Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91437CC/67719554E02B11E9B42BA85BC4F9AE02/124D54B44DC511ECAD6E7474C4F9AE02.roa
File:                     124D54B44DC511ECAD6E7474C4F9AE02.roa (raw, json)
Hash identifier:          EnoxQd8oi/Re8OSRgLG8xeoDRsyGazH/F8X7rN4Caqk=
Subject key identifier:   8E:86:87:DB:80:88:9B:E4:02:24:31:10:49:72:0C:27:FB:32:9C:79
Certificate issuer:       /CN=A91437CC/serialNumber=A70197F9C0890DF0291FAD16C6F1DE4FFBC6C0A7
Certificate serial:       0B23
Authority key identifier: A7:01:97:F9:C0:89:0D:F0:29:1F:AD:16:C6:F1:DE:4F:FB:C6:C0:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwGX-cCJDfApH60WxvHeT_vGwKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91437CC/67719554E02B11E9B42BA85BC4F9AE02/124D54B44DC511ECAD6E7474C4F9AE02.roa
Signing time:             Sat 22 Oct 2022 19:25:57 +0000
ROA not before:           Sat 22 Oct 2022 19:25:57 +0000
ROA not after:            Sat 30 Dec 2023 00:00:00 +0000
asID:                     139631
IP address blocks:        103.142.169.0/24 maxlen: 24
                          2001:df1:bb80::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2851 (0xb23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91437CC/serialNumber=A70197F9C0890DF0291FAD16C6F1DE4FFBC6C0A7
        Validity
            Not Before: Oct 22 19:25:57 2022 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=635443c5-d4eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:52:e1:5c:95:6f:fc:08:d5:5e:04:3a:18:19:
                    63:8c:34:c5:73:be:f8:55:e0:a0:bc:c1:50:63:92:
                    c3:1f:74:79:90:da:29:47:1c:06:9e:4c:3b:29:de:
                    e4:4b:e0:6e:ce:e9:f6:4e:50:15:29:4e:6c:56:f3:
                    e5:71:ae:40:dd:b3:05:d6:f8:e8:16:92:47:89:bd:
                    ea:a0:ff:5b:8f:ba:db:9b:7c:a8:63:70:64:cf:dc:
                    5a:49:6b:df:2a:8c:68:43:6d:c2:39:d6:7c:78:3f:
                    83:4f:b8:8b:ec:db:88:6b:b2:54:d2:97:c8:39:d6:
                    b5:3d:0e:b0:2f:1c:ce:76:57:d8:70:4a:b3:de:29:
                    ca:5f:88:38:f2:fc:b1:a6:ca:ce:fe:59:db:dd:d1:
                    e6:29:95:77:c7:7a:f7:21:58:8f:32:5b:fd:cd:e4:
                    2a:1f:c9:e4:de:0e:08:b7:5d:ec:fa:61:c7:c9:16:
                    94:83:f4:21:d2:f8:44:09:17:9f:65:78:b3:2a:6a:
                    c9:dd:e7:67:f4:ef:6a:d6:05:e9:ff:51:b9:3e:df:
                    17:36:08:87:17:2e:91:8a:bd:ec:42:ec:f6:a7:b6:
                    9f:b9:31:31:14:3d:5f:39:81:4d:91:ab:39:87:8d:
                    23:0f:9d:05:69:02:91:66:83:12:54:a6:99:5d:0b:
                    03:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:86:87:DB:80:88:9B:E4:02:24:31:10:49:72:0C:27:FB:32:9C:79
            X509v3 Authority Key Identifier:
                keyid:A7:01:97:F9:C0:89:0D:F0:29:1F:AD:16:C6:F1:DE:4F:FB:C6:C0:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91437CC/67719554E02B11E9B42BA85BC4F9AE02/pwGX-cCJDfApH60WxvHeT_vGwKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pwGX-cCJDfApH60WxvHeT_vGwKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91437CC/67719554E02B11E9B42BA85BC4F9AE02/124D54B44DC511ECAD6E7474C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.169.0/24
                IPv6:
                  2001:df1:bb80::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:3c:bd:e2:54:3d:90:6e:34:e1:21:f6:b2:2e:9f:7d:25:15:
         35:e2:84:f0:48:4a:ae:af:ba:76:fe:8c:2f:84:31:06:9e:69:
         6e:fc:a5:e0:b2:db:a9:ad:35:8a:eb:07:65:26:af:cb:86:17:
         c3:bd:54:ac:e7:a6:b1:b6:3e:b5:99:f9:4e:34:6f:8b:f8:a8:
         11:0e:62:26:8a:0a:a4:41:4e:a8:e5:b1:21:9f:2c:85:04:08:
         e2:fd:8e:32:67:81:df:e0:54:77:99:68:b9:f5:a9:78:8b:4b:
         34:bc:3c:57:18:41:05:f4:47:c1:9a:e2:64:ef:59:d0:85:f7:
         fb:54:94:43:7c:6d:4a:32:42:5e:6a:3f:50:a3:5a:63:42:c9:
         0a:c7:a1:56:d2:80:3f:02:96:c3:d7:d4:67:bc:64:ab:da:d6:
         e8:ef:c7:94:92:67:73:f5:de:48:fb:ef:c8:4c:a9:a6:48:0e:
         c6:a4:ef:d8:af:de:a5:9c:38:4e:77:f7:a9:ed:03:ad:17:d9:
         2d:26:af:80:ee:d8:ae:11:3c:cc:18:f7:3f:3d:4f:a2:18:75:
         89:05:d6:9e:3a:8d:2b:6a:81:5c:43:ad:fa:9c:e6:5f:fd:67:
         d8:d1:53:82:94:0a:61:92:39:47:66:5b:81:77:12:8d:61:48:
         81:4d:fd:57
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICCyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDM3Q0MxMTAvBgNVBAUTKEE3MDE5N0Y5QzA4OTBERjAyOTFGQUQxNkM2RjFERTRG
RkJDNkMwQTcwHhcNMjIxMDIyMTkyNTU3WhcNMjMxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzU0NDNjNS1kNGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3VLhXJVv/AjVXgQ6GBljjDTFc774VeCgvMFQY5LDH3R5kNopRxwGnkw7Kd7k
S+Buzun2TlAVKU5sVvPlca5A3bMF1vjoFpJHib3qoP9bj7rbm3yoY3Bkz9xaSWvf
KoxoQ23COdZ8eD+DT7iL7NuIa7JU0pfIOda1PQ6wLxzOdlfYcEqz3inKX4g48vyx
psrO/lnb3dHmKZV3x3r3IViPMlv9zeQqH8nk3g4It13s+mHHyRaUg/Qh0vhECRef
ZXizKmrJ3edn9O9q1gXp/1G5Pt8XNgiHFy6Rir3sQuz2p7afuTExFD1fOYFNkas5
h40jD50FaQKRZoMSVKaZXQsDaQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFI6Gh9uA
iJvkAiQxEElyDCf7Mpx5MB8GA1UdIwQYMBaAFKcBl/nAiQ3wKR+tFsbx3k/7xsCn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzdDQy82NzcxOTU1NEUw
MkIxMUU5QjQyQkE4NUJDNEY5QUUwMi9wd0dYLWNDSkRmQXBINjBXeHZIZVRfdkd3
S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3B3R1gtY0NKRGZBcEg2MFd4dkhlVF92R3dLYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDM3Q0MvNjc3MTk1NTRFMDJCMTFFOUI0MkJBODVCQzRGOUFFMDIvMTI0RDU0QjQ0
REM1MTFFQ0FENkU3NDc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABnjqkwDwQCAAIwCQMHACABDfG7gDANBgkqhkiG9w0BAQsF
AAOCAQEANTy94lQ9kG404SH2si6ffSUVNeKE8EhKrq+6dv6ML4QxBp5pbvyl4LLb
qa01iusHZSavy4YXw71UrOemsbY+tZn5TjRvi/ioEQ5iJooKpEFOqOWxIZ8shQQI
4v2OMmeB3+BUd5loufWpeItLNLw8VxhBBfRHwZriZO9Z0IX3+1SUQ3xtSjJCXmo/
UKNaY0LJCsehVtKAPwKWw9fUZ7xkq9rW6O/HlJJnc/XeSPvvyEyppkgOxqTv2K/e
pZw4Tnf3qe0DrRfZLSavgO7YrhE8zBj3Pz1Pohh1iQXWnjqNK2qBXEOt+pzmX/1n
2NFTgpQKYZI5R2ZbgXcSjWFIgU39Vw==
-----END CERTIFICATE-----