Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/03A227CC1BAB11EEB972495AC4F9AE02.roa
File:                     03A227CC1BAB11EEB972495AC4F9AE02.roa (raw, json)
Hash identifier:          tO7Ouafzk+qeKRTjpc2Vy9SuSXVtKlwiuNhuN6UrBYo=
Subject key identifier:   96:78:1F:EA:EA:D6:64:48:90:8C:E0:01:56:93:D6:2E:EB:31:49:AE
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       A9
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/03A227CC1BAB11EEB972495AC4F9AE02.roa
Signing time:             Thu 06 Jul 2023 03:13:01 +0000
ROA not before:           Thu 06 Jul 2023 03:13:01 +0000
ROA not after:            Sat 30 Dec 2023 00:00:00 +0000
asID:                     834
IP address blocks:        103.4.100.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Jul  6 03:13:01 2023 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=64a6313d-b26c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bd:3f:f1:59:85:5e:3b:26:62:ec:b9:e8:5e:
                    13:f5:aa:0b:82:6f:b2:e6:46:62:fd:72:71:56:5f:
                    c9:7e:c5:d6:db:1a:1f:79:36:2b:e7:f8:9c:f2:0b:
                    19:c0:5a:ea:a8:cc:49:91:86:97:7b:80:b9:95:1a:
                    85:2a:2a:58:52:f1:ae:8a:ca:88:41:dd:7a:90:a7:
                    09:aa:97:e2:5a:17:16:43:14:37:69:b7:8b:67:b5:
                    46:f1:0d:81:52:38:57:3f:8c:71:cf:6c:e6:4f:44:
                    97:91:44:3f:59:52:e0:7b:2c:78:41:be:5d:4d:e4:
                    d8:e8:2d:4a:a5:d2:04:d1:6a:15:1e:31:b9:bc:6c:
                    d2:b1:b8:32:ba:93:a6:9b:52:14:8c:a0:07:96:60:
                    7c:36:c4:13:67:72:95:b9:52:e2:7f:7d:32:c1:ef:
                    0c:4f:5e:63:ab:7c:ac:63:ef:25:36:d3:19:3c:e3:
                    fa:6b:c5:e1:b3:78:a5:6f:4a:9d:d1:df:47:8e:e9:
                    86:ff:05:a1:c5:b3:08:bb:a5:f9:74:35:b4:04:ff:
                    6f:1c:82:67:61:63:a4:e3:30:97:4a:e6:ac:da:36:
                    bb:3a:62:b6:1a:b2:91:f3:8f:fe:8f:dd:76:8b:18:
                    9e:c7:af:95:3f:6d:9a:c0:16:58:17:0a:ba:cc:7f:
                    9c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:78:1F:EA:EA:D6:64:48:90:8C:E0:01:56:93:D6:2E:EB:31:49:AE
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/03A227CC1BAB11EEB972495AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:34:e1:4b:49:8b:1d:f0:09:9d:df:2b:e3:fb:bc:70:b1:ec:
         1f:42:21:38:43:60:bd:fb:80:17:26:51:3b:be:51:75:8c:be:
         c7:10:b4:a9:3e:c6:6a:6b:29:fb:c5:94:1a:a4:8c:8b:e0:26:
         4c:27:f5:9a:5d:74:ef:3a:73:04:50:f0:74:d2:9d:ab:da:8d:
         a8:2d:bc:5d:c4:df:17:42:b2:3c:13:7d:48:3e:40:e3:c3:24:
         0c:ea:fe:bc:19:83:58:08:b1:df:33:6a:a3:7a:33:7b:fb:97:
         e1:9f:21:f7:09:9c:98:52:7c:02:8e:59:07:99:55:be:57:5a:
         0b:75:b3:8c:1a:3e:d1:be:47:a7:ce:87:88:f2:9e:f0:0a:64:
         3d:a1:fa:e7:0f:07:1f:33:db:c8:75:46:cf:e2:ca:ff:c9:69:
         3c:1c:01:04:4b:c6:64:42:b3:8e:61:9f:74:51:11:6c:3f:6b:
         b0:97:ea:16:99:d7:bc:6b:5e:7e:74:fa:57:48:2e:0a:d9:43:
         1a:67:85:0c:5c:6a:fd:0a:a9:d5:69:28:6d:29:5b:ab:dc:da:
         16:a2:fd:5e:92:a2:eb:43:1a:96:17:44:25:eb:a5:b5:30:93:
         e1:7e:d2:49:61:76:76:dd:38:07:12:86:46:10:2d:1f:96:d5:
         0f:0f:2d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----