Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/CBC25F08D1EF11ECA096D95BC4F9AE02.roa
File:                     CBC25F08D1EF11ECA096D95BC4F9AE02.roa (raw, json)
Hash identifier:          MafUalcil28LMeJGyCQflJVVubXE5HQgBtyVqeu/CSY=
Subject key identifier:   E5:88:9D:EA:16:14:43:60:ED:10:3D:73:1F:F2:C7:8F:4E:5E:37:80
Certificate issuer:       /CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748
Certificate serial:       01E2
Authority key identifier: A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/CBC25F08D1EF11ECA096D95BC4F9AE02.roa
Signing time:             Mon 19 Dec 2022 04:43:37 +0000
ROA not before:           Mon 19 Dec 2022 04:43:37 +0000
ROA not after:            Fri 01 Mar 2024 00:00:00 +0000
asID:                     136166
IP address blocks:        103.82.176.0/22 maxlen: 25

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 482 (0x1e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748
        Validity
            Not Before: Dec 19 04:43:37 2022 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=639febf9-2960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9a:44:a4:38:ae:fe:e8:99:26:c5:64:6e:8f:
                    54:0a:f7:46:82:cf:13:2e:6d:72:39:11:6b:46:09:
                    9c:39:6e:44:40:18:5d:58:2c:5f:81:e9:7b:85:9f:
                    28:8c:59:b3:59:ad:cc:61:2c:89:61:d7:6a:31:47:
                    2d:3f:da:4d:05:52:a1:b5:fa:6c:a8:ca:7f:9c:de:
                    a4:c8:20:8e:a1:2b:ef:e5:88:a1:bd:a7:68:06:92:
                    9b:e2:56:25:3d:60:b9:ec:89:28:15:3e:28:d3:d9:
                    b6:f4:76:d4:86:82:47:eb:aa:4e:a9:53:a4:df:79:
                    07:4b:75:f1:2b:68:5e:25:ec:db:a1:34:e3:df:ed:
                    40:19:14:dc:6b:76:0d:d1:e5:f7:ff:62:6e:6a:88:
                    68:a6:93:2a:ae:8a:6b:d3:0e:b5:ed:c0:2a:1f:f2:
                    e3:25:ad:cf:f9:ee:b6:08:fe:0c:5d:5b:46:47:7a:
                    e4:18:4f:de:c1:eb:2d:19:bd:21:6b:fc:94:ee:21:
                    9b:67:95:bc:65:39:4e:76:45:c0:1c:9e:93:96:f7:
                    8b:c1:86:07:32:a6:3d:ea:45:60:63:c6:8f:30:81:
                    11:6d:c7:e8:cb:c7:73:c3:38:5b:fb:b6:97:7d:1b:
                    8c:a3:30:c8:50:de:fc:b9:22:eb:3f:c1:f0:af:20:
                    98:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:88:9D:EA:16:14:43:60:ED:10:3D:73:1F:F2:C7:8F:4E:5E:37:80
            X509v3 Authority Key Identifier:
                keyid:A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/CBC25F08D1EF11ECA096D95BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:39:a0:a5:4b:38:27:60:7e:9f:52:39:5f:f8:c7:3f:a4:01:
         a6:f3:a2:53:d5:99:3e:c0:3d:4c:0e:2a:ca:4e:df:ac:8d:14:
         ea:8a:10:bb:a7:cc:f6:0f:8c:78:ee:58:9a:4c:a5:5b:7a:6a:
         95:6e:a2:40:3e:73:47:93:42:73:96:3e:fa:3c:0d:39:da:0f:
         ef:8f:84:b9:9f:78:f4:71:89:41:f3:19:fa:c0:91:0b:22:45:
         21:6b:08:20:27:93:15:4d:75:81:73:96:16:3b:6c:d7:43:ef:
         97:97:f3:7d:08:15:9a:2d:2d:4c:88:44:2f:c2:0b:5a:91:c5:
         3d:2a:2a:b0:bf:78:91:9a:23:38:50:c0:b5:f4:57:86:83:dd:
         e1:05:07:2d:76:e9:dd:59:0e:b3:80:0f:ab:82:db:5a:34:77:
         9a:e8:4b:c0:e0:e9:73:df:bd:93:89:f4:cb:91:33:97:3e:c5:
         74:28:92:60:97:55:78:76:8b:0d:30:a1:04:aa:32:3c:5a:67:
         85:b6:52:36:cd:0a:fc:c0:15:09:10:b7:e0:eb:2f:41:28:3d:
         5c:c2:03:16:90:f1:4b:53:fe:6d:f6:99:ec:32:1b:17:0f:18:
         00:12:fb:d6:18:36:1d:6c:ad:09:54:9a:6b:60:e3:e5:16:d2:
         0d:71:09:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----