Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/5E912AE0833E11EC9274432AC4F9AE02.roa
File:                     5E912AE0833E11EC9274432AC4F9AE02.roa (raw, json)
Hash identifier:          TQl/ZuZ3DyTjD6EiuwCuyfEYSO7o9v6bA1A7p91T2VM=
Subject key identifier:   D5:45:75:60:EF:7D:7B:0B:1C:D9:C3:AD:45:2B:8B:66:2E:95:7E:0A
Certificate issuer:       /CN=A91C9286/serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682
Certificate serial:       0A16
Authority key identifier: C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/5E912AE0833E11EC9274432AC4F9AE02.roa
Signing time:             Tue 10 Jan 2023 20:57:19 +0000
ROA not before:           Tue 10 Jan 2023 20:57:19 +0000
ROA not after:            Fri 01 Mar 2024 00:00:00 +0000
asID:                     139881
IP address blocks:        103.146.150.0/24 maxlen: 24
                          2001:df2:6580::/48 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2582 (0xa16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9286/serialNumber=C8912DF4C47F8A66BC489EC84272480A211B0682
        Validity
            Not Before: Jan 10 20:57:19 2023 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=63bdd12f-4522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ef:57:f5:ee:86:dd:be:e9:73:27:55:86:e6:
                    28:e3:5f:93:19:08:1f:19:f0:59:9e:e3:78:21:43:
                    dc:0b:4a:e1:3a:c2:d7:3d:bb:f7:d4:44:be:e6:ec:
                    8c:02:42:b2:e8:52:26:ca:06:dd:1d:0f:a7:ac:24:
                    44:ee:5f:97:86:d3:95:48:2a:d5:cd:e9:a5:5b:14:
                    3e:d1:7b:f5:1a:ba:14:e9:df:f1:10:dd:f7:03:1d:
                    e3:00:58:4e:7d:16:83:17:ba:6c:36:4f:6c:aa:cc:
                    46:4c:d4:fc:38:ec:c4:16:bd:fc:52:b9:7c:f8:b0:
                    45:84:0b:f0:d2:2f:58:f7:8c:21:74:98:6d:4d:66:
                    8d:35:fc:47:b3:02:69:73:56:30:e4:d4:23:a3:5d:
                    4f:11:27:67:5f:a0:82:10:d8:d6:bf:18:9a:32:0f:
                    81:3b:7e:10:36:40:87:34:8a:7c:d0:cd:cf:dd:7b:
                    78:6c:d4:88:e0:7b:65:d8:20:6b:57:df:e0:c9:2f:
                    40:2f:24:c0:f5:3d:1f:99:99:8d:82:b6:2f:72:3c:
                    e8:12:80:50:81:e4:b8:90:e3:c5:96:40:48:39:b5:
                    76:33:a3:d4:36:7d:ec:2e:99:24:33:94:f7:44:26:
                    05:54:b4:af:ac:15:31:85:13:b4:e2:8b:13:49:b9:
                    7e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:45:75:60:EF:7D:7B:0B:1C:D9:C3:AD:45:2B:8B:66:2E:95:7E:0A
            X509v3 Authority Key Identifier:
                keyid:C8:91:2D:F4:C4:7F:8A:66:BC:48:9E:C8:42:72:48:0A:21:1B:06:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/yJEt9MR_ima8SJ7IQnJICiEbBoI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yJEt9MR_ima8SJ7IQnJICiEbBoI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9286/CA961C02208D11EA9FB7CA3FC4F9AE02/5E912AE0833E11EC9274432AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.150.0/24
                IPv6:
                  2001:df2:6580::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:98:f5:aa:f6:de:5c:04:38:56:80:31:e2:bb:3f:b8:83:ba:
         a2:00:11:35:bb:98:5f:cc:1c:47:8f:de:da:9e:d4:cf:c5:41:
         ae:c6:9b:60:17:d0:4e:69:dc:1a:40:98:67:ee:7f:90:66:9e:
         45:d8:7a:15:94:ea:ba:f8:70:f7:20:7f:b1:65:8c:69:62:24:
         01:6f:a0:c9:b6:11:e0:14:36:06:28:a8:75:b1:e8:1b:e2:69:
         18:8a:a1:de:30:99:3a:dd:5e:bd:14:d6:62:7c:c4:e0:82:b8:
         43:e0:ab:b5:76:53:2f:9f:c2:b6:25:53:ea:70:f1:e9:07:b2:
         24:a0:ab:10:fa:1b:1c:8f:dc:f6:2c:f4:9c:87:95:cc:51:10:
         61:63:a1:c3:fb:8a:c4:ac:7f:a2:fa:15:d7:66:f4:cc:55:ca:
         16:e6:d9:5f:c7:6a:e6:0c:f3:80:e3:fa:27:bd:45:b2:d8:4d:
         b8:34:1b:be:0c:50:cb:48:4d:72:73:b9:be:aa:63:d8:10:2a:
         99:88:34:6b:33:8a:5e:79:13:4b:7b:5e:f3:33:82:87:01:e3:
         58:5f:92:4c:bd:e8:ad:95:11:02:c7:b1:bb:5a:c8:91:9d:d6:
         37:ab:07:02:9f:2a:81:fe:35:80:b3:dd:c7:14:be:9a:65:60:
         9e:65:f6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----