Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/CDC5CD78EED511ECBF932B6AC4F9AE02.roa
File:                     CDC5CD78EED511ECBF932B6AC4F9AE02.roa (raw, json)
Hash identifier:          as9K4zAU8JCHiMVMNDLeTTxSHiik4f3fA3Rie18ZfGA=
Subject key identifier:   E2:5A:B2:B7:41:6F:57:50:60:AC:DF:46:E3:C3:20:32:6E:1A:73:E8
Certificate issuer:       /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial:       0C
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/CDC5CD78EED511ECBF932B6AC4F9AE02.roa
Signing time:             Sat 18 Jun 2022 07:41:10 +0000
ROA not before:           Sat 18 Jun 2022 07:41:10 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     208171
IP address blocks:        103.189.190.0/23 maxlen: 24
                          2001:df0:d840::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
        Validity
            Not Before: Jun 18 07:41:10 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=62ad8196-727b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9d:18:55:4a:74:18:39:18:ac:f9:66:40:d1:
                    37:ea:77:ca:7f:07:bf:4a:9e:b8:86:76:b4:5e:a8:
                    55:97:d5:5a:f6:82:db:e4:3d:ab:bb:53:7a:a9:31:
                    cf:c3:23:ca:11:78:fa:f6:d6:f2:af:94:61:ea:58:
                    ac:a8:34:ad:ea:a6:e0:67:3e:bd:ea:c7:c9:5a:cf:
                    29:e5:c1:f9:f0:ad:c6:94:86:4e:09:a6:ac:cb:8e:
                    1a:c5:1b:85:5a:ad:bc:68:56:bf:77:73:05:9e:fc:
                    0f:d1:4a:f4:69:9e:b8:33:86:6e:ab:dd:32:17:af:
                    d8:83:8b:13:6a:31:34:d2:f4:9e:85:13:7d:46:79:
                    27:15:61:62:53:69:a3:de:cd:64:bd:72:98:29:3c:
                    75:c9:3a:b1:26:78:02:c4:2b:2d:bd:28:40:63:2a:
                    2e:ae:ce:55:c3:28:4c:f6:52:e5:f9:db:f0:97:92:
                    15:40:97:2e:9f:b0:94:bd:41:92:f3:f2:33:1b:9c:
                    64:fb:12:98:29:a5:89:3f:b2:1e:6f:13:b0:2a:ef:
                    a4:41:ca:9c:e6:15:ef:91:08:7b:14:76:36:95:5f:
                    64:05:72:0b:9d:df:ab:60:00:e8:7c:07:d3:79:8c:
                    c3:d3:60:cc:3f:84:42:95:c9:c1:58:12:58:7d:d8:
                    4e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5A:B2:B7:41:6F:57:50:60:AC:DF:46:E3:C3:20:32:6E:1A:73:E8
            X509v3 Authority Key Identifier:
                keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/CDC5CD78EED511ECBF932B6AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.190.0/23
                IPv6:
                  2001:df0:d840::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:d8:7c:2d:14:0d:f2:71:b0:ca:5a:01:bd:77:4f:2c:b3:43:
         f7:32:4c:73:49:3c:55:b1:b9:18:e6:70:64:70:aa:bd:d6:d3:
         4f:f9:cf:77:3b:5f:b0:f2:15:0d:ea:c5:9e:93:3b:43:77:0c:
         d0:f9:a0:e5:2a:5c:4e:5a:ff:e8:13:a4:82:41:52:20:1c:a1:
         d1:e2:3a:f9:bf:be:ae:d3:29:30:aa:17:b7:93:53:ed:98:9e:
         2c:cd:25:97:30:f5:ba:f9:8f:e4:18:4d:d1:44:c5:45:a7:92:
         73:48:13:e4:3b:4f:65:af:7f:ef:75:31:4e:2b:51:6b:30:df:
         16:99:dc:bc:c4:a0:8e:52:05:ab:81:ac:85:54:2c:24:96:00:
         4b:c6:44:f6:70:fd:04:9a:15:8e:8f:62:50:6a:2a:9a:cd:6d:
         88:b1:a2:a2:91:75:e0:11:cb:89:47:d8:d8:4f:20:a3:4f:a8:
         34:8d:5a:c1:32:44:00:ab:a8:69:e9:05:31:b9:76:86:3a:c8:
         2b:de:b0:4e:b3:80:fc:20:8e:79:64:c5:74:f8:66:c8:b4:18:
         c6:0e:62:5d:56:e1:ed:9e:b8:8b:ed:bd:aa:ae:d5:ce:8f:35:
         e6:30:c2:69:c4:8d:89:16:08:7d:33:ed:5f:e8:99:7f:dd:1e:
         20:36:22:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----