Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/B452B26CCB1D11EA9F981E4AC4F9AE02.roa
File:                     B452B26CCB1D11EA9F981E4AC4F9AE02.roa (raw, json)
Hash identifier:          KSTlQ+Qb5IfrEazmPJY6KMjxkYTK5Q965qlA0US++rw=
Subject key identifier:   B5:21:55:06:79:A5:85:DE:7C:CC:22:16:F6:43:AC:EE:E1:C1:61:30
Certificate issuer:       /CN=A91D76E5/serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886
Certificate serial:       0668
Authority key identifier: 74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/B452B26CCB1D11EA9F981E4AC4F9AE02.roa
Signing time:             Tue 18 Oct 2022 22:49:03 +0000
ROA not before:           Tue 18 Oct 2022 22:49:03 +0000
ROA not after:            Sat 30 Dec 2023 00:00:00 +0000
asID:                     134555
IP address blocks:        43.247.80.0/22 maxlen: 24
                          103.23.174.0/24 maxlen: 24
                          103.87.38.0/23 maxlen: 23
                          103.235.188.0/22 maxlen: 22
                          103.236.203.0/24 maxlen: 24
                          202.52.54.0/23 maxlen: 23
                          2402:d840::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1640 (0x668)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D76E5/serialNumber=748BC79AFA9B7FF75B1300AD2940E7FCC142F886
        Validity
            Not Before: Oct 18 22:49:03 2022 GMT
            Not After : Dec 30 00:00:00 2023 GMT
        Subject: CN=634f2d5f-44b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:57:37:f5:34:fb:a0:bf:6a:4e:65:42:57:dc:
                    df:cf:92:7f:b5:7d:d3:7d:20:73:e7:18:28:f1:33:
                    34:1a:ca:07:96:e5:28:3c:e5:52:e8:47:6b:a4:a6:
                    8f:74:fd:02:65:07:f3:2f:d5:bf:ce:9f:ec:75:7f:
                    d3:4d:56:fe:b1:a6:41:f7:ab:27:d5:f9:b6:67:1a:
                    53:13:01:6e:6f:22:3c:38:5e:61:4b:c8:03:2d:26:
                    8f:4c:a6:cb:64:2e:57:71:03:d6:8f:2d:c8:30:5d:
                    56:cf:eb:b9:09:7d:07:8c:b8:42:5b:34:c0:a3:ec:
                    cb:cf:84:2e:1e:36:ec:b7:6d:65:a8:9e:f0:03:01:
                    5f:18:02:d5:5b:4e:60:b5:43:04:54:a9:f5:ad:f0:
                    b9:f1:76:1a:02:56:4c:18:d8:9a:2c:80:f7:ba:c3:
                    52:18:e7:f3:5e:2f:5d:29:c7:5e:6e:05:9c:fb:92:
                    4f:b6:4c:19:10:52:af:61:fc:34:60:95:10:41:bb:
                    ea:e4:25:4b:56:59:17:d8:a5:ee:94:01:90:0f:32:
                    ed:01:1d:b1:41:3e:a8:3b:bb:f8:7d:33:3d:77:64:
                    fb:c7:ac:b8:7b:1e:c6:52:81:14:dc:b9:1d:b0:27:
                    9f:24:6c:9f:54:3c:d9:88:3e:ec:8d:8d:83:b4:1c:
                    6c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:21:55:06:79:A5:85:DE:7C:CC:22:16:F6:43:AC:EE:E1:C1:61:30
            X509v3 Authority Key Identifier:
                keyid:74:8B:C7:9A:FA:9B:7F:F7:5B:13:00:AD:29:40:E7:FC:C1:42:F8:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/dIvHmvqbf_dbEwCtKUDn_MFC-IY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dIvHmvqbf_dbEwCtKUDn_MFC-IY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D76E5/E083A0EACB1211EA92507A2BC4F9AE02/B452B26CCB1D11EA9F981E4AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.247.80.0/22
                  103.23.174.0/24
                  103.87.38.0/23
                  103.235.188.0/22
                  103.236.203.0/24
                  202.52.54.0/23
                IPv6:
                  2402:d840::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:5a:ee:b2:12:f7:26:42:61:44:eb:c2:b2:dc:c9:84:ce:84:
         5c:f4:bf:97:d7:17:04:6c:38:02:fa:5d:77:18:87:80:98:2a:
         bf:47:27:02:84:57:54:1a:bc:98:0c:f0:fc:6e:18:b0:68:eb:
         13:18:06:94:fb:6b:78:8d:43:d7:c2:3e:12:fe:0b:00:7f:f7:
         c2:f1:7e:67:00:e6:42:f4:5a:9a:11:79:e5:6e:de:1e:64:19:
         85:9c:82:a4:72:e3:d2:25:33:c3:1d:2c:7e:36:9f:55:e5:03:
         1c:8a:47:fa:00:1a:4e:b1:61:60:e3:25:be:ed:5d:d3:05:0b:
         b5:34:25:82:a7:c7:19:32:c5:b2:f1:fc:68:06:48:9d:36:55:
         20:d6:26:f3:26:43:ba:bd:4c:8f:07:2f:f6:9a:5b:04:14:24:
         ee:e1:36:c2:21:7c:62:a5:0a:57:a3:b4:57:ab:99:e0:61:3d:
         b5:55:13:30:e6:23:ef:0a:eb:a8:ee:af:40:53:75:c8:05:24:
         63:26:4a:4e:52:ee:ec:4b:72:23:8b:f2:36:6f:46:98:7c:b7:
         f5:3e:d1:95:ee:3f:6a:f5:b5:9f:b9:46:f0:5b:bb:38:d6:74:
         fc:3e:86:07:18:be:df:ca:7e:f7:bd:8b:fc:59:16:a0:14:4e:
         8d:9f:ab:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----