Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/29850CC04BE111ECB8DF8372C4F9AE02.roa
File:                     29850CC04BE111ECB8DF8372C4F9AE02.roa (raw, json)
Hash identifier:          /MlWozX59AK7iV4RWYg3nj3JVcaF6jVuJkAIYfiLzZo=
Subject key identifier:   5F:87:CF:48:BB:F9:21:50:99:18:62:B3:C5:B9:7F:A9:D1:54:AC:8E
Certificate issuer:       /CN=A919710C/serialNumber=21F7CD0AA016843552987463E6422972EF039CE8
Certificate serial:       0317
Authority key identifier: 21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/29850CC04BE111ECB8DF8372C4F9AE02.roa
Signing time:             Sat 05 Aug 2023 01:42:48 +0000
ROA not before:           Sat 05 Aug 2023 01:42:48 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     140736
IP address blocks:        103.152.64.0/23 maxlen: 23
                          2406:2ac0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 791 (0x317)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919710C/serialNumber=21F7CD0AA016843552987463E6422972EF039CE8
        Validity
            Not Before: Aug  5 01:42:48 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64cda918-4351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:57:04:5b:86:2a:61:31:45:a4:2f:5d:1b:96:
                    c6:ea:2e:e6:be:8a:f3:da:5c:28:af:b9:87:ab:77:
                    f8:bf:9d:de:e0:02:2a:f5:55:80:50:d8:0c:0f:6e:
                    3f:d2:eb:39:ef:21:c8:81:6e:2a:bb:e3:c2:fb:09:
                    e9:4e:1b:02:4b:1f:20:dc:3b:02:a6:9f:0d:93:08:
                    4e:0e:96:eb:5b:d9:12:c3:70:04:93:47:c0:dd:c7:
                    c6:82:02:17:e3:91:74:23:49:55:f0:5a:2b:23:42:
                    6f:26:f0:16:ee:f1:fb:09:dd:5a:d3:fc:ed:aa:c0:
                    74:6b:df:c5:6d:d6:b7:36:52:32:46:31:d5:a0:33:
                    35:ae:32:62:01:15:9c:df:01:64:26:a1:34:a0:d5:
                    54:df:45:e5:b5:a1:a8:f6:84:62:b2:39:dd:e7:00:
                    24:53:77:eb:dc:4c:ae:9d:fc:71:ee:91:26:ee:a8:
                    7f:b1:59:91:42:0c:2c:b1:eb:09:8f:2c:c5:c1:f9:
                    85:aa:ac:ef:28:a8:4e:88:90:d7:3a:37:db:7a:89:
                    67:51:8c:d0:c3:79:d2:f5:9a:d2:e4:8e:e5:24:50:
                    81:31:b5:e3:ed:74:c0:ce:35:79:57:51:c8:0e:22:
                    c9:da:b8:7b:e6:ab:58:3d:f6:64:c9:61:9d:c2:a6:
                    b6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:87:CF:48:BB:F9:21:50:99:18:62:B3:C5:B9:7F:A9:D1:54:AC:8E
            X509v3 Authority Key Identifier:
                keyid:21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/29850CC04BE111ECB8DF8372C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.64.0/23
                IPv6:
                  2406:2ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:2e:72:e0:53:38:c0:e8:e9:34:76:ed:7a:52:68:bf:b3:2b:
         da:1b:0e:68:5f:38:4a:2c:e9:10:03:7a:23:16:75:c4:23:4f:
         88:47:80:dd:b8:3a:12:5f:57:f6:ee:92:25:39:36:60:6b:f0:
         58:83:95:2b:a4:b8:2b:0d:e6:6f:4a:df:f8:a0:f9:06:32:61:
         0f:67:9c:2d:ec:38:ae:ba:c5:62:1d:f3:f4:b6:22:dd:d6:08:
         6f:83:53:4b:2d:66:ef:c2:38:5d:e9:61:50:b7:8f:8f:02:55:
         eb:24:fd:a1:8c:40:ec:ef:e8:d3:7d:b1:21:8e:46:2b:a6:3c:
         49:2b:c8:3d:18:84:b0:16:7a:f8:f8:19:7f:19:08:16:48:cc:
         df:91:4e:17:d8:14:da:e6:e3:46:88:c1:29:d4:ad:4d:ef:78:
         30:74:aa:d5:95:f7:17:6d:cb:12:ae:73:1a:6a:34:a3:3e:09:
         e1:bc:10:73:d4:14:e3:d2:a6:99:17:d7:44:fe:bf:2c:45:4a:
         08:d2:b6:6a:73:10:2c:cd:b8:21:ad:ae:b5:aa:8c:5d:0d:2e:
         7d:8e:12:41:32:a0:a3:85:70:e4:10:96:95:41:e6:4d:b4:6e:
         98:58:98:45:b2:19:57:f6:a9:44:b9:d1:dc:e1:2c:28:4e:74:
         19:d1:06:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----