Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/4AA02BD8DF5C11EC8C67277FC4F9AE02.roa
File:                     4AA02BD8DF5C11EC8C67277FC4F9AE02.roa (raw, json)
Hash identifier:          XkGN3ZzQNWpK1xbvlDZ7B81oe6XM7V8oxniwBPzgcVk=
Subject key identifier:   49:8F:49:C0:D7:48:50:D4:0C:33:67:DF:B0:13:A2:63:19:B5:7E:0D
Certificate issuer:       /CN=A91C89A2/serialNumber=C30854C9951F2D866BFFA9C4D53D399379D80FAC
Certificate serial:       02
Authority key identifier: C3:08:54:C9:95:1F:2D:86:6B:FF:A9:C4:D5:3D:39:93:79:D8:0F:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wwhUyZUfLYZr_6nE1T05k3nYD6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/4AA02BD8DF5C11EC8C67277FC4F9AE02.roa
Signing time:             Sun 29 May 2022 14:33:23 +0000
ROA not before:           Sun 29 May 2022 14:33:23 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     149843
IP address blocks:        103.188.44.0/24 maxlen: 24
                          103.188.45.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C89A2/serialNumber=C30854C9951F2D866BFFA9C4D53D399379D80FAC
        Validity
            Not Before: May 29 14:33:23 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=62938432-aa85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5b:c6:bc:c4:c2:0e:45:7a:b1:43:91:d2:8b:
                    42:4f:09:0e:88:f7:0c:34:28:9d:80:3a:a8:8a:7e:
                    de:87:6d:9b:61:9f:8d:eb:2e:5f:e8:e2:a9:76:2c:
                    bf:f5:57:67:fb:24:33:eb:0b:6c:b6:09:2e:7c:94:
                    e4:28:85:c5:a1:db:c0:fc:2b:44:eb:c0:64:a2:26:
                    8f:03:e5:0e:e8:86:e1:70:b5:64:dc:38:c7:5d:e0:
                    d4:b0:0e:34:97:41:a1:7d:45:2f:a9:ea:40:2e:03:
                    99:53:c0:92:c3:58:2d:e3:61:3a:67:fa:1c:66:fc:
                    f0:3c:ce:86:a6:21:e7:54:51:dc:f0:ee:f4:b9:89:
                    13:15:aa:c4:17:53:32:fa:59:31:55:53:d5:fb:c9:
                    25:99:a2:61:e6:ba:e0:3f:75:af:49:17:ee:55:8a:
                    cd:3a:f3:5b:54:5b:93:e8:a8:1b:0f:1f:7e:3e:bb:
                    eb:0f:e9:0e:e1:c8:62:52:a8:f2:3c:a3:35:a4:6e:
                    00:c1:9c:ee:10:9e:c4:ee:4f:ec:32:13:f7:3d:d6:
                    8f:a7:90:c0:7b:38:56:a3:48:52:19:3b:19:03:0d:
                    15:10:8f:27:40:6c:d0:04:cc:83:20:93:01:6a:37:
                    79:0f:cc:3d:d6:64:88:8f:c6:3e:49:ef:59:2c:e9:
                    88:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8F:49:C0:D7:48:50:D4:0C:33:67:DF:B0:13:A2:63:19:B5:7E:0D
            X509v3 Authority Key Identifier:
                keyid:C3:08:54:C9:95:1F:2D:86:6B:FF:A9:C4:D5:3D:39:93:79:D8:0F:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/wwhUyZUfLYZr_6nE1T05k3nYD6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wwhUyZUfLYZr_6nE1T05k3nYD6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C89A2/BC62C970DF5611EC8C6F160FC4F9AE02/4AA02BD8DF5C11EC8C67277FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:65:78:2d:57:52:f8:aa:f5:e6:01:ab:e6:5e:62:ee:69:0e:
         6f:7f:7e:ea:6c:a0:86:44:80:1b:5d:45:f2:85:92:6a:0b:a3:
         ff:56:de:4f:02:54:80:26:80:79:b7:5e:b9:bd:92:c1:98:34:
         14:cc:85:dc:f2:5e:22:f1:6a:ce:76:67:9c:46:51:8e:ec:07:
         8c:9c:d7:2a:1b:81:d5:d3:bc:0d:b3:ba:ca:ad:ce:43:0c:d3:
         64:a4:70:60:68:58:0a:20:74:5a:b4:e6:fb:e0:d6:b7:66:50:
         c2:38:98:18:75:0e:cc:02:6d:e6:ba:02:69:af:24:4d:4c:7d:
         ec:ef:f6:8e:0f:83:72:ed:e9:0a:95:a9:77:50:15:5e:88:4e:
         9b:32:fe:9b:a0:16:91:0f:40:3a:d3:b3:96:9d:07:14:dd:97:
         3b:62:1e:d0:69:a0:fa:58:a5:64:0c:b2:fe:6a:e6:98:62:10:
         0d:73:41:8e:a6:9d:43:9a:5b:47:24:6d:05:60:e7:a6:06:60:
         0e:57:f5:d5:fd:fd:4c:e7:45:6e:62:05:98:8d:71:f3:f4:91:
         62:d1:23:a5:f9:23:dd:a8:35:f5:e5:83:a5:b3:fc:b0:58:eb:
         b9:c6:9e:4f:11:7f:c5:91:12:16:ad:03:74:ce:b4:d2:78:60:
         01:24:0f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----