Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/4CB8094C6D7711ECAEA0361CC4F9AE02.roa
File:                     4CB8094C6D7711ECAEA0361CC4F9AE02.roa (raw, json)
Hash identifier:          nUWs2MynSBHBlh8+H3/e0So8Xna0f7+PrQfbluH0w4c=
Subject key identifier:   BB:7F:C1:C2:29:00:40:66:F2:63:8C:14:DD:D5:AA:4C:30:23:63:A9
Certificate issuer:       /CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Certificate serial:       054D
Authority key identifier: 7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/4CB8094C6D7711ECAEA0361CC4F9AE02.roa
Signing time:             Mon 22 Aug 2022 00:19:46 +0000
ROA not before:           Mon 22 Aug 2022 00:19:46 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     49999
IP address blocks:        103.238.131.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1357 (0x54d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
        Validity
            Not Before: Aug 22 00:19:46 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=6302cba1-480f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2d:1e:ac:f9:12:a8:01:4d:3a:78:c8:00:ad:
                    dc:76:dd:f7:52:09:45:7f:da:fb:85:94:36:51:ef:
                    da:fe:50:c2:e7:8e:6d:e4:db:d4:51:4e:c2:0f:f1:
                    80:e7:90:45:1c:66:60:89:96:0a:40:fe:8e:62:00:
                    d1:1a:13:25:88:2f:43:fd:6b:45:cf:57:4f:ca:35:
                    1c:13:99:c0:fc:08:10:0a:e9:bd:89:5d:f6:d0:d0:
                    da:30:45:35:41:35:f3:4c:f9:64:f2:77:93:96:98:
                    78:7f:c2:58:b9:44:c7:00:d4:d8:b1:e0:91:ed:14:
                    30:2f:6c:7a:27:5d:a1:af:30:39:8e:11:52:7d:41:
                    20:0d:81:23:8f:0a:97:63:6b:2c:c4:44:01:71:bb:
                    d4:25:c5:02:76:d7:ca:ac:87:11:1b:fd:bf:e1:3f:
                    9c:7e:e9:0d:d0:95:ef:7a:cd:f2:f4:22:cb:91:0c:
                    6f:65:d3:ca:68:04:c6:4c:0a:da:3a:d8:f2:6c:74:
                    a1:c2:11:5d:e9:e5:1f:3f:21:0c:04:6c:8c:6b:f8:
                    07:63:77:c0:05:a6:8f:ea:1b:71:1f:97:cb:a2:34:
                    50:fa:d5:95:b7:1a:a2:29:ff:ee:e6:9c:6e:c8:f7:
                    60:91:b0:3a:cf:3a:69:21:c5:a0:70:1a:45:5f:7b:
                    5f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7F:C1:C2:29:00:40:66:F2:63:8C:14:DD:D5:AA:4C:30:23:63:A9
            X509v3 Authority Key Identifier:
                keyid:7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/ewWczGC6qvz28UEhbv3WjocMJVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/4CB8094C6D7711ECAEA0361CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:9a:a5:c2:3d:a1:34:5b:5f:7b:4b:49:36:92:97:66:85:3f:
         4d:b3:fa:d5:26:72:48:cb:23:ee:f0:11:5d:52:03:2a:ae:88:
         40:14:e9:34:42:de:f8:c3:00:3b:a0:7f:2f:ac:94:a9:7c:da:
         33:fa:19:c1:61:92:e0:46:28:1b:bf:1a:dc:00:58:25:4b:5a:
         e2:fb:6b:9f:a3:f9:14:13:b8:ff:ce:51:65:b9:47:df:5c:aa:
         54:ef:1b:56:7d:7c:c3:48:5a:63:64:0a:5c:76:8e:74:2a:6e:
         fc:b3:d7:79:0b:41:67:8d:d2:c2:bd:67:b8:95:68:e7:72:d7:
         01:06:bb:24:dd:c5:c7:1b:3a:d8:c1:35:dc:a9:13:58:a2:0e:
         a9:90:3a:cc:57:8c:6d:13:8f:62:5a:91:65:e9:73:28:21:42:
         df:1b:13:76:70:b8:7f:37:ca:d1:30:c1:4e:57:fa:17:9a:62:
         d3:9e:1f:9e:70:75:82:32:e3:1d:e6:e6:83:33:c2:06:bd:af:
         3c:73:b1:13:38:a1:f0:b6:8e:75:d9:9b:34:6f:e6:26:c0:b0:
         8b:f7:0e:cd:e0:0d:e8:e7:5d:d1:6f:7e:06:04:85:ee:63:a8:
         6e:65:62:67:2f:c9:e6:0c:1b:ff:a5:6e:cd:2b:9d:f9:35:0e:
         31:4c:6b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----