Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/C452CE40859211ED8A338011C4F9AE02.roa
File:                     C452CE40859211ED8A338011C4F9AE02.roa (raw, json)
Hash identifier:          0zEjdG8TuhMCQXUjlXZYgs9zXANXM1UbyAf43sbzcto=
Subject key identifier:   15:F8:0C:47:96:D7:28:E8:33:63:60:3D:9A:0F:21:22:52:33:58:E2
Certificate issuer:       /CN=A9180DF5/serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
Certificate serial:       0444
Authority key identifier: 76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/C452CE40859211ED8A338011C4F9AE02.roa
Signing time:             Tue 27 Dec 2022 03:01:32 +0000
ROA not before:           Tue 27 Dec 2022 03:01:32 +0000
ROA not after:            Fri 01 Mar 2024 00:00:00 +0000
asID:                     133886
IP address blocks:        103.45.252.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1092 (0x444)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180DF5/serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
        Validity
            Not Before: Dec 27 03:01:32 2022 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=63aa600c-8bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:33:4e:d1:72:d6:90:75:2d:bd:0a:5c:83:60:
                    51:e8:61:04:8b:0d:39:86:ea:8e:a5:bc:04:82:09:
                    38:ba:67:08:6e:44:4c:56:dd:ba:a3:49:72:c8:5c:
                    cc:02:f3:1a:2c:4d:c5:24:bc:c6:de:64:a1:43:a7:
                    77:e5:04:86:01:09:83:c9:28:a2:43:2d:8c:62:c1:
                    eb:0a:de:65:f7:e9:6b:c0:41:c7:29:78:db:10:8e:
                    e4:66:8e:42:19:97:34:31:89:4e:0c:48:c4:cd:11:
                    1b:e0:7e:14:73:1f:79:42:81:c9:d0:8e:17:3b:d0:
                    f2:7d:90:f1:40:5d:a4:25:0a:4f:85:2a:d2:57:34:
                    da:b6:7e:8c:55:f6:15:df:c8:48:7d:fb:1e:d8:5c:
                    9f:55:9c:7a:95:8a:63:d7:88:cc:0d:0b:da:94:42:
                    75:15:29:2d:d0:bf:ee:07:2f:d5:df:2a:6d:e6:9d:
                    7e:bf:fb:84:57:88:0c:1c:ad:86:d8:7e:e6:5f:fd:
                    8b:62:a8:c7:39:41:7d:ac:5f:f0:b0:5b:1c:b5:a3:
                    52:1f:25:2e:02:4a:14:88:9f:d7:91:6b:2b:ed:62:
                    43:5d:a7:c0:82:f5:d1:79:f2:db:65:7c:7f:ac:6e:
                    08:e5:ba:6c:56:a2:75:44:ab:0a:d1:46:26:d2:d8:
                    ff:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F8:0C:47:96:D7:28:E8:33:63:60:3D:9A:0F:21:22:52:33:58:E2
            X509v3 Authority Key Identifier:
                keyid:76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/C452CE40859211ED8A338011C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.45.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:d0:41:a6:f4:65:9a:24:fa:16:21:42:9c:ff:97:c5:a7:59:
         03:c0:65:d8:e6:b5:40:ea:50:ee:10:22:65:ef:fd:d1:cd:0d:
         e9:d0:cd:3a:56:57:fe:cb:f7:80:f5:bc:a4:71:12:13:28:7a:
         a8:14:4d:ef:71:4e:13:69:7b:72:09:5a:c6:59:59:c3:ae:2d:
         e1:c2:3b:c9:d7:bc:7e:3a:82:c3:e2:d2:21:38:08:fe:e5:76:
         46:34:eb:d6:4c:b9:86:2f:40:1c:f5:54:33:33:a2:92:25:81:
         a9:88:68:5c:d5:b7:b0:21:7f:64:4d:20:db:ea:15:58:69:9b:
         30:29:d4:b2:5b:7d:bc:ee:b5:25:f1:95:8c:c4:75:b9:41:d3:
         a2:d6:9f:3c:25:39:f3:5a:b2:b5:34:22:e9:41:05:17:b3:2b:
         99:8d:6d:25:c4:85:81:53:de:8b:c4:b2:a3:2b:aa:ef:70:9b:
         97:26:f0:a5:a8:7e:11:a6:a9:05:00:db:d0:6a:e4:20:dc:6a:
         12:e7:7a:e4:ef:c6:c2:44:a2:32:5d:02:f2:89:9d:29:9a:44:
         cf:f5:c0:dd:44:5e:ed:61:77:32:7f:26:76:9d:ba:b5:16:7a:
         f3:3a:c9:11:e5:ab:0f:34:3b:74:e7:a0:34:b8:a3:55:04:59:
         40:77:8a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----