Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/B20A8A3C88F911EE8CFF8A3EC4F9AE02.roa
File:                     B20A8A3C88F911EE8CFF8A3EC4F9AE02.roa (raw, json)
Hash identifier:          u7pUosFeIsU7SIwmnQHKa5wEFfwjUGWbCO9HJaJlNN4=
Subject key identifier:   29:9A:20:A1:0C:FA:36:32:40:A7:DF:60:41:1D:34:99:A5:7F:EB:0B
Certificate issuer:       /CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Certificate serial:       72
Authority key identifier: A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/B20A8A3C88F911EE8CFF8A3EC4F9AE02.roa
Signing time:             Wed 22 Nov 2023 05:40:51 +0000
ROA not before:           Wed 22 Nov 2023 05:40:51 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     197789
IP address blocks:        103.92.146.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
        Validity
            Not Before: Nov 22 05:40:51 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=655d9463-c8a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8d:fe:27:e5:58:f3:79:ba:51:e3:b2:f6:0d:
                    6a:33:c1:09:be:00:fb:26:96:d0:92:f9:56:a8:ee:
                    6e:59:5f:2f:24:6c:70:aa:0e:67:0d:16:38:d6:87:
                    be:b7:7a:b7:b8:39:a4:35:ca:3f:48:68:23:ca:a9:
                    a0:f0:bf:81:fe:a3:19:ab:a0:0b:6e:db:33:4c:84:
                    4c:f1:dc:77:89:7e:2d:72:cb:92:99:7d:80:ac:56:
                    10:00:9d:ae:0a:3e:3b:10:93:d9:93:7e:c7:da:40:
                    54:66:2a:32:04:25:2e:54:0c:50:fd:b4:24:bf:a1:
                    4c:73:4d:be:c4:ea:6e:c1:bb:05:ab:23:c8:05:5f:
                    43:9c:24:26:c1:ff:d9:27:64:bf:aa:92:6e:22:6e:
                    df:d9:2a:42:df:6d:64:a9:68:01:27:0a:be:a0:a8:
                    13:62:67:6e:2b:fe:44:3e:e9:45:30:94:56:ff:7c:
                    16:9f:36:72:8f:47:08:0d:bd:eb:c0:4f:9b:31:87:
                    29:6c:24:a7:00:b5:e5:82:ab:8f:0d:97:d8:04:45:
                    77:4b:46:5b:4a:48:8e:8d:aa:4c:94:02:dd:f0:9c:
                    42:cc:cf:6f:e8:d6:35:59:3e:58:fc:1f:e3:a8:81:
                    6a:f9:3d:d1:2c:79:e3:d6:69:d3:8e:90:b9:fd:dc:
                    b9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9A:20:A1:0C:FA:36:32:40:A7:DF:60:41:1D:34:99:A5:7F:EB:0B
            X509v3 Authority Key Identifier:
                keyid:A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/B20A8A3C88F911EE8CFF8A3EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:d2:a3:eb:32:99:ad:cb:69:62:94:24:da:08:9a:63:8e:be:
         d1:0d:19:97:a7:97:b5:2c:7a:34:92:75:21:06:99:d4:70:83:
         fd:95:07:85:75:10:d7:c1:de:46:9f:e9:1c:d1:63:ea:0a:70:
         e1:d9:ff:22:55:13:7e:4f:ff:66:9d:5e:79:d9:ab:cf:68:ff:
         1c:e3:51:5a:71:16:e8:cd:71:7c:df:66:06:31:0f:39:4a:90:
         6c:a8:9b:59:ad:1c:2f:26:cb:92:68:da:e6:fe:67:d6:f9:3f:
         bc:31:21:c6:d0:81:8a:9f:65:d3:b4:19:78:d3:ab:50:b8:35:
         c1:71:f0:d4:01:ff:1d:18:d1:90:b3:8b:1e:ae:4e:cf:1e:e3:
         39:b5:d9:51:89:94:5c:9f:92:8a:e1:43:79:ec:20:bf:46:d1:
         7e:18:56:b2:87:7e:4d:b4:ce:19:f4:3c:ed:1a:34:33:70:aa:
         ed:f5:be:b3:8b:62:3e:52:44:0c:69:4b:06:87:55:98:ea:2d:
         fb:43:06:5a:f8:e0:af:ee:11:e5:46:39:71:c6:18:1c:33:96:
         62:2f:df:05:37:c7:e1:58:e3:61:e8:b3:9c:03:c8:e5:b4:86:
         db:f9:7b:5f:74:b7:0e:8c:fe:4a:70:bf:d8:15:f0:7d:4a:f6:
         59:a7:bc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----