Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/E6222BFC280E11ECBAB11A64C4F9AE02.roa
File:                     E6222BFC280E11ECBAB11A64C4F9AE02.roa (raw, json)
Hash identifier:          30Hb0LMBCPPggbyZ7GWNINFJDBgGlUB0QMVJcv/Veec=
Subject key identifier:   3A:61:FD:60:AD:E2:0F:D7:57:A5:D2:BA:2E:3A:08:26:A8:22:C2:55
Certificate issuer:       /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5
Certificate serial:       07BB
Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/E6222BFC280E11ECBAB11A64C4F9AE02.roa
Signing time:             Mon 14 Nov 2022 22:08:10 +0000
ROA not before:           Mon 14 Nov 2022 22:08:10 +0000
ROA not after:            Sat 30 Dec 2023 00:00:00 +0000
asID:                     45814
IP address blocks:        103.74.20.0/24 maxlen: 24
                          103.74.21.0/24 maxlen: 24
                          103.74.22.0/24 maxlen: 24
                          103.74.23.0/24 maxlen: 24
                          103.235.76.0/24 maxlen: 24
                          103.235.77.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1979 (0x7bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5
        Validity
            Not Before: Nov 14 22:08:10 2022 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=6372bc4a-174c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dd:a1:d4:7e:e8:0d:64:84:54:9f:03:83:a9:
                    f1:5b:2d:3e:03:03:8d:75:23:97:28:2f:d9:c9:50:
                    4c:85:ac:62:75:a8:ac:21:66:24:89:c7:c4:ab:bc:
                    0f:d3:ff:10:13:a2:59:1b:ee:2c:15:7b:44:b3:ff:
                    e0:9f:30:55:48:2c:5b:90:e5:56:4d:2e:56:08:96:
                    94:bb:54:c1:5a:b5:96:f3:8a:40:ba:28:38:ad:7f:
                    78:97:d4:c0:09:a7:d8:bb:8b:e7:55:d5:f3:aa:9c:
                    a2:59:4b:82:6b:e3:80:d7:21:ee:bf:94:58:03:d0:
                    77:af:aa:6c:8d:0c:6b:68:55:a1:93:d9:49:41:2f:
                    c5:98:78:a8:4c:7c:42:84:98:2e:09:b0:c2:c7:7c:
                    0d:97:13:24:0c:1c:20:a3:5e:b3:5f:3d:2c:93:51:
                    32:08:9f:b1:75:e5:2a:7a:ef:7c:21:49:aa:f6:28:
                    c0:57:19:d6:81:2a:ba:f8:5d:7b:f9:ea:f8:0c:00:
                    97:b4:c1:5b:69:d9:1f:86:48:03:fb:5c:76:a2:2e:
                    7e:87:20:62:31:ff:e3:b8:6b:ef:e7:b3:5a:55:b9:
                    48:3a:0d:e2:17:b0:4a:46:2a:25:62:de:42:a4:12:
                    af:a9:60:4d:56:e5:b6:8a:44:26:2b:4a:74:ae:25:
                    63:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:61:FD:60:AD:E2:0F:D7:57:A5:D2:BA:2E:3A:08:26:A8:22:C2:55
            X509v3 Authority Key Identifier:
                keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/E6222BFC280E11ECBAB11A64C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.20.0/22
                  103.235.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:80:1c:9a:34:fd:e8:91:92:be:bf:21:83:eb:7d:d0:28:c7:
         8b:7e:be:fc:d6:9b:95:43:e9:3f:ec:1c:ad:1a:a4:c7:b5:b7:
         85:5a:9a:d0:17:3a:c5:0a:26:da:89:02:21:e8:1f:ec:d6:6b:
         84:e9:1c:41:e7:98:a9:25:f7:ef:c7:10:17:04:aa:f6:02:29:
         57:69:c7:ce:97:ce:d1:7f:c1:55:47:18:f6:ce:3e:ee:dc:9e:
         bf:57:4e:19:c4:e6:24:01:7f:ab:5b:9c:c4:55:d8:49:d4:58:
         86:10:86:81:d7:2f:21:c4:8b:ee:63:7b:27:57:09:62:66:09:
         bf:fc:eb:d1:25:27:14:07:56:af:8b:96:72:82:70:53:61:d9:
         af:d9:0f:c7:49:29:99:c5:4b:89:c3:7b:e6:b7:cb:1d:33:44:
         89:48:c5:c6:0b:f1:9d:6e:3a:f7:f4:33:d5:c0:59:8c:76:90:
         f6:a3:c3:9c:03:bf:f2:8e:07:6f:37:19:df:0e:2b:64:ec:77:
         85:62:ca:21:16:ec:a1:90:ae:e2:1f:a4:93:6f:a8:84:ad:b3:
         d6:4d:1a:83:e2:17:87:ab:34:b3:cd:89:2e:a9:91:96:64:2d:
         98:59:b0:2c:01:98:b8:b5:cc:f7:02:77:54:38:8c:7a:62:4a:
         d0:36:e5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----