Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/91420420F69711EBA25C8D71C4F9AE02.roa
File:                     91420420F69711EBA25C8D71C4F9AE02.roa (raw, json)
Hash identifier:          Hwp8QJKqVu18MOsW6hhwNBRuOrJDVaB5nsdnRSYuatk=
Subject key identifier:   A4:25:3F:CE:BF:4E:82:39:D5:BC:EA:1D:E3:DD:9D:4C:E9:90:2A:5F
Certificate issuer:       /CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
Certificate serial:       0334
Authority key identifier: 70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/91420420F69711EBA25C8D71C4F9AE02.roa
Signing time:             Wed 29 Jun 2022 14:22:35 +0000
ROA not before:           Wed 29 Jun 2022 14:22:35 +0000
ROA not after:            Thu 31 Aug 2023 00:00:00 +0000
asID:                     209218
IP address blocks:        103.167.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 820 (0x334)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5
        Validity
            Not Before: Jun 29 14:22:35 2022 GMT
            Not After : Aug 31 00:00:00 2023 GMT
        Subject: CN=62bc602a-b335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:40:0b:13:70:88:dc:44:ca:c0:0a:c4:fd:6b:
                    5e:c3:54:64:f1:68:75:2c:61:fc:b9:b3:49:0e:da:
                    24:90:0b:47:e5:6a:d4:93:97:f9:5e:72:c7:74:ac:
                    21:97:6f:50:a0:72:79:53:d5:7a:af:10:e8:ed:0f:
                    d2:e9:29:7c:47:e7:fd:9e:01:90:87:cc:0f:88:58:
                    f7:96:9c:f5:f4:cd:30:83:2a:d0:0d:cd:ac:17:82:
                    a0:05:32:9c:fb:29:a1:e3:ec:f6:7a:d7:dd:97:18:
                    3d:37:89:7d:31:55:7c:91:25:88:fb:a9:c4:24:21:
                    8c:06:2c:f0:15:0b:3d:01:1d:67:9b:37:3e:0f:a7:
                    68:41:33:c7:7a:76:41:a8:40:0c:60:26:d8:21:24:
                    b8:46:11:ec:ab:63:1c:8c:b3:45:f6:a2:40:6d:62:
                    40:99:f5:01:06:ff:6c:c9:1f:52:c8:06:81:95:00:
                    f9:97:51:cb:a7:06:41:20:a6:97:68:10:f7:55:9b:
                    b6:d8:36:f7:fb:7c:f3:8c:64:00:c7:1c:41:d5:d0:
                    42:ec:3c:57:8e:52:d1:c4:42:d7:a0:f4:ff:09:0e:
                    b9:cb:32:08:88:2d:c3:76:07:87:1d:7d:5f:ce:be:
                    7c:30:2c:7f:53:cb:b5:04:02:5b:92:05:d0:37:64:
                    46:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:25:3F:CE:BF:4E:82:39:D5:BC:EA:1D:E3:DD:9D:4C:E9:90:2A:5F
            X509v3 Authority Key Identifier:
                keyid:70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/91420420F69711EBA25C8D71C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:f6:89:4d:86:85:4f:ee:e9:21:4d:e7:c8:5e:da:ce:a2:f2:
         7f:ac:ad:90:7e:51:c3:f3:9e:de:40:7c:84:c7:bd:a0:39:d0:
         a5:bb:3d:25:96:26:99:a5:2f:f0:41:b7:8d:29:6d:18:46:a6:
         31:17:0c:bf:e1:54:47:7d:45:3a:7b:31:52:e5:10:f1:28:1c:
         ac:ef:90:7f:80:3c:14:cd:dc:57:ad:b3:01:da:6e:68:db:44:
         92:78:ef:e9:79:bf:cc:21:17:c0:9b:cd:85:6a:0d:d7:71:09:
         fa:ad:30:8c:35:82:01:f7:0f:55:41:36:f8:26:b4:ae:db:25:
         70:1a:0b:3c:11:fa:63:56:2b:0d:00:fc:07:f4:e3:e0:21:5e:
         ce:fd:dd:52:64:70:13:5d:0a:a1:72:32:cb:d5:81:97:c5:57:
         ea:de:4a:5d:41:70:8d:63:36:1e:8f:bb:86:20:9f:43:31:96:
         59:1d:8f:97:b3:6e:4e:4e:c3:85:b5:da:d4:8c:95:76:46:a7:
         b6:43:77:67:a0:36:6d:31:4f:94:bd:e6:ce:cb:37:bf:91:6d:
         99:ef:54:e0:a8:45:ff:dd:a6:52:75:83:53:ed:ce:d4:c9:d9:
         dc:e8:2e:02:3f:60:7d:1c:cb:53:eb:fb:d4:c6:8f:81:c4:67:
         81:27:3d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----