Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/37969C96C6B411EB9FFA560FC4F9AE02.roa
File:                     37969C96C6B411EB9FFA560FC4F9AE02.roa (raw, json)
Hash identifier:          PnI3PT8N5lB6GiapSQNt7ZM1UCLXb0tZlWD5bEKDqmk=
Subject key identifier:   88:84:3A:08:6B:38:FF:0D:29:78:07:78:02:67:0B:60:8E:01:9D:ED
Certificate issuer:       /CN=A912D99E/serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3
Certificate serial:       12BF
Authority key identifier: CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/37969C96C6B411EB9FFA560FC4F9AE02.roa
Signing time:             Thu 28 Jul 2022 09:25:39 +0000
ROA not before:           Thu 28 Jul 2022 09:25:39 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     137809
IP address blocks:        103.114.92.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4799 (0x12bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D99E/serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3
        Validity
            Not Before: Jul 28 09:25:39 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=62e25612-9cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:64:2d:4c:87:87:80:06:9c:7a:8a:95:c0:1a:
                    a6:a7:a3:6a:01:e6:aa:99:7f:a0:47:5e:46:86:16:
                    3c:71:6d:de:2b:62:f5:1c:90:bb:84:68:40:b2:d9:
                    9e:8d:38:41:e0:e8:f4:00:db:7a:f8:67:a2:0c:41:
                    d3:87:b2:81:9b:a5:b2:0a:33:a0:6d:1e:5f:f7:16:
                    6d:0e:a9:b5:07:70:2c:c3:12:be:9c:dd:b0:e7:6d:
                    a6:27:a0:bc:82:92:24:dc:ff:99:04:83:36:76:73:
                    e1:da:22:cd:ad:68:40:fe:be:90:2c:91:99:f3:40:
                    72:2b:10:fe:ee:16:08:1e:ea:4b:49:f0:cf:ba:5e:
                    c8:29:55:65:6f:23:78:81:1c:2e:52:a9:55:10:8c:
                    9a:b9:b8:9b:d3:74:32:1c:08:7e:f0:99:dd:20:60:
                    e1:17:57:73:e1:72:2e:6d:2c:ca:93:65:42:d4:a6:
                    8d:c6:4b:47:66:66:3a:e8:bc:78:86:82:5e:d7:87:
                    24:cd:07:56:b1:7e:ed:b6:ee:05:89:f3:c0:e0:7d:
                    85:e1:b2:cd:60:46:a5:6b:d4:74:ee:b8:08:aa:60:
                    02:bb:dd:78:f6:39:44:b4:24:f7:a6:41:40:27:9a:
                    7e:fb:05:83:79:6f:fd:ef:f8:fa:67:1b:38:a6:a8:
                    14:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:84:3A:08:6B:38:FF:0D:29:78:07:78:02:67:0B:60:8E:01:9D:ED
            X509v3 Authority Key Identifier:
                keyid:CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/37969C96C6B411EB9FFA560FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:0f:b6:b8:83:bd:90:f4:69:7b:90:5c:10:74:f5:3a:9d:38:
         f2:93:27:32:0c:5c:94:fe:ca:1e:0c:53:3f:c6:0b:43:b9:86:
         41:f5:4b:66:82:e0:1b:7b:2d:7c:7d:cb:c9:6b:b8:4b:6e:b4:
         6a:79:1b:53:0c:b0:b7:d4:9a:67:9f:b3:f1:8f:d4:9d:76:56:
         19:2d:af:71:80:61:28:21:3e:fc:99:bc:d8:e4:25:e2:27:0b:
         54:f3:65:56:4e:fe:b1:b5:4c:37:da:a8:3d:68:20:06:c7:65:
         c3:80:84:cd:83:13:e1:57:9a:25:11:23:38:65:36:86:04:ce:
         1f:19:b8:f9:8d:2e:ff:d8:15:11:b2:2f:0d:04:99:fe:3d:2e:
         07:93:d7:1e:42:98:63:7b:6b:6d:8d:27:f4:c8:34:80:dc:59:
         38:f5:a7:f7:86:f0:11:7e:e6:03:f9:d0:9d:9d:b3:13:d3:f6:
         20:b6:46:99:7b:d9:16:e3:9f:3f:e6:36:07:79:4e:81:66:5f:
         c8:dd:86:e1:74:57:c3:85:25:d7:de:43:e9:a1:16:e6:ec:0b:
         9a:a0:b4:b4:34:d2:94:eb:ff:b9:1e:cf:d8:79:55:52:48:87:
         90:d2:62:33:6d:04:03:d7:62:60:f3:7d:ff:a5:39:84:50:88:
         c4:e3:23:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----