Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/9DB1D80C01EF11EDA0677F53C4F9AE02.roa
File:                     9DB1D80C01EF11EDA0677F53C4F9AE02.roa (raw, json)
Hash identifier:          Pf60qdt7lcxfE4YuegX9ahYJChqEaJUa9PrqBHbScXg=
Subject key identifier:   CA:F7:58:66:11:C3:6F:CC:4E:ED:C3:50:C2:0E:A5:6B:F0:4A:D7:72
Certificate issuer:       /CN=A9126DA8/serialNumber=BC137C2777E51DE7BD1ACE80D868FD93A1EC7A43
Certificate serial:       02
Authority key identifier: BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/9DB1D80C01EF11EDA0677F53C4F9AE02.roa
Signing time:             Tue 12 Jul 2022 14:33:38 +0000
ROA not before:           Tue 12 Jul 2022 14:33:38 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     58925
IP address blocks:        103.25.124.0/24 maxlen: 24
                          103.25.125.0/24 maxlen: 24
                          103.25.126.0/24 maxlen: 24
                          103.25.127.0/24 maxlen: 24
                          2406:db00::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126DA8/serialNumber=BC137C2777E51DE7BD1ACE80D868FD93A1EC7A43
        Validity
            Not Before: Jul 12 14:33:38 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=62cd8641-21c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e9:ef:1a:94:6a:e4:12:61:21:b3:77:b3:e8:
                    7b:8d:bb:2a:2b:8d:92:dc:d9:66:63:7e:48:96:55:
                    09:a4:74:0c:54:ff:2f:b9:35:7b:e6:db:8b:16:fa:
                    1b:a7:3a:6c:57:b2:bf:aa:cf:63:b4:43:b6:fa:05:
                    0b:27:22:72:c7:af:c2:3e:cc:57:de:82:86:24:8e:
                    1e:0f:fa:eb:4f:12:56:e1:07:97:11:3e:73:b0:e7:
                    27:69:90:ba:85:da:b9:b5:a2:f7:6c:7e:3d:90:88:
                    3f:40:c8:8a:27:6f:47:de:7c:20:be:0d:93:de:60:
                    4c:86:51:86:bc:0e:fa:71:5a:ff:90:7b:41:f3:8e:
                    dd:1d:db:9b:79:ce:12:34:f0:cc:79:10:2a:f0:d5:
                    31:23:d7:35:7c:92:27:5a:c1:7d:37:7b:28:cd:11:
                    26:b4:12:d4:a1:50:84:fd:29:f1:65:2f:15:30:f8:
                    15:10:40:3c:31:a1:8e:5e:27:51:0f:c8:ee:55:87:
                    b4:4b:02:8f:98:64:38:4d:22:0c:76:dc:63:e5:a8:
                    68:1e:3f:78:2b:a8:ef:dc:3d:96:d6:18:b0:62:5b:
                    c6:1d:5f:81:07:01:72:d2:14:0d:37:6d:c0:fd:c1:
                    cf:cd:92:08:7e:49:b2:4d:20:1f:31:bc:c6:ee:a5:
                    42:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F7:58:66:11:C3:6F:CC:4E:ED:C3:50:C2:0E:A5:6B:F0:4A:D7:72
            X509v3 Authority Key Identifier:
                keyid:BC:13:7C:27:77:E5:1D:E7:BD:1A:CE:80:D8:68:FD:93:A1:EC:7A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/vBN8J3flHee9Gs6A2Gj9k6HsekM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBN8J3flHee9Gs6A2Gj9k6HsekM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126DA8/76ED44EE01EB11ED99A31A1FC4F9AE02/9DB1D80C01EF11EDA0677F53C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.124.0/22
                IPv6:
                  2406:db00::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:e9:a9:ea:59:b2:d5:8b:4a:0e:31:c0:fe:07:14:eb:e0:0d:
         65:84:30:e8:f2:36:23:fe:4f:33:45:3e:ab:5e:98:0c:c9:c1:
         eb:18:2e:dd:16:c8:56:f8:af:6c:24:9c:0d:c3:02:96:56:9b:
         3d:35:d3:22:40:a0:01:5c:70:a3:be:d3:d4:e8:b8:a7:36:43:
         6c:45:0d:b8:f9:29:46:d1:9b:e8:a3:db:73:90:e8:07:0b:5a:
         90:a2:5f:48:83:77:79:20:f9:93:bb:24:62:b1:aa:3d:b9:d3:
         9f:1f:ea:5a:2b:bb:1b:c8:81:54:bb:70:29:72:b4:31:ba:36:
         8e:2e:91:e3:b1:fc:bd:ca:e0:95:00:31:ff:e9:88:e1:0a:37:
         fb:55:c2:5a:94:07:9e:eb:67:d9:80:d3:49:69:dd:7b:8d:0b:
         64:9a:f5:3c:58:d3:01:13:72:97:03:c4:32:01:e8:ce:44:37:
         73:fb:cf:66:57:81:03:49:4c:c8:f5:fb:8a:7b:db:59:8d:83:
         bd:7a:e8:47:c7:df:25:af:f9:36:47:ed:46:48:87:43:bc:84:
         dc:72:59:b4:b3:21:4c:60:68:28:ec:7a:b5:94:5f:5f:a8:8a:
         41:dc:16:fe:c6:76:1a:2e:ff:0a:4f:c8:ae:43:7c:32:91:b4:
         9d:8f:3b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----