Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/7C599DC04D4811EE9384772CC4F9AE02.roa
File:                     7C599DC04D4811EE9384772CC4F9AE02.roa (raw, json)
Hash identifier:          CUvZYAmfF9DzaOKiyA6gdtYnSltDJeUSriSbbND8Rok=
Subject key identifier:   32:09:55:1F:8D:F6:F4:7E:CA:E9:06:EB:0F:98:C6:40:52:5C:F6:E2
Certificate issuer:       /CN=A918C5C8/serialNumber=AB8A751417FF67FC9948E3D427B84DD6593E9183
Certificate serial:       03F8
Authority key identifier: AB:8A:75:14:17:FF:67:FC:99:48:E3:D4:27:B8:4D:D6:59:3E:91:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/7C599DC04D4811EE9384772CC4F9AE02.roa
Signing time:             Thu 07 Sep 2023 06:33:41 +0000
ROA not before:           Thu 07 Sep 2023 06:33:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     24499
IP address blocks:        103.149.240.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1016 (0x3f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C5C8/serialNumber=AB8A751417FF67FC9948E3D427B84DD6593E9183
        Validity
            Not Before: Sep  7 06:33:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=64f96ec5-c330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d4:ee:5b:1e:5d:dc:6b:f8:3a:c8:a4:a5:41:
                    0b:dc:8f:f8:91:0a:03:38:85:3e:67:e5:56:22:bf:
                    0e:6f:d5:a1:14:57:6c:b8:0c:04:ff:f3:10:80:dc:
                    40:ae:a4:f0:2a:3e:97:70:3f:8b:5d:93:2e:4b:b4:
                    f3:98:b7:b8:3a:b1:09:dd:85:44:d2:23:a4:ec:4a:
                    bb:76:49:cf:8e:54:36:2c:af:bb:a3:ed:f4:b6:2b:
                    58:2c:f5:3e:97:d4:c8:7d:c5:39:60:d9:14:29:15:
                    ad:5c:74:01:17:96:6e:08:e2:6d:eb:e9:f3:ad:97:
                    5a:32:73:f6:fa:2b:e8:59:0c:cd:9c:00:f4:b8:33:
                    72:92:93:34:c3:9b:2d:7a:af:fe:fc:cc:df:7b:77:
                    c7:3e:b2:e9:90:0e:f6:11:98:df:cc:d7:f9:39:13:
                    35:f9:26:cd:68:a1:3a:48:cb:06:5f:8b:c4:ab:6c:
                    77:43:7d:85:51:6b:c6:83:ff:e0:cb:18:72:71:53:
                    20:df:56:46:09:0e:67:d2:e1:59:89:1d:49:b7:8d:
                    0f:f4:3d:4a:eb:24:65:fc:f1:bd:9a:07:a3:22:d4:
                    36:a4:ae:03:41:13:e1:19:84:bf:17:d2:09:37:62:
                    49:f4:2c:14:b8:c2:51:cb:87:bd:8c:61:dd:26:24:
                    58:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:09:55:1F:8D:F6:F4:7E:CA:E9:06:EB:0F:98:C6:40:52:5C:F6:E2
            X509v3 Authority Key Identifier:
                keyid:AB:8A:75:14:17:FF:67:FC:99:48:E3:D4:27:B8:4D:D6:59:3E:91:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4p1FBf_Z_yZSOPUJ7hN1lk-kYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C5C8/3DEF45CEF5E511EBAE946437C4F9AE02/7C599DC04D4811EE9384772CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:1a:70:e6:37:9b:69:66:ac:53:ec:54:e2:e3:0e:22:72:81:
         66:42:52:1f:2f:3c:c3:b9:a8:9b:de:d9:ee:15:28:b4:f6:6d:
         5d:ca:ce:04:dc:43:04:f3:1f:1e:c8:fc:99:26:e6:bf:2f:42:
         0d:5a:5d:d4:81:d7:b6:fe:b2:7d:fb:73:c2:4d:e8:f7:6e:ba:
         93:8f:49:a1:38:39:56:0a:6e:1f:e1:77:71:f2:01:26:8d:28:
         6e:f3:41:6e:88:f6:3c:66:fc:4e:73:37:e0:e8:a5:a3:db:2d:
         d5:42:26:d7:88:9d:b9:75:04:67:bf:c1:14:8a:54:d2:15:f0:
         ed:e5:72:cb:3e:4a:ec:80:02:75:28:2e:30:66:51:11:6d:dc:
         1a:80:9a:3d:42:5c:37:31:75:99:8c:0b:a7:39:88:e2:b8:fb:
         67:14:3c:8b:09:7c:ce:95:e1:8e:70:49:3c:4c:fd:42:88:95:
         0a:21:ef:7d:38:04:18:49:e8:ab:23:4b:d9:22:e4:ca:f9:8d:
         f4:d0:97:cd:e2:6e:11:12:31:ab:48:a4:a9:ae:8e:5a:9b:ca:
         a9:d8:28:5e:7d:3e:e9:ca:fd:d5:e6:47:b7:66:bf:6f:3a:9e:
         7f:ed:22:ef:34:d2:81:1e:82:be:99:09:61:d1:31:49:39:6c:
         16:5e:fe:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----