Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/5F67FB06D4F111EC84AABC0CC4F9AE02.roa
File:                     5F67FB06D4F111EC84AABC0CC4F9AE02.roa (raw, json)
Hash identifier:          eWAz980zd47RIj01tXSZlEuR48DbvXmUkhQM7lWCkxE=
Subject key identifier:   5B:BB:66:A6:0B:7E:64:84:1A:29:D9:ED:82:E9:E7:1E:CC:C9:33:87
Certificate issuer:       /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
Certificate serial:       B4
Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/5F67FB06D4F111EC84AABC0CC4F9AE02.roa
Signing time:             Tue 05 Jul 2022 14:13:52 +0000
ROA not before:           Tue 05 Jul 2022 14:13:52 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     9400
IP address blocks:        103.91.219.0/24 maxlen: 24
                          2001:df0:a540::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
        Validity
            Not Before: Jul  5 14:13:52 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=62c44720-f77c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ab:6c:2c:4d:87:3d:86:da:18:14:c3:34:58:
                    88:ab:a6:ad:31:31:0f:21:b6:26:e8:34:1b:08:e1:
                    74:8f:c1:6e:b3:f7:15:4e:fe:fd:34:29:57:94:6a:
                    d0:65:8f:df:dc:e2:4c:5b:ad:28:27:df:9a:d1:76:
                    88:9c:9b:51:77:5a:50:a3:f4:04:d5:aa:08:16:65:
                    57:39:7f:2b:dc:22:fe:0f:f3:63:50:65:eb:39:38:
                    83:05:8d:0c:4e:60:72:90:63:60:f6:36:48:b0:51:
                    18:85:aa:9f:65:22:52:61:4f:75:b2:48:5b:d5:80:
                    4f:f5:b0:cf:a7:36:fd:f2:5a:dc:2d:5e:db:9c:ed:
                    60:7e:e9:49:e6:5f:d2:c6:2e:1a:ce:22:19:09:71:
                    c2:ac:f9:1b:6e:be:2b:e4:b0:0a:c5:2a:f5:46:87:
                    c1:b5:9a:a7:ba:72:78:7d:dc:1b:81:5f:6d:30:b2:
                    fa:b3:f3:67:13:c2:8f:78:b5:ce:15:72:15:b2:22:
                    25:b3:be:e4:31:f1:8c:2f:f6:b1:dc:54:40:d0:25:
                    bc:b6:12:76:4b:5a:f1:63:fc:b3:44:c8:95:4d:b8:
                    e9:d9:10:93:15:18:1f:a6:11:bf:a1:9e:00:f0:80:
                    22:b3:3a:0e:c9:3f:fe:24:5b:73:6f:3c:7f:d8:35:
                    bf:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BB:66:A6:0B:7E:64:84:1A:29:D9:ED:82:E9:E7:1E:CC:C9:33:87
            X509v3 Authority Key Identifier:
                keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/5F67FB06D4F111EC84AABC0CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.219.0/24
                IPv6:
                  2001:df0:a540::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:bb:68:a3:e1:e4:b4:57:81:bb:0c:8e:6d:51:bc:fb:d4:ca:
         cc:b7:f4:44:9e:a1:5c:b8:e5:cb:73:6c:b1:a3:4a:ce:e3:de:
         46:3c:7b:0b:b7:38:2d:0c:18:29:54:67:e8:6e:e5:e8:69:c3:
         89:9e:d7:ae:92:82:dc:05:59:d8:ca:2d:b2:35:8b:3a:5d:b0:
         08:fe:3d:86:46:c0:d8:15:58:d8:94:75:35:10:06:fb:fd:c1:
         0b:09:bf:17:21:c2:e2:53:62:22:00:eb:86:2e:6e:d7:66:97:
         2f:94:ad:70:7b:3f:67:bc:64:6c:b5:66:31:cf:26:60:5f:61:
         bf:a4:af:7d:67:1a:d8:a1:3d:48:fa:05:e8:ec:57:94:b2:c5:
         30:da:81:27:90:43:a2:b8:f2:f7:2c:0f:d7:f2:d0:61:e9:14:
         87:96:34:55:2c:f6:39:ad:3b:bd:8c:db:0f:47:f7:ef:8b:e9:
         23:8c:c2:6d:92:60:94:ef:33:e8:d1:d7:9d:e9:d5:df:0b:87:
         c1:ac:3c:eb:5c:53:bb:82:df:a9:72:62:1c:62:9f:f4:e2:63:
         68:21:b7:ed:ab:67:ac:73:72:13:66:4a:9e:64:90:ca:1b:2b:
         17:fe:68:57:45:54:61:3f:7e:9c:e4:0b:98:2e:8c:42:fa:5b:
         73:28:d2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----