:5f:
                    06:7b:05:92:3d:7a:8f:86:ea:2c:0d:e9:4f:ae:13:
                    aa:15:dd:13:e4:1b:94:3b:50:30:36:d7:20:06:ff:
                    66:df:60:92:90:27:8a:bc:34:60:6b:56:66:9a:a6:
                    d2:01:13:c7:45:bd:d1:6e:e6:e2:f5:10:c2:ff:5f:
                    3e:5f:bc:a7:7b:2e:d5:32:5f:4b:75:f8:2d:2b:88:
                    08:92:c3:ea:32:4d:88:f6:a5:e2:b5:d4:4b:38:19:
                    cc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:63:D6:F3:13:9E:BC:B3:D1:74:0D:4D:79:FD:A4:54:A2:53:25:E2
            X509v3 Authority Key Identifier:
                keyid:69:C5:6E:26:D7:64:F1:AE:4F:46:86:28:E5:75:31:D3:73:4A:C0:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/acVuJtdk8a5PRoYo5XUx03NKwCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acVuJtdk8a5PRoYo5XUx03NKwCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91105F6/E820026AB3FB11EDBBDB3022C4F9AE02/7DC02464B3FF11EDBD07863AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.233.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         04:5f:02:89:24:27:1d:a7:cb:7f:e3:4b:fa:cd:72:8c:74:81:
         91:c5:14:aa:25:7f:e9:75:5d:6f:d4:63:05:95:bb:0f:93:d2:
         f7:b6:6a:00:ef:9d:04:1d:a9:66:21:7d:a8:84:6d:40:b1:10:
         1c:72:c8:38:67:8e:79:93:b1:cb:82:74:86:3d:88:55:e0:65:
         ea:cd:9d:a2:e9:f4:b1:4e:85:ee:ae:5f:c6:b0:19:9b:86:62:
         35:c0:f2:c3:1a:10:70:36:43:b0:5d:c8:cf:a5:3b:d6:f3:0e:
         1d:a9:21:73:e6:3c:c8:8e:f3:df:03:cf:d4:e3:07:20:5f:46:
         6f:7c:05:bf:d5:b5:35:1f:6e:6c:70:e0:27:45:a2:45:91:03:
         01:58:de:d8:ec:d4:12:d3:12:4b:6d:72:7c:96:e1:21:67:08:
         86:bc:18:0a:6a:25:69:a8:43:8e:2f:c6:21:cf:12:19:b0:12:
         16:40:3f:ef:c2:d0:a5:b8:5d:47:22:1d:26:5a:94:07:58:c2:
         69:bb:54:ee:46:8c:15:bc:66:59:c6:4e:1b:83:cf:d1:4e:f0:
         94:78:43:0e:c1:cf:30:ea:ad:5c:a7:77:91:bd:d9:97:93:11:
         2d:7f:f4:b2:f7:87:f4:f3:58:b3:68:40:8c:2f:22:5e:51:d0:
         c0:53:4e:49
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
MDVGNjExMC8GA1UEBRMoNjlDNTZFMjZENzY0RjFBRTRGNDY4NjI4RTU3NTMxRDM3
MzRBQzAyNzAeFw0yMzAyMjQwNDU1NDNaFw0yNDAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYzZjg0MzRlLTQ2YjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC13M57fXBQQOrQNSn6tzfRrK9ltmJXqdi0pt8Q8lAz0qm3uIFHftZI1/SrXuFL
T9IWOrAZmeNyUJpYuEu7XDBDCe/ChLHvXfZjalPhPDi5DgcaewtPZqkmN1UWQHte
oqxpRMxvykh0UhSMvRk76k6UjyFOmnYlKHxmW8G8s4NO7sYtZJ50KlRRqcmE22Zv
q44Xk04MYSNXRiJfo4PDNN5dKY20XwZ7BZI9eo+G6iwN6U+uE6oV3RPkG5Q7UDA2
1yAG/2bfYJKQJ4q8NGBrVmaaptIBE8dFvdFu5uL1EML/Xz5fvKd7LtUyX0t1+C0r
iAiSw+oyTYj2peK11Es4GcyPAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUTmPW8xOe
vLPRdA1Nef2kVKJTJeIwHwYDVR0jBBgwFoAUacVuJtdk8a5PRoYo5XUx03NKwCcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEwNUY2L0U4MjAwMjZBQjNG
QjExRURCQkRCMzAyMkM0RjlBRTAyL2FjVnVKdGRrOGE1UFJvWW81WFV4MDNOS3dD
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYWNWdUp0ZGs4YTVQUm9ZbzVYVXgwM05Ld0NjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MDVGNi9FODIwMDI2QUIzRkIxMUVEQkJEQjMwMjJDNEY5QUUwMi83REMwMjQ2NEIz
RkYxMUVEQkQwNzg2M0FDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBKPpgDANBgkqhkiG9w0BAQsFAAOCAQEABF8CiSQnHafLf+NL
+s1yjHSBkcUUqiV/6XVdb9RjBZW7D5PS97ZqAO+dBB2pZiF9qIRtQLEQHHLIOGeO
eZOxy4J0hj2IVeBl6s2doun0sU6F7q5fxrAZm4ZiNcDywxoQcDZDsF3Iz6U71vMO
Hakhc+Y8yI7z3wPP1OMHIF9Gb3wFv9W1NR9ubHDgJ0WiRZEDAVje2OzUEtMSS21y
fJbhIWcIhrwYCmolaahDji/GIc8SGbASFkA/78LQpbhdRyIdJlqUB1jCabtU7kaM
FbxmWcZOG4PP0U7wlHhDDsHPMOqtXKd3kb3Zl5MRLX/0sveH9PNYs2hAjC8iXlHQ
wFNOSQ==
-----END CERTIFICATE-----