Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4D3FB64A4A0211ED9F5C287DC4F9AE02.roa
File:                     4D3FB64A4A0211ED9F5C287DC4F9AE02.roa (raw, json)
Hash identifier:          938rYRnx/NotGbsxLA87rGYalST/vDxMg2DQxrZVHmg=
Subject key identifier:   A4:0E:65:9E:83:6D:B3:22:60:4F:4D:13:A1:B3:0A:C3:52:07:26:B8
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       097B
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4D3FB64A4A0211ED9F5C287DC4F9AE02.roa
Signing time:             Wed 12 Oct 2022 07:48:47 +0000
ROA not before:           Wed 12 Oct 2022 07:48:47 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     30823
IP address blocks:        115.167.108.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2427 (0x97b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Oct 12 07:48:47 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=6346715e-4898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:52:6d:2e:37:92:18:b1:6c:03:2b:b3:0d:54:
                    a3:dc:6a:bb:65:c8:cb:c9:a8:12:a1:e5:01:10:4b:
                    e1:ad:56:98:33:77:9a:9d:34:4f:81:62:53:dd:96:
                    8d:c2:62:71:e2:e6:e6:c5:e5:8e:86:75:81:8c:e4:
                    38:58:9d:9c:b8:59:73:c3:b6:cc:bb:16:99:36:1b:
                    03:b5:c1:ff:97:dc:03:f8:d7:5b:9c:ed:27:b1:a2:
                    2f:a7:bd:62:35:d4:06:a3:28:7b:23:0c:e8:9d:6c:
                    0a:20:1d:a6:89:1f:ea:b3:bd:67:ad:d4:7f:2d:62:
                    b0:16:c6:b4:88:24:da:3c:b4:ff:9e:4d:b3:f4:f4:
                    ab:e4:a3:cc:23:b1:1a:0d:ed:d2:3a:e6:e8:3c:90:
                    b4:82:66:5a:89:b5:53:fb:29:ae:d6:69:96:2f:e2:
                    23:37:df:b5:6c:31:9b:e6:b5:5a:b3:6d:f8:b0:b6:
                    71:75:36:bb:5c:07:36:ee:0f:e9:ba:df:5f:75:41:
                    3d:5e:f7:b3:d5:f3:2c:1f:25:34:f7:5f:c8:77:4d:
                    0c:c3:5e:7f:bd:cc:4b:15:36:25:a6:5e:c7:33:7d:
                    d7:d4:29:52:03:c4:88:24:16:d0:24:df:04:7b:15:
                    54:a7:59:07:73:e8:52:d7:43:c4:bf:8e:1a:11:71:
                    ee:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0E:65:9E:83:6D:B3:22:60:4F:4D:13:A1:B3:0A:C3:52:07:26:B8
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4D3FB64A4A0211ED9F5C287DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:bb:07:17:c1:3e:6b:5d:07:0a:54:76:b8:64:5f:ad:42:3e:
         27:6e:9f:49:5c:e4:ee:fc:b0:41:0b:6d:1e:b3:f1:66:41:97:
         2b:08:d5:5e:bc:d9:49:ac:da:bf:03:a1:4f:a0:ac:eb:4f:aa:
         e8:e2:0e:1f:0a:12:ea:dc:eb:a1:e8:91:bd:c2:87:55:68:50:
         1d:60:11:0d:a8:e2:8a:e0:29:0b:b2:18:5c:1d:ea:57:da:c8:
         2e:18:eb:46:bd:db:4a:ac:fd:f1:7d:16:65:d7:49:b6:3b:8a:
         f6:d9:b8:9a:44:6d:e1:1d:a3:32:e3:83:e2:61:0e:30:25:06:
         6e:5e:16:a0:17:f6:b6:e3:94:17:86:73:20:f8:11:85:a1:84:
         57:09:83:46:ff:1d:73:e7:21:fa:1e:3d:f1:ef:6f:73:8c:f2:
         6a:07:d4:4d:91:66:e7:12:b3:f8:98:65:93:34:08:0f:e3:f3:
         c8:c0:fe:2b:82:07:49:4c:42:90:99:2c:87:e2:1c:77:37:ec:
         86:01:a6:e7:9b:fd:c4:a2:b5:27:9e:52:ca:25:7a:55:09:27:
         00:3d:2d:ad:43:74:8e:4a:d0:4e:ba:96:29:c3:26:b7:39:ff:
         28:37:e4:e7:4e:df:ff:de:b2:d4:e8:5a:00:2b:04:9d:e8:52:
         4c:85:7d:fe
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjIxMDEyMDc0ODQ3WhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzQ2NzE1ZS00ODk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwlJtLjeSGLFsAyuzDVSj3Gq7ZcjLyagSoeUBEEvhrVaYM3eanTRPgWJT3ZaN
wmJx4ubmxeWOhnWBjOQ4WJ2cuFlzw7bMuxaZNhsDtcH/l9wD+NdbnO0nsaIvp71i
NdQGoyh7IwzonWwKIB2miR/qs71nrdR/LWKwFsa0iCTaPLT/nk2z9PSr5KPMI7Ea
De3SOuboPJC0gmZaibVT+ymu1mmWL+IjN9+1bDGb5rVas234sLZxdTa7XAc27g/p
ut9fdUE9Xvez1fMsHyU091/Id00Mw15/vcxLFTYlpl7HM33X1ClSA8SIJBbQJN8E
exVUp1kHc+hS10PEv44aEXHuZQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKQOZZ6D
bbMiYE9NE6GzCsNSBya4MB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNEQzRkI2NEE0
QTAyMTFFRDlGNUMyODdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJzp2wwDQYJKoZIhvcNAQELBQADggEBAAW7BxfBPmtdBwpU
drhkX61CPidun0lc5O78sEELbR6z8WZBlysI1V682Ums2r8DoU+grOtPqujiDh8K
Eurc66Hokb3Ch1VoUB1gEQ2o4orgKQuyGFwd6lfayC4Y60a920qs/fF9FmXXSbY7
ivbZuJpEbeEdozLjg+JhDjAlBm5eFqAX9rbjlBeGcyD4EYWhhFcJg0b/HXPnIfoe
PfHvb3OM8moH1E2RZucSs/iYZZM0CA/j88jA/iuCB0lMQpCZLIfiHHc37IYBpueb
/cSitSeeUsolelUJJwA9La1DdI5K0E66linDJrc5/yg35OdO3//estToWgArBJ3o
UkyFff4=
-----END CERTIFICATE-----