Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/833EE3D6F93611EDA923691DC4F9AE02.roa
File:                     833EE3D6F93611EDA923691DC4F9AE02.roa (raw, json)
Hash identifier:          JL9idFeGb5rDCs0QsGStskJOpi4n4Hj4aUfe5qM9WAI=
Subject key identifier:   7F:3D:E7:B1:E8:B3:8E:A0:13:5B:34:FE:9F:C9:89:53:1B:C1:02:D6
Certificate issuer:       /CN=A91A6353/serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09
Certificate serial:       04F2
Authority key identifier: AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/833EE3D6F93611EDA923691DC4F9AE02.roa
Signing time:             Tue 23 May 2023 06:53:25 +0000
ROA not before:           Tue 23 May 2023 06:53:25 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     18013
IP address blocks:        103.151.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1266 (0x4f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6353/serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09
        Validity
            Not Before: May 23 06:53:25 2023 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=646c62e4-02bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3f:5e:b2:0d:20:6d:4f:b3:cb:cd:4c:7e:6b:
                    1d:7b:58:e1:66:81:04:ad:03:9d:cd:32:83:ed:46:
                    c1:48:03:16:9c:80:9d:60:a7:06:69:5b:28:a1:24:
                    db:6e:0d:9c:74:a9:10:82:1e:2e:6b:d5:79:58:da:
                    7a:83:e9:6b:da:1d:2d:28:47:ff:68:d0:2b:db:ab:
                    44:09:ab:19:90:c3:d1:1b:14:17:41:db:13:49:cb:
                    ef:6d:17:2a:d6:c4:a3:ed:d3:1c:56:f6:3e:6c:b3:
                    8b:58:e8:45:bc:f2:eb:82:56:5a:fd:56:4d:c9:9c:
                    f0:8b:70:43:32:e5:69:70:41:1f:9a:ba:71:2b:92:
                    b2:d0:0c:34:45:44:22:2f:98:08:40:5c:99:a9:63:
                    43:26:b6:ee:9f:1e:fe:97:b3:33:fa:fd:61:c9:da:
                    ae:87:c0:de:ea:84:98:2c:4f:03:aa:6a:11:f8:d9:
                    7b:ee:90:18:da:ef:cf:ff:99:b3:78:36:a1:d0:cd:
                    37:7b:3a:4c:d5:ba:ec:a4:b0:63:18:cb:aa:0c:f8:
                    60:07:62:4c:f6:17:89:b3:93:a3:df:d8:f3:a2:af:
                    1d:9b:6d:cf:9e:5e:8f:8d:e2:f2:ac:01:38:87:60:
                    d2:46:cb:3f:36:e8:96:dd:fa:f2:01:64:a9:09:d6:
                    f6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3D:E7:B1:E8:B3:8E:A0:13:5B:34:FE:9F:C9:89:53:1B:C1:02:D6
            X509v3 Authority Key Identifier:
                keyid:AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/833EE3D6F93611EDA923691DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:03:4b:da:43:b6:3f:35:02:a9:54:63:9d:a5:8f:ef:f9:a2:
         98:11:51:59:2f:03:71:d3:5a:24:4b:13:3b:ea:66:af:00:c7:
         3a:c9:3f:8f:20:96:5d:fd:ee:ce:a6:e5:ba:05:22:13:21:ea:
         d9:f1:ff:1b:74:c8:48:1e:ac:bc:86:66:35:72:a4:e6:5d:df:
         18:8a:cd:a4:96:28:57:12:67:b2:e3:f9:c9:d7:49:ea:57:0e:
         26:ea:ba:85:3a:ea:73:35:5e:02:dd:81:b3:8c:4d:4a:a6:b2:
         04:12:94:1e:5f:39:14:78:5f:45:f7:c3:ae:4d:d7:5d:aa:6a:
         c4:9d:6b:50:86:ce:da:16:1f:8a:5c:b0:35:a1:36:0e:e7:79:
         49:0a:30:9e:12:f7:6f:ae:28:81:4f:7a:fb:3f:7b:c9:fc:24:
         f0:18:44:cc:d2:ad:2b:1d:6b:7d:24:56:d1:24:69:a0:cb:d8:
         54:91:e1:e1:aa:85:d0:df:08:8a:e4:48:e9:41:a2:13:19:b2:
         be:46:99:08:8b:42:e3:c3:a0:fa:ca:3e:9c:1a:96:82:05:83:
         58:4d:8f:c2:4d:45:51:0c:b8:f5:b6:74:e0:e1:89:29:18:42:
         72:09:9c:31:7d:b9:ae:b7:3e:f8:63:ea:e9:6c:a4:19:2d:c2:
         2c:2e:83:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----