Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/A6B89DE0E23D11EC9FC43A18C4F9AE02.roa
File:                     A6B89DE0E23D11EC9FC43A18C4F9AE02.roa (raw, json)
Hash identifier:          OJUisq/FTVOUacgoyZws3ZBQ248MLwVt1FCACmNAhm8=
Subject key identifier:   B2:C5:AB:E6:DF:88:D5:DC:F1:20:0B:60:EB:B2:7E:1E:B1:7C:3E:BA
Certificate issuer:       /CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54
Certificate serial:       02
Authority key identifier: 65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/A6B89DE0E23D11EC9FC43A18C4F9AE02.roa
Signing time:             Thu 02 Jun 2022 06:31:36 +0000
ROA not before:           Thu 02 Jun 2022 06:31:36 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     64445
IP address blocks:        103.188.230.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54
        Validity
            Not Before: Jun  2 06:31:36 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=62985948-829e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2e:7f:7b:2e:b1:62:65:6f:ea:d6:60:4a:7d:
                    13:f3:0d:b3:d3:fa:df:98:c1:84:f4:9c:75:a7:89:
                    1d:b2:2b:d9:1f:29:ed:c2:53:99:36:89:ed:16:4f:
                    87:4e:c9:d6:0a:f7:2c:9a:ec:5c:be:ce:d9:b1:58:
                    e4:5f:55:f9:c4:af:fc:f9:86:82:57:fe:98:cf:3c:
                    8b:f3:7a:66:66:cc:93:51:75:9b:38:fa:ab:b4:5e:
                    3c:09:b8:07:fd:b4:1c:38:77:15:02:3c:5c:e1:e7:
                    e1:14:43:ad:31:27:86:77:97:d5:f2:9b:07:53:38:
                    2d:ce:53:3b:2b:69:bf:ea:74:bb:61:f0:9f:1b:2a:
                    e1:32:d0:ec:62:a9:40:29:65:79:18:e0:17:c5:72:
                    66:af:8b:d5:14:fc:5e:a6:16:0f:04:b8:ba:33:6d:
                    74:86:76:d2:4c:48:1e:6e:d8:e6:b1:14:50:08:88:
                    63:a1:be:a9:61:87:01:e0:e2:75:43:74:e0:8a:bf:
                    4e:42:61:3a:7f:21:db:de:71:34:a5:2d:74:32:0a:
                    c6:8a:19:30:ac:eb:82:ed:c8:b2:42:b7:98:4a:af:
                    b6:ec:82:b2:c0:b5:27:ca:42:37:ec:b0:ef:f0:43:
                    d5:5f:d4:8d:11:cd:1e:fe:26:6d:ce:02:eb:df:c9:
                    d6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C5:AB:E6:DF:88:D5:DC:F1:20:0B:60:EB:B2:7E:1E:B1:7C:3E:BA
            X509v3 Authority Key Identifier:
                keyid:65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/A6B89DE0E23D11EC9FC43A18C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:69:36:b2:b8:7f:0d:b1:90:02:78:37:52:34:f1:8f:1a:13:
         17:67:bb:75:2c:88:95:b1:8f:a2:55:cb:cc:d0:11:e9:12:27:
         13:5b:da:d7:91:18:21:fb:3b:5e:b3:dd:ec:0d:4c:fb:89:fd:
         d8:4e:49:6a:8d:ff:35:7c:28:3d:3b:25:c0:8c:97:00:90:21:
         ae:24:a3:54:1f:4a:7b:b7:3c:7e:d3:ba:26:88:7c:ba:96:47:
         0b:38:82:e8:fb:f5:dc:0a:55:67:2a:7b:cb:c6:a6:2b:82:03:
         01:ab:41:a8:23:e7:90:e9:c8:f3:a9:4a:7b:c1:00:51:56:da:
         5b:88:a8:d6:bf:12:40:1a:d6:09:3e:6c:d2:f0:12:7b:91:ce:
         a3:11:8f:6a:71:5b:55:be:4e:d6:88:94:54:e8:46:d6:53:ef:
         0c:a7:82:97:cd:e1:26:a3:1a:88:ff:67:12:83:ff:e4:e6:3d:
         a4:86:76:79:79:a7:65:5f:b1:50:d1:28:71:92:9b:4f:9d:1d:
         22:87:b8:d5:2a:d8:6d:0f:a8:d4:0b:ed:aa:36:15:38:d5:f5:
         af:15:cd:6f:1a:14:2e:ff:8d:ac:bd:a2:c8:0e:ef:6d:8c:a0:
         20:47:af:ca:20:1e:52:78:4b:17:ee:75:54:66:97:b4:43:84:
         81:6b:c8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----