Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/6C5589E4683611EEBF95306BC4F9AE02.roa
File:                     6C5589E4683611EEBF95306BC4F9AE02.roa (raw, json)
Hash identifier:          Q4m+CwsUOTwtJxoS+6zXPe7mNWU3ESk6CI9+UnaLy1c=
Subject key identifier:   A6:03:07:3E:B4:26:1C:A6:AE:1F:06:4D:9A:2E:DA:FD:4C:47:92:26
Certificate issuer:       /CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
Certificate serial:       03FB
Authority key identifier: E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/6C5589E4683611EEBF95306BC4F9AE02.roa
Signing time:             Wed 11 Oct 2023 13:02:25 +0000
ROA not before:           Wed 11 Oct 2023 13:02:25 +0000
ROA not after:            Sat 30 Dec 2023 00:00:00 +0000
asID:                     141432
IP address blocks:        103.173.7.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1019 (0x3fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
        Validity
            Not Before: Oct 11 13:02:25 2023 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=65269ce1-e239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5a:b6:27:7f:9e:11:55:72:0e:cc:eb:c4:39:
                    48:85:60:4f:01:95:32:c6:64:02:b3:de:6f:3a:7f:
                    58:24:ab:55:a1:66:88:fa:76:6e:8d:87:bd:ed:15:
                    7a:a2:ef:2a:72:f6:b2:f1:22:be:09:a2:3f:c8:d1:
                    07:47:d6:5d:0c:0e:e1:dc:f6:5c:97:68:8b:8b:ac:
                    4f:7b:00:51:46:c6:fa:99:1e:60:66:88:f9:70:09:
                    91:da:0c:84:11:7a:87:d3:07:0f:ba:68:c7:2d:78:
                    2d:93:ab:60:9d:8c:3a:cb:1c:83:28:58:d1:42:32:
                    d9:f3:a4:02:79:9a:75:58:bf:ae:c8:e8:97:8f:98:
                    be:23:ed:b3:1a:6f:36:8a:19:04:83:9a:c1:35:1f:
                    ce:54:f3:b3:20:a3:3e:4c:1c:2f:f5:a6:29:75:f4:
                    4a:99:c9:a7:a2:5b:d9:f9:ea:ad:d6:a9:0a:5d:d2:
                    49:c2:b1:f9:77:f2:45:96:58:e3:79:61:cd:7c:6c:
                    b1:06:35:33:95:03:97:3e:d4:26:11:89:52:83:aa:
                    aa:ba:c8:1b:26:b5:b0:33:45:5b:8f:13:ff:08:84:
                    64:d1:46:39:a6:4d:19:ec:bc:47:bc:88:69:9b:87:
                    fd:bf:4b:c0:dc:62:f9:d5:b1:c8:06:ec:a9:9f:2f:
                    64:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:03:07:3E:B4:26:1C:A6:AE:1F:06:4D:9A:2E:DA:FD:4C:47:92:26
            X509v3 Authority Key Identifier:
                keyid:E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/6C5589E4683611EEBF95306BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:05:ad:0a:32:da:df:51:2c:a4:25:2d:c7:da:e3:81:3e:aa:
         6d:73:40:f1:bb:7e:0d:d7:73:c7:fd:8b:98:82:f3:23:dc:26:
         c8:76:76:fa:0f:be:fb:0c:4e:6a:74:8f:af:e9:2a:80:67:04:
         f5:cd:5d:dd:71:05:f2:ec:81:c7:c3:eb:90:14:e4:c3:ef:7b:
         7c:a9:66:ef:c3:20:ac:5a:c9:8f:4b:88:2f:82:aa:fb:8a:8f:
         43:a9:27:2b:ef:7b:9f:9c:3b:0f:aa:e0:b0:da:2f:1e:3e:19:
         e1:e5:51:7c:84:2c:bd:94:c2:c9:f8:4a:63:b3:c6:4b:70:65:
         87:9c:de:d0:1d:7c:d6:b6:6e:34:55:0d:41:eb:f4:78:bf:3a:
         5b:6a:be:7c:ce:19:4e:ce:88:d4:5a:d0:a6:71:ff:7f:15:a0:
         b5:9d:e0:3a:c1:32:8d:ae:4d:3f:12:21:ef:c1:a1:79:9c:d3:
         59:74:eb:ec:8d:7a:a7:ff:75:a2:1d:5d:c9:88:35:c3:3b:af:
         d0:94:8e:1a:b1:b2:90:50:1b:05:75:40:ba:86:c7:d4:f8:fd:
         43:f1:26:28:f0:d0:17:ef:f9:90:d9:c4:88:b4:86:7d:58:1b:
         fb:62:2a:2c:81:b7:a8:9b:0d:24:66:c9:ac:c1:e5:b1:0f:f7:
         12:bc:29:2c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjUzNjIxMTAvBgNVBAUTKEU1RTVEMTY4QTBFMTA5NkVBMUMzRjlCN0Y4RThENzU4
RUFFQTIzRjMwHhcNMjMxMDExMTMwMjI1WhcNMjMxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTI2OWNlMS1lMjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuVq2J3+eEVVyDszrxDlIhWBPAZUyxmQCs95vOn9YJKtVoWaI+nZujYe97RV6
ou8qcvay8SK+CaI/yNEHR9ZdDA7h3PZcl2iLi6xPewBRRsb6mR5gZoj5cAmR2gyE
EXqH0wcPumjHLXgtk6tgnYw6yxyDKFjRQjLZ86QCeZp1WL+uyOiXj5i+I+2zGm82
ihkEg5rBNR/OVPOzIKM+TBwv9aYpdfRKmcmnolvZ+eqt1qkKXdJJwrH5d/JFlljj
eWHNfGyxBjUzlQOXPtQmEYlSg6qqusgbJrWwM0VbjxP/CIRk0UY5pk0Z7LxHvIhp
m4f9v0vA3GL51bHIBuypny9kXwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKYDBz60
Jhymrh8GTZou2v1MR5ImMB8GA1UdIwQYMBaAFOXl0Wig4QluocP5t/jo11jq6iPz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTM2Mi9EOUNCRjgwQTEw
QjMxMUVDQTMxREY4MkNDNEY5QUUwMi81ZVhSYUtEaENXNmh3X20zLU9qWFdPcnFJ
X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVlWFJhS0RoQ1c2aHdfbTMtT2pYV09ycUlfTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjUzNjIvRDlDQkY4MEExMEIzMTFFQ0EzMURGODJDQzRGOUFFMDIvNkM1NTg5RTQ2
ODM2MTFFRUJGOTUzMDZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnrQcwDQYJKoZIhvcNAQELBQADggEBAK4FrQoy2t9RLKQl
Lcfa44E+qm1zQPG7fg3Xc8f9i5iC8yPcJsh2dvoPvvsMTmp0j6/pKoBnBPXNXd1x
BfLsgcfD65AU5MPve3ypZu/DIKxayY9LiC+CqvuKj0OpJyvve5+cOw+q4LDaLx4+
GeHlUXyELL2Uwsn4SmOzxktwZYec3tAdfNa2bjRVDUHr9Hi/OltqvnzOGU7OiNRa
0KZx/38VoLWd4DrBMo2uTT8SIe/BoXmc01l06+yNeqf/daIdXcmINcM7r9CUjhqx
spBQGwV1QLqGx9T4/UPxJijw0Bfv+ZDZxIi0hn1YG/tiKiyBt6ibDSRmyazB5bEP
9xK8KSw=
-----END CERTIFICATE-----