Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/1087C8F480C911EB8B501D0FC4F9AE02.roa
File:                     1087C8F480C911EB8B501D0FC4F9AE02.roa (raw, json)
Hash identifier:          abAKxAEGHjXAagUZk0Xjcn+Rw5MPTe0QsF4WJKvNYuw=
Subject key identifier:   1D:1A:42:3C:40:2A:46:09:87:4A:E1:E1:FD:4C:D2:DD:72:43:AB:B1
Certificate issuer:       /CN=A91C6861/serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A
Certificate serial:       09E0
Authority key identifier: 6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/1087C8F480C911EB8B501D0FC4F9AE02.roa
Signing time:             Mon 02 Jan 2023 20:57:05 +0000
ROA not before:           Mon 02 Jan 2023 20:57:05 +0000
ROA not after:            Wed 31 Jan 2024 00:00:00 +0000
asID:                     64063
IP address blocks:        103.200.92.0/22 maxlen: 24
                          2407:3380::/32 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2528 (0x9e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6861/serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A
        Validity
            Not Before: Jan  2 20:57:05 2023 GMT
            Not After : Jan 31 00:00:00 2024 GMT
        Subject: CN=63b34520-ec48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d1:5d:36:22:48:4f:a5:16:16:c5:b7:7f:35:
                    55:aa:70:b1:c0:2e:97:af:c3:1e:d0:6f:f5:11:be:
                    e0:4e:fe:c3:f0:e4:19:64:ec:1c:4d:e5:2d:31:a6:
                    b9:52:e8:f4:01:0e:f4:69:3c:fd:d7:f5:4e:53:5b:
                    1f:ef:af:8e:70:16:d6:6a:84:81:2e:27:64:57:d6:
                    4c:60:32:5c:c7:39:36:37:76:35:5c:5c:eb:54:5f:
                    e8:34:3f:0c:2b:f8:cd:d7:e8:8a:f1:0d:0d:c7:de:
                    db:85:02:81:46:b6:01:44:34:ff:5e:0f:24:01:dc:
                    c1:63:e1:d4:04:45:c7:bc:ec:f7:81:15:bd:3a:3b:
                    80:14:6a:7f:6e:26:1d:75:36:48:1e:e9:49:1c:5c:
                    78:8f:a7:a8:d5:66:3b:fb:95:1e:d5:81:ab:6b:bb:
                    b4:8d:1d:41:ed:6c:c5:73:ed:ee:39:5f:a1:e8:54:
                    fc:14:2c:92:d3:cd:17:4c:a6:f4:2a:2c:5c:5d:e1:
                    0c:94:3d:c2:56:8f:dc:e4:ab:5d:e8:1d:32:3a:f8:
                    56:ad:67:04:60:a6:a8:e2:a7:1f:e4:95:c9:6b:b3:
                    29:5e:45:2b:b1:6e:51:f8:f5:5e:45:39:8a:d1:1f:
                    ff:b8:50:03:8b:f7:28:1e:8a:43:16:9a:4e:61:8b:
                    9c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1A:42:3C:40:2A:46:09:87:4A:E1:E1:FD:4C:D2:DD:72:43:AB:B1
            X509v3 Authority Key Identifier:
                keyid:6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/1087C8F480C911EB8B501D0FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.200.92.0/22
                IPv6:
                  2407:3380::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:db:af:ac:f6:b1:c8:35:85:06:b8:99:71:2f:9b:a9:a5:1e:
         53:d6:71:d6:89:f5:6c:e6:d8:ae:c5:dc:2e:34:32:ce:f6:ab:
         6a:59:bb:b7:95:94:df:28:34:d1:69:25:c4:1a:da:2f:ca:b5:
         5e:c3:80:7e:25:e3:18:d7:22:32:1f:cb:58:53:b0:02:ad:a6:
         c6:cc:1e:94:cd:24:04:6a:6d:b5:51:06:03:cb:f5:24:4c:29:
         b3:63:2d:a6:77:58:45:ab:15:a7:4f:9f:2d:28:5e:f3:31:f6:
         e5:7f:b8:c1:1c:c3:9e:97:7d:cc:f3:79:76:db:eb:9f:0f:de:
         8b:10:20:87:b9:bc:4c:15:ba:b0:66:ba:ac:e5:af:ea:93:54:
         1b:ee:26:b2:34:cd:b7:1e:22:76:61:26:0f:d2:a5:8b:50:20:
         be:eb:8f:a6:70:72:83:cb:ed:64:ee:d7:9a:91:e3:76:da:c7:
         e7:9d:51:d1:9a:f3:eb:f0:6e:a7:24:5c:26:fe:4c:55:de:03:
         f7:f2:d7:dc:f0:7e:a8:ed:fa:6b:40:f3:e4:4d:ce:77:28:c8:
         52:f0:62:9a:7c:e5:96:1e:a5:d6:61:9d:55:cd:46:54:76:58:
         f3:be:74:39:d8:5c:67:86:6d:b5:8f:59:e8:05:24:ae:00:37:
         05:4d:0f:69
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzY4NjExMTAvBgNVBAUTKDZGQjBBQTU3Q0U4NEE1Q0QyOUFDNDdEOUQ3RDA4OTQ4
RUIyMUYwNkEwHhcNMjMwMTAyMjA1NzA1WhcNMjQwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2IzNDUyMC1lYzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAudFdNiJIT6UWFsW3fzVVqnCxwC6Xr8Me0G/1Eb7gTv7D8OQZZOwcTeUtMaa5
Uuj0AQ70aTz91/VOU1sf76+OcBbWaoSBLidkV9ZMYDJcxzk2N3Y1XFzrVF/oND8M
K/jN1+iK8Q0Nx97bhQKBRrYBRDT/Xg8kAdzBY+HUBEXHvOz3gRW9OjuAFGp/biYd
dTZIHulJHFx4j6eo1WY7+5Ue1YGra7u0jR1B7WzFc+3uOV+h6FT8FCyS080XTKb0
KixcXeEMlD3CVo/c5Ktd6B0yOvhWrWcEYKao4qcf5JXJa7MpXkUrsW5R+PVeRTmK
0R//uFADi/coHopDFppOYYucCwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFB0aQjxA
KkYJh0rh4f1M0t1yQ6uxMB8GA1UdIwQYMBaAFG+wqlfOhKXNKaxH2dfQiUjrIfBq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjg2MS81Q0MyMTAwMDI1
NEMxMUVBQjcwMkQ0MUJDNEY5QUUwMi9iN0NxVjg2RXBjMHByRWZaMTlDSlNPc2g4
R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I3Q3FWODZFcGMwcHJFZloxOUNKU09zaDhHby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzY4NjEvNUNDMjEwMDAyNTRDMTFFQUI3MDJENDFCQzRGOUFFMDIvMTA4N0M4RjQ4
MEM5MTFFQjhCNTAxRDBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJnyFwwDQQCAAIwBwMFACQHM4AwDQYJKoZIhvcNAQELBQAD
ggEBAFLbr6z2scg1hQa4mXEvm6mlHlPWcdaJ9Wzm2K7F3C40Ms72q2pZu7eVlN8o
NNFpJcQa2i/KtV7DgH4l4xjXIjIfy1hTsAKtpsbMHpTNJARqbbVRBgPL9SRMKbNj
LaZ3WEWrFadPny0oXvMx9uV/uMEcw56XfczzeXbb658P3osQIIe5vEwVurBmuqzl
r+qTVBvuJrI0zbceInZhJg/SpYtQIL7rj6ZwcoPL7WTu15qR43bax+edUdGa8+vw
bqckXCb+TFXeA/fy19zwfqjt+mtA8+RNzncoyFLwYpp85ZYepdZhnVXNRlR2WPO+
dDnYXGeGbbWPWegFJK4ANwVND2k=
-----END CERTIFICATE-----