Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/4BCC7756E97811ED93FF8559C4F9AE02.roa
File:                     4BCC7756E97811ED93FF8559C4F9AE02.roa (raw, json)
Hash identifier:          Dkvn2Gnyekc4HxVncrbPz6+pqY4T2FixlSKKElN1mxg=
Subject key identifier:   02:28:35:2A:6F:A0:39:71:21:6E:10:A9:3F:99:8B:23:B6:71:5D:95
Certificate issuer:       /CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F
Certificate serial:       035E
Authority key identifier: 87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/4BCC7756E97811ED93FF8559C4F9AE02.roa
Signing time:             Wed 03 May 2023 06:04:00 +0000
ROA not before:           Wed 03 May 2023 06:04:00 +0000
ROA not after:            Fri 01 Mar 2024 00:00:00 +0000
asID:                     133898
IP address blocks:        203.23.68.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862 (0x35e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F
        Validity
            Not Before: May  3 06:04:00 2023 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=6451f94f-b4b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8b:32:9b:ee:30:6f:d6:b2:55:00:6e:e2:28:
                    51:5e:e4:eb:8f:e5:6e:68:d9:1f:95:35:e8:bf:38:
                    7d:30:e1:ce:d6:84:58:1b:e6:93:9d:b2:c3:a6:65:
                    22:be:48:1b:d6:4e:5d:75:2e:e0:2b:cc:e6:93:0e:
                    df:ae:3c:9e:ff:60:0b:48:12:8a:0b:e8:b0:ed:4e:
                    e0:42:d6:dd:b0:f1:b0:4f:80:c2:a3:ff:c5:b2:a0:
                    1a:5b:06:92:04:dd:c4:af:4c:e8:f1:73:15:ba:d4:
                    97:e2:24:91:70:61:0f:9f:a7:70:6f:d8:87:f8:70:
                    c5:d9:41:d9:65:4b:2d:a7:97:91:ec:bf:b3:03:33:
                    97:90:9a:77:da:a8:b0:9c:be:83:a6:c8:83:75:ec:
                    69:10:92:14:0f:df:52:d8:6a:fb:89:68:c7:c2:d5:
                    da:90:ca:f9:be:fa:7a:a0:4d:33:06:5f:66:4c:2e:
                    4a:54:d0:2a:e9:04:68:39:9b:3d:7e:9c:28:14:63:
                    9a:cc:3f:70:86:4b:8d:04:c7:58:2c:52:a2:37:ec:
                    39:82:eb:4b:c8:ad:af:76:aa:70:db:b4:11:c0:be:
                    86:4e:ee:fd:64:55:06:fd:b7:f7:cb:e7:99:58:8f:
                    8a:bd:a2:ec:7f:a6:e1:2d:41:d3:2e:d3:ad:d3:2e:
                    bc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:28:35:2A:6F:A0:39:71:21:6E:10:A9:3F:99:8B:23:B6:71:5D:95
            X509v3 Authority Key Identifier:
                keyid:87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/4BCC7756E97811ED93FF8559C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.23.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:37:02:9a:c5:fe:e7:77:78:90:0f:0d:38:f7:9a:88:d4:06:
         cf:82:58:c6:e3:0e:e7:08:82:62:10:78:1b:dd:fc:bc:a0:c4:
         d7:8a:5a:32:b2:98:79:70:37:2b:11:38:73:76:95:80:77:df:
         9d:4b:c8:46:64:d8:15:ed:83:7f:74:12:ac:d4:5c:0c:e1:f6:
         4b:f1:7b:e4:ce:94:03:54:41:d6:1d:c8:5c:5c:c8:db:33:5c:
         50:b0:d5:33:3e:a0:25:d8:79:bd:e8:89:8d:0b:92:b0:51:ff:
         23:2d:12:d8:ea:e5:cb:c3:7d:43:2b:8a:c2:e9:7b:4f:bf:67:
         30:99:4a:0b:3c:43:c0:d0:e4:c4:e0:84:36:b2:24:c2:c8:29:
         3f:07:10:69:a5:b7:16:c9:7d:cb:a4:50:55:f1:7c:30:e4:a0:
         5d:73:71:f9:c6:63:27:f1:49:b7:c3:93:76:38:2a:1e:41:16:
         b3:7b:4d:34:9e:23:37:70:33:d6:af:f1:0a:ba:ef:90:5f:76:
         04:19:b7:9a:22:a3:08:48:7e:b7:5e:db:68:50:08:27:1b:b7:
         6c:36:d2:04:d7:ce:9c:da:25:de:44:f2:7a:50:93:53:47:90:
         22:ef:b9:74:a2:20:9e:7b:4c:cd:21:10:2c:10:4c:df:7f:6d:
         ac:3f:b7:0a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0FFMTMxMTAvBgNVBAUTKDg3RDNCRDdEMEFERTA2NTA5RUI4NUFDNkJBNTk0ODlE
OTU0MDFGN0YwHhcNMjMwNTAzMDYwNDAwWhcNMjQwMzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDUxZjk0Zi1iNGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuYsym+4wb9ayVQBu4ihRXuTrj+VuaNkflTXovzh9MOHO1oRYG+aTnbLDpmUi
vkgb1k5ddS7gK8zmkw7frjye/2ALSBKKC+iw7U7gQtbdsPGwT4DCo//FsqAaWwaS
BN3Er0zo8XMVutSX4iSRcGEPn6dwb9iH+HDF2UHZZUstp5eR7L+zAzOXkJp32qiw
nL6DpsiDdexpEJIUD99S2Gr7iWjHwtXakMr5vvp6oE0zBl9mTC5KVNAq6QRoOZs9
fpwoFGOazD9whkuNBMdYLFKiN+w5gutLyK2vdqpw27QRwL6GTu79ZFUG/bf3y+eZ
WI+KvaLsf6bhLUHTLtOt0y680wIDAQABo4IClTCCApEwHQYDVR0OBBYEFAIoNSpv
oDlxIW4QqT+ZiyO2cV2VMB8GA1UdIwQYMBaAFIfTvX0K3gZQnrhaxrpZSJ2VQB9/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUUxMy84OTM2MzU3ODI2
RkIxMUVDQTcxMzVENzNDNEY5QUUwMi9oOU85ZlFyZUJsQ2V1RnJHdWxsSW5aVkFI
MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g5TzlmUXJlQmxDZXVGckd1bGxJblpWQUgzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0FFMTMvODkzNjM1NzgyNkZCMTFFQ0E3MTM1RDczQzRGOUFFMDIvNEJDQzc3NTZF
OTc4MTFFRDkzRkY4NTU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAHLF0QwDQYJKoZIhvcNAQELBQADggEBAHw3AprF/ud3eJAP
DTj3mojUBs+CWMbjDucIgmIQeBvd/LygxNeKWjKymHlwNysROHN2lYB3351LyEZk
2BXtg390EqzUXAzh9kvxe+TOlANUQdYdyFxcyNszXFCw1TM+oCXYeb3oiY0LkrBR
/yMtEtjq5cvDfUMrisLpe0+/ZzCZSgs8Q8DQ5MTghDayJMLIKT8HEGmltxbJfcuk
UFXxfDDkoF1zcfnGYyfxSbfDk3Y4Kh5BFrN7TTSeIzdwM9av8Qq675BfdgQZt5oi
owhIfrde22hQCCcbt2w20gTXzpzaJd5E8npQk1NHkCLvuXSiIJ57TM0hECwQTN9/
baw/two=
-----END CERTIFICATE-----