Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3A9BA038820211EE86A35A30C4F9AE02.roa
File:                     3A9BA038820211EE86A35A30C4F9AE02.roa (raw, json)
Hash identifier:          iH9Fao2HkW05rntXVyxL3NE1e+AKautctCZNsVb9HLY=
Subject key identifier:   E2:87:E7:75:D8:90:92:FE:54:67:80:17:AD:A0:60:7D:3C:43:96:FA
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0DF0
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3A9BA038820211EE86A35A30C4F9AE02.roa
Signing time:             Mon 13 Nov 2023 08:54:18 +0000
ROA not before:           Mon 13 Nov 2023 08:54:18 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     399045
IP address blocks:        113.203.208.0/24 maxlen: 24
                          113.203.216.0/24 maxlen: 24
                          113.203.229.0/24 maxlen: 24
                          113.203.231.0/24 maxlen: 24
                          113.203.250.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3568 (0xdf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Nov 13 08:54:18 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6551e43a-1cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0b:df:1e:9b:2c:3b:2d:ee:f2:8f:0e:9f:83:
                    d6:34:ae:68:3e:ac:83:42:56:93:aa:a8:07:c4:46:
                    0e:ac:ad:bc:6d:c5:32:53:7e:4a:6e:1d:cd:92:14:
                    37:64:06:58:64:2a:00:83:31:03:e2:c2:20:9c:95:
                    42:73:8a:7c:c3:3a:a7:ba:6a:72:60:80:3b:5b:0f:
                    94:d9:ca:60:82:26:28:ad:0d:18:1b:87:58:11:e8:
                    ed:c8:39:e4:e2:17:6f:cf:56:f7:b5:26:a4:d3:49:
                    45:c4:5c:71:24:4f:65:4f:48:bb:25:d2:1c:7a:75:
                    f6:65:dc:e2:e0:40:b4:0a:11:25:6e:89:ba:a3:48:
                    2a:14:8a:47:7e:f1:a1:dc:61:75:f7:c7:a9:0d:c0:
                    0e:25:fe:64:57:f0:c7:c3:7a:8e:b5:5e:5c:1e:67:
                    31:0e:0e:b8:92:5d:d1:29:a5:04:06:ef:cf:e9:6e:
                    ac:f2:36:5f:92:56:eb:d0:65:37:48:9d:22:c5:7d:
                    26:5c:b9:1b:0d:cb:b7:28:74:8d:34:ff:d8:16:0d:
                    23:a8:93:85:93:3a:6c:31:82:13:66:b7:ab:23:d4:
                    bd:8f:32:5b:ac:45:54:fd:27:96:4a:33:d2:07:62:
                    59:d5:61:39:25:e9:5a:5c:1c:c1:f2:82:a1:73:cd:
                    fc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:87:E7:75:D8:90:92:FE:54:67:80:17:AD:A0:60:7D:3C:43:96:FA
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3A9BA038820211EE86A35A30C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.203.208.0/24
                  113.203.216.0/24
                  113.203.229.0/24
                  113.203.231.0/24
                  113.203.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:1d:c8:3a:6d:af:0a:80:35:2b:ca:26:c5:15:de:72:9e:f8:
         4b:89:b7:87:b8:5a:2e:76:13:ea:77:62:52:b7:f7:4b:cc:36:
         ec:ce:29:d4:c7:93:03:ac:53:eb:40:d4:d2:48:5c:0f:a7:98:
         fb:41:ae:9b:90:49:22:df:86:83:1f:9f:ac:8b:f3:f1:37:d0:
         6c:2f:7d:55:99:8e:ea:f3:c5:f3:0c:ef:55:54:9c:96:0f:2e:
         2e:39:4b:eb:66:9c:b6:c0:01:1e:85:4d:45:cc:d5:01:96:8d:
         30:cc:df:34:7f:f3:89:1a:23:4d:3d:18:1a:59:b5:75:71:d5:
         4c:35:ed:bd:8c:c4:cb:7e:ea:39:25:06:eb:fd:be:fb:a8:76:
         cc:d0:6c:57:dd:2c:80:89:2f:4f:e5:42:4b:c0:3f:bd:b0:cf:
         24:e6:c7:58:1a:dc:44:50:84:10:35:5d:23:5f:93:04:87:e1:
         b6:cf:1b:16:5a:b0:83:ec:d6:38:95:98:1a:ab:ad:72:db:ff:
         42:76:b1:98:07:f3:f3:2e:90:9a:93:49:ec:0b:fd:92:34:23:
         68:2f:93:76:2c:9b:80:49:7c:c4:1e:1d:63:e1:19:b1:8f:ee:
         82:ba:0a:9a:db:ef:fc:91:7a:55:61:b2:b4:7c:8c:09:ea:5f:
         30:b1:61:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----