Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AE28ED8A846911EE8E14281EC4F9AE02.roa
File:                     AE28ED8A846911EE8E14281EC4F9AE02.roa (raw, json)
Hash identifier:          tryorCO4z/u+BJIrG9prDCFJy/fG0j9tEfYSZeqhQBI=
Subject key identifier:   A1:98:97:19:BC:F9:70:A9:65:90:B3:60:75:9C:EC:F6:41:E7:9A:3A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       7DD9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AE28ED8A846911EE8E14281EC4F9AE02.roa
Signing time:             Thu 16 Nov 2023 10:19:53 +0000
ROA not before:           Thu 16 Nov 2023 10:19:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     147259
IP address blocks:        103.101.56.0/23 maxlen: 24
                          103.101.59.0/24 maxlen: 24
                          103.177.66.0/23 maxlen: 24
                          2001:df1:76c0::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32217 (0x7dd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Nov 16 10:19:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6555ecc8-ff63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:88:bb:c5:f9:1a:3a:f4:4a:00:ec:a2:b7:2c:
                    11:2f:3f:4f:2b:32:63:71:81:58:c4:5b:67:ea:0c:
                    4b:9e:5a:bc:b3:c2:ee:9f:dd:d7:67:7e:05:cc:87:
                    e1:7c:9d:a2:c8:4d:e0:e8:31:83:8d:f0:f1:07:32:
                    48:56:63:1d:d1:0a:90:e6:c4:cf:f9:df:86:21:82:
                    86:bc:5d:f0:30:75:9a:99:17:b8:5d:41:2c:c1:59:
                    f6:b0:01:f2:84:27:eb:93:9f:c9:7c:38:ec:96:1f:
                    33:13:72:65:de:5c:25:ac:32:f5:5e:86:a8:24:8c:
                    9a:28:4a:8f:a5:48:cd:4c:39:c9:5f:89:df:94:c4:
                    99:47:27:e6:b3:2e:57:e2:4e:34:ab:78:09:a9:af:
                    63:47:ce:66:2b:6b:38:0d:5a:67:e0:1e:40:3c:14:
                    01:5e:78:33:03:a9:09:54:9b:2c:f8:c4:97:64:b8:
                    0b:56:1a:e2:da:bc:6e:7c:56:69:01:04:ce:f2:62:
                    a9:55:19:5a:8a:28:42:74:cb:4a:50:91:73:6d:ad:
                    ec:ab:e8:d4:25:43:9d:28:c9:75:81:45:14:78:a4:
                    4e:95:05:4c:04:88:ec:d5:de:02:93:60:22:f2:53:
                    f2:f7:a9:ea:79:d5:a9:68:3f:79:63:72:34:76:75:
                    4f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:98:97:19:BC:F9:70:A9:65:90:B3:60:75:9C:EC:F6:41:E7:9A:3A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AE28ED8A846911EE8E14281EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.56.0/23
                  103.101.59.0/24
                  103.177.66.0/23
                IPv6:
                  2001:df1:76c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:c0:8a:aa:35:c7:c1:90:2f:f4:2b:39:f7:88:e4:2b:05:e9:
         58:1c:75:a0:17:63:72:a1:76:74:35:e7:4f:43:f6:79:bb:5d:
         83:6f:df:0e:a3:92:ad:b0:d8:49:b9:d6:1b:b0:eb:48:4f:1b:
         06:58:0f:07:6a:4b:1b:62:62:68:e0:00:b8:c4:a3:f9:8d:58:
         c1:75:b6:71:26:9c:47:ab:0e:eb:47:11:6b:21:c3:64:43:a5:
         b9:49:2e:8d:76:81:4c:27:f4:87:d3:db:52:89:68:11:78:41:
         18:f7:49:e0:81:c4:44:3b:e7:e0:7d:c6:97:d7:8e:0f:c4:35:
         4b:a4:94:d7:47:bc:6b:7a:ff:aa:20:67:9b:b1:a6:44:fb:19:
         89:cd:0d:c9:c5:be:6e:a5:41:29:a7:63:6c:f1:81:9b:c5:36:
         19:4e:f1:ad:e5:7a:40:74:bb:c6:84:c7:82:c4:73:3f:73:23:
         f6:f4:89:22:88:10:24:13:ae:8a:ca:2f:ca:c4:de:54:ee:35:
         d4:ff:da:88:bc:ea:4e:d1:9e:1a:aa:d3:22:8c:c9:51:bf:a8:
         a8:10:16:c7:f7:2a:99:bb:57:fe:0b:af:c3:53:8d:57:ac:b6:
         50:2b:0a:a6:54:1b:e6:0a:7f:f3:25:61:c4:9f:e4:67:d7:63:
         b5:5f:24:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----