Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/7BD35210294811EABB12B46BC4F9AE02.roa
File:                     7BD35210294811EABB12B46BC4F9AE02.roa (raw, json)
Hash identifier:          EEBAq1rKqCJcAwG529raHpMvuTkgWog8mKuQOqRwcJ4=
Subject key identifier:   83:65:F1:94:F8:84:8D:D1:E2:26:A2:66:07:F2:99:82:9B:04:B6:7D
Certificate issuer:       /CN=A91616DC/serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34
Certificate serial:       0AA3
Authority key identifier: 97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/7BD35210294811EABB12B46BC4F9AE02.roa
Signing time:             Tue 04 Apr 2023 20:17:11 +0000
ROA not before:           Tue 04 Apr 2023 20:17:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     137515
IP address blocks:        103.111.120.0/22 maxlen: 24
                          2405:7e40::/32 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2723 (0xaa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91616DC/serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34
        Validity
            Not Before: Apr  4 20:17:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=642c85c7-cb30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:09:67:32:ef:cd:fe:00:70:e3:99:86:1c:c4:
                    12:96:1b:af:0c:3a:f4:49:a3:99:40:ce:78:d6:f4:
                    81:1c:51:e5:54:a2:f3:05:37:fa:03:ce:31:b4:ea:
                    1d:f5:d1:ec:89:2c:fa:46:9f:d5:30:6d:de:b3:af:
                    05:82:23:98:15:ef:96:d1:05:d4:5d:7e:ba:c4:30:
                    68:55:59:68:c2:1f:0d:3b:69:61:94:26:85:15:d8:
                    9a:fb:40:fb:3c:8a:68:4b:09:ec:ed:30:c4:07:14:
                    07:6b:65:90:83:a4:74:f3:ee:e6:7e:06:8b:90:da:
                    41:df:28:54:30:2f:77:fd:67:fa:ed:3f:f9:9d:7f:
                    ef:fa:6f:4e:30:3f:af:fc:16:b7:3a:8c:b3:07:af:
                    10:db:ec:f8:0f:bc:36:ca:6f:cc:26:84:c8:ce:1e:
                    c2:bb:16:3f:d2:3e:49:d5:68:a6:02:36:e8:91:a1:
                    13:a9:8a:03:1f:14:b8:30:9a:d2:8f:1f:9b:a2:1d:
                    ec:ec:4e:8c:9d:2e:aa:65:98:bb:bb:20:8b:f0:28:
                    b9:d3:da:e1:36:33:a2:61:85:dd:bc:2e:d0:90:5b:
                    72:b4:77:8f:13:21:85:95:82:99:9d:aa:73:98:65:
                    a2:6b:78:cf:f5:56:0a:4e:26:5d:d3:42:48:60:67:
                    08:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:65:F1:94:F8:84:8D:D1:E2:26:A2:66:07:F2:99:82:9B:04:B6:7D
            X509v3 Authority Key Identifier:
                keyid:97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/7BD35210294811EABB12B46BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.120.0/22
                IPv6:
                  2405:7e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:d5:ac:48:58:8c:1d:78:ba:93:2b:eb:cd:54:a3:75:86:b5:
         c6:ce:45:01:13:a0:a9:f8:74:4f:84:73:2c:8a:e2:d1:e0:0d:
         1e:c3:a9:29:8e:12:a2:0c:53:fe:a0:69:c1:2d:0c:72:7b:5e:
         3d:bf:fa:3f:4b:fc:01:35:c5:41:dc:d3:c9:8d:17:70:df:df:
         4f:ff:02:5c:b7:94:d4:74:52:b6:ba:4f:09:10:00:05:a0:c5:
         78:d1:5e:ab:b1:d9:c6:07:9f:c5:53:a9:cf:0a:64:d6:93:8c:
         41:fc:30:75:14:0c:53:f3:a7:04:4d:6a:c1:06:d0:32:3b:4b:
         11:ae:e1:41:7c:3a:7b:10:e1:0f:45:22:88:47:03:4a:62:88:
         e2:e1:0f:21:aa:2b:93:18:c8:49:58:5b:ba:ab:c2:69:11:31:
         df:91:b6:1f:ab:ab:5c:eb:dc:7a:0c:8a:cf:ed:06:b2:a6:4f:
         2d:27:49:3b:51:7c:29:5f:f6:71:7a:ec:c9:63:b1:d7:4e:b4:
         88:65:aa:2c:dc:37:0a:dc:00:55:d4:35:57:fa:02:23:ae:95:
         23:36:0d:ff:f5:36:71:23:a4:56:2c:6e:19:a8:cf:d7:ab:00:
         17:c6:27:4b:97:06:b8:36:bc:a5:77:dc:82:cb:25:ff:1d:1b:
         4f:9e:29:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----