Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/11D151C8BDE011EAAEA46554C4F9AE02.roa
File:                     11D151C8BDE011EAAEA46554C4F9AE02.roa (raw, json)
Hash identifier:          9UdrVDUcikiYJefCuW52Ym812LGShb7MJk6Bo/eSxQo=
Subject key identifier:   E6:94:49:DE:44:63:A4:56:4A:A2:3E:74:3E:40:EF:2C:05:BE:16:7D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6DAB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/11D151C8BDE011EAAEA46554C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:30:29 +0000
ROA not before:           Wed 10 May 2023 16:30:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     138760
IP address blocks:        103.103.92.0/24 maxlen: 24
                          103.103.93.0/24 maxlen: 24
                          103.103.94.0/24 maxlen: 24
                          103.103.95.0/24 maxlen: 24
                          103.139.66.0/23 maxlen: 24
                          103.164.26.0/24 maxlen: 24
                          103.164.27.0/24 maxlen: 24
                          2001:df1:a780::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28075 (0x6dab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:30:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc6a4-1298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:51:b2:28:17:9d:8d:56:d1:63:69:b7:5f:c4:
                    45:c5:1a:7e:33:5e:dc:8c:af:71:f7:58:0d:78:00:
                    0e:c3:18:36:4f:d3:a0:0f:8c:80:62:7f:44:a0:39:
                    fa:77:3e:70:f8:b6:75:de:36:83:7a:85:ab:d2:c7:
                    c0:cf:52:62:e6:31:0a:ea:9a:5b:91:ca:4d:58:71:
                    00:b0:54:25:e9:71:c6:ec:dc:4d:77:9a:ea:3d:18:
                    84:f2:bb:02:ae:3f:e9:5b:5a:c8:8b:5d:40:61:d2:
                    21:e8:da:9b:28:0b:fa:48:73:fb:8f:62:60:f5:55:
                    c1:3e:93:ac:83:4a:db:23:e0:45:13:9b:83:bb:e5:
                    48:16:28:68:fb:61:7a:87:c0:0e:a8:c2:8b:a0:b3:
                    cd:9f:bd:fe:ea:fc:8b:b9:7b:45:47:5e:87:43:e0:
                    42:4f:4d:59:6f:52:c3:68:58:f8:e2:6a:71:45:36:
                    af:02:38:dc:aa:29:f6:3e:28:02:6c:a7:d4:21:9c:
                    f2:63:17:eb:13:3b:4e:9e:bf:cb:c4:b9:74:41:7d:
                    bb:7b:90:2c:64:56:01:ae:55:48:f9:03:96:44:57:
                    8e:7a:bc:34:ff:91:d9:46:ce:a5:b1:a5:84:78:9e:
                    27:08:1b:64:64:aa:f3:51:de:88:85:ad:d0:1b:42:
                    4c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:94:49:DE:44:63:A4:56:4A:A2:3E:74:3E:40:EF:2C:05:BE:16:7D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/11D151C8BDE011EAAEA46554C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.92.0/22
                  103.139.66.0/23
                  103.164.26.0/23
                IPv6:
                  2001:df1:a780::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:88:fd:75:b4:9d:be:05:08:55:fa:4e:59:ce:92:9d:6f:71:
         82:d3:17:ed:f4:3a:4b:1e:29:f6:40:da:89:2c:6b:f3:0a:b9:
         18:12:0b:0b:90:1c:31:9c:64:25:4a:4f:12:59:5c:2a:71:83:
         b8:b1:9d:f0:3f:68:8f:15:a6:c6:06:5c:56:07:25:92:cc:42:
         0c:3a:cc:d3:ad:5c:e3:85:4b:3a:14:90:61:ef:01:9c:25:22:
         9d:03:f9:b5:7f:81:c6:ee:f1:36:88:29:07:83:a3:a0:7a:10:
         d2:04:74:01:2c:f6:04:dd:63:f2:b2:8c:c1:af:da:00:a5:17:
         1d:53:6c:a7:af:7e:b4:94:07:81:65:2e:4e:af:2e:09:c6:05:
         46:d1:e1:86:15:3c:34:d2:a3:17:cb:d6:f8:3c:b5:63:75:1e:
         aa:a3:f8:a9:d8:ff:89:dd:b1:9a:59:92:cb:49:81:4d:2c:dd:
         6b:af:85:e5:c6:90:01:65:ef:7a:2e:3b:d2:f4:22:bb:04:3a:
         2d:be:81:1a:4a:30:8b:29:6e:ec:0e:11:a3:20:ff:10:6f:88:
         4a:8b:6f:b4:49:84:8e:f1:48:97:5a:1f:ed:f0:3c:6d:08:98:
         9f:a8:0d:7b:75:d3:bb:71:c9:8c:b0:a5:49:56:ba:2f:d8:5f:
         48:61:84:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----