Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91384FF/BAE67446C6D911E8B64C3118C4F9AE02/34C78D2CC6DA11E89C3C8E18C4F9AE02.roa
File:                     34C78D2CC6DA11E89C3C8E18C4F9AE02.roa (raw, json)
Hash identifier:          u+mKuZD9+pbCcCoAyho4kFqDAvwN+wRdXQ4wR21jXnM=
Subject key identifier:   06:EF:26:62:0F:4D:F1:BE:26:2B:7E:A4:AB:D9:83:3C:96:45:3F:96
Certificate issuer:       /CN=A91384FF/serialNumber=914773AD5863CB506560DACC64F27C34659D53FB
Certificate serial:       112B
Authority key identifier: 91:47:73:AD:58:63:CB:50:65:60:DA:CC:64:F2:7C:34:65:9D:53:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUdzrVhjy1BlYNrMZPJ8NGWdU_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91384FF/BAE67446C6D911E8B64C3118C4F9AE02/34C78D2CC6DA11E89C3C8E18C4F9AE02.roa
Signing time:             Tue 20 Jun 2023 17:57:09 +0000
ROA not before:           Tue 20 Jun 2023 17:57:09 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     135425
IP address blocks:        103.90.58.0/23 maxlen: 24
                          103.219.144.0/23 maxlen: 24
                          2405:6680::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4395 (0x112b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91384FF/serialNumber=914773AD5863CB506560DACC64F27C34659D53FB
        Validity
            Not Before: Jun 20 17:57:09 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=6491e875-b7d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ef:08:b6:c8:c7:d5:16:82:3e:55:d5:e4:fd:
                    89:e6:f5:ab:d7:09:db:00:3d:3f:81:3c:40:41:b4:
                    4a:51:e1:c9:6d:17:6d:e5:0d:45:4d:15:26:36:4c:
                    29:9b:be:85:af:91:50:44:9b:ec:e4:a9:b3:f3:38:
                    12:40:04:70:c9:82:f1:df:77:6a:6d:20:c8:61:17:
                    c2:82:62:d4:7c:38:a6:40:ef:05:63:c3:94:60:44:
                    7c:6f:3b:72:78:d8:8f:8a:46:2d:4e:f1:49:fd:fb:
                    35:eb:88:78:ad:ed:a4:8d:41:24:33:69:13:c2:bb:
                    7d:59:0b:b3:03:c8:a5:19:68:20:e9:63:f5:ec:ce:
                    3f:8f:5a:22:7b:17:a9:be:86:17:c7:70:c6:cf:b3:
                    72:26:4d:c5:31:7d:24:05:77:5f:c6:cd:7b:d3:e3:
                    20:09:c5:ec:4a:d9:c2:6a:a4:f4:d7:60:03:d2:8c:
                    3f:53:70:09:f0:64:78:22:3d:fe:ff:84:8f:0d:3c:
                    34:ce:36:d4:21:bf:d2:0f:e0:7f:0d:a5:99:61:f6:
                    f6:bc:3f:00:c0:83:f0:34:a0:78:52:f9:44:d3:ff:
                    7f:30:40:eb:fd:dd:93:89:4f:43:50:ec:c0:b8:78:
                    0f:7e:d1:3d:42:64:4e:2f:b7:88:2f:89:0f:d4:66:
                    d2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:EF:26:62:0F:4D:F1:BE:26:2B:7E:A4:AB:D9:83:3C:96:45:3F:96
            X509v3 Authority Key Identifier:
                keyid:91:47:73:AD:58:63:CB:50:65:60:DA:CC:64:F2:7C:34:65:9D:53:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91384FF/BAE67446C6D911E8B64C3118C4F9AE02/kUdzrVhjy1BlYNrMZPJ8NGWdU_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUdzrVhjy1BlYNrMZPJ8NGWdU_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384FF/BAE67446C6D911E8B64C3118C4F9AE02/34C78D2CC6DA11E89C3C8E18C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.58.0/23
                  103.219.144.0/23
                IPv6:
                  2405:6680::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:7d:f2:88:3e:e6:3f:a6:91:26:01:9d:ad:52:8c:3a:39:54:
         16:61:db:7a:ed:1d:82:01:6f:23:25:0c:79:32:c1:d9:72:37:
         a9:0d:85:0a:57:11:7b:c2:1f:c3:94:dc:d8:36:b6:72:6e:f0:
         fc:b8:a1:aa:1b:82:37:8f:b0:16:68:74:a2:38:9d:a0:0f:37:
         d9:73:90:39:50:e2:ef:04:97:a8:4a:f3:04:a6:6d:d3:f7:1c:
         c5:d3:9f:68:49:87:81:60:9b:b6:cd:73:45:26:4c:c9:ec:35:
         f9:e1:57:d4:a4:20:d4:88:b6:05:5b:b2:4d:eb:01:3b:0c:bd:
         91:9b:28:9b:af:38:ab:1f:77:37:78:46:92:b2:00:8d:84:97:
         ca:a6:03:9d:98:de:fb:53:e7:3a:6e:8a:b9:f3:34:36:32:67:
         66:af:1c:9b:8f:a4:86:70:4d:9e:50:9e:92:25:bb:fb:fa:a3:
         b5:f1:c9:80:cc:a3:06:37:c9:06:12:92:b8:58:f4:15:01:fd:
         9c:1c:f5:8e:e8:96:01:6e:d7:85:11:fb:cd:12:14:fc:80:8f:
         82:f2:cf:88:42:92:a7:c5:a3:83:4f:d1:3f:b2:ad:38:78:26:
         47:1a:cc:11:97:3a:0f:9c:77:e4:cd:b8:00:ad:bd:16:da:7d:
         35:aa:27:87
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICESswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzg0RkYxMTAvBgNVBAUTKDkxNDc3M0FENTg2M0NCNTA2NTYwREFDQzY0RjI3QzM0
NjU5RDUzRkIwHhcNMjMwNjIwMTc1NzA5WhcNMjQwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDkxZTg3NS1iN2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzu8ItsjH1RaCPlXV5P2J5vWr1wnbAD0/gTxAQbRKUeHJbRdt5Q1FTRUmNkwp
m76Fr5FQRJvs5Kmz8zgSQARwyYLx33dqbSDIYRfCgmLUfDimQO8FY8OUYER8bzty
eNiPikYtTvFJ/fs164h4re2kjUEkM2kTwrt9WQuzA8ilGWgg6WP17M4/j1oiexep
voYXx3DGz7NyJk3FMX0kBXdfxs170+MgCcXsStnCaqT012AD0ow/U3AJ8GR4Ij3+
/4SPDTw0zjbUIb/SD+B/DaWZYfb2vD8AwIPwNKB4UvlE0/9/MEDr/d2TiU9DUOzA
uHgPftE9QmROL7eIL4kP1GbSSQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFAbvJmIP
TfG+Jit+pKvZgzyWRT+WMB8GA1UdIwQYMBaAFJFHc61YY8tQZWDazGTyfDRlnVP7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODRGRi9CQUU2NzQ0NkM2
RDkxMUU4QjY0QzMxMThDNEY5QUUwMi9rVWR6clZoankxQmxZTnJNWlBKOE5HV2RV
X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tVZHpyVmhqeTFCbFlOck1aUEo4TkdXZFVfcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mzg0RkYvQkFFNjc0NDZDNkQ5MTFFOEI2NEMzMTE4QzRGOUFFMDIvMzRDNzhEMkND
NkRBMTFFODlDM0M4RTE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBAFnWjoDBAFn25AwDQQCAAIwBwMFACQFZoAwDQYJKoZIhvcN
AQELBQADggEBALF98og+5j+mkSYBna1SjDo5VBZh23rtHYIBbyMlDHkywdlyN6kN
hQpXEXvCH8OU3Ng2tnJu8Py4oaobgjePsBZodKI4naAPN9lzkDlQ4u8El6hK8wSm
bdP3HMXTn2hJh4Fgm7bNc0UmTMnsNfnhV9SkINSItgVbsk3rATsMvZGbKJuvOKsf
dzd4RpKyAI2El8qmA52Y3vtT5zpuirnzNDYyZ2avHJuPpIZwTZ5QnpIlu/v6o7Xx
yYDMowY3yQYSkrhY9BUB/Zwc9Y7olgFu14UR+80SFPyAj4Lyz4hCkqfFo4NP0T+y
rTh4JkcazBGXOg+cd+TNuACtvRbafTWqJ4c=
-----END CERTIFICATE-----