Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/09D9DE58408E11EDA80A5272C4F9AE02.roa
File:                     09D9DE58408E11EDA80A5272C4F9AE02.roa (raw, json)
Hash identifier:          AmA7YRM3cPPqVkUhRsCBdthxXQLfxWQ76K8iuIhbDd4=
Subject key identifier:   05:69:90:02:F8:BC:D6:44:39:39:0E:45:52:F0:89:A5:D8:04:80:79
Certificate issuer:       /CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54
Certificate serial:       F2
Authority key identifier: 65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/09D9DE58408E11EDA80A5272C4F9AE02.roa
Signing time:             Fri 30 Sep 2022 07:03:52 +0000
ROA not before:           Fri 30 Sep 2022 07:03:52 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     49367
IP address blocks:        103.188.231.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54
        Validity
            Not Before: Sep 30 07:03:52 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=633694d7-c810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3f:4b:33:4f:4c:70:59:82:74:2d:f0:64:91:
                    1c:2c:3c:f3:46:cb:8c:92:a3:d0:c6:bb:20:9d:3c:
                    22:d6:bf:d9:d2:44:9f:bd:8a:16:4a:fc:e9:14:8c:
                    7f:61:49:d5:f2:25:4f:6c:1b:2e:e7:d5:df:96:36:
                    6b:cc:9f:83:8c:e2:23:68:57:6e:d0:d6:f9:0e:04:
                    0e:d5:97:59:d6:6e:ff:63:cf:74:1d:d0:35:b5:da:
                    e2:19:47:40:37:b0:e9:b2:c0:5d:dd:79:e1:14:32:
                    de:9c:a6:bd:be:4f:c4:f2:53:17:20:e1:dc:1d:3c:
                    df:3f:e9:21:aa:e1:a6:ed:ba:59:26:1b:7d:23:1d:
                    60:7b:3b:ea:a4:77:70:e7:91:7b:62:7b:e2:f9:f3:
                    ab:f0:a7:9f:50:e4:49:a0:b8:cd:3f:37:e7:35:5d:
                    60:2f:88:b2:e0:70:87:0e:54:6f:a8:f8:c0:9a:cc:
                    2b:02:40:e6:52:8c:bc:f4:e2:b8:58:c7:18:65:13:
                    29:01:47:c5:65:58:ed:33:57:67:e9:f3:b2:e9:80:
                    f0:c0:a6:10:d0:7e:8d:04:0d:36:2c:b7:a2:2c:89:
                    35:8d:ed:17:a7:d9:02:52:ba:65:7d:33:80:b9:94:
                    76:0e:91:a5:b7:3e:85:08:ac:57:a3:0b:e6:01:23:
                    94:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:69:90:02:F8:BC:D6:44:39:39:0E:45:52:F0:89:A5:D8:04:80:79
            X509v3 Authority Key Identifier:
                keyid:65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/09D9DE58408E11EDA80A5272C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:ab:e8:81:71:3b:e1:87:b5:3f:68:2a:ee:01:bc:5f:fb:39:
         13:21:00:ce:5a:88:45:e2:5c:35:95:67:50:50:60:f7:aa:e2:
         bc:0b:8e:37:21:ce:79:dd:9c:dc:19:70:12:95:9f:45:63:1e:
         dd:7d:0c:a4:be:b2:12:19:a0:6c:47:bd:46:9b:74:85:88:a0:
         3e:1e:62:27:45:54:c7:14:6e:64:51:c9:48:73:2b:8f:2e:23:
         b8:0b:ae:98:b4:3a:8c:8d:d8:ca:1b:97:a8:3a:bc:a2:2c:e6:
         d1:f5:25:46:a6:b1:86:c5:b1:40:6d:7f:60:70:fb:ae:41:fd:
         a6:e3:43:3a:4a:89:6b:88:d6:92:29:cb:89:eb:e9:a9:e6:1e:
         b2:5d:4f:96:f2:5e:54:a8:9c:89:8f:9c:86:5c:a1:84:8d:9d:
         61:2b:0b:0e:83:9d:03:14:99:97:43:d3:96:c0:4b:e8:d9:49:
         e6:7d:d3:e4:b5:68:af:a9:7b:2d:12:cd:cd:fa:95:8f:d2:29:
         89:17:c3:88:61:94:1b:c1:cf:67:46:91:67:08:29:cd:f7:2e:
         89:fa:fb:7e:05:eb:36:3f:31:48:ae:a7:06:75:43:f5:b0:fe:
         cb:2f:e7:dc:73:0a:26:07:3a:f9:f5:de:57:a6:c6:0b:f8:55:
         92:ca:d9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----