Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/062C47862F5F11ED85BCA15BC4F9AE02.roa
File:                     062C47862F5F11ED85BCA15BC4F9AE02.roa (raw, json)
Hash identifier:          UV/k4KwFLJG3yKQPMesVtUqus6giRrgR3skPvYntfgo=
Subject key identifier:   48:98:AF:F4:14:A6:AA:82:FA:23:2B:F6:B8:68:BA:76:8C:88:73:47
Certificate issuer:       /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
Certificate serial:       120D
Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/062C47862F5F11ED85BCA15BC4F9AE02.roa
Signing time:             Thu 20 Oct 2022 15:04:41 +0000
ROA not before:           Thu 20 Oct 2022 15:04:41 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     139734
IP address blocks:        103.116.244.0/22 maxlen: 22
                          103.116.244.0/24 maxlen: 24
                          103.116.245.0/24 maxlen: 24
                          103.116.246.0/24 maxlen: 24
                          103.116.247.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4621 (0x120d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09
        Validity
            Not Before: Oct 20 15:04:41 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=63516389-81fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f7:8c:3f:b4:00:82:c9:d4:6f:de:8e:58:fa:
                    03:6c:38:ab:c8:26:58:8b:6f:d3:c1:d0:c5:b5:74:
                    3c:cd:17:63:a7:3f:d3:cb:2d:4a:0f:71:eb:93:2d:
                    c4:da:57:0c:67:7c:f4:6e:69:0c:a4:25:af:88:36:
                    fd:23:3c:29:10:62:bd:93:bd:ee:93:c2:64:ce:8a:
                    68:ff:22:84:55:2c:a1:09:2e:59:64:d1:64:39:4e:
                    a7:98:55:31:bf:0a:70:bc:06:cb:67:5a:55:03:99:
                    a3:e7:6e:31:b1:54:24:e1:37:fc:b5:8d:20:24:33:
                    61:37:eb:47:ee:8a:39:eb:19:86:f7:64:6c:58:40:
                    aa:f4:77:a5:63:18:e2:8a:fc:e4:2f:35:91:ad:17:
                    50:2c:37:b4:33:e3:e9:fd:44:02:0d:d5:c9:b2:43:
                    16:c8:48:c9:72:95:c6:54:59:ba:a4:b3:db:4c:4b:
                    4e:9c:2e:5f:85:b1:12:c6:ea:98:fd:74:94:48:20:
                    a1:b4:39:00:0a:ea:e4:e3:61:7c:8d:21:97:cd:ae:
                    c9:09:dd:37:c8:7c:28:41:3d:95:b5:b3:30:8a:8b:
                    ba:6a:bd:a7:d4:50:d4:fc:10:72:de:8a:02:fa:78:
                    74:74:1c:0b:4c:21:15:29:38:9b:3b:ca:45:d5:b9:
                    03:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:98:AF:F4:14:A6:AA:82:FA:23:2B:F6:B8:68:BA:76:8C:88:73:47
            X509v3 Authority Key Identifier:
                keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/062C47862F5F11ED85BCA15BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:c1:ff:24:3d:da:d3:f3:f3:45:55:54:a2:41:8c:ba:14:83:
         e3:6b:ec:9f:76:25:cf:8a:05:4a:13:e1:fb:c4:02:03:f3:1f:
         21:09:eb:83:88:d7:93:4e:ed:a9:0f:45:1a:5f:fc:c8:a4:9a:
         36:46:7f:68:77:f4:72:44:33:7e:13:1d:9b:4d:57:ba:d4:6a:
         ad:2d:f5:61:f0:48:a5:7d:ab:eb:e2:7c:3e:0b:93:b4:c9:8b:
         06:f9:a5:4d:19:77:65:f0:1b:93:e6:4d:85:41:67:c3:78:90:
         a7:b6:9f:ce:45:82:5c:00:29:19:32:1b:97:87:8b:dd:76:fa:
         c0:2a:d4:39:1a:8f:31:71:8a:b8:6b:05:0a:21:d6:72:ac:39:
         e2:ef:01:6c:a3:cd:79:e2:ac:06:db:ff:d4:5b:ab:52:1e:e7:
         d9:4f:26:d0:42:20:7f:8d:37:c2:f1:e1:b6:9a:f4:29:5b:61:
         3b:66:8e:9b:d7:dc:d5:88:bf:e3:a9:6c:ba:72:83:01:f0:50:
         ff:4c:24:42:67:af:ac:e3:73:41:a1:be:1b:e8:a6:9f:0b:24:
         45:5b:c0:64:d8:b6:5e:2e:ed:94:a7:fb:ec:63:e5:1e:8e:94:
         a7:79:3a:1e:d8:9b:41:ef:eb:37:e8:a4:0e:a9:8b:8d:9a:7b:
         b6:ba:01:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----