Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/9F5D4E321D3F11EDA8A00A31C4F9AE02.roa
File:                     9F5D4E321D3F11EDA8A00A31C4F9AE02.roa (raw, json)
Hash identifier:          vERIedK9kis6a2tkYMvsdl8udrko2RW9w/9WO+PgPhc=
Subject key identifier:   8D:0F:E0:B5:CC:FF:B4:BE:89:F9:E5:4F:EC:2E:A7:C0:18:04:4A:4D
Certificate issuer:       /CN=A91447E7/serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424
Certificate serial:       1D
Authority key identifier: E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/9F5D4E321D3F11EDA8A00A31C4F9AE02.roa
Signing time:             Tue 16 Aug 2022 08:44:21 +0000
ROA not before:           Tue 16 Aug 2022 08:44:21 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     3491
IP address blocks:        103.188.234.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91447E7/serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424
        Validity
            Not Before: Aug 16 08:44:21 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=62fb58e5-e95b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:95:af:84:d7:eb:59:26:2d:b6:02:88:03:90:
                    83:10:99:75:78:17:91:65:d1:bf:ba:d4:d4:69:33:
                    8a:fd:d1:b8:97:ed:1b:e6:c4:66:1f:b5:d4:f6:e4:
                    e0:e1:fb:b4:6a:cd:b0:1e:fe:d6:81:dd:cd:40:96:
                    fe:ba:da:af:28:a2:20:15:81:a1:8b:ab:f8:4c:3a:
                    db:c7:31:9b:26:d9:e3:b2:50:e1:b5:08:dc:1b:d5:
                    42:8c:78:5f:ec:9f:7b:0f:86:4c:a6:85:c7:47:73:
                    e7:78:1c:fd:ee:85:93:ae:e2:7a:15:68:9d:85:28:
                    bc:ba:74:f3:e6:6e:14:ba:d1:89:83:3f:42:b2:d5:
                    12:04:e1:de:dc:68:41:9b:5f:da:f9:e1:1e:f4:6c:
                    6f:3b:76:f8:94:76:1e:d2:b9:37:e6:81:98:b3:fd:
                    35:1b:96:1c:70:72:89:63:ed:f8:22:cd:92:a5:72:
                    34:7e:b7:e3:d4:5c:f1:e5:97:cf:07:d3:74:67:86:
                    7e:78:bb:94:b4:a1:5c:4c:e0:b0:71:a9:57:5a:62:
                    4f:4d:27:5e:a8:b3:cb:24:33:bd:d9:52:f5:f3:41:
                    8a:ff:50:c5:f6:5a:8a:7c:1a:9e:ec:4a:d5:ca:40:
                    d0:89:14:81:14:d9:34:f7:ff:54:81:e7:52:2e:b9:
                    e1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0F:E0:B5:CC:FF:B4:BE:89:F9:E5:4F:EC:2E:A7:C0:18:04:4A:4D
            X509v3 Authority Key Identifier:
                keyid:E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/9F5D4E321D3F11EDA8A00A31C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:8e:9b:f1:3c:fe:f5:e3:7a:0c:81:75:87:c6:7b:5e:c8:b0:
         b9:ef:01:bf:4f:17:46:a9:46:51:70:11:3d:e2:d9:33:56:7c:
         57:fb:0a:3a:c7:00:e4:77:9e:13:bd:6f:7d:73:3a:1f:e1:c9:
         85:37:ac:ea:21:59:1e:6d:d9:90:59:6f:8d:f9:47:05:a7:f4:
         4d:02:9b:a8:69:25:cc:60:53:49:d1:d7:9b:f5:1d:6a:5c:8b:
         18:17:7b:36:1f:a2:8a:b9:4f:56:e5:70:71:df:79:b4:fb:6f:
         67:d8:ee:4a:fa:b2:b5:5d:4b:a3:24:a5:61:5d:ac:15:9e:f0:
         9b:f9:05:53:f2:c5:c3:6a:c4:77:4f:48:bb:a7:99:eb:ac:df:
         2f:5b:9c:ec:13:d1:f1:f9:9c:56:04:af:83:26:0e:18:76:4b:
         b5:8c:08:f3:7f:6c:92:c5:bc:f5:ce:a2:c1:dd:30:8d:37:54:
         e5:86:48:3a:b3:93:33:cf:2a:b4:3e:75:9c:73:99:67:8d:a7:
         fd:ee:42:ae:2d:13:01:73:df:58:57:2e:cf:9f:32:b9:78:88:
         b2:17:3f:57:fc:c2:0c:d9:94:05:26:e5:df:51:f7:49:f2:2a:
         a0:8d:f9:23:1f:72:53:6f:4d:21:66:18:21:73:8b:05:27:d0:
         d0:3d:cd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----