Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/3549E00001E711EDB2C82D0FC4F9AE02.roa
File:                     3549E00001E711EDB2C82D0FC4F9AE02.roa (raw, json)
Hash identifier:          KtddW729xrlJk7DbI0m5suHr7SPSQixb4Aj2SNBTVS0=
Subject key identifier:   2C:88:9E:A5:34:1D:91:C6:B6:E1:3F:F3:FA:01:D8:27:8D:AF:71:A4
Certificate issuer:       /CN=A9111F34/serialNumber=460FA8FAFFC8BE409EC2BDF8463705863A45E8E8
Certificate serial:       01D8
Authority key identifier: 46:0F:A8:FA:FF:C8:BE:40:9E:C2:BD:F8:46:37:05:86:3A:45:E8:E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg-o-v_IvkCewr34RjcFhjpF6Og.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/3549E00001E711EDB2C82D0FC4F9AE02.roa
Signing time:             Wed 01 May 2024 05:07:27 +0000
ROA not before:           Wed 01 May 2024 05:07:27 +0000
ROA not after:            Thu 29 Aug 2024 00:00:00 +0000
asID:                     36351
IP address blocks:        2001:df3:8800::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 23 Jul 2024 02:45:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111F34/serialNumber=460FA8FAFFC8BE409EC2BDF8463705863A45E8E8
        Validity
            Not Before: May  1 05:07:27 2024 GMT
            Not After : Aug 29 00:00:00 2024 GMT
        Subject: CN=6631ce0e-1ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d4:8f:1b:c0:ce:f9:cf:d7:ed:58:c3:65:3a:
                    0a:6c:0f:f6:16:a9:21:12:a2:ff:8b:d8:83:e2:3a:
                    28:95:93:39:6a:ba:fe:84:99:27:24:98:5f:63:40:
                    df:3f:42:a7:9f:2e:12:41:0d:c8:db:44:28:4c:e0:
                    ac:13:be:f8:ec:88:2d:2f:ee:88:f6:09:b9:56:7d:
                    0d:bd:9f:ad:34:2d:68:7e:72:4a:36:a9:f5:78:34:
                    b7:41:b0:9d:cf:17:96:7a:00:17:8f:fc:2a:3d:2a:
                    d5:8e:a3:e7:7c:61:cd:02:0f:b4:b5:09:fe:cc:39:
                    40:61:28:ea:7e:93:d6:fd:4d:ba:2b:23:4f:fe:09:
                    b1:0e:f4:49:7a:be:d9:95:78:0e:4e:eb:33:ae:ec:
                    63:72:7b:17:2a:08:e5:62:61:e6:99:3a:e6:9a:99:
                    be:43:68:d9:fd:6a:74:c3:a7:5d:2f:e0:e7:a0:b1:
                    b0:5b:21:a1:19:ab:b3:a4:7a:c3:fc:5e:20:32:67:
                    50:eb:aa:fc:c3:ad:53:5d:3b:44:57:53:bc:66:96:
                    57:35:31:b3:46:97:85:76:4a:dd:6c:15:5c:03:9e:
                    e6:e7:e8:0a:e6:9d:19:30:02:9d:3d:6a:54:f5:2a:
                    13:53:b8:6b:e5:9e:87:64:41:2b:6e:9c:6c:86:4b:
                    e0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:88:9E:A5:34:1D:91:C6:B6:E1:3F:F3:FA:01:D8:27:8D:AF:71:A4
            X509v3 Authority Key Identifier:
                keyid:46:0F:A8:FA:FF:C8:BE:40:9E:C2:BD:F8:46:37:05:86:3A:45:E8:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/Rg-o-v_IvkCewr34RjcFhjpF6Og.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rg-o-v_IvkCewr34RjcFhjpF6Og.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F34/F960D1B401E311ED812E500BC4F9AE02/3549E00001E711EDB2C82D0FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:8800::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:5a:e0:97:21:e3:f9:e9:01:77:eb:9b:29:85:7a:04:29:f2:
         50:51:20:50:2a:a6:31:12:65:a6:96:d0:5c:9a:7a:ca:30:e9:
         cd:40:60:37:7b:7a:82:ae:ce:2c:dc:64:ce:64:a9:52:50:f0:
         30:45:88:df:7f:da:e9:3d:56:25:78:d9:6b:f7:b1:3b:23:1c:
         94:53:a0:16:22:86:ac:b8:85:11:bf:42:83:73:ce:29:b8:29:
         56:9a:8f:dc:b9:0d:99:31:ea:02:e5:0f:27:8a:1b:81:ef:7e:
         a9:38:6b:43:25:66:7f:e1:06:ef:2e:18:fd:e0:71:48:35:84:
         ff:99:13:d3:29:b1:89:ef:c2:66:eb:bb:1f:db:74:5b:e6:5d:
         87:29:71:94:05:c5:48:74:1f:6d:32:a2:7c:5f:79:e2:e0:95:
         4a:c9:8a:df:d9:32:b6:e1:fb:a3:22:53:18:25:ae:a4:0f:fd:
         42:79:09:03:7f:94:85:25:ea:d3:d8:82:f1:0d:7a:04:7c:2c:
         9c:d6:75:64:92:42:3f:9e:76:b8:1f:b9:37:1d:be:42:77:ad:
         dd:6d:d0:d1:f3:fb:95:38:d9:74:09:ef:d5:f0:96:45:51:67:
         f9:b6:38:8f:f9:0e:42:90:ad:a1:82:e9:d8:f8:8c:8f:87:d3:
         7e:53:c8:e8
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTFGMzQxMTAvBgNVBAUTKDQ2MEZBOEZBRkZDOEJFNDA5RUMyQkRGODQ2MzcwNTg2
M0E0NUU4RTgwHhcNMjQwNTAxMDUwNzI3WhcNMjQwODI5MDAwMDAwWjAYMRYwFAYD
VQQDEw02NjMxY2UwZS0xZWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoNSPG8DO+c/X7VjDZToKbA/2FqkhEqL/i9iD4joolZM5arr+hJknJJhfY0Df
P0Knny4SQQ3I20QoTOCsE7747IgtL+6I9gm5Vn0NvZ+tNC1ofnJKNqn1eDS3QbCd
zxeWegAXj/wqPSrVjqPnfGHNAg+0tQn+zDlAYSjqfpPW/U26KyNP/gmxDvRJer7Z
lXgOTuszruxjcnsXKgjlYmHmmTrmmpm+Q2jZ/Wp0w6ddL+DnoLGwWyGhGauzpHrD
/F4gMmdQ66r8w61TXTtEV1O8ZpZXNTGzRpeFdkrdbBVcA57m5+gK5p0ZMAKdPWpU
9SoTU7hr5Z6HZEErbpxshkvgCwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFCyInqU0
HZHGtuE/8/oB2CeNr3GkMB8GA1UdIwQYMBaAFEYPqPr/yL5AnsK9+EY3BYY6Rejo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUYzNC9GOTYwRDFCNDAx
RTMxMUVEODEyRTUwMEJDNEY5QUUwMi9SZy1vLXZfSXZrQ2V3cjM0UmpjRmhqcEY2
T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JnLW8tdl9JdmtDZXdyMzRSamNGaGpwRjZPZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTFGMzQvRjk2MEQxQjQwMUUzMTFFRDgxMkU1MDBCQzRGOUFFMDIvMzU0OUUwMDAw
MUU3MTFFREIyQzgyRDBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwAgAQ3ziAAwDQYJKoZIhvcNAQELBQADggEBAGha4Jch4/np
AXfrmymFegQp8lBRIFAqpjESZaaW0Fyaesow6c1AYDd7eoKuzizcZM5kqVJQ8DBF
iN9/2uk9ViV42Wv3sTsjHJRToBYihqy4hRG/QoNzzim4KVaaj9y5DZkx6gLlDyeK
G4Hvfqk4a0MlZn/hBu8uGP3gcUg1hP+ZE9MpsYnvwmbrux/bdFvmXYcpcZQFxUh0
H20yonxfeeLglUrJit/ZMrbh+6MiUxglrqQP/UJ5CQN/lIUl6tPYgvENegR8LJzW
dWSSQj+edrgfuTcdvkJ3rd1t0NHz+5U42XQJ79XwlkVRZ/m2OI/5DkKQraGC6dj4
jI+H035TyOg=
-----END CERTIFICATE-----