Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8749E320037411EEB6D5D751C4F9AE02.roa
File:                     8749E320037411EEB6D5D751C4F9AE02.roa (raw, json)
Hash identifier:          GcwFp6MdKfdqJzuR/jR2NHe89VRHKIjn7aCV66sK7zw=
Subject key identifier:   6C:53:FA:CC:F4:E8:CB:AE:AE:AC:5A:08:EF:2D:45:C6:AE:9D:89:F7
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       734C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8749E320037411EEB6D5D751C4F9AE02.roa
Signing time:             Mon 05 Jun 2023 07:42:32 +0000
ROA not before:           Mon 05 Jun 2023 07:42:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     140113
IP address blocks:        103.66.80.0/22 maxlen: 22
                          103.66.80.0/24 maxlen: 24
                          103.66.81.0/24 maxlen: 24
                          103.66.82.0/24 maxlen: 24
                          103.66.83.0/24 maxlen: 24
                          103.151.16.0/23 maxlen: 24
                          103.165.72.0/24 maxlen: 24
                          103.165.73.0/24 maxlen: 24
                          2400:3ce0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29516 (0x734c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jun  5 07:42:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=647d91e7-056d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:54:87:f0:01:8c:96:a5:36:cf:7e:75:a1:3e:
                    64:a4:d1:cf:bb:4c:f5:87:32:90:86:68:f4:11:eb:
                    3b:fd:93:a5:6a:16:c2:80:dd:ae:85:1c:11:8f:8f:
                    4c:cf:7f:cf:67:dd:d5:52:37:97:24:60:16:09:7c:
                    58:c4:74:e7:ef:a1:29:8e:5d:54:e6:e9:e4:9e:b7:
                    78:e5:4e:de:30:21:b0:55:2f:23:99:58:27:b5:de:
                    2b:85:e1:38:53:42:87:e0:53:3d:7d:e3:76:13:97:
                    72:15:51:5c:3a:35:41:ac:89:e0:1f:58:4c:30:94:
                    66:d6:67:f2:50:62:35:96:6e:bd:f7:03:d9:63:74:
                    af:f3:3a:d7:57:70:08:52:16:3f:46:21:32:2b:ca:
                    29:b7:49:7c:20:33:79:e2:0d:4e:ce:9c:17:4a:85:
                    74:d6:ad:0f:2a:03:b2:f9:b7:2d:52:63:ad:59:58:
                    d0:1c:0d:bf:35:00:75:08:bf:ca:36:12:2d:da:af:
                    ca:e3:56:76:53:91:26:ce:5e:c2:ee:f4:d2:f1:b6:
                    3c:cc:44:3f:3e:f0:79:06:2a:cf:f6:04:c1:b5:df:
                    77:f9:94:fb:4e:f0:55:69:38:67:38:2c:ee:5d:59:
                    6c:6b:4e:43:52:32:13:9b:9e:ab:78:cf:33:4c:3c:
                    7c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:53:FA:CC:F4:E8:CB:AE:AE:AC:5A:08:EF:2D:45:C6:AE:9D:89:F7
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8749E320037411EEB6D5D751C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.80.0/22
                  103.151.16.0/23
                  103.165.72.0/23
                IPv6:
                  2400:3ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:a2:fb:81:b6:61:2e:ae:8b:8e:c9:1d:5e:86:bb:f0:01:ca:
         78:7e:80:57:1e:07:1f:ae:c4:d5:64:35:2d:85:ef:71:5a:08:
         4e:76:3b:60:c9:88:44:25:68:8e:2d:a3:9a:21:4d:77:af:ef:
         35:6a:76:8d:fc:f6:ba:3e:38:6d:03:d9:1a:b7:73:55:75:77:
         f4:43:8c:c9:73:d2:a2:f0:be:e8:95:73:a7:8c:23:5f:25:9f:
         e7:68:26:b9:97:e2:ab:d2:38:41:f8:4b:be:86:f4:7d:7b:5d:
         b1:a6:2d:87:1c:50:12:12:88:5a:75:be:c8:e0:5a:f9:1f:a9:
         c0:dc:3d:a0:0f:3b:09:4a:68:28:ad:d9:11:b8:31:57:d5:e7:
         96:f3:6b:fb:04:e5:e8:e7:df:73:f1:6e:8f:f4:99:d9:18:07:
         b1:e7:f0:b3:83:f1:01:d3:2e:c1:a3:8e:ad:b9:93:52:c8:1d:
         8e:c8:bc:d8:50:a7:ed:a9:ae:ce:02:cb:e6:38:88:b9:3a:fb:
         63:22:e7:34:c9:60:3a:63:30:5b:eb:0c:9f:b1:28:52:2e:a3:
         ef:ea:83:25:2b:ec:05:cb:f6:17:f8:1c:26:32:29:0e:fd:a8:
         03:10:40:77:20:60:29:83:8f:af:9b:e0:84:44:cd:2b:10:ad:
         5a:ff:57:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----