Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/41EF64FCE6C211EA84150B55C4F9AE02.roa
File:                     41EF64FCE6C211EA84150B55C4F9AE02.roa (raw, json)
Hash identifier:          2CHtaBTy7iEtiubX/ssjEHsa+010ftESsXsmCfI0Tws=
Subject key identifier:   E4:5D:3D:58:42:2E:44:88:A5:85:60:0B:20:80:61:8F:D1:5A:29:A0
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6B44
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/41EF64FCE6C211EA84150B55C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:18:50 +0000
ROA not before:           Wed 10 May 2023 16:18:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     134858
IP address blocks:        103.39.116.0/22 maxlen: 24
                          103.80.22.0/23 maxlen: 24
                          103.105.96.0/23 maxlen: 24
                          103.127.224.0/22 maxlen: 24
                          103.148.8.0/23 maxlen: 24
                          103.158.239.0/24 maxlen: 24
                          2407:8c0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27460 (0x6b44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:18:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc3ea-0121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:2b:06:0a:1b:77:61:4e:c1:f1:4a:5b:9e:
                    62:22:03:bf:e7:cc:e2:8e:42:f1:27:d4:0d:1e:f9:
                    7c:d1:68:6b:00:3f:b5:86:54:e0:47:93:0f:28:85:
                    00:b9:af:36:25:21:32:3a:89:fa:fb:4c:ed:b6:94:
                    53:00:77:35:14:48:b4:10:b8:14:66:62:da:88:cf:
                    6d:73:b7:7b:a8:8f:72:c7:8b:ff:f1:78:dc:16:76:
                    aa:bc:e8:5a:bc:a7:03:b1:bd:b3:bb:a9:31:d4:00:
                    e4:c9:b5:af:ee:48:63:3a:c2:81:30:f6:18:96:56:
                    b7:f0:09:c5:9f:f2:ae:16:14:a4:23:9d:d1:b3:d3:
                    28:28:36:f2:2f:d8:00:34:9e:70:83:3a:d4:c8:03:
                    9b:79:b1:7a:02:45:9b:6a:21:ff:52:d7:2d:9b:63:
                    f2:c1:e3:d0:c3:ee:ed:0a:bc:13:6c:98:80:48:03:
                    6e:a6:10:d2:4d:fb:65:12:d9:03:c2:31:8d:23:72:
                    0a:8d:54:0a:dc:aa:c2:7a:84:1b:aa:0f:3d:82:49:
                    25:53:dd:f2:3b:d8:5e:7f:06:68:d9:27:8c:4e:04:
                    b1:09:fe:56:c5:a6:87:86:ad:0f:57:0f:28:03:8c:
                    eb:e5:e3:4b:ca:0d:ff:a2:6c:77:e7:06:75:f3:cc:
                    d5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5D:3D:58:42:2E:44:88:A5:85:60:0B:20:80:61:8F:D1:5A:29:A0
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/41EF64FCE6C211EA84150B55C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.116.0/22
                  103.80.22.0/23
                  103.105.96.0/23
                  103.127.224.0/22
                  103.148.8.0/23
                  103.158.239.0/24
                IPv6:
                  2407:8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:46:84:31:2a:93:81:6c:d2:ae:15:c3:9b:ae:d5:b5:a7:b5:
         37:b7:55:99:ea:02:38:66:a5:1b:cf:1d:0a:9d:46:b8:3f:4b:
         1b:5a:2a:0a:99:d9:a2:36:5c:75:8f:cc:28:04:69:1c:c7:21:
         47:b8:20:ec:aa:5b:51:b5:7e:cb:6a:94:ee:2e:30:99:be:b5:
         50:01:15:9c:b4:2f:da:44:38:20:99:05:09:4a:ee:d6:47:0e:
         05:58:12:7c:57:d9:70:cf:e7:1a:03:76:44:c7:42:f4:fd:01:
         b5:10:66:fb:27:5d:3d:06:17:dc:0d:9c:47:db:dc:db:dd:7f:
         83:7c:a5:85:68:af:ac:1b:f9:18:66:fd:c6:1a:d0:ee:17:a2:
         70:79:06:2f:18:a3:05:7f:4d:ea:88:dd:de:fc:98:af:54:0c:
         ab:88:8c:65:af:88:aa:cf:67:00:24:ce:38:03:e8:4c:68:a5:
         cb:d1:44:74:6b:dd:8d:44:36:52:70:e4:17:15:48:b4:90:96:
         3a:ec:9f:b5:fe:e2:d5:d9:c7:2b:12:73:fe:46:39:00:3a:40:
         03:91:cf:0c:b0:69:d4:02:40:b4:a9:76:ee:19:0b:8d:cd:3d:
         c3:dd:d7:cf:bc:6f:1b:e1:5e:7a:f6:8e:9a:f1:5d:9e:45:58:
         91:23:05:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----