Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/25A0DDA029C011EE817A7A82C4F9AE02.roa
File:                     25A0DDA029C011EE817A7A82C4F9AE02.roa (raw, json)
Hash identifier:          8tzkDuhr+8Cdej5vS795Ni58rKrAitAzMsafwOKSIBI=
Subject key identifier:   E2:27:8A:8F:9E:11:8C:0A:83:23:28:61:4B:75:94:A1:A3:E5:EC:43
Certificate issuer:       /CN=A9132FA5/serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7
Certificate serial:       0953
Authority key identifier: 8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/25A0DDA029C011EE817A7A82C4F9AE02.roa
Signing time:             Mon 24 Jul 2023 01:19:34 +0000
ROA not before:           Mon 24 Jul 2023 01:19:34 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     38195
IP address blocks:        103.87.210.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2387 (0x953)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132FA5/serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7
        Validity
            Not Before: Jul 24 01:19:34 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=64bdd1a5-4183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:61:41:75:13:7f:8a:a2:12:fb:60:84:0a:27:
                    3f:9c:29:98:a1:07:3a:1b:af:0a:12:ec:1d:fa:b6:
                    cd:7c:d8:a4:9f:13:af:c7:6b:e9:ca:ac:2d:89:13:
                    ff:05:56:f0:91:83:69:c7:91:fc:d9:da:0a:ef:e0:
                    f7:61:45:80:2d:de:75:f7:89:2c:64:98:91:55:fc:
                    7b:55:19:8e:31:c7:30:20:cb:52:c8:79:3f:ef:61:
                    7a:e5:68:74:49:ec:80:7e:2a:5b:69:68:b2:fa:f4:
                    e4:57:7d:0c:a6:0f:6f:5c:ed:4a:98:f9:a4:b1:33:
                    57:b6:0b:bf:54:22:5a:22:27:82:61:75:a0:43:03:
                    40:60:c9:1f:a9:6c:cd:ee:a5:cb:1a:f6:60:a6:a7:
                    c1:dc:58:47:c3:b6:b2:34:c5:14:3a:ca:44:94:34:
                    72:c7:c0:42:09:52:cf:e2:9d:49:f4:de:ac:98:eb:
                    41:db:16:8c:13:f3:8f:c6:ed:2a:bb:04:b0:46:c3:
                    7b:f1:33:7d:48:dd:f4:65:8f:14:c7:8c:e4:36:95:
                    da:ba:2c:75:0d:48:0c:dd:8f:2b:94:17:4f:64:b8:
                    8a:a7:3b:69:67:1a:b9:a6:01:dc:d3:bc:41:7a:ca:
                    d2:75:b3:d0:4e:19:87:e9:cf:4e:b8:32:55:d6:0c:
                    b0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:27:8A:8F:9E:11:8C:0A:83:23:28:61:4B:75:94:A1:A3:E5:EC:43
            X509v3 Authority Key Identifier:
                keyid:8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/25A0DDA029C011EE817A7A82C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:ab:a7:bd:c1:32:24:ce:db:e0:ed:d7:ff:3f:b4:0f:cd:ed:
         44:ea:a9:51:89:bf:44:8f:8f:4a:bd:af:bb:ec:82:1f:4b:a2:
         24:71:7a:19:d6:3b:25:bd:cb:79:a2:98:97:d2:6b:45:a3:ca:
         f4:58:7b:f5:0c:71:4d:20:08:62:5b:ff:c7:22:d7:47:ef:07:
         54:88:37:2d:d5:0e:17:40:45:58:2f:39:67:45:5d:fa:eb:d3:
         37:1d:ca:74:45:68:9b:e0:da:cc:31:78:d6:68:55:d3:6b:77:
         0a:d1:8f:85:e1:29:1d:e8:f6:d2:06:01:e5:28:7b:06:f5:3a:
         82:ec:81:a1:92:9d:8c:63:aa:bd:ee:8c:42:91:c0:df:52:37:
         a3:02:48:52:21:13:a0:82:6b:87:3e:34:da:50:98:19:e8:af:
         9f:02:68:05:df:43:46:a8:53:f9:f5:e1:96:81:d8:2d:55:b8:
         04:53:b4:ab:45:b9:b3:86:e7:2d:0a:59:79:4a:5d:3f:71:18:
         d4:96:36:97:ed:9b:0e:48:31:52:9d:05:58:7c:30:14:de:3b:
         9e:45:fc:a3:c1:e3:c4:97:88:61:9d:b4:30:09:ea:68:ac:1a:
         b3:10:74:23:60:92:95:74:27:1c:7d:95:8c:b7:40:33:db:ea:
         e6:c4:51:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----