Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/5AF65D54F2E911EC95E6E32DC4F9AE02.roa
File:                     5AF65D54F2E911EC95E6E32DC4F9AE02.roa (raw, json)
Hash identifier:          Xr8XFa8KGLnYihfqyIbFhwlMiv/+eSnr+iRAcq1qK7A=
Subject key identifier:   63:69:4E:CF:A5:E2:AF:FF:A4:D9:B8:66:C8:1B:BA:42:7F:91:B9:92
Certificate issuer:       /CN=A9179BF7/serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159
Certificate serial:       04
Authority key identifier: 7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/5AF65D54F2E911EC95E6E32DC4F9AE02.roa
Signing time:             Thu 23 Jun 2022 11:41:01 +0000
ROA not before:           Thu 23 Jun 2022 11:41:01 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     136516
IP address blocks:        103.190.16.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179BF7/serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159
        Validity
            Not Before: Jun 23 11:41:01 2022 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=62b4514d-53f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7b:9a:5d:61:4a:70:29:e4:f3:fd:02:00:f8:
                    cf:e6:00:91:99:47:a6:b4:01:35:0b:26:0b:91:b2:
                    f0:52:2a:cc:3b:a1:03:a7:3f:63:4e:96:ca:4a:c8:
                    b3:d1:62:c2:68:7e:60:7b:4f:88:fe:77:bf:b9:45:
                    9e:4e:f6:03:fd:93:40:8f:d7:64:ca:79:a1:e8:5f:
                    10:97:65:c4:54:bd:88:5a:1b:5d:44:20:0e:9d:4f:
                    b7:66:e5:3a:05:73:3d:02:c1:dd:7c:0a:43:70:52:
                    00:9a:3e:48:b3:32:da:6f:85:0a:fd:bd:bc:29:46:
                    88:53:b8:a2:0d:ae:19:da:8a:0e:ad:0a:06:08:11:
                    27:92:ef:a2:ba:47:7b:90:aa:59:e2:e2:da:48:8f:
                    9d:1b:eb:a9:80:9e:8e:75:47:2a:e3:87:9b:09:3c:
                    4f:74:91:2e:e7:39:fc:a6:3a:2e:29:b9:86:c8:e4:
                    9a:6b:fc:30:e9:5d:d3:6f:69:d4:29:9e:f1:c0:b6:
                    5d:7b:ba:72:23:e8:04:f1:58:bb:40:45:3c:68:4c:
                    a1:0b:bb:7e:6d:a3:8b:bd:1c:64:d4:8f:6a:86:5b:
                    40:e1:c1:02:45:e4:a0:10:54:f1:92:fe:45:a7:12:
                    2d:78:eb:17:47:1b:44:de:f1:10:69:9e:9f:bf:8b:
                    7f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:69:4E:CF:A5:E2:AF:FF:A4:D9:B8:66:C8:1B:BA:42:7F:91:B9:92
            X509v3 Authority Key Identifier:
                keyid:7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/5AF65D54F2E911EC95E6E32DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:1e:88:b2:ce:d0:76:b7:ab:fe:63:e5:fe:2b:c6:b1:64:85:
         0a:bc:c3:aa:ca:1b:2f:50:28:e1:1d:6f:2c:53:90:03:5c:cc:
         20:73:14:66:8a:32:f7:4c:07:48:d6:5c:16:93:6f:42:2c:2c:
         76:43:de:2f:4c:c3:68:bd:45:a1:02:cd:e7:3c:4b:b5:7a:9e:
         fd:52:77:b2:63:65:fe:0b:e9:07:a7:c1:87:62:e3:ac:ac:c3:
         a3:3b:c1:16:fd:13:7c:2e:fa:f4:7e:3b:52:7c:cb:1e:d4:e5:
         af:60:0f:2c:ec:4b:85:69:6d:44:8e:66:84:e0:1b:28:0b:cf:
         05:21:96:8c:b1:2f:93:d1:1f:ec:42:56:f0:8d:0f:d8:ce:18:
         6f:7c:4f:7e:cf:34:95:c8:64:c0:4f:54:7f:82:d7:0e:18:f4:
         34:c2:b9:8a:65:fe:14:6f:28:3f:99:22:73:ee:51:56:7c:2a:
         46:d4:46:f7:17:9a:c7:3e:9b:bb:7e:43:a1:cb:a6:1a:98:4c:
         ec:cb:5a:af:4c:52:0e:e5:a1:cf:9c:f2:40:36:2b:9a:88:58:
         d3:a8:3a:68:f5:5b:84:6a:e3:6b:5a:a5:93:69:4b:8b:da:6f:
         86:b1:30:3c:88:b5:db:09:c8:ad:2c:bc:a4:28:d3:61:65:27:
         1d:33:58:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----