Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/F8826724353911EDB23BDC48C4F9AE02.roa
File:                     F8826724353911EDB23BDC48C4F9AE02.roa (raw, json)
Hash identifier:          cf34Xis/he6P3KxZbi0M9XNtpAQgdducvZvrvFCt8uE=
Subject key identifier:   05:C0:2E:A1:24:3A:2A:C2:22:49:BC:B5:4E:3E:F6:F3:69:3D:F6:DD
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       010E
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/F8826724353911EDB23BDC48C4F9AE02.roa
Signing time:             Thu 15 Sep 2022 21:04:22 +0000
ROA not before:           Thu 15 Sep 2022 21:04:22 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     49999
IP address blocks:        203.32.41.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 270 (0x10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Sep 15 21:04:22 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=63239356-ef52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cc:d9:16:91:a4:b7:a7:b2:e1:06:82:b4:d0:
                    43:42:82:21:8c:a8:d7:cd:41:2b:22:22:ae:67:b0:
                    d5:b1:17:b3:dc:c2:48:1e:b1:95:31:2b:61:e1:5c:
                    77:fc:3d:4d:b1:c0:0b:8a:8f:b6:95:86:c0:15:29:
                    e0:d0:19:33:0f:01:1f:ee:8e:dc:d5:6f:fd:6a:66:
                    e4:7d:f8:e3:64:89:2d:a4:84:66:2f:bc:d0:06:16:
                    92:d5:bc:17:1b:30:ae:38:07:e5:3c:6f:8f:d6:9e:
                    8c:26:eb:22:8f:a5:c7:02:55:c0:f5:eb:e8:c0:4a:
                    0f:eb:d9:dd:6c:e1:25:c1:dc:fa:65:2e:7e:6b:4e:
                    a5:30:be:20:dc:d3:30:80:0d:49:50:cd:b0:90:c4:
                    c8:62:73:5c:5f:f9:11:37:7c:53:6f:05:8f:28:87:
                    09:76:5d:41:9e:ac:f3:2c:87:a7:f6:ca:38:bb:77:
                    a5:f6:61:93:06:9f:07:b1:7e:67:7b:29:f1:ea:01:
                    9c:bb:df:18:cf:a8:60:65:de:53:97:d6:47:14:78:
                    45:7d:23:38:c1:86:f5:15:b0:3d:cd:d4:f2:92:5a:
                    79:4f:c0:d0:71:53:e1:54:e7:86:e4:0f:b5:c2:43:
                    f1:92:75:21:61:9c:b9:da:a6:b4:af:52:4a:08:ee:
                    9f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C0:2E:A1:24:3A:2A:C2:22:49:BC:B5:4E:3E:F6:F3:69:3D:F6:DD
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/F8826724353911EDB23BDC48C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.32.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:f9:3b:7e:00:2d:c4:d5:12:55:68:4b:12:3f:1f:3a:ba:99:
         ca:a7:bc:1c:8d:d1:ee:d8:e4:0d:07:a0:a4:3c:de:1b:ff:ee:
         f3:f0:0f:a2:f1:3e:6f:02:51:bd:a3:f0:87:98:ae:db:5f:c7:
         e0:a9:66:dc:60:1b:64:1c:0b:97:42:5f:8b:04:e4:95:b5:0d:
         f8:e9:6a:6d:a5:1b:ae:e9:ac:9c:77:51:67:7e:27:eb:36:48:
         0c:f4:dd:9d:4f:7d:8c:55:85:f8:29:c4:cb:2a:64:f1:c4:96:
         fb:4e:4a:ca:6d:a4:92:41:da:ef:6a:15:f5:44:d3:c6:1c:82:
         78:da:1a:70:ae:b4:0b:d1:0e:1a:4c:56:6d:93:b2:de:aa:b9:
         86:bf:46:c8:44:e7:49:56:5b:6a:24:ef:23:19:0d:fe:ae:3f:
         ad:2b:6b:92:b2:15:c2:d8:3e:68:a7:40:ea:ad:57:9d:b6:c4:
         c1:f5:5d:23:55:5e:f1:ac:03:32:66:0b:02:c5:1a:5c:27:cd:
         ee:58:2a:c4:cc:f1:1a:44:b2:c5:32:56:da:77:f1:ae:44:7e:
         d5:73:b0:70:af:f4:5c:0f:3a:34:d7:e6:81:6f:b6:ac:36:71:
         bb:ae:c8:0e:d4:e1:4f:41:a3:03:26:ef:1c:e8:1e:c2:07:69:
         d5:bb:bd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----