Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/62821AB29C6311ED950B8A6BC4F9AE02.roa
File:                     62821AB29C6311ED950B8A6BC4F9AE02.roa (raw, json)
Hash identifier:          dsWar9MjemLztboDkPbcDV7jxf5pqz0WR9IrkxZyfCI=
Subject key identifier:   E2:73:DC:8D:F0:1C:F4:08:68:7A:76:0E:FF:23:C9:28:87:21:90:80
Certificate issuer:       /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Certificate serial:       057C
Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/62821AB29C6311ED950B8A6BC4F9AE02.roa
Signing time:             Wed 25 Jan 2023 06:32:12 +0000
ROA not before:           Wed 25 Jan 2023 06:32:12 +0000
ROA not after:            Sun 31 Mar 2024 00:00:00 +0000
asID:                     7496
IP address blocks:        203.27.226.0/23 maxlen: 24
                          203.32.8.0/21 maxlen: 21
                          203.147.128.0/17 maxlen: 17
                          210.247.128.0/18 maxlen: 18
                          2405:8800::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1404 (0x57c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
        Validity
            Not Before: Jan 25 06:32:12 2023 GMT
            Not After : Mar 31 00:00:00 2024 GMT
        Subject: CN=63d0ccec-7d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4a:53:ef:b5:72:c8:c2:a9:f2:ed:b3:bd:09:
                    33:b5:98:c6:b8:5a:a3:61:f1:0f:53:92:58:f5:fe:
                    08:48:b7:31:f6:81:0d:69:f9:29:aa:e3:44:3e:79:
                    e2:68:44:68:20:a7:26:cc:62:0e:12:7b:25:c1:7f:
                    88:4d:23:86:a3:85:71:3b:4c:43:b6:2e:73:df:40:
                    73:b0:a4:5f:98:c3:d2:f9:cf:2f:24:c5:d7:c0:86:
                    a7:ac:60:72:36:35:13:45:9a:44:1b:af:35:43:06:
                    a6:df:17:1b:b3:ad:91:35:4f:28:18:02:36:26:63:
                    d2:41:ec:d4:a8:30:cb:0c:02:91:81:30:6a:f0:75:
                    52:49:f8:d3:6f:99:54:99:49:8f:fc:2e:26:34:c0:
                    26:5e:10:07:c8:d0:78:7b:c2:ce:23:60:4d:e3:b0:
                    2a:fe:01:4e:ea:ad:01:a2:6c:e0:70:ae:8f:1f:14:
                    7d:cf:9b:64:62:ac:87:fc:7d:4a:07:ab:14:34:8d:
                    e5:1a:13:c1:2d:24:13:34:e0:2c:7e:bc:1d:51:17:
                    f4:d3:ec:24:a9:8e:ac:84:03:c0:bc:9b:2a:d6:5b:
                    59:cd:7c:fe:9b:7d:88:3a:90:17:1a:af:1c:34:1a:
                    fd:52:46:52:36:03:52:84:42:f6:55:63:c4:35:0c:
                    12:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:73:DC:8D:F0:1C:F4:08:68:7A:76:0E:FF:23:C9:28:87:21:90:80
            X509v3 Authority Key Identifier:
                keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/62821AB29C6311ED950B8A6BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.27.226.0/23
                  203.32.8.0/21
                  203.147.128.0/17
                  210.247.128.0/18
                IPv6:
                  2405:8800::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:e4:0e:f3:b7:ef:ca:f2:97:c9:5c:f6:19:45:93:e7:c5:72:
         d5:37:78:90:16:d2:ac:6c:7f:2b:ff:f9:d3:a2:9d:5f:10:75:
         36:cb:90:65:f6:4e:03:c4:30:f8:2e:34:59:4e:91:b3:25:ee:
         52:62:79:b0:b5:50:0f:87:84:27:af:8d:26:ff:37:f5:4e:4f:
         df:c1:15:65:2a:6b:9c:bf:2a:54:1e:34:b3:c9:dc:96:22:46:
         fd:83:1c:f1:6c:f5:48:1b:e8:20:26:3f:a1:db:ba:8d:6e:91:
         55:b5:02:73:38:2b:40:ff:3e:36:fa:cc:9d:f9:8f:28:43:da:
         25:cb:a9:b6:cf:4e:f7:48:1c:d4:8a:ce:bc:8c:b7:10:4d:96:
         a4:ab:5a:05:d9:f8:cf:2c:22:09:d2:9b:68:4c:f8:50:9c:65:
         5c:98:02:79:89:da:cc:c5:94:03:1f:91:e3:88:5d:f3:57:59:
         a9:c9:7a:78:f1:0f:bf:b2:07:37:45:72:5a:82:d4:eb:0c:c1:
         6f:74:10:58:d5:b3:26:26:40:07:39:75:ed:bc:e7:7e:a3:a4:
         05:ac:db:26:79:15:be:22:9e:79:43:ab:af:61:b7:05:89:c8:
         04:2a:8e:ca:19:9d:9a:c2:6c:f4:98:39:8f:b9:df:42:f8:5f:
         fb:6a:27:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----