Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/1A59547A2DEE11EBA42B2973C4F9AE02.roa
File:                     1A59547A2DEE11EBA42B2973C4F9AE02.roa (raw, json)
Hash identifier:          X6sTihwrtsTq6TMmAUVOYGELRFW1fcrjefJb67zvCgw=
Subject key identifier:   20:83:46:07:21:7E:D6:96:76:CD:A1:39:7C:1C:56:CF:0F:D8:FA:54
Certificate issuer:       /CN=A9131ABD/serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD
Certificate serial:       0998
Authority key identifier: 2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/1A59547A2DEE11EBA42B2973C4F9AE02.roa
Signing time:             Tue 21 Jun 2022 19:59:18 +0000
ROA not before:           Tue 21 Jun 2022 19:59:18 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     212450
IP address blocks:        103.249.71.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2456 (0x998)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131ABD/serialNumber=2E9C91F4E394A4AFA976D6BC3F65DF2D9F079EBD
        Validity
            Not Before: Jun 21 19:59:18 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=62b22316-562f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:80:2d:d9:eb:4f:a5:ff:a7:73:66:20:a3:
                    b1:6b:08:5b:cf:e0:a4:68:af:a9:25:0d:e1:e0:c4:
                    51:be:6b:8c:48:ad:42:92:2e:b2:f2:26:cb:52:06:
                    e5:f3:76:ff:c9:c5:29:6a:b0:6c:db:77:5b:b8:78:
                    dd:31:c4:6b:26:ed:8b:a3:f9:e8:db:02:36:ae:a1:
                    88:57:7c:dd:62:45:53:41:f9:2b:7f:df:51:92:03:
                    7d:53:b6:a2:9f:f0:38:35:b6:8d:83:ea:d4:99:5e:
                    9c:fa:5b:5b:eb:b2:7f:b0:17:4e:e4:f5:14:4e:07:
                    0e:24:e0:94:38:2a:dc:fd:65:a2:33:21:98:66:09:
                    32:2e:ee:ad:9c:6c:04:f3:40:f2:6a:b7:a8:40:ce:
                    9b:3a:28:e9:d2:7a:03:8d:8f:39:69:06:78:b4:e3:
                    8a:56:25:b7:27:76:4b:ad:68:24:5f:a9:2b:9c:97:
                    fb:88:d5:96:f0:29:8f:c9:5c:13:d1:7f:5e:01:9b:
                    b6:76:c5:33:dd:1e:dd:58:dc:70:1a:ac:53:90:49:
                    c9:26:af:f0:4c:e1:89:d8:ed:c4:47:a7:cc:c6:36:
                    a2:64:05:e9:af:de:15:cf:07:d7:5d:be:3f:7b:9d:
                    38:14:ea:e0:c4:00:5c:3a:fc:ae:22:a5:d3:5c:73:
                    c8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:83:46:07:21:7E:D6:96:76:CD:A1:39:7C:1C:56:CF:0F:D8:FA:54
            X509v3 Authority Key Identifier:
                keyid:2E:9C:91:F4:E3:94:A4:AF:A9:76:D6:BC:3F:65:DF:2D:9F:07:9E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LpyR9OOUpK-pdta8P2XfLZ8Hnr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131ABD/20E8F9A004E911EA8D20EE5FC4F9AE02/1A59547A2DEE11EBA42B2973C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.249.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:e7:03:9c:61:0c:aa:55:0e:3d:67:0d:c3:7f:5f:10:3a:ac:
         54:ab:fc:1d:70:16:3d:72:1a:dc:e4:d0:70:0e:c4:9b:d6:7b:
         23:55:8b:d9:f0:88:a9:62:ae:19:b7:84:2b:fb:cf:d3:c5:ee:
         db:3f:61:8a:33:0e:1a:97:06:fa:16:a3:14:c4:cc:ed:19:f7:
         ca:a3:79:2b:f6:20:0c:8a:5b:4b:90:b7:e5:29:0b:4c:f5:9e:
         c6:4f:8a:73:86:7b:44:df:b8:12:6c:24:4f:70:81:a8:ea:1e:
         eb:34:e6:36:ec:ce:43:a8:d9:1e:45:c2:b3:e8:bd:36:b3:95:
         ab:9d:ee:53:31:6c:be:d5:af:d0:8d:bd:98:de:36:9b:b8:2c:
         15:0f:09:dc:1f:26:35:45:5c:c8:48:d5:ac:9b:62:b6:8d:0c:
         75:36:13:7b:9e:56:8d:cb:a9:6a:c1:28:b9:0a:91:96:50:80:
         8d:1c:c9:48:59:14:57:48:72:1b:45:0b:94:43:c9:81:5e:91:
         8c:11:71:92:67:77:eb:44:d1:24:f3:e6:dc:87:5f:8c:aa:af:
         57:39:c3:16:fa:60:56:b0:d9:06:0d:58:f3:c3:0b:0f:ff:37:
         0d:c6:a2:b5:7c:ad:5d:b1:bd:73:dc:4b:28:de:8f:24:a1:17:
         fe:14:52:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----