Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8DA2E1C84CEA11ECAE6AB280C4F9AE02.roa
File:                     8DA2E1C84CEA11ECAE6AB280C4F9AE02.roa (raw, json)
Hash identifier:          kVAql627ZQDu1xt2NwG+RloIqvMESxQoovNrOpV4vYc=
Subject key identifier:   F9:A6:C9:17:84:93:A2:CD:BA:09:BA:B5:AD:2E:43:86:45:76:B3:C8
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       6EDF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8DA2E1C84CEA11ECAE6AB280C4F9AE02.roa
Signing time:             Wed 10 May 2023 16:36:06 +0000
ROA not before:           Wed 10 May 2023 16:36:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     141550
IP address blocks:        103.163.130.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28383 (0x6edf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 10 16:36:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=645bc7f5-95d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d7:bb:7e:f5:ab:d9:07:b5:92:ef:13:69:50:
                    7a:ac:68:d6:16:ca:95:70:7d:57:18:07:25:16:ea:
                    62:c4:a1:15:bb:ca:a8:cc:44:8d:46:da:8f:6e:c7:
                    45:34:bc:2c:e8:66:dc:4d:64:e9:e9:70:7e:1d:23:
                    e7:60:91:0f:1e:1e:73:cc:67:7d:c0:6a:67:a3:ac:
                    1a:80:be:39:06:e9:98:ec:44:27:4d:ed:9e:9d:76:
                    a1:31:e5:b8:e1:b4:2e:71:b0:e8:61:56:70:91:18:
                    b3:a6:7c:b1:fb:40:2f:71:98:e8:98:95:23:1b:09:
                    f4:33:62:70:e2:46:a1:3f:89:1a:e3:c7:82:19:9b:
                    e8:4e:f3:a1:07:f0:c7:68:2b:e5:2b:44:a3:3a:7a:
                    42:e4:4a:dc:18:c1:fd:f0:70:b7:05:b2:38:a2:81:
                    ea:1c:62:14:89:85:35:c8:22:8a:1f:d4:49:20:d4:
                    09:4e:b0:b7:26:fb:96:77:f2:82:2b:14:b2:29:e6:
                    0a:e9:59:f5:c9:49:1f:1a:de:63:87:78:d6:22:92:
                    5a:5a:a0:62:25:60:4b:6d:73:42:ec:e9:7c:4f:59:
                    09:00:d5:8a:ae:01:33:0b:5e:2a:51:92:a9:a0:e7:
                    8c:c2:e7:ee:eb:47:68:4e:12:52:d6:ef:21:ad:d8:
                    f9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A6:C9:17:84:93:A2:CD:BA:09:BA:B5:AD:2E:43:86:45:76:B3:C8
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8DA2E1C84CEA11ECAE6AB280C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:35:9b:59:50:12:b8:dd:ac:f3:e5:6a:bf:eb:12:95:06:08:
         d2:17:e2:f4:65:64:4c:30:d4:5c:4c:f1:8a:8d:34:23:a9:e6:
         03:97:97:09:92:5d:74:e3:16:62:b0:55:31:b4:13:6c:e4:c8:
         8a:2b:7a:38:b9:14:c3:a7:ab:c5:48:7e:39:5e:1d:53:ef:7b:
         f0:03:70:da:0d:e1:94:e2:18:23:9c:35:b3:83:7c:8a:e8:1f:
         d1:3e:4a:df:9d:dc:b1:0b:7f:64:76:f2:41:da:df:f9:0e:6b:
         0e:1a:db:ff:32:da:56:a9:37:12:02:bf:da:ea:e1:11:8e:06:
         29:92:d1:a9:66:b9:9b:81:b2:35:f9:1c:76:96:a1:78:df:a1:
         e3:86:48:d4:0f:30:90:cb:4f:3f:23:98:2c:ac:15:aa:6b:b3:
         7c:00:6b:36:fc:a2:ed:6a:76:31:4b:a0:8f:d4:2d:8b:d5:9c:
         f4:c4:b3:c7:fd:80:c9:b9:08:f8:ad:2a:e0:32:e3:d7:2b:5d:
         05:0e:09:f8:40:70:98:59:93:02:98:77:7b:e8:97:6a:fb:b9:
         a3:a1:82:03:fe:6e:33:6a:13:53:c6:3e:96:fc:0b:cb:31:b4:
         7d:af:8c:fd:8c:13:c4:16:bd:fc:e4:5b:6b:b1:e5:3d:87:6f:
         60:5c:1a:ce
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICbt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTEwMTYzNjA2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDViYzdmNS05NWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwte7fvWr2Qe1ku8TaVB6rGjWFsqVcH1XGAclFupixKEVu8qozESNRtqPbsdF
NLws6GbcTWTp6XB+HSPnYJEPHh5zzGd9wGpno6wagL45BumY7EQnTe2enXahMeW4
4bQucbDoYVZwkRizpnyx+0AvcZjomJUjGwn0M2Jw4kahP4ka48eCGZvoTvOhB/DH
aCvlK0SjOnpC5ErcGMH98HC3BbI4ooHqHGIUiYU1yCKKH9RJINQJTrC3JvuWd/KC
KxSyKeYK6Vn1yUkfGt5jh3jWIpJaWqBiJWBLbXNC7Ol8T1kJANWKrgEzC14qUZKp
oOeMwufu60doThJS1u8hrdj5TQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPmmyReE
k6LNugm6ta0uQ4ZFdrPIMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOERBMkUxQzg0
Q0VBMTFFQ0FFNkFCMjgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFno4IwDQYJKoZIhvcNAQELBQADggEBAA01m1lQErjdrPPl
ar/rEpUGCNIX4vRlZEww1FxM8YqNNCOp5gOXlwmSXXTjFmKwVTG0E2zkyIoreji5
FMOnq8VIfjleHVPve/ADcNoN4ZTiGCOcNbODfIroH9E+St+d3LELf2R28kHa3/kO
aw4a2/8y2lapNxICv9rq4RGOBimS0almuZuBsjX5HHaWoXjfoeOGSNQPMJDLTz8j
mCysFaprs3wAazb8ou1qdjFLoI/ULYvVnPTEs8f9gMm5CPitKuAy49crXQUOCfhA
cJhZkwKYd3vol2r7uaOhggP+bjNqE1PGPpb8C8sxtH2vjP2ME8QWvfzkW2ux5T2H
b2BcGs4=
-----END CERTIFICATE-----