Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/9ADD6F18937811EDAE801E5AC4F9AE02.roa
File:                     9ADD6F18937811EDAE801E5AC4F9AE02.roa (raw, json)
Hash identifier:          HMsjk6qf6xsuuxvfx7pk2NXHu9FqfTrOoM7GkFjg6Jw=
Subject key identifier:   BE:EF:47:EC:CF:F2:A7:72:B6:54:7F:1C:5B:1C:ED:C8:0E:E6:9D:AD
Certificate issuer:       /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Certificate serial:       05C2
Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/9ADD6F18937811EDAE801E5AC4F9AE02.roa
Signing time:             Fri 13 Jan 2023 19:29:32 +0000
ROA not before:           Fri 13 Jan 2023 19:29:32 +0000
ROA not after:            Wed 31 Jan 2024 00:00:00 +0000
asID:                     142300
IP address blocks:        103.156.245.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1474 (0x5c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
        Validity
            Not Before: Jan 13 19:29:32 2023 GMT
            Not After : Jan 31 00:00:00 2024 GMT
        Subject: CN=63c1b11c-8c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f2:1c:eb:ef:03:f3:85:62:ea:26:32:82:b8:
                    c7:be:6c:c9:cc:86:5f:58:bd:af:c6:76:4a:7f:c8:
                    c5:96:31:71:f5:49:9d:a2:1d:d1:10:3e:18:b4:c8:
                    21:fd:a3:94:b3:e8:19:88:71:b4:4c:ca:28:81:5c:
                    6c:96:97:7c:84:ad:76:b1:e8:2f:08:0c:68:2f:b1:
                    d4:ee:a5:51:d2:35:94:2d:d2:22:65:ba:8c:03:76:
                    11:62:38:0b:43:76:de:ca:d7:1f:fc:97:be:37:c5:
                    eb:5a:58:37:1b:e5:ef:b9:ab:a8:06:58:a6:90:a2:
                    25:d5:ca:04:15:c0:d5:09:23:f7:e4:1d:21:2a:4c:
                    2f:d6:6b:20:16:c4:c2:fd:db:76:14:d9:81:17:f6:
                    8f:c7:a3:13:1f:3c:91:26:0c:3b:6a:90:a9:69:e7:
                    a5:de:46:d1:7d:a7:c2:43:26:68:e0:3e:df:82:8c:
                    b8:3e:e5:6f:8e:5c:19:fe:1e:67:0a:ce:7f:99:d1:
                    c5:cb:71:fa:b2:54:71:e5:8c:f4:a6:50:ff:a2:68:
                    9e:a2:e5:69:5b:df:96:9d:db:e8:22:4c:43:5f:c3:
                    34:9e:56:8e:dc:05:b4:fd:e2:c1:66:98:74:a9:73:
                    bf:28:a4:dc:a0:b5:20:d2:18:66:33:a6:de:83:f4:
                    f8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EF:47:EC:CF:F2:A7:72:B6:54:7F:1C:5B:1C:ED:C8:0E:E6:9D:AD
            X509v3 Authority Key Identifier:
                keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/9ADD6F18937811EDAE801E5AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:0f:d0:92:14:d5:32:52:c9:1d:d8:96:f2:87:4c:0c:ce:d5:
         81:44:84:a7:22:f2:36:33:58:63:86:a2:11:81:46:a8:27:50:
         c2:e1:90:cf:7d:35:95:a5:8b:c5:47:8e:a7:47:e3:26:ac:30:
         d9:1d:fe:bd:c6:32:8b:6b:4b:4e:2a:9f:b0:af:e6:ee:0d:b6:
         94:2a:36:77:35:44:d8:1f:2e:dc:f8:02:e5:84:82:e3:61:46:
         56:0e:0c:6d:fd:fd:c1:75:22:b4:06:6e:d3:b3:7a:f8:71:83:
         6b:a0:a2:08:ee:03:9f:06:16:e8:95:37:e8:e6:84:8e:eb:7e:
         03:63:7b:2d:a3:66:61:54:cb:a7:b4:a0:d8:04:35:ff:3a:3b:
         1c:38:0f:dc:e5:c6:89:ee:10:ab:49:68:e2:26:98:31:2d:27:
         4a:27:fd:c5:59:5c:b2:17:a2:48:ff:8f:1b:5a:65:f7:35:74:
         f3:9b:47:71:07:ca:4f:07:1d:24:1d:db:bd:04:8e:c2:62:d8:
         f1:95:8b:3f:dd:cc:9d:52:38:84:21:d5:45:3c:17:30:eb:fe:
         ee:18:39:8a:df:57:e0:55:9c:2c:f1:94:6d:a1:f9:84:1b:cb:
         80:e5:36:6c:d0:5f:16:63:79:9b:78:30:95:f3:95:c4:7f:44:
         bf:36:71:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----