Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/B7A65FE8B1B711EE97717A0FC4F9AE02.roa
File:                     B7A65FE8B1B711EE97717A0FC4F9AE02.roa (raw, json)
Hash identifier:          V6rdoLGtvIEtzE1ZIwoFh4ReE5wamo26N7AZIQfqZEs=
Subject key identifier:   20:92:4B:75:09:A0:89:14:69:17:1D:9F:D9:93:C3:87:B0:E5:2D:14
Certificate issuer:       /CN=A911662A/serialNumber=D3E475DE9BA7B7372BD1936A906E86697C7EA33B
Certificate serial:       045B
Authority key identifier: D3:E4:75:DE:9B:A7:B7:37:2B:D1:93:6A:90:6E:86:69:7C:7E:A3:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0-R13puntzcr0ZNqkG6GaXx-ozs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/B7A65FE8B1B711EE97717A0FC4F9AE02.roa
Signing time:             Sat 13 Jan 2024 02:01:51 +0000
ROA not before:           Sat 13 Jan 2024 02:01:51 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     137897
IP address blocks:        2403:27c0:c03::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 05 Feb 2024 02:13:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1115 (0x45b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911662A/serialNumber=D3E475DE9BA7B7372BD1936A906E86697C7EA33B
        Validity
            Not Before: Jan 13 02:01:51 2024 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=65a1ef0f-26d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d3:72:b2:08:3d:43:7f:b9:85:08:e5:7d:8b:
                    ee:1a:87:41:75:c1:97:41:a5:b9:3e:bb:ae:b4:5e:
                    1f:a2:be:c5:4e:92:63:2e:17:73:3b:11:23:b9:bd:
                    07:aa:db:64:42:38:0f:3d:11:80:19:f1:65:14:ea:
                    f0:97:16:d3:40:6b:bd:7b:64:94:70:dc:c8:07:bf:
                    cd:8e:b8:fb:59:75:db:1b:2d:5d:a0:cd:e7:01:12:
                    af:5b:7d:6c:e2:2d:f9:48:27:31:24:73:a9:d1:dd:
                    96:45:c6:d1:9b:89:9f:ac:9d:27:e6:c4:9c:55:f4:
                    d8:1f:3e:ae:c6:61:23:d9:16:a2:06:78:20:c4:94:
                    c4:93:cb:a5:66:61:f6:eb:b2:32:1b:88:e5:16:e6:
                    d1:7e:a5:0b:63:b6:8b:07:d4:b9:ae:a6:d9:49:3b:
                    50:24:90:05:2b:9d:93:50:27:dd:ff:b4:9e:9e:f1:
                    bc:4b:01:ab:6c:20:a9:cf:77:54:43:2b:fe:4d:39:
                    8c:56:58:85:dc:e5:37:1f:17:63:8d:26:94:60:db:
                    14:97:66:39:75:47:84:b4:64:1c:2f:19:87:42:03:
                    c4:3f:cf:3d:35:ab:cb:4a:fc:b1:01:be:fd:0e:7d:
                    4a:f8:17:ae:8f:7e:8a:f9:21:50:f1:0b:28:a7:21:
                    9e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:92:4B:75:09:A0:89:14:69:17:1D:9F:D9:93:C3:87:B0:E5:2D:14
            X509v3 Authority Key Identifier:
                keyid:D3:E4:75:DE:9B:A7:B7:37:2B:D1:93:6A:90:6E:86:69:7C:7E:A3:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/0-R13puntzcr0ZNqkG6GaXx-ozs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0-R13puntzcr0ZNqkG6GaXx-ozs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911662A/B0937498002511ECBBDA2D12C4F9AE02/B7A65FE8B1B711EE97717A0FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:27c0:c03::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:fc:a6:e7:06:eb:b0:2d:7e:cd:94:26:71:cd:0e:ee:4b:97:
         7d:9d:e1:fb:8f:57:bc:84:46:8a:5e:32:de:35:9f:de:94:d8:
         3a:ba:12:49:33:8e:6e:c4:e0:6e:ab:56:01:d0:b9:4a:5b:3a:
         e3:21:36:77:61:0f:cd:90:12:76:a2:88:d2:e9:d2:cd:cf:7b:
         7c:32:eb:33:a8:79:47:0e:7e:18:39:8d:d5:75:2b:c8:c9:f1:
         49:07:cb:f3:72:70:4b:f3:90:38:f2:a0:d7:36:74:c0:c9:30:
         33:bf:16:a6:ab:94:c3:30:0f:c0:1c:66:32:89:7f:ff:d2:ec:
         77:95:f0:7f:d2:73:d0:ca:7e:a7:92:1b:de:2e:22:0a:63:1a:
         70:8c:f6:93:b8:eb:f5:15:10:f9:8e:ca:25:65:a4:78:e2:1a:
         24:44:b2:76:09:2b:99:24:62:5e:f7:28:c9:8d:24:91:9d:4d:
         68:34:9c:e9:0e:b0:fc:3b:e9:3e:a5:ea:ac:d5:4a:10:b6:e6:
         7a:b9:bc:1b:eb:c7:83:d3:04:bf:11:06:6b:bf:00:0e:09:da:
         01:69:df:a1:9c:05:a2:e1:5e:5d:c2:8a:1d:80:34:84:a0:31:
         b6:9e:87:b9:53:0c:6b:c6:42:9e:36:70:48:b1:ff:7d:d3:f3:
         99:a0:3e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----