Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/B2EB9FEA214811EE8A1BBE50C4F9AE02.roa
File:                     B2EB9FEA214811EE8A1BBE50C4F9AE02.roa (raw, json)
Hash identifier:          SeDIEuJEB2ph6YfCfQ/QJvFcKbvnCS8gyaPsIAP+jAs=
Subject key identifier:   85:86:99:DA:0E:3D:14:D6:2A:90:1B:E1:D8:C7:0B:45:E1:7E:6A:1C
Certificate issuer:       /CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D
Certificate serial:       0511
Authority key identifier: E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/B2EB9FEA214811EE8A1BBE50C4F9AE02.roa
Signing time:             Thu 13 Jul 2023 06:44:22 +0000
ROA not before:           Thu 13 Jul 2023 06:44:22 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     134486
IP address blocks:        103.139.218.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1297 (0x511)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91801A5/serialNumber=E5E1CFCAE1F9E6F121CA13551B40F698984B9D9D
        Validity
            Not Before: Jul 13 06:44:22 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64af9d46-a96f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b1:94:f0:d9:ad:57:ed:1e:af:00:ab:8c:97:
                    cb:50:f7:27:dc:55:42:25:fc:71:08:32:3d:59:0c:
                    10:07:90:5a:57:4b:ed:1d:4a:e6:64:89:c7:88:0d:
                    ee:a2:6c:0c:68:75:3e:2d:50:7d:e2:1e:6c:06:19:
                    bd:fc:92:12:86:75:ff:e9:f3:72:36:51:cf:7a:52:
                    99:3d:6f:d9:2a:8d:b9:79:87:60:cb:2a:1f:5f:1a:
                    04:43:83:81:dd:bb:8d:17:4f:e3:7e:b2:d1:d2:2b:
                    99:2a:11:0b:5b:3e:cf:6b:4b:d8:19:d1:57:6b:2c:
                    da:36:13:17:5d:8d:29:9f:05:47:c6:5e:ca:1c:00:
                    83:ce:5e:e2:cb:af:ab:ba:ab:31:60:0b:8b:ae:b6:
                    6b:39:22:09:ba:00:2a:58:13:47:31:2e:17:42:3e:
                    c3:44:16:90:79:92:90:5a:ad:8e:b5:10:e2:db:17:
                    89:47:d4:4b:9f:5a:91:62:61:e8:c4:ed:f5:c9:d5:
                    f1:70:2b:e7:9b:0d:8e:6d:72:0d:2f:5e:84:b2:47:
                    13:98:71:0c:7f:63:d7:e7:31:4b:df:04:c8:99:6d:
                    94:e6:ce:a3:a5:75:bd:50:c0:16:dc:5d:de:36:59:
                    37:a1:9b:c1:42:92:69:68:b0:35:19:a6:1f:53:fe:
                    52:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:86:99:DA:0E:3D:14:D6:2A:90:1B:E1:D8:C7:0B:45:E1:7E:6A:1C
            X509v3 Authority Key Identifier:
                keyid:E5:E1:CF:CA:E1:F9:E6:F1:21:CA:13:55:1B:40:F6:98:98:4B:9D:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/5eHPyuH55vEhyhNVG0D2mJhLnZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eHPyuH55vEhyhNVG0D2mJhLnZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91801A5/84B5D61C7D6D11EBA6A4A817C4F9AE02/B2EB9FEA214811EE8A1BBE50C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:94:f9:4e:05:d8:ab:66:c1:b4:75:61:9f:49:c7:32:01:4b:
         4e:db:2e:c6:8e:d1:d8:77:70:25:d1:94:b7:e9:c6:dc:ae:8c:
         c4:1a:84:fe:f6:8e:76:41:79:7a:36:b9:e2:1c:55:a8:4e:d1:
         4f:3e:8a:90:64:fd:86:1e:4c:01:d2:4f:25:c8:42:42:a9:97:
         15:37:44:b1:98:6a:4a:77:ef:b8:e5:ec:09:ab:b3:99:94:11:
         4c:e0:bc:ef:70:97:c5:1d:fd:a9:8c:81:3d:8e:41:65:44:ca:
         29:92:51:8a:23:eb:89:4a:20:f1:e4:45:90:34:72:26:ae:63:
         89:e5:a3:55:79:09:16:dc:f9:3d:c6:f8:ca:ff:7a:9f:a1:1b:
         a0:9d:16:62:c1:61:97:b6:43:c2:c8:60:ee:7a:1d:b9:fe:0c:
         ca:7b:a8:32:ca:88:18:15:01:d1:ff:b4:11:86:a7:46:6f:06:
         c5:18:13:a3:ea:15:59:75:78:d5:29:f5:cc:ad:3c:54:7a:bf:
         a2:04:be:35:0f:de:d5:67:e8:7d:f2:5a:04:cc:6b:c9:42:e4:
         14:e3:14:85:1c:25:b1:7e:12:81:3a:da:c9:d7:8a:83:c2:87:
         8d:96:c4:c7:b5:e6:61:72:f3:5b:9c:dd:ce:96:ec:e0:d4:c6:
         3d:fe:b4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----