Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/6E11CB8C86B411E6BAEB2614C4F9AE02.roa
File:                     6E11CB8C86B411E6BAEB2614C4F9AE02.roa (raw, json)
Hash identifier:          vfGsums2UjhDYeD5M6HBzYYc0www6SXfHtkg3CQp8NQ=
Subject key identifier:   32:5B:B4:18:36:5C:16:5C:EB:20:F9:73:4D:25:08:C7:ED:DE:46:3B
Certificate issuer:       /CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
Certificate serial:       2E60
Authority key identifier: 68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/6E11CB8C86B411E6BAEB2614C4F9AE02.roa
Signing time:             Thu 11 Feb 2021 14:20:10 +0000
ROA not before:           Thu 11 Feb 2021 14:20:10 +0000
ROA not after:            Mon 31 Mar 2031 00:00:00 +0000
asID:                     1283
IP address blocks:        103.10.232.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11872 (0x2e60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018
        Validity
            Not Before: Feb 11 14:20:10 2021 GMT
            Not After : Mar 31 00:00:00 2031 GMT
        Subject: CN=60253d1a-6162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0b:41:16:d3:09:a8:65:89:8d:1d:51:f1:44:
                    86:da:10:40:17:51:04:80:ba:70:2f:dd:74:13:a9:
                    0c:fb:68:36:90:0b:4a:3d:9f:b6:70:d3:a8:aa:f1:
                    e4:88:7a:5d:8d:7e:40:f6:3a:28:5d:bb:32:c6:da:
                    d9:4e:4b:ff:60:8d:fc:b9:64:2f:0a:6b:05:49:0c:
                    8d:97:83:8d:be:dc:3a:6f:f4:b7:66:f8:7d:77:6c:
                    a5:af:6b:a8:a2:1a:82:56:12:b1:16:ca:8a:cf:9f:
                    3e:84:1e:3b:2f:58:87:8f:79:fe:b5:c9:6b:14:37:
                    08:d6:02:81:23:98:b5:be:ca:67:a5:59:5f:17:e9:
                    55:0b:17:34:67:8e:fb:25:49:b5:42:88:a2:a8:56:
                    46:aa:95:57:f9:46:4c:fa:07:fc:bc:86:55:23:a7:
                    cc:78:43:35:8f:f1:88:20:0a:ab:e0:1e:da:58:dd:
                    09:1c:e4:46:98:84:c6:70:a3:3a:f4:66:53:22:e7:
                    45:35:f6:a6:3e:ab:a6:94:bb:50:86:e9:18:39:88:
                    09:80:a2:09:79:1a:11:34:a0:1a:fc:bf:32:12:09:
                    db:87:66:79:e7:01:3c:63:6a:99:45:71:71:89:c2:
                    09:3c:f2:2a:f7:01:c4:38:d5:78:40:2b:41:a6:09:
                    56:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5B:B4:18:36:5C:16:5C:EB:20:F9:73:4D:25:08:C7:ED:DE:46:3B
            X509v3 Authority Key Identifier:
                keyid:68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/6E11CB8C86B411E6BAEB2614C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:f0:c1:4d:23:1a:e7:b0:54:17:0d:38:dd:9e:83:18:67:d4:
         36:14:39:e5:ea:69:1f:b7:b8:09:01:a9:e1:c6:60:c9:80:54:
         fe:b7:a7:55:cc:7f:bb:10:4b:15:0f:b8:ff:a7:1e:c5:24:15:
         06:a0:d2:21:85:c1:94:08:0e:19:17:3c:c2:37:6f:ba:4f:9d:
         9c:9b:2d:5d:89:30:40:00:d0:73:2c:f0:4f:20:f1:0b:70:86:
         58:30:79:1c:0d:c7:7f:43:43:e9:7e:ef:3f:81:c9:1a:d7:1b:
         47:16:79:95:cb:df:39:99:dc:ae:bf:db:76:fd:41:bf:f1:58:
         af:13:f5:7c:ec:1a:16:85:5f:21:7e:24:12:f2:98:ce:f9:64:
         aa:a6:84:dd:ac:60:ca:64:3e:1d:21:39:97:10:79:49:9f:ec:
         64:4c:65:2e:6e:74:18:fa:81:13:10:5f:74:8f:89:4b:0f:c1:
         5d:a2:28:55:13:5c:79:af:d4:3a:11:c9:d0:f2:bc:61:ec:9e:
         2a:4f:e7:8e:47:12:c2:d6:6c:a7:78:3c:43:c0:24:86:8b:6a:
         db:af:cf:4f:3a:f7:fc:e2:bd:3a:89:d5:0a:3c:ae:96:2e:ac:
         d3:ca:fb:e9:d9:6a:1c:cd:81:e1:2d:74:ba:30:f0:05:d4:d2:
         97:6d:ee:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----