Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/F73763D485FE11EA97A7400AC4F9AE02.roa
File:                     F73763D485FE11EA97A7400AC4F9AE02.roa (raw, json)
Hash identifier:          4XV7/uoWFMN9lYhMwdl7zpm4vThuoHkrx3SO62zOpZg=
Subject key identifier:   6F:49:9B:69:CC:92:D5:A5:46:41:2F:3A:34:96:EF:51:04:71:E1:DB
Certificate issuer:       /CN=A91DC302/serialNumber=39BF96994AB4C54C983EE0F510365F4FD9841541
Certificate serial:       23E9
Authority key identifier: 39:BF:96:99:4A:B4:C5:4C:98:3E:E0:F5:10:36:5F:4F:D9:84:15:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/F73763D485FE11EA97A7400AC4F9AE02.roa
Signing time:             Tue 06 Sep 2022 16:12:25 +0000
ROA not before:           Tue 06 Sep 2022 16:12:25 +0000
ROA not after:            Fri 01 Dec 2023 00:00:00 +0000
asID:                     9230
IP address blocks:        103.129.244.0/22 maxlen: 24
                          122.144.8.0/21 maxlen: 24
                          182.163.96.0/19 maxlen: 24
                          202.84.32.0/20 maxlen: 24
                          2402:c000::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9193 (0x23e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC302/serialNumber=39BF96994AB4C54C983EE0F510365F4FD9841541
        Validity
            Not Before: Sep  6 16:12:25 2022 GMT
            Not After : Dec  1 00:00:00 2023 GMT
        Subject: CN=63177168-9c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:06:fe:62:97:2b:6c:b6:c2:3d:bf:04:47:4c:
                    92:db:06:d1:c6:3c:85:5f:eb:04:e1:85:bf:b6:a5:
                    52:57:7b:4b:d8:41:f4:4b:09:ba:60:a4:1d:c1:35:
                    19:7f:74:c7:de:fb:a6:5a:bd:6e:cc:5b:fe:e4:e3:
                    46:c3:f9:b5:b3:3b:93:61:22:a3:e1:ab:8e:5d:4b:
                    73:06:52:f7:26:da:45:34:a5:4a:b3:9c:e9:f8:85:
                    ca:ff:2d:af:f6:fc:a5:97:47:0e:93:79:cf:a9:33:
                    1a:c9:d6:fe:81:66:9e:4c:cf:5c:1d:c9:4f:3a:67:
                    ea:3b:fb:c1:45:11:1c:c4:12:9d:7b:32:81:ec:42:
                    5a:93:a1:b8:ac:b7:3b:6a:c5:fd:2f:54:31:a1:45:
                    73:f8:55:e4:6e:c0:39:da:c0:bc:51:fd:81:bd:84:
                    53:d4:c9:c2:4e:e8:34:e8:13:d8:3f:5d:00:f0:79:
                    7f:4b:74:b2:29:e9:90:19:a0:37:ae:4e:58:fd:bd:
                    e7:c8:9d:fa:88:f5:c8:01:a2:54:30:a4:31:41:eb:
                    25:07:2d:e1:e5:81:5a:26:8f:23:98:8d:80:b6:42:
                    d7:46:5a:d1:25:87:e4:d7:9b:cb:39:97:b9:6b:36:
                    92:6f:f3:fb:a9:b6:44:9b:91:ea:4b:ea:24:a7:f7:
                    19:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:49:9B:69:CC:92:D5:A5:46:41:2F:3A:34:96:EF:51:04:71:E1:DB
            X509v3 Authority Key Identifier:
                keyid:39:BF:96:99:4A:B4:C5:4C:98:3E:E0:F5:10:36:5F:4F:D9:84:15:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/F73763D485FE11EA97A7400AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.244.0/22
                  122.144.8.0/21
                  182.163.96.0/19
                  202.84.32.0/20
                IPv6:
                  2402:c000::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:2c:1c:03:6a:54:62:18:81:5b:69:df:91:ff:27:8f:23:5c:
         8c:76:e9:88:50:76:d7:91:c2:1d:3c:9b:da:62:25:23:b6:a8:
         a7:6a:9b:31:82:18:31:75:d8:94:1b:81:b9:b0:a9:6e:6d:5f:
         b8:78:1a:b6:93:09:db:eb:b4:d0:fa:cc:fc:53:fb:84:56:22:
         c9:b3:9e:f0:2e:e0:1e:9e:fe:29:bb:97:bb:2b:a2:fc:57:09:
         1c:24:6f:38:2f:f6:6f:77:ce:0c:dd:7c:6d:5e:af:58:6e:b6:
         7f:33:9b:98:49:98:bb:b1:69:d7:2b:45:0b:c9:9a:8b:7c:cd:
         d7:97:af:38:4f:7f:b7:42:5e:85:d4:2f:f1:cb:ec:ca:49:8e:
         a2:f3:f5:11:fd:1f:76:0b:33:24:68:50:9d:fc:11:77:a4:f3:
         24:a1:ef:44:bf:b8:18:10:51:d0:c8:2c:63:f3:7b:d0:90:85:
         ee:6d:05:2a:1e:9c:8f:37:ed:ee:78:9a:46:e2:97:4a:c7:3b:
         d3:17:00:d9:2e:26:d0:96:bc:4d:2a:f9:95:24:99:05:f3:35:
         a7:2f:e6:5e:7f:37:d3:3a:a6:7a:e4:dc:03:e9:33:8c:82:bd:
         63:fc:06:ce:f0:1d:47:fd:cf:b2:fd:29:fd:eb:c6:71:40:40:
         07:72:25:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----