Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/EBA9A884D37A11EDA3F8D353C4F9AE02.roa
File:                     EBA9A884D37A11EDA3F8D353C4F9AE02.roa (raw, json)
Hash identifier:          CQfbzYYXDaDwf2QX/dWDY5INK6ZwOpI0bxbalS17B8o=
Subject key identifier:   8A:E2:D6:4A:32:3C:35:C5:1C:28:BB:78:3B:F0:4E:56:4A:40:63:6F
Certificate issuer:       /CN=A913D1F2/serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A
Certificate serial:       05
Authority key identifier: 6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/EBA9A884D37A11EDA3F8D353C4F9AE02.roa
Signing time:             Wed 05 Apr 2023 06:27:21 +0000
ROA not before:           Wed 05 Apr 2023 06:27:21 +0000
ROA not after:            Wed 29 May 2024 00:00:00 +0000
asID:                     134475
IP address blocks:        103.94.234.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D1F2/serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A
        Validity
            Not Before: Apr  5 06:27:21 2023 GMT
            Not After : May 29 00:00:00 2024 GMT
        Subject: CN=642d14c9-74cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:20:da:b0:3d:37:d0:f0:d1:af:35:df:57:66:
                    6a:28:41:50:c0:db:44:26:8b:f3:95:2e:98:42:3d:
                    ac:40:ac:6f:aa:fc:49:89:5a:47:77:24:68:e0:7f:
                    b2:3b:db:ba:80:a0:71:28:c9:9e:3a:a7:35:b8:5d:
                    fc:4f:d3:13:6d:4e:b5:cb:63:c3:ad:a2:48:81:31:
                    f0:b6:99:f9:4b:e6:3e:ae:5c:50:eb:50:f3:34:ae:
                    42:7f:64:02:11:21:ec:f8:d8:ff:2d:24:04:c9:9f:
                    65:c9:a4:e3:95:3d:62:36:9c:c2:58:99:d7:01:ba:
                    0e:d3:58:b0:84:97:80:c2:5d:68:03:e8:dc:07:1f:
                    31:a8:b7:11:fa:73:ee:04:27:81:be:9d:b6:58:3c:
                    d3:54:51:cc:5f:48:90:10:7c:0a:a2:81:69:64:b7:
                    78:99:8c:41:62:83:3e:97:ad:a9:d9:8b:af:b4:f8:
                    9f:18:a2:ad:e6:5d:71:ee:18:e9:82:bb:1f:98:33:
                    f5:b4:e5:f8:9c:5c:76:eb:33:5c:ae:dc:9b:70:75:
                    74:ae:20:41:eb:21:46:7b:52:5c:73:68:3f:48:ea:
                    57:4c:88:ee:bc:02:fa:d9:1d:72:16:34:e2:2f:2d:
                    fb:e8:50:6c:a1:39:2c:62:27:73:64:2d:0a:f6:83:
                    a0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E2:D6:4A:32:3C:35:C5:1C:28:BB:78:3B:F0:4E:56:4A:40:63:6F
            X509v3 Authority Key Identifier:
                keyid:6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/EBA9A884D37A11EDA3F8D353C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:47:cc:f7:c9:2e:0c:7c:dc:e4:ad:59:e8:bb:a7:da:80:a5:
         af:9a:59:2f:4d:9a:75:d7:32:0a:14:50:d0:57:ca:15:71:f5:
         cd:26:d7:5e:12:4c:cc:55:30:37:47:3b:49:cc:cf:84:16:66:
         33:d1:59:29:88:90:23:86:2f:3d:92:6e:5e:bb:77:65:58:d6:
         27:1c:11:44:48:95:0c:36:53:55:a6:fd:64:55:20:db:7a:ca:
         9f:7a:f8:a1:f3:2b:34:43:98:60:62:6f:d1:f8:63:1d:90:6d:
         cc:fc:3e:c6:8b:3b:96:06:ea:7d:44:d4:6b:37:b4:d7:b9:eb:
         2d:0a:13:92:a0:3f:55:ed:df:73:5d:59:a6:5d:98:60:74:51:
         01:d1:6f:5c:25:fb:c5:30:8e:8b:cc:5f:a7:f4:07:94:96:82:
         07:48:c6:9e:c9:8b:16:19:b3:fe:58:f2:e9:a2:e8:16:07:f4:
         a7:44:49:b7:15:eb:66:54:a0:51:12:2c:80:82:9a:61:25:7a:
         98:1a:e2:c6:f6:bd:42:81:97:91:ec:ae:e3:fa:fd:24:0f:8e:
         e0:29:bf:a9:5e:2a:b5:0f:2a:e1:f1:18:c9:dd:c0:15:19:71:
         5d:d9:76:25:b5:b1:50:91:ee:f4:52:11:18:ca:12:22:d7:c8:
         d5:2f:69:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----