Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/553B161A9CC211EDBFEDAF76C4F9AE02.roa
File:                     553B161A9CC211EDBFEDAF76C4F9AE02.roa (raw, json)
Hash identifier:          v1Bwyt6uIK03aYwqHhM9dNh+scy2jZliLFDgePQ3VE4=
Subject key identifier:   A2:67:4A:F2:8C:C2:A7:24:15:46:18:59:F9:D0:B7:93:AB:FD:3F:9C
Certificate issuer:       /CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
Certificate serial:       05EE
Authority key identifier: 7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/553B161A9CC211EDBFEDAF76C4F9AE02.roa
Signing time:             Wed 25 Jan 2023 15:09:59 +0000
ROA not before:           Wed 25 Jan 2023 15:09:59 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     149502
IP address blocks:        103.238.130.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1518 (0x5ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6131/serialNumber=7B059CCC60BAAAFCF6F141216EFDD68E870C2551
        Validity
            Not Before: Jan 25 15:09:59 2023 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=63d14646-6593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e1:93:c9:a3:e4:88:97:9e:7f:07:ce:2e:86:
                    f2:e7:f0:23:19:02:68:7e:8a:aa:6a:01:37:14:4c:
                    81:38:6c:b3:3a:d6:2d:71:2a:d0:c5:55:a0:37:6f:
                    54:8d:aa:f9:d4:35:e4:15:42:20:14:0d:f7:5b:19:
                    43:8c:f2:0e:8c:01:a3:2d:43:1f:99:2f:be:e6:2f:
                    95:56:4b:3c:fa:cb:bd:0f:ba:cd:4f:1c:be:ac:2d:
                    f1:c1:f7:95:54:3b:93:e4:a3:08:87:e7:7b:cf:e1:
                    99:37:4a:a5:a2:a4:07:da:c6:71:6a:7f:5c:75:ca:
                    c4:18:36:1a:ad:7b:9e:62:30:eb:ab:77:2c:26:4b:
                    7b:69:0f:1f:7d:32:d1:d2:04:3c:de:61:8e:eb:e9:
                    69:d3:e9:c4:af:28:9b:b4:b6:08:eb:35:7d:4e:fe:
                    4f:38:c0:40:aa:6d:bf:72:70:42:69:d0:0d:8b:56:
                    9d:3c:e8:2f:f6:4b:ab:1c:ff:e8:ae:df:19:3b:95:
                    25:5c:4f:72:0e:d4:0f:6a:6f:99:dc:52:0a:1a:7d:
                    85:f0:67:55:b5:40:72:8e:a6:df:72:2c:9b:be:4a:
                    4e:98:70:5b:57:74:9e:82:07:0f:74:26:2a:ec:e2:
                    51:1f:be:2a:75:e7:6e:d3:6f:23:19:f2:c5:18:4a:
                    5a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:67:4A:F2:8C:C2:A7:24:15:46:18:59:F9:D0:B7:93:AB:FD:3F:9C
            X509v3 Authority Key Identifier:
                keyid:7B:05:9C:CC:60:BA:AA:FC:F6:F1:41:21:6E:FD:D6:8E:87:0C:25:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/ewWczGC6qvz28UEhbv3WjocMJVE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ewWczGC6qvz28UEhbv3WjocMJVE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6131/0FCB3D3828D611EB84E4C93BC4F9AE02/553B161A9CC211EDBFEDAF76C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:f9:17:2e:f5:04:d4:d1:d1:21:a5:9e:2d:96:0e:37:42:8a:
         14:ac:87:22:9c:e5:ec:f4:19:03:86:72:52:5f:bb:b5:44:ff:
         cf:3d:aa:43:cc:96:03:f0:0a:00:25:1e:cd:d7:8a:4e:22:0d:
         cd:ad:e7:09:2c:34:73:ce:d7:dd:82:ec:67:10:bd:56:56:8e:
         ad:eb:4a:29:4f:bb:41:35:64:48:aa:33:33:bb:69:53:44:15:
         9b:03:ff:af:22:e7:b2:0c:f7:ec:e8:77:3a:da:a2:75:0e:a3:
         ec:6a:e1:b4:98:dd:79:ec:2d:dc:2a:1f:8f:3b:3a:69:d8:53:
         aa:cc:3a:d8:f9:20:d7:49:64:d6:55:c6:92:f7:44:13:11:14:
         db:cb:c6:53:44:10:ca:81:b1:73:13:89:5b:b0:bb:dd:24:61:
         9f:20:47:ac:2c:81:f9:60:bf:a9:b0:59:e6:19:43:6a:37:e0:
         7a:74:d5:51:27:a3:2e:bd:18:0c:31:fe:f4:1c:3d:a7:a6:06:
         31:ab:44:33:fb:6f:10:5d:50:19:e8:69:76:0d:59:6f:4c:14:
         c0:3a:46:20:9f:7e:21:f1:8c:38:1b:3e:48:01:a4:09:ce:14:
         31:aa:77:e9:6a:3e:e6:a7:5f:2c:52:5c:44:01:81:2b:41:8e:
         8b:6f:8e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----