Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/570BBD88DDC411EA925DE580C4F9AE02.roa
File:                     570BBD88DDC411EA925DE580C4F9AE02.roa (raw, json)
Hash identifier:          R/KfXPwIV4vsW/tfAM5lZWz0IcKWbFTOFGDVeLaO1Xs=
Subject key identifier:   F5:8B:4D:5C:3C:04:0B:32:77:E5:32:E1:BE:2F:C5:D0:99:89:00:A1
Certificate issuer:       /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
Certificate serial:       7AFB
Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/570BBD88DDC411EA925DE580C4F9AE02.roa
Signing time:             Thu 15 Sep 2022 06:14:50 +0000
ROA not before:           Thu 15 Sep 2022 06:14:50 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     139760
IP address blocks:        202.9.115.16/28 maxlen: 28

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31483 (0x7afb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
        Validity
            Not Before: Sep 15 06:14:50 2022 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=6322c2da-ef2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ed:c9:d7:5e:b6:76:5a:06:45:a5:32:44:9e:
                    de:12:ef:b2:7e:dc:bb:66:90:e3:85:4a:f8:95:3a:
                    e5:d5:ca:13:d8:ca:f6:ad:22:a3:8d:f0:58:5c:e6:
                    05:45:30:4d:59:1a:0d:5e:91:f8:07:20:84:93:e0:
                    72:ec:8b:66:eb:a8:4e:d2:0e:b0:b9:c2:42:64:40:
                    e6:e0:db:21:cb:de:a3:40:fe:63:00:7c:b8:03:ea:
                    71:c6:ae:d3:e6:2e:22:56:b6:1a:07:90:18:5c:3f:
                    5f:bd:b6:ef:a1:fb:d8:05:76:48:85:d3:12:d9:33:
                    6a:0d:fd:ea:32:27:c4:45:29:1a:6b:4b:ce:ad:df:
                    7f:62:0b:c3:73:8e:83:bf:c0:fc:6a:e8:fe:27:a3:
                    24:23:bb:cd:ac:bb:10:36:89:c5:36:b9:7c:54:44:
                    28:8c:9f:7f:35:8d:6f:fd:e2:ef:72:c6:e6:1a:7c:
                    a0:d4:02:cd:a7:53:d4:37:22:db:7b:0f:c2:b9:db:
                    f1:4e:80:c1:4e:b1:71:0e:5e:96:7c:5c:07:12:10:
                    91:86:dc:75:63:d5:b0:22:c1:de:fa:09:14:78:47:
                    78:7a:0b:0e:b5:1d:21:64:45:f6:3e:9e:71:41:9a:
                    ef:b8:5b:bc:8b:6f:55:df:de:46:47:a4:6b:f1:ba:
                    5b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8B:4D:5C:3C:04:0B:32:77:E5:32:E1:BE:2F:C5:D0:99:89:00:A1
            X509v3 Authority Key Identifier:
                keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/570BBD88DDC411EA925DE580C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.9.115.16/28

    Signature Algorithm: sha256WithRSAEncryption
         18:79:12:f0:12:0d:e9:9a:9f:65:1d:36:3e:6c:4d:99:92:a7:
         b6:f7:e4:fd:2c:d0:ee:22:c4:16:a7:c4:e4:aa:aa:75:2e:39:
         90:33:e7:82:8a:98:c1:93:64:08:ad:0c:ec:5e:aa:df:98:b9:
         c9:3b:f9:d2:6e:30:cc:f0:b9:9d:21:5a:f9:b2:d6:16:97:18:
         18:df:a4:c5:b4:5d:73:8a:79:34:15:f2:bd:a2:2d:99:33:28:
         b4:fd:da:d0:c1:e3:9d:0d:3a:a5:65:5e:b0:e1:5e:6a:d5:2f:
         20:4b:7d:65:16:f9:de:03:8c:a7:c0:cf:ee:a9:ee:25:74:f2:
         1e:a4:f4:02:05:17:74:48:73:13:a5:ec:d5:59:33:1b:91:cf:
         00:07:9d:03:32:9b:48:0d:4c:ea:60:a1:28:23:d9:b3:29:a9:
         f4:0e:e9:3e:d6:d2:3e:41:d4:1c:60:9d:82:58:d0:10:4d:04:
         d7:91:18:db:cc:88:42:35:35:25:ea:b8:39:e1:ba:de:31:98:
         d2:44:78:cb:dd:a5:ca:36:7c:fe:41:e8:0e:b2:ad:dc:8c:cd:
         15:fa:c9:d3:60:a7:48:2d:d8:e1:e9:e2:1b:64:a8:7c:bf:ec:
         4b:ed:72:69:01:70:6e:e9:31:86:98:d8:a0:dd:31:ad:77:0f:
         34:9e:bc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----