Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/15F8C8D4263911EEA9448969C4F9AE02.roa
File:                     15F8C8D4263911EEA9448969C4F9AE02.roa (raw, json)
Hash identifier:          nYXp3fACoKXqFmOOOW+X66Q5VKnZ/GGqwakuhERtlQk=
Subject key identifier:   0D:E4:12:E3:3F:1B:FD:47:2E:F6:C1:B7:21:D2:73:76:4D:C1:E4:B1
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0C78
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/15F8C8D4263911EEA9448969C4F9AE02.roa
Signing time:             Wed 19 Jul 2023 13:35:12 +0000
ROA not before:           Wed 19 Jul 2023 13:35:12 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     138241
IP address blocks:        115.167.48.0/24 maxlen: 24
                          115.167.77.0/24 maxlen: 24
                          115.167.78.0/24 maxlen: 24
                          180.178.164.0/22 maxlen: 24
                          202.92.21.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3192 (0xc78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jul 19 13:35:12 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64b7e690-ab90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d0:c4:19:fc:d2:30:46:eb:18:5d:a7:96:c8:
                    66:7f:da:e0:55:4f:f6:85:ab:54:b6:ab:55:26:a9:
                    fe:e2:7a:63:32:44:6f:19:e6:b3:75:9f:4d:2a:81:
                    8e:b4:f1:84:75:29:b2:23:04:41:85:9b:32:c7:1a:
                    01:b4:52:77:0d:3e:75:66:fd:60:f6:f1:bb:61:52:
                    26:77:fb:7b:12:5c:37:97:25:ba:76:6b:ae:bd:c0:
                    94:78:53:93:52:b4:5f:94:74:ca:8e:d7:7e:92:50:
                    95:8a:a9:db:74:f5:38:34:b3:99:18:ca:92:e5:9f:
                    88:61:b7:d9:f4:0b:1e:29:78:1f:3b:e6:eb:c6:92:
                    a3:c7:20:1c:66:4b:af:8c:1e:c3:7e:82:b3:a4:89:
                    55:89:c8:46:29:50:cd:51:ab:5a:79:67:69:ef:a1:
                    19:92:ba:0f:94:24:b2:2f:cc:23:f2:dc:39:6c:b5:
                    b7:3c:62:3d:d3:f8:ce:09:29:67:d4:3e:76:8b:3c:
                    bc:bf:fe:c5:c1:bf:8f:90:6d:cb:88:89:f4:f5:97:
                    06:1c:6d:f1:fe:6c:fc:73:56:b8:e9:15:ec:c3:d4:
                    5b:0f:8a:80:f8:15:52:30:74:9c:ad:8f:f1:17:07:
                    93:36:e2:2e:da:86:a4:2b:9a:99:da:77:84:b1:fd:
                    4c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E4:12:E3:3F:1B:FD:47:2E:F6:C1:B7:21:D2:73:76:4D:C1:E4:B1
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/15F8C8D4263911EEA9448969C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.48.0/24
                  115.167.77.0-115.167.78.255
                  180.178.164.0/22
                  202.92.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:8d:77:64:ef:c5:ed:88:1f:ce:80:0b:54:22:64:c6:92:14:
         ac:b0:0f:bc:5d:8a:86:69:b3:1b:ce:30:9f:4f:5a:49:8e:67:
         a4:6c:6d:3b:60:54:34:c5:5b:da:a2:06:b5:b4:0c:0e:eb:c1:
         33:f6:20:de:ab:8f:37:52:e3:5b:73:1b:83:95:70:c0:04:1e:
         50:cf:6a:1c:41:b7:18:e8:e5:7b:ef:ac:d1:c7:c1:d4:49:10:
         cc:ac:f5:bd:fd:90:42:9a:23:af:2f:83:84:8f:49:9f:ad:e3:
         60:b7:cd:3c:44:97:a9:aa:74:81:8f:11:e4:ab:9b:b4:07:25:
         35:78:ba:67:43:c6:c4:c4:9f:b5:23:d4:05:1a:42:3c:84:1e:
         14:5f:29:f2:c0:7e:7f:8e:55:c5:01:29:bb:cd:97:6f:6a:06:
         5b:59:8c:81:8d:a3:8f:8e:a3:d1:bf:06:cc:92:d8:19:3b:eb:
         25:8a:ef:2c:8d:41:d1:89:14:08:0c:38:01:dc:2c:a0:26:1c:
         6e:fe:0c:21:95:99:e2:7a:86:41:b6:92:a9:ca:8e:60:bb:3e:
         a2:6c:06:f5:e5:90:3f:d5:56:ea:b8:5c:39:7b:24:b4:2d:6a:
         54:39:e9:3e:9f:e6:96:a9:f6:bb:24:1d:d2:84:ee:e2:8d:31:
         e4:a0:25:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----