Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/A250140EDB6B11ED9D388A41C4F9AE02.roa
File:                     A250140EDB6B11ED9D388A41C4F9AE02.roa (raw, json)
Hash identifier:          WFq30ZNvpEyMQeIPCXJJqIFAtadPC8igjyjxmjfh2l8=
Subject key identifier:   1D:AF:97:7B:DD:74:49:15:77:9C:19:44:08:57:6C:32:BC:DE:3D:5B
Certificate issuer:       /CN=A915B77C/serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19
Certificate serial:       08F6
Authority key identifier: 70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/A250140EDB6B11ED9D388A41C4F9AE02.roa
Signing time:             Mon 24 Jul 2023 20:37:35 +0000
ROA not before:           Mon 24 Jul 2023 20:37:35 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     58895
IP address blocks:        103.104.87.0/24 maxlen: 24
                          103.104.96.0/23 maxlen: 24
                          103.193.18.0/24 maxlen: 24
                          203.109.40.0/24 maxlen: 24
                          203.109.41.0/24 maxlen: 24
                          203.109.42.0/24 maxlen: 24
                          203.109.43.0/24 maxlen: 24
                          2401:f8c0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2294 (0x8f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B77C/serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19
        Validity
            Not Before: Jul 24 20:37:35 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64bee10f-92f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5c:26:d6:70:13:b3:3a:ec:a5:8d:bd:5a:01:
                    08:be:15:dc:7c:4f:b2:0c:e1:a1:ff:ae:0f:7c:c3:
                    31:d2:3b:27:eb:56:b1:60:03:ab:2d:8c:8f:59:41:
                    27:3b:ff:83:f1:98:ac:c9:f5:03:9c:04:c9:e8:20:
                    18:e4:b7:cc:ca:9c:84:a4:27:f8:af:55:ef:3b:c6:
                    76:55:8a:c8:c5:31:37:c2:2f:b1:e9:d2:cb:be:2e:
                    8b:59:8b:3e:80:db:5c:c5:30:05:6f:2b:5c:a7:4e:
                    82:a7:32:9f:56:6f:e3:06:11:51:48:b6:9e:61:a5:
                    98:72:36:5e:a9:4d:82:ed:05:a2:e7:a0:b8:15:17:
                    86:00:86:9d:6f:9c:46:86:b6:d0:61:fa:34:fb:1e:
                    b9:f7:c4:28:c3:4e:02:35:78:11:9c:5c:24:75:ca:
                    d4:52:cc:c8:eb:f6:60:c2:7d:c6:9a:5d:1d:c6:5b:
                    9e:aa:65:82:37:43:c2:f3:27:1f:95:a4:aa:84:07:
                    07:95:4b:f9:7f:69:07:f7:3d:23:00:20:b0:52:92:
                    20:e4:ad:f3:1e:e4:37:95:01:c0:83:48:75:6f:ec:
                    84:2d:c3:f0:33:ca:4d:a3:59:57:75:60:7e:00:c6:
                    39:94:24:cc:66:77:b6:4e:52:c9:ce:9b:ac:e7:ff:
                    2b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AF:97:7B:DD:74:49:15:77:9C:19:44:08:57:6C:32:BC:DE:3D:5B
            X509v3 Authority Key Identifier:
                keyid:70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/A250140EDB6B11ED9D388A41C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.87.0/24
                  103.104.96.0/23
                  103.193.18.0/24
                  203.109.40.0/22
                IPv6:
                  2401:f8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:ea:2b:f5:c8:3a:fe:c9:70:96:96:4f:21:65:96:19:0f:bf:
         88:6f:2b:79:6e:ff:fb:ad:81:fd:8f:4c:6b:65:11:c8:f8:66:
         a7:d2:8b:61:df:53:91:bb:74:af:73:a7:eb:25:86:aa:6e:18:
         36:19:0d:7e:a7:bd:b3:cb:3e:c7:08:04:e1:62:e4:15:32:49:
         b9:02:e0:20:d5:2d:48:08:29:53:a3:c6:6b:98:6d:2b:88:30:
         a4:48:37:dd:fc:ee:65:d6:1d:e5:67:a8:9a:73:d9:57:73:05:
         1f:7f:c1:f3:35:05:63:76:0c:7d:af:07:69:73:ec:10:35:95:
         ee:d9:c9:c1:eb:7c:cb:97:72:db:6e:84:5a:b4:97:0f:e2:1a:
         e1:c9:94:6c:73:5b:a5:fe:8c:f3:07:79:4b:f1:19:91:ff:fd:
         9c:76:c3:15:8c:a4:d2:68:5a:09:79:74:c5:a1:8e:ef:2a:7f:
         d4:7a:e0:b8:79:e4:60:ee:25:20:2d:c4:f0:52:b2:8f:3a:ad:
         c5:4b:0e:37:f1:36:14:d2:f5:6c:5e:25:e5:50:93:61:ee:ab:
         ca:03:44:2e:d8:af:0b:07:6a:95:fb:3c:d9:31:a6:ca:dc:ba:
         1c:9f:af:4f:de:ad:92:52:e0:0b:cb:96:5b:59:cf:3f:12:f4:
         43:ef:84:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----