Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/6694ED2ABD3E11EA9D4CDD22C4F9AE02.roa
File:                     6694ED2ABD3E11EA9D4CDD22C4F9AE02.roa (raw, json)
Hash identifier:          GK0JrTbiXE5o4+8572eLAG656fnr3zTfcUbXbAP2J2Y=
Subject key identifier:   E8:DC:1C:0E:3F:7F:37:F2:98:D0:76:55:89:CB:4B:31:C7:40:B0:24
Certificate issuer:       /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial:       0EF9
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/6694ED2ABD3E11EA9D4CDD22C4F9AE02.roa
Signing time:             Sun 23 Apr 2023 09:15:54 +0000
ROA not before:           Sun 23 Apr 2023 09:15:54 +0000
ROA not after:            Sat 30 Sep 2023 00:00:00 +0000
asID:                     24144
IP address blocks:        103.140.8.0/23 maxlen: 24
                          2404:f4c0::/32 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3833 (0xef9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
        Validity
            Not Before: Apr 23 09:15:54 2023 GMT
            Not After : Sep 30 00:00:00 2023 GMT
        Subject: CN=6444f749-28d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:38:86:fb:68:a7:3c:e8:83:da:40:6e:d4:cf:
                    06:5b:2a:91:14:2e:a3:af:78:e1:1c:50:c8:7c:bc:
                    bf:4f:23:e0:e6:27:3e:17:e0:59:04:cb:14:af:74:
                    22:3d:94:cd:01:c7:14:0d:98:d0:c7:33:10:5b:4e:
                    bd:ef:ff:b7:65:52:a3:72:9c:40:33:b0:1a:d1:c4:
                    5c:81:9e:47:16:d1:33:4e:2d:d3:b2:0e:a2:36:df:
                    4e:8f:56:26:e3:8c:ce:65:cb:db:e4:70:15:f5:37:
                    ba:00:f2:70:2f:0e:0b:45:b0:c1:01:eb:da:2f:69:
                    50:65:90:4e:6d:54:10:c4:8e:3c:00:c1:5c:50:2e:
                    4e:c7:a4:2c:bb:e4:9a:67:66:c2:75:51:46:49:c7:
                    b9:11:96:36:45:b2:94:91:5d:28:0e:d9:ab:ea:01:
                    3b:b5:49:e7:2d:85:e8:5d:3f:9a:2c:77:15:2e:f9:
                    a5:ed:91:17:5c:d0:29:56:95:49:d0:99:15:e5:89:
                    cb:3c:2b:5d:90:28:83:89:29:3a:a8:17:f6:85:b6:
                    ab:32:7d:a9:8f:ad:cd:b4:e1:1a:10:ad:f6:2c:de:
                    d1:a4:ab:a1:04:b4:91:63:4f:aa:6a:9c:0b:12:86:
                    40:f6:df:a2:7b:e6:d5:fd:da:1f:80:00:91:dc:ab:
                    c1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DC:1C:0E:3F:7F:37:F2:98:D0:76:55:89:CB:4B:31:C7:40:B0:24
            X509v3 Authority Key Identifier:
                keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/6694ED2ABD3E11EA9D4CDD22C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.8.0/23
                IPv6:
                  2404:f4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:4d:38:df:b2:77:b2:37:dc:e4:c6:a5:51:17:6e:41:c0:99:
         08:17:63:50:69:d7:8c:04:a0:b0:6b:16:06:ce:51:03:5f:27:
         70:89:2d:b8:13:ad:cf:ad:99:1d:28:18:f6:e7:06:b6:64:0b:
         21:a1:e9:f5:28:36:36:45:17:5e:a4:e0:96:a7:18:84:ec:4d:
         9e:fa:bd:0e:70:06:e6:79:b7:75:8a:7d:12:96:4b:cf:95:82:
         ea:47:32:5c:a8:95:ab:f3:9e:dc:b8:07:02:dd:e4:fa:2a:0b:
         af:82:4b:1f:9e:b1:90:f9:df:cd:50:93:22:1f:0b:8d:3c:5d:
         0c:ef:a6:c4:de:d9:0a:1d:93:e4:10:f8:7b:45:35:e0:54:ad:
         13:87:e7:21:46:71:61:1b:1a:c3:2d:fa:e8:5d:37:96:53:76:
         d6:58:c0:6f:37:f7:98:5d:f0:48:93:2b:e0:ee:f9:9c:ba:4f:
         28:46:e2:79:2e:6c:89:bd:5d:35:38:0b:2b:41:61:3e:b0:86:
         57:98:07:a4:9c:02:88:13:ad:3f:d9:f8:2e:7b:65:ce:1e:87:
         bc:e8:d5:fd:65:ac:6b:86:c0:e5:de:ae:64:38:a7:b4:f5:4d:
         88:fe:d7:69:eb:9c:a0:76:4d:6d:cd:62:2f:75:5b:5a:c7:a9:
         75:1a:f9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----