Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/5F26F610012811EEA97F422EC4F9AE02.roa
File:                     5F26F610012811EEA97F422EC4F9AE02.roa (raw, json)
Hash identifier:          osScDwUy3jgD6klBPu6xg8Kitl13GTmb8Ul9qzY30Mo=
Subject key identifier:   AA:54:18:67:09:22:4A:96:C7:C8:E3:55:FF:73:73:99:1B:CD:E2:12
Certificate issuer:       /CN=A9143CB3/serialNumber=3C5470E81FA4A19087021D0AD77D336CEBE2A68D
Certificate serial:       1966
Authority key identifier: 3C:54:70:E8:1F:A4:A1:90:87:02:1D:0A:D7:7D:33:6C:EB:E2:A6:8D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PFRw6B-koZCHAh0K130zbOvipo0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/5F26F610012811EEA97F422EC4F9AE02.roa
Signing time:             Fri 02 Jun 2023 09:32:20 +0000
ROA not before:           Fri 02 Jun 2023 09:32:20 +0000
ROA not after:            Wed 31 Jan 2024 00:00:00 +0000
asID:                     136958
IP address blocks:        157.122.208.0/21 maxlen: 21
                          157.122.224.0/21 maxlen: 21
                          157.255.0.0/18 maxlen: 18
                          157.255.64.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6502 (0x1966)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143CB3/serialNumber=3C5470E81FA4A19087021D0AD77D336CEBE2A68D
        Validity
            Not Before: Jun  2 09:32:20 2023 GMT
            Not After : Jan 31 00:00:00 2024 GMT
        Subject: CN=6479b724-de45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ad:16:f9:23:2e:58:fe:7e:24:ef:71:eb:f6:
                    58:13:f1:0f:7b:f3:86:cf:b3:fb:b8:5c:2d:ac:9c:
                    b4:2d:d7:a9:9a:f9:39:c9:8b:1d:1b:ad:f4:90:04:
                    14:d4:a3:55:61:ac:bf:d9:94:a8:d7:1d:13:a5:57:
                    6c:7a:b8:44:44:d9:0f:85:31:b0:b8:ae:93:d5:4d:
                    5f:7d:0b:58:93:64:6b:dd:dd:0c:9f:97:7a:c1:75:
                    2f:be:67:2c:2d:5b:02:81:42:46:a7:53:8b:f3:b4:
                    83:6b:5b:a2:2f:b6:46:8c:10:b9:37:3e:78:27:65:
                    3e:4b:c2:7b:60:2d:61:d8:e0:6e:29:54:77:9b:b3:
                    00:8a:8c:c1:9c:01:59:b4:2c:d4:7d:bf:62:d4:4e:
                    3d:1a:1c:e1:f0:94:bb:16:a5:bf:7a:7e:c4:b5:c2:
                    69:f9:c8:c2:b5:c4:87:d4:68:08:14:a6:de:05:75:
                    df:c6:0c:37:5c:fd:82:e3:25:43:e2:d9:75:95:55:
                    e6:d8:5c:c3:87:90:49:f4:32:90:60:66:1f:aa:ee:
                    39:32:e7:30:7c:5b:8b:be:e0:eb:bc:dc:56:63:8f:
                    a2:8a:eb:fa:19:40:f9:99:94:75:32:cf:88:b2:39:
                    a5:67:ed:f3:4a:c9:db:82:be:ae:7d:09:de:aa:e7:
                    8c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:54:18:67:09:22:4A:96:C7:C8:E3:55:FF:73:73:99:1B:CD:E2:12
            X509v3 Authority Key Identifier:
                keyid:3C:54:70:E8:1F:A4:A1:90:87:02:1D:0A:D7:7D:33:6C:EB:E2:A6:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/PFRw6B-koZCHAh0K130zbOvipo0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PFRw6B-koZCHAh0K130zbOvipo0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1516679E259D11E785D3250AC4F9AE02/5F26F610012811EEA97F422EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.122.208.0/21
                  157.122.224.0/21
                  157.255.0.0-157.255.79.255

    Signature Algorithm: sha256WithRSAEncryption
         ac:2e:63:67:8a:40:c1:01:5c:24:1c:3e:49:4d:38:60:10:ca:
         d3:38:72:05:c0:24:d4:cb:ee:34:b2:4c:e7:39:59:aa:5d:e1:
         0a:6d:4f:25:a6:f2:7d:20:84:2b:b1:db:f1:9e:c0:ef:74:70:
         a1:c5:cd:af:6d:b6:81:05:5d:bd:b9:e3:7d:b1:4a:55:cd:01:
         7f:af:47:38:fc:24:ea:ff:61:56:0b:a2:56:33:e1:13:c4:c1:
         d1:5d:60:01:ec:8a:52:21:a0:6e:9f:a3:de:51:df:34:6b:bc:
         2f:ff:b6:7f:fc:05:76:a8:4a:de:b7:a9:b9:0b:da:6b:af:e4:
         63:27:0d:4c:02:37:dc:3c:92:d8:a7:2a:56:25:b5:52:c7:5a:
         62:9f:36:2d:2c:25:cd:d4:b6:4f:10:1b:3c:1b:ac:ad:c6:a9:
         a6:fe:6b:77:7c:77:af:ab:5d:5f:b8:10:3c:0b:05:84:ed:0e:
         f5:6d:f8:56:a7:5b:56:6f:e9:ab:15:d6:ce:97:12:d4:e0:88:
         01:a5:12:52:d7:66:22:8d:bf:13:66:86:04:44:73:8c:cf:f5:
         0e:70:a8:9e:a5:a9:c8:cf:25:9b:b9:5d:3b:c8:64:ea:80:45:
         d4:31:72:22:78:42:0f:f7:47:68:9c:38:ab:1f:27:85:3c:61:
         65:35:93:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----