Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/C7965A0AC4AC11ED98F4D369C4F9AE02.roa
File:                     C7965A0AC4AC11ED98F4D369C4F9AE02.roa (raw, json)
Hash identifier:          BnHvEPzvq/FyKuUNEVelyd+oaI7bS7vDHqCxjIa6IxQ=
Subject key identifier:   A4:18:C5:C4:5D:E2:45:EB:43:6B:86:FB:97:57:A5:3A:64:55:30:33
Certificate issuer:       /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
Certificate serial:       3F
Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/C7965A0AC4AC11ED98F4D369C4F9AE02.roa
Signing time:             Fri 17 Mar 2023 10:16:28 +0000
ROA not before:           Fri 17 Mar 2023 10:16:28 +0000
ROA not after:            Tue 31 Oct 2023 00:00:00 +0000
asID:                     203020
IP address blocks:        45.252.189.0/24 maxlen: 24
                          103.3.224.0/22 maxlen: 22
                          103.221.233.0/24 maxlen: 24
                          103.241.52.0/22 maxlen: 22
                          160.20.8.0/22 maxlen: 23
                          202.94.174.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638
        Validity
            Not Before: Mar 17 10:16:28 2023 GMT
            Not After : Oct 31 00:00:00 2023 GMT
        Subject: CN=64143dfc-74ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:66:4f:52:7a:f7:7f:35:e2:ef:d1:51:d7:78:
                    93:e6:40:25:33:44:40:3c:40:9b:72:f8:0d:1d:32:
                    d8:6f:4f:36:fe:bd:ea:99:a7:11:68:16:f2:51:35:
                    22:14:f0:dd:e1:98:1e:e2:9d:63:3e:12:d7:4f:27:
                    21:b5:6e:47:e5:b8:9d:41:21:67:2a:ce:ab:fb:83:
                    f3:76:ad:85:ce:e2:51:31:04:f8:0c:f3:2f:07:54:
                    26:32:3f:a3:a5:78:04:53:a1:bb:33:0f:7a:f4:93:
                    9f:34:a0:eb:38:15:5f:4e:5f:7e:ac:81:fd:fe:ae:
                    e0:b6:54:2e:0a:78:3a:45:83:59:d5:33:bc:58:37:
                    dd:1a:f8:92:a8:81:a6:2e:f3:63:2a:9c:05:22:89:
                    92:bd:f3:2d:0e:4e:13:7d:af:c0:91:80:53:87:10:
                    a4:03:b2:0e:b0:c7:de:73:11:20:6c:1e:d8:58:d3:
                    f1:75:4c:8b:e5:ee:6f:22:1a:f1:5a:0b:2e:92:a0:
                    9e:e1:23:26:ae:d8:1b:1c:b4:46:aa:c4:80:26:51:
                    36:c9:b4:29:49:b1:b3:62:5f:51:45:0c:8f:fa:5c:
                    2f:d4:77:78:02:de:4f:3c:e7:e6:1e:50:54:96:04:
                    f6:18:94:66:d7:03:29:4a:03:06:d2:68:18:bc:6e:
                    ce:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:18:C5:C4:5D:E2:45:EB:43:6B:86:FB:97:57:A5:3A:64:55:30:33
            X509v3 Authority Key Identifier:
                keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/C7965A0AC4AC11ED98F4D369C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.252.189.0/24
                  103.3.224.0/22
                  103.221.233.0/24
                  103.241.52.0/22
                  160.20.8.0/22
                  202.94.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:04:b5:69:19:b6:b3:a1:a5:f1:fb:08:a4:9a:93:75:61:40:
         1c:e0:01:49:a2:c5:28:ee:45:83:15:b7:61:06:a3:db:3e:dd:
         bd:c4:0b:78:33:7c:92:10:a3:99:f9:9a:e9:7f:93:3d:92:68:
         3e:20:86:31:0d:84:7e:54:0c:44:27:a0:96:57:b1:a5:1b:c3:
         d0:df:66:ae:dc:ca:20:d0:5c:d6:dc:57:30:e2:62:ac:d0:2c:
         ae:29:0a:e3:cc:70:e4:46:fa:92:5d:c6:cc:6e:29:7f:75:f4:
         60:0f:40:0b:89:6b:21:82:ba:21:a4:bd:b9:6a:2a:be:20:0d:
         f0:c0:cd:cb:8f:61:e8:d3:0a:a8:23:46:c7:ed:38:5a:f0:2a:
         38:73:11:c4:30:cb:9a:e5:6c:a8:f4:0f:81:c0:d8:a8:5c:9c:
         a6:cb:6f:65:41:47:71:22:9b:cc:15:87:1a:aa:3b:24:30:17:
         b3:19:36:28:bb:c6:f0:b5:b6:a8:0b:99:60:ec:7d:1b:b3:af:
         05:28:18:49:e2:96:aa:d7:99:a1:df:da:dc:2b:f6:8d:52:ee:
         93:d0:4c:70:7a:f8:36:a1:f2:03:14:11:ca:4b:44:24:83:ab:
         31:3e:94:af:57:6a:33:42:70:a9:9c:be:e2:56:86:81:a3:d5:
         91:7f:92:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----