Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/FBB80EFA9D8C11EE9B012D50C4F9AE02.roa
File:                     FBB80EFA9D8C11EE9B012D50C4F9AE02.roa (raw, json)
Hash identifier:          5oKm7QkuwIyTZa0EdHs2+njdpx+JhtI1UryLZGtH2w8=
Subject key identifier:   E6:54:83:ED:A0:FC:58:D5:F4:78:7C:6E:00:61:E3:66:C4:BF:B9:99
Certificate issuer:       /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Certificate serial:       90
Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/FBB80EFA9D8C11EE9B012D50C4F9AE02.roa
Signing time:             Mon 18 Dec 2023 10:05:34 +0000
ROA not before:           Mon 18 Dec 2023 10:05:34 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     152184
IP address blocks:        2401:3fa0:110::/44 maxlen: 44

Validation:               Failed, certificate revoked on Tue 30 Jan 2024 13:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
        Validity
            Not Before: Dec 18 10:05:34 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=6580196e-e62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:70:dd:7c:86:db:84:53:e7:51:29:c4:12:29:
                    9c:15:f4:cb:a1:a5:7f:1f:ef:2d:1f:d8:94:f9:22:
                    99:23:d4:45:24:58:1a:b7:dd:dd:8d:b7:38:fd:47:
                    fc:e0:8a:6c:72:18:58:ba:82:e5:c3:a9:b4:83:82:
                    dc:d6:ad:0b:7e:d4:bb:eb:bf:3f:c2:a5:f7:0d:4d:
                    70:d3:43:e6:4e:d0:de:e7:d0:55:5a:5d:67:56:05:
                    b1:52:55:bb:b7:a0:de:09:62:75:c1:4a:62:88:90:
                    68:15:07:8e:c5:e8:35:7b:79:6b:69:ef:14:9d:12:
                    2f:fe:d8:cf:c5:34:88:85:b9:4b:ae:a1:ff:62:ce:
                    9a:6a:17:5f:9c:2c:63:3a:dc:a8:c4:27:63:5a:3d:
                    58:92:bf:71:ad:92:47:8f:84:19:53:75:d2:24:e1:
                    ce:30:89:29:8a:25:0e:c5:69:5f:05:b6:7b:3b:ba:
                    4a:b4:2e:cf:2c:08:b1:99:bf:47:22:0e:12:8c:bc:
                    fb:41:bd:7f:58:e5:b7:14:95:f4:e5:e5:6c:24:2f:
                    27:be:33:59:12:a0:e7:e6:2f:33:80:6c:58:f2:6f:
                    8f:77:a3:76:61:8f:4c:01:f4:8f:d8:25:9f:78:c0:
                    5e:7d:39:01:5e:56:35:f3:8b:11:4e:d4:60:93:c9:
                    7b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:54:83:ED:A0:FC:58:D5:F4:78:7C:6E:00:61:E3:66:C4:BF:B9:99
            X509v3 Authority Key Identifier:
                keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/FBB80EFA9D8C11EE9B012D50C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3fa0:110::/44

    Signature Algorithm: sha256WithRSAEncryption
         33:93:34:ad:5b:92:97:35:67:dd:f1:96:33:9d:94:7a:57:9f:
         ad:f0:94:23:e7:e8:b4:58:d4:f0:6c:b3:19:6d:5b:72:87:72:
         ba:22:cf:2a:32:09:85:21:6b:c2:43:a7:11:22:f1:fd:25:93:
         4f:4b:51:42:c1:8a:9e:dd:0f:26:17:d8:45:4e:59:18:0b:7f:
         5a:da:1a:32:66:3a:06:1c:a3:08:4b:65:9b:db:89:59:66:81:
         40:ab:1e:6c:55:19:22:74:fa:e3:8c:90:d4:83:c6:92:74:a7:
         53:aa:3d:93:16:30:af:55:79:69:4d:7b:74:24:b7:d5:22:7d:
         ac:2d:75:c8:81:1b:57:77:3c:80:e1:29:40:fc:c6:be:fb:12:
         97:8d:28:0e:2c:45:f2:9a:0d:63:45:25:d6:16:33:36:ac:d8:
         13:27:b9:d4:69:f2:cb:3d:ad:57:37:40:7d:04:b6:71:63:97:
         46:1e:c5:2b:8d:39:3e:65:9d:45:cd:b0:1f:4d:44:ab:ab:df:
         ca:cc:7a:d4:16:56:cb:8d:be:f0:1e:56:b0:e3:c4:2d:9f:e3:
         03:2e:75:bf:61:4d:15:47:3c:86:cb:f3:f3:81:7e:4f:55:e4:
         1c:b0:c4:78:7d:5a:45:99:e8:79:f2:cc:d9:7f:86:3b:c2:b8:
         61:4a:a6:b7
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg3RkQxMTAvBgNVBAUTKDY4ODUyQUI3RjI3MTRGQ0Y1NEQ3NUYwQUFFMzA2OEFE
QzM4QjM1Q0MwHhcNMjMxMjE4MTAwNTM0WhcNMjQwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTgwMTk2ZS1lNjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3HDdfIbbhFPnUSnEEimcFfTLoaV/H+8tH9iU+SKZI9RFJFgat93djbc4/Uf8
4IpschhYuoLlw6m0g4Lc1q0LftS7678/wqX3DU1w00PmTtDe59BVWl1nVgWxUlW7
t6DeCWJ1wUpiiJBoFQeOxeg1e3lrae8UnRIv/tjPxTSIhblLrqH/Ys6aahdfnCxj
OtyoxCdjWj1Ykr9xrZJHj4QZU3XSJOHOMIkpiiUOxWlfBbZ7O7pKtC7PLAixmb9H
Ig4SjLz7Qb1/WOW3FJX05eVsJC8nvjNZEqDn5i8zgGxY8m+Pd6N2YY9MAfSP2CWf
eMBefTkBXlY184sRTtRgk8l7gQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFOZUg+2g
/FjV9Hh8bgBh42bEv7mZMB8GA1UdIwQYMBaAFGiFKrfycU/PVNdfCq4waK3DizXM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODdGRC81NUVENkExNjEw
QTAxMUVFOTM0OTNDNTJDNEY5QUUwMi9hSVVxdF9KeFQ4OVUxMThLcmpCb3JjT0xO
Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FJVXF0X0p4VDg5VTExOEtyakJvcmNPTE5jdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTg3RkQvNTVFRDZBMTYxMEEwMTFFRTkzNDkzQzUyQzRGOUFFMDIvRkJCODBFRkE5
RDhDMTFFRTlCMDEyRDUwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E
EzARMA8EAgACMAkDBwQkAT+gARAwDQYJKoZIhvcNAQELBQADggEBADOTNK1bkpc1
Z93xljOdlHpXn63wlCPn6LRY1PBssxltW3KHcroizyoyCYUha8JDpxEi8f0lk09L
UULBip7dDyYX2EVOWRgLf1raGjJmOgYcowhLZZvbiVlmgUCrHmxVGSJ0+uOMkNSD
xpJ0p1OqPZMWMK9VeWlNe3Qkt9UifawtdciBG1d3PIDhKUD8xr77EpeNKA4sRfKa
DWNFJdYWMzas2BMnudRp8ss9rVc3QH0EtnFjl0YexSuNOT5lnUXNsB9NRKur38rM
etQWVsuNvvAeVrDjxC2f4wMudb9hTRVHPIbL8/OBfk9V5BywxHh9WkWZ6HnyzNl/
hjvCuGFKprc=
-----END CERTIFICATE-----