Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B79AB/9C86D6B2855E11EBAC2C5458C4F9AE02/E9C3F40E855F11EB9E4AFD58C4F9AE02.roa
File:                     E9C3F40E855F11EB9E4AFD58C4F9AE02.roa (raw, json)
Hash identifier:          MOZP852Vm+TAwAvJoSGqlWEXqjogi8BfzUOy2SNJnsc=
Subject key identifier:   48:7C:4C:B6:D6:EF:35:B3:F8:11:B5:05:5E:E7:5A:4A:D9:CB:5C:B7
Certificate issuer:       /CN=A91B79AB/serialNumber=9B34980FA3CA2E4D70F2E2F87E76D669314F072A
Certificate serial:       0502
Authority key identifier: 9B:34:98:0F:A3:CA:2E:4D:70:F2:E2:F8:7E:76:D6:69:31:4F:07:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzSYD6PKLk1w8uL4fnbWaTFPByo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B79AB/9C86D6B2855E11EBAC2C5458C4F9AE02/E9C3F40E855F11EB9E4AFD58C4F9AE02.roa
Signing time:             Wed 26 Jul 2023 23:40:14 +0000
ROA not before:           Wed 26 Jul 2023 23:40:14 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     131273
IP address blocks:        103.68.138.0/24 maxlen: 24
                          103.117.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1282 (0x502)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B79AB/serialNumber=9B34980FA3CA2E4D70F2E2F87E76D669314F072A
        Validity
            Not Before: Jul 26 23:40:14 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64c1aedd-8a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d5:51:43:c3:c2:16:d2:63:d9:2f:1f:38:6f:
                    99:91:cf:c0:bb:ca:84:a5:0f:62:ce:dd:56:fd:8d:
                    05:3d:2a:10:ce:86:5d:20:e1:9a:e1:f5:9b:69:8b:
                    d1:e2:40:17:3c:80:92:ee:80:57:00:66:64:f3:15:
                    97:4f:b9:3e:8d:1e:6c:de:97:77:26:90:b6:1a:dc:
                    25:b2:f4:21:43:74:61:c8:f1:fb:ac:9d:bd:ea:0b:
                    0c:59:b9:17:84:eb:1f:11:ec:52:ed:20:7c:0c:46:
                    1c:13:93:68:80:82:1f:c4:cf:f6:7d:fa:e3:aa:69:
                    06:14:29:32:49:da:d8:b8:e9:8f:01:21:f7:b6:25:
                    61:02:7a:ba:3c:d8:73:a9:09:ac:88:c8:35:12:dd:
                    3d:84:a1:e1:11:b0:ad:e8:d3:80:47:40:ee:9b:0d:
                    1a:f0:79:de:d6:e9:3c:32:af:d0:e1:9e:13:34:3a:
                    98:a6:9f:3f:c6:02:8c:b4:7f:18:c7:96:b2:59:c6:
                    e6:85:1d:8d:67:eb:f3:bb:7d:af:9f:be:d4:f1:38:
                    9c:b0:00:75:ae:0f:08:3f:b9:a2:0d:7e:83:32:ea:
                    0e:62:56:6e:27:a5:eb:85:79:a8:22:84:bc:d1:e7:
                    fb:41:01:2b:13:0c:ce:b4:45:61:73:b4:7b:b8:3e:
                    a0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7C:4C:B6:D6:EF:35:B3:F8:11:B5:05:5E:E7:5A:4A:D9:CB:5C:B7
            X509v3 Authority Key Identifier:
                keyid:9B:34:98:0F:A3:CA:2E:4D:70:F2:E2:F8:7E:76:D6:69:31:4F:07:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B79AB/9C86D6B2855E11EBAC2C5458C4F9AE02/mzSYD6PKLk1w8uL4fnbWaTFPByo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzSYD6PKLk1w8uL4fnbWaTFPByo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B79AB/9C86D6B2855E11EBAC2C5458C4F9AE02/E9C3F40E855F11EB9E4AFD58C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.138.0/24
                  103.117.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:da:07:d0:85:96:c9:22:43:71:67:af:9a:da:6c:47:0a:07:
         b1:e8:fc:d1:c3:96:b1:d8:6f:5e:e7:ce:50:f2:da:74:a5:a3:
         91:08:d5:9b:f4:01:32:1a:d7:58:3e:2b:6a:d2:1f:a4:8a:1c:
         04:3a:6a:79:d9:90:f5:17:45:df:ad:a4:d5:37:82:f1:12:b8:
         b8:b7:95:dc:c2:24:f1:30:2b:4b:9f:a8:6d:c9:fb:bd:4d:9d:
         a5:88:1c:69:18:2d:c7:59:44:77:bd:2d:9c:a3:52:d7:bb:e6:
         fb:c3:ba:3a:3c:1d:20:8e:36:43:5e:2d:88:46:f4:1c:c7:2d:
         e6:64:38:33:1c:8b:64:1d:89:8e:04:ae:88:83:f9:dd:4e:92:
         79:f1:25:95:98:80:79:3c:4c:7d:5a:79:48:5a:e3:4c:a9:eb:
         02:23:25:77:ea:f8:5e:9e:73:b8:61:88:cc:c4:9d:7e:db:d6:
         89:46:a8:20:72:8b:49:14:0e:2d:91:c8:fd:92:bc:7b:51:72:
         8a:45:e7:6e:15:2b:76:93:6e:b7:8a:dd:d3:9f:ff:7b:54:94:
         eb:c4:68:ba:06:04:bb:bc:c7:36:db:86:a8:bc:aa:d9:1f:67:
         77:6a:60:c3:f9:c4:6b:ae:93:15:4d:5e:7a:24:71:7b:a0:f8:
         c7:94:31:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----