Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3896860024A011EEA307204EC4F9AE02.roa
File:                     3896860024A011EEA307204EC4F9AE02.roa (raw, json)
Hash identifier:          fqb/T7FZe2HukutXx3EkzG3+Yj6uE2r3d6zqIPDa/RI=
Subject key identifier:   45:6D:D1:A1:D5:F2:E5:CF:01:36:7C:74:35:45:67:FF:07:2F:4D:20
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0C6B
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3896860024A011EEA307204EC4F9AE02.roa
Signing time:             Mon 17 Jul 2023 13:10:32 +0000
ROA not before:           Mon 17 Jul 2023 13:10:32 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     138241
IP address blocks:        43.254.12.0/22 maxlen: 24
                          115.167.48.0/24 maxlen: 24
                          115.167.76.0/24 maxlen: 24
                          115.167.77.0/24 maxlen: 24
                          115.167.78.0/24 maxlen: 24
                          115.167.79.0/24 maxlen: 24
                          180.178.164.0/22 maxlen: 24
                          202.92.21.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3179 (0xc6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jul 17 13:10:32 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64b53dc7-f760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:87:06:59:63:be:f9:6f:2b:71:f0:d6:95:94:
                    45:f6:36:44:6b:2e:5b:b9:2d:d5:c9:e0:b5:69:fd:
                    00:da:ac:31:ac:d5:41:a1:6e:97:d9:18:f9:d5:c3:
                    7a:81:7a:6b:52:3a:24:c0:ba:54:bc:fa:82:84:1d:
                    ef:7f:2f:f3:24:eb:dd:ac:a0:04:97:0e:04:3e:32:
                    de:52:63:c5:b0:5c:a7:31:3d:ea:ec:a3:a3:4f:de:
                    9a:b6:1d:40:ce:84:a4:48:f6:ca:0d:1b:06:3c:1b:
                    2d:b6:93:c3:e5:d3:e0:63:82:b8:98:a0:c9:cd:eb:
                    be:76:97:89:23:7b:40:16:af:ab:31:de:12:05:45:
                    72:02:ab:22:dd:6b:07:3a:17:bc:3f:56:90:d4:a5:
                    95:1d:0e:ff:ca:3a:12:69:c5:34:4e:a7:b7:ce:f6:
                    52:2a:cc:a8:a0:02:d4:14:70:e2:5a:8c:38:ff:70:
                    1e:ad:3d:61:e9:55:f4:af:46:91:41:f4:c3:bd:91:
                    c6:93:3a:68:9a:9f:af:18:6d:19:4c:ca:48:05:29:
                    5f:3b:9c:0e:33:31:1f:cb:70:78:00:54:45:68:53:
                    6e:13:d2:b8:7f:e4:12:fd:1c:2a:27:e5:90:ad:69:
                    b2:63:91:f4:f3:ee:60:24:91:b8:93:e7:1b:76:42:
                    9e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6D:D1:A1:D5:F2:E5:CF:01:36:7C:74:35:45:67:FF:07:2F:4D:20
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3896860024A011EEA307204EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.254.12.0/22
                  115.167.48.0/24
                  115.167.76.0/22
                  180.178.164.0/22
                  202.92.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:c4:fe:23:e8:be:56:63:70:20:39:05:79:5d:00:af:ca:f6:
         f5:fc:c4:6c:9b:b4:0e:47:ae:f5:e5:3d:1b:cc:1c:86:dc:dd:
         ea:b5:45:1c:51:50:8a:7e:17:f1:2a:ee:fd:6e:1b:f4:9d:cb:
         4d:af:8d:8f:0d:9c:5e:41:bd:32:0c:be:ec:59:82:32:30:af:
         5a:62:47:44:c8:76:c1:17:70:4c:0e:b2:d5:2e:26:14:c6:90:
         67:45:f3:23:25:4e:52:15:e3:26:6d:fb:ad:be:ea:e8:9b:f5:
         a0:ff:d7:0e:b4:ee:9c:07:65:4a:78:60:99:9d:55:3b:d0:b7:
         3a:5d:f7:e3:5f:81:76:d0:cc:23:32:df:fb:b6:c8:a1:36:8b:
         11:d9:1c:b4:23:b7:ff:a3:db:04:b7:9c:e9:ab:19:74:02:e6:
         d3:d5:57:2e:f9:10:93:1d:e9:ae:7b:45:66:0e:86:a5:e1:11:
         1e:ec:49:e3:ec:43:52:3a:2d:54:2c:0a:da:28:5b:e3:2b:73:
         9a:7e:2b:72:f2:97:44:1a:2a:f4:02:3b:c3:fc:6a:f0:d3:34:
         52:51:4d:21:9c:bc:76:15:d7:55:d9:ac:d6:ce:8a:66:18:b0:
         6a:9a:04:18:c9:e1:b1:53:4c:9c:54:6d:38:bf:6c:6e:92:6f:
         39:b7:82:53
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICDGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjMwNzE3MTMxMDMyWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGI1M2RjNy1mNzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4ocGWWO++W8rcfDWlZRF9jZEay5buS3VyeC1af0A2qwxrNVBoW6X2Rj51cN6
gXprUjokwLpUvPqChB3vfy/zJOvdrKAElw4EPjLeUmPFsFynMT3q7KOjT96ath1A
zoSkSPbKDRsGPBsttpPD5dPgY4K4mKDJzeu+dpeJI3tAFq+rMd4SBUVyAqsi3WsH
Ohe8P1aQ1KWVHQ7/yjoSacU0Tqe3zvZSKsyooALUFHDiWow4/3AerT1h6VX0r0aR
QfTDvZHGkzpomp+vGG0ZTMpIBSlfO5wOMzEfy3B4AFRFaFNuE9K4f+QS/RwqJ+WQ
rWmyY5H08+5gJJG4k+cbdkKedQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFEVt0aHV
8uXPATZ8dDVFZ/8HL00gMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMzg5Njg2MDAy
NEEwMTFFRUEzMDcyMDRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E
KDAmMCQEAgABMB4DBAIr/gwDBABzpzADBAJzp0wDBAK0sqQDBADKXBUwDQYJKoZI
hvcNAQELBQADggEBAMLE/iPovlZjcCA5BXldAK/K9vX8xGybtA5HrvXlPRvMHIbc
3eq1RRxRUIp+F/Eq7v1uG/Sdy02vjY8NnF5BvTIMvuxZgjIwr1piR0TIdsEXcEwO
stUuJhTGkGdF8yMlTlIV4yZt+62+6uib9aD/1w607pwHZUp4YJmdVTvQtzpd9+Nf
gXbQzCMy3/u2yKE2ixHZHLQjt/+j2wS3nOmrGXQC5tPVVy75EJMd6a57RWYOhqXh
ER7sSePsQ1I6LVQsCtooW+Mrc5p+K3Lyl0QaKvQCO8P8avDTNFJRTSGcvHYV11XZ
rNbOimYYsGqaBBjJ4bFTTJxUbTi/bG6Sbzm3glM=
-----END CERTIFICATE-----