Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/7FE7E75294C111EDAB884440C4F9AE02.roa
File:                     7FE7E75294C111EDAB884440C4F9AE02.roa (raw, json)
Hash identifier:          zY1i88J6+Fc5/deyWlxxin/mWo0pPlMBHC2oAUhjQhU=
Subject key identifier:   70:CD:59:B4:DA:BA:5F:CF:52:37:29:C1:D8:91:DB:02:06:B2:64:41
Certificate issuer:       /CN=A9154020/serialNumber=F6699264417C228B51FE15B3B1ECB7867F2A2743
Certificate serial:       165A
Authority key identifier: F6:69:92:64:41:7C:22:8B:51:FE:15:B3:B1:EC:B7:86:7F:2A:27:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/7FE7E75294C111EDAB884440C4F9AE02.roa
Signing time:             Sun 15 Jan 2023 10:43:52 +0000
ROA not before:           Sun 15 Jan 2023 10:43:52 +0000
ROA not after:            Sat 30 Dec 2023 00:00:00 +0000
asID:                     58689
IP address blocks:        103.126.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5722 (0x165a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154020/serialNumber=F6699264417C228B51FE15B3B1ECB7867F2A2743
        Validity
            Not Before: Jan 15 10:43:52 2023 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=63c3d8e7-918e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7d:68:d2:05:df:50:3f:c5:38:44:fa:e2:4f:
                    f6:ae:ba:35:64:cb:b7:e3:9f:8c:dc:36:ce:7e:b3:
                    7b:cd:98:83:a8:08:14:5f:6a:61:6d:91:97:71:46:
                    cd:5e:28:28:56:8d:86:cc:83:69:48:f5:29:d0:cf:
                    d4:8e:d9:11:cd:66:e3:f3:e1:6c:7f:5c:ae:ba:7a:
                    ad:ae:ac:b9:31:4d:60:3d:b2:76:7a:c4:21:5b:3f:
                    25:46:b8:b8:a3:8c:43:b2:42:8c:53:ce:4a:b3:1e:
                    4a:80:73:51:d6:c3:da:76:03:e8:0d:eb:78:a5:c4:
                    0d:c2:de:14:2f:7c:1a:4d:2a:91:94:48:36:93:8e:
                    c7:d8:f8:04:bc:bf:bf:87:aa:b6:5c:c5:2c:00:ea:
                    da:cd:bf:38:22:23:b9:ce:40:eb:21:3c:29:d6:02:
                    fb:b0:58:3c:63:3e:cc:b9:86:fc:8d:21:6e:a5:d6:
                    33:98:b9:5b:09:e1:53:95:bc:d3:af:3c:4f:b7:69:
                    a9:3b:eb:f5:7b:5c:55:8d:74:a7:97:06:54:dc:96:
                    a9:56:1d:a2:b5:dd:a2:c8:c3:6b:27:d7:14:58:8d:
                    74:60:92:04:97:f0:ff:77:a3:21:9a:83:0f:ab:29:
                    65:b8:94:be:98:c7:7a:fa:a3:4a:e5:8c:af:90:4d:
                    77:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CD:59:B4:DA:BA:5F:CF:52:37:29:C1:D8:91:DB:02:06:B2:64:41
            X509v3 Authority Key Identifier:
                keyid:F6:69:92:64:41:7C:22:8B:51:FE:15:B3:B1:EC:B7:86:7F:2A:27:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/9mmSZEF8IotR_hWzsey3hn8qJ0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mmSZEF8IotR_hWzsey3hn8qJ0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154020/AD1B8DE4B40411E789CFA541C4F9AE02/7FE7E75294C111EDAB884440C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:c5:14:0b:4b:53:23:05:88:3b:15:04:a7:89:e3:b4:21:13:
         e2:bb:c7:5d:ff:d2:9d:0d:42:b6:3b:12:b4:23:20:c5:51:52:
         f4:e9:81:b2:68:b7:5c:70:91:b9:cf:4e:db:9e:21:94:c0:63:
         d0:36:cc:ab:b4:dd:05:ad:db:f9:b8:8e:df:66:04:1c:f2:5d:
         00:c7:83:ee:b3:fd:98:64:25:dc:7b:bb:f5:71:1d:33:78:ba:
         99:3e:15:87:0d:b5:9c:94:9c:d6:80:e9:2e:cb:13:b0:1a:66:
         2f:0b:e5:54:be:ca:42:74:a4:b3:17:ce:6f:d2:c6:26:aa:90:
         de:27:3f:ee:97:28:34:0b:bf:14:01:a1:b2:aa:e9:94:cd:5b:
         c3:1b:06:f7:5e:ab:0d:d3:14:9a:f6:af:e1:50:db:14:95:d6:
         56:ff:8e:24:ab:95:b8:cd:20:71:99:e4:a3:ae:f3:15:c6:65:
         ef:22:18:3d:55:61:67:64:d3:0e:9f:4e:ef:14:7b:13:b6:40:
         b8:1c:bc:5c:46:88:6f:a1:cb:90:38:33:e6:11:d2:02:c6:02:
         37:d7:9c:0d:47:ad:75:b9:a4:89:db:a8:47:5c:ae:9e:ed:a6:
         ca:bc:0e:58:3e:6a:df:cb:8c:e9:c5:27:4f:0b:0a:64:0d:b8:
         a2:2e:d6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----