Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/36932A58207111EEA83E4314C4F9AE02.roa
File:                     36932A58207111EEA83E4314C4F9AE02.roa (raw, json)
Hash identifier:          KETGVmmXkMimXyKW1fXrBUsVMun3sn/DlNl/Nx7NIKY=
Subject key identifier:   45:F4:E3:C5:4F:4D:56:CB:12:6B:65:7D:89:0D:B3:B3:EF:D7:88:0D
Certificate issuer:       /CN=A9126DA8/serialNumber=BC137C2777E51DE7BD1ACE80D868FD93A1EC7A43
Certificate serial:       013F
Authority key identifier: BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/36932A58207111EEA83E4314C4F9AE02.roa
Signing time:             Wed 12 Jul 2023 05:01:52 +0000
ROA not before:           Wed 12 Jul 2023 05:01:52 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     9245
IP address blocks:        103.25.125.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126DA8/serialNumber=BC137C2777E51DE7BD1ACE80D868FD93A1EC7A43
        Validity
            Not Before: Jul 12 05:01:52 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64ae33bf-dc26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:10:1d:cf:73:fc:ad:1e:e7:18:5b:4e:41:3d:
                    dc:77:68:fc:b4:c0:a5:49:2d:3e:b0:dd:79:47:0d:
                    92:ed:47:87:8f:eb:be:2f:16:80:4d:45:5e:e6:bb:
                    50:38:b1:28:1b:11:80:51:56:e5:33:20:98:4b:f7:
                    b2:0a:6e:72:63:6a:9e:20:6f:a7:5c:ba:72:e3:6a:
                    5c:f9:02:dd:d6:e2:84:78:13:27:35:0f:76:bb:f3:
                    5b:a1:69:6c:53:9f:81:aa:48:de:d6:f6:cb:a3:4e:
                    23:a2:80:8a:c5:35:1f:be:d1:36:ac:44:53:66:a9:
                    6e:7b:56:9d:67:af:d7:ba:34:a9:d1:8d:a8:42:18:
                    52:8c:1c:81:d3:8e:59:a6:45:47:7b:46:6f:f0:cf:
                    e8:93:39:c0:df:54:0f:7f:d0:04:f0:6f:a6:ea:9e:
                    a8:33:8d:57:a6:05:04:97:1e:84:77:3c:e7:f4:db:
                    a7:45:91:76:b8:dc:07:ed:73:8e:eb:44:09:72:f8:
                    80:92:26:f2:19:a2:df:d7:d2:02:4e:8c:35:52:28:
                    ed:33:3e:a0:80:b1:af:b2:dc:e6:72:f5:97:b3:d9:
                    b3:f1:0c:e3:e9:df:4c:39:4f:56:49:48:c1:21:ee:
                    18:82:bd:87:3b:ba:14:56:6d:df:ec:c5:4b:4f:06:
                    5f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F4:E3:C5:4F:4D:56:CB:12:6B:65:7D:89:0D:B3:B3:EF:D7:88:0D
            X509v3 Authority Key Identifier:
                keyid:BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/vBN8J3flHee9Gs6A2Gj9k6HsekM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/36932A58207111EEA83E4314C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:88:35:e9:70:b1:5a:be:76:2b:50:7a:bc:f9:cb:c2:25:77:
         f5:d7:3f:c3:66:2f:c9:1a:dd:dd:1a:f9:53:57:79:9d:51:4a:
         6a:f6:5d:b1:66:68:ba:32:1f:73:b9:02:ac:d7:93:35:8d:13:
         8c:c1:09:9b:40:93:8e:70:0a:6e:c0:c2:fe:b3:a1:06:42:60:
         9a:30:9d:68:5f:7d:c8:a3:3a:3d:67:34:ff:b0:36:a7:a7:20:
         1c:56:8f:cd:5c:b1:dc:3e:36:4a:25:e7:5d:28:6a:c5:f7:57:
         13:8e:4e:2c:ff:ae:47:f6:31:df:ac:1b:41:bb:6c:fa:b8:2a:
         f9:47:57:80:c9:d7:3f:66:e4:e6:3b:d2:88:31:8b:2c:2e:d5:
         e2:14:4b:51:68:e1:a2:be:85:ff:f2:c3:b9:e0:59:91:7a:f7:
         ea:ea:12:5e:b9:6e:ca:3b:60:ca:a7:1c:db:57:76:7c:14:19:
         1b:e9:13:bc:4a:01:24:ff:d6:d9:f7:41:cc:e8:bc:c6:f9:91:
         a9:d7:94:e7:08:26:72:ad:7f:88:bd:98:f9:ad:c4:7d:91:d4:
         69:53:1c:46:99:45:c9:2c:3a:a2:f8:d9:9e:a1:80:65:00:2e:
         5d:f2:6a:e3:88:b3:89:65:de:f4:b4:02:63:ba:98:3f:66:69:
         0c:55:62:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----