Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/D5B350F80BAB11EDB8200E61C4F9AE02.roa
File:                     D5B350F80BAB11EDB8200E61C4F9AE02.roa (raw, json)
Hash identifier:          0B2O7Fyd8hT+sXhqQY8PThZRWcj9O1gkUv7GYaEuXmI=
Subject key identifier:   8F:69:E1:DE:0E:0B:16:DC:8B:8A:33:71:A1:32:33:A4:EE:97:CF:11
Certificate issuer:       /CN=A9178ACB/serialNumber=5C27D53D0F23813C8EA1638AF06C8D34D8F2DFF1
Certificate serial:       02
Authority key identifier: 5C:27:D5:3D:0F:23:81:3C:8E:A1:63:8A:F0:6C:8D:34:D8:F2:DF:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/D5B350F80BAB11EDB8200E61C4F9AE02.roa
Signing time:             Sun 24 Jul 2022 23:53:37 +0000
ROA not before:           Sun 24 Jul 2022 23:53:37 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     149851
IP address blocks:        103.188.134.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178ACB/serialNumber=5C27D53D0F23813C8EA1638AF06C8D34D8F2DFF1
        Validity
            Not Before: Jul 24 23:53:37 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=62dddb81-e5d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:30:6e:7a:9a:72:75:d2:7e:13:b8:8c:4d:9c:
                    3d:1d:05:ca:a3:a8:6e:50:41:5c:81:fb:20:20:29:
                    4b:48:f7:7d:f6:e6:e1:89:64:2f:65:ee:30:df:d6:
                    66:84:2c:43:08:05:dc:44:b6:a0:3a:5c:f9:8b:bd:
                    fa:30:86:2a:0d:02:8f:cf:4e:dc:b8:f9:ef:e5:eb:
                    e5:30:73:fb:fa:3e:0b:18:9c:17:bf:b2:17:93:bd:
                    e8:30:db:a5:67:be:17:f5:33:d7:35:60:23:c5:49:
                    96:80:e1:20:49:9c:6c:65:81:cc:66:3b:7e:4a:e4:
                    7c:af:aa:97:43:8d:1c:5e:22:53:cb:e8:8f:9b:7a:
                    43:17:69:90:96:09:05:60:7b:2a:9e:65:8b:d5:d6:
                    cf:27:75:77:4d:97:dd:58:04:a9:bc:3f:32:2d:bf:
                    eb:ad:ef:56:6f:af:46:44:e9:fe:e9:0d:b0:30:07:
                    cf:72:28:ad:cd:06:f6:e5:ac:bc:79:64:9c:0f:d9:
                    48:fc:6e:c5:fb:7c:03:9a:4c:db:61:d5:66:4a:85:
                    be:46:20:6f:a2:dd:f9:88:95:83:c2:d3:ad:60:78:
                    18:3f:d3:56:db:74:12:7c:b2:dc:38:b4:d3:b7:ae:
                    b6:70:0e:4f:cc:ce:1b:18:74:e9:de:a5:c1:cc:75:
                    0c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:69:E1:DE:0E:0B:16:DC:8B:8A:33:71:A1:32:33:A4:EE:97:CF:11
            X509v3 Authority Key Identifier:
                keyid:5C:27:D5:3D:0F:23:81:3C:8E:A1:63:8A:F0:6C:8D:34:D8:F2:DF:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCfVPQ8jgTyOoWOK8GyNNNjy3_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178ACB/523A8F560BA711ED8B0E4C43C4F9AE02/D5B350F80BAB11EDB8200E61C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:f6:13:58:b0:c5:57:a7:00:d4:65:1f:10:de:e4:74:52:b2:
         13:07:29:7d:84:4e:15:2c:d0:cc:73:6c:c7:ae:13:04:d7:2d:
         7d:84:9f:e7:21:a8:ee:64:63:39:e7:fe:0e:d0:6b:86:65:59:
         e8:2a:8e:bd:c3:f5:5d:7e:d2:30:fd:71:87:f6:77:47:d1:ab:
         57:2f:88:cb:33:f9:a4:f5:a8:e1:99:55:21:08:0a:32:65:71:
         be:8b:2f:70:d4:f1:77:e3:04:66:9a:ed:a2:76:bd:6b:08:9e:
         a3:a4:a5:43:fc:29:3a:c0:56:a0:21:49:d4:c5:d2:9b:f3:fd:
         9f:05:dc:c3:2b:77:22:00:7a:06:a8:89:be:98:16:bb:e6:31:
         03:57:33:c1:d2:2a:76:fc:3f:07:4f:51:d8:34:e9:23:63:21:
         54:45:ac:e9:40:f5:48:90:72:ce:85:e4:97:22:d3:d7:f6:92:
         8f:6e:dc:63:4e:c8:e8:25:5c:68:a9:a7:12:a8:d2:5f:9d:01:
         8f:5e:29:6a:8b:1b:6f:de:df:aa:dc:7b:2c:a3:b5:83:b2:09:
         a8:26:41:f9:d0:f7:7b:e8:f5:d8:87:f8:3c:ce:aa:2a:b0:bc:
         2b:96:90:b2:5c:84:73:3b:d5:5b:92:f8:be:ef:19:39:ec:6d:
         d3:74:7a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----