Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5972ADFADF7B11ED8BC70414C4F9AE02.roa
File:                     5972ADFADF7B11ED8BC70414C4F9AE02.roa (raw, json)
Hash identifier:          JJETswGEU3L5+2bUMLYdFREs4UXJSK9jULKqimagZcg=
Subject key identifier:   56:0E:1F:F7:6E:56:05:EC:33:53:7C:64:1D:8B:59:81:7B:0D:E4:ED
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0BD8
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5972ADFADF7B11ED8BC70414C4F9AE02.roa
Signing time:             Thu 25 May 2023 10:25:06 +0000
ROA not before:           Thu 25 May 2023 10:25:06 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     140900
IP address blocks:        113.203.209.0/24 maxlen: 24
                          113.203.246.0/24 maxlen: 24
                          180.178.140.0/24 maxlen: 24
                          180.178.141.0/24 maxlen: 24
                          180.178.142.0/24 maxlen: 24
                          223.29.239.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3032 (0xbd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May 25 10:25:06 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=646f3782-efe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:19:71:4f:fe:f1:28:2b:99:ae:8e:20:12:c3:
                    8d:a8:ac:44:db:9e:66:f6:8f:2f:6d:dd:0c:4d:29:
                    71:95:94:32:47:56:10:16:94:5d:3e:88:fc:21:6e:
                    74:a7:2a:ac:04:a2:5d:b8:8e:03:a0:cc:70:fd:4e:
                    b9:b7:89:df:19:8a:6e:c0:8e:4c:82:e6:91:ca:ba:
                    8c:2e:5e:09:f1:16:ee:e6:92:97:70:5d:6f:b1:0e:
                    d0:fe:72:03:26:a8:0e:3f:c9:35:36:54:42:b1:72:
                    38:65:19:48:25:3e:1a:ca:ba:3c:2c:83:4e:0a:e2:
                    ba:fa:6f:26:4d:03:4a:18:6a:ae:69:39:43:d4:0e:
                    16:50:b5:5c:a5:15:07:bb:38:7a:51:17:a4:e9:45:
                    12:2c:60:15:15:19:92:e2:fa:ea:55:f3:7f:f6:68:
                    ea:a1:50:c4:c8:8c:05:8b:47:d3:76:00:24:52:03:
                    24:dc:9d:75:b2:9d:75:d5:22:58:9b:78:19:ad:91:
                    cb:f1:3a:fb:c1:b1:e2:ef:83:bd:eb:44:f9:2a:9c:
                    0a:25:58:93:e8:06:52:b1:8e:12:e6:57:20:68:2e:
                    12:f7:ae:f9:98:6d:84:b2:19:68:1d:5d:80:ff:20:
                    42:22:6a:d9:f9:35:95:b0:ca:fd:ee:ce:10:84:19:
                    4c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0E:1F:F7:6E:56:05:EC:33:53:7C:64:1D:8B:59:81:7B:0D:E4:ED
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5972ADFADF7B11ED8BC70414C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.203.209.0/24
                  113.203.246.0/24
                  180.178.140.0-180.178.142.255
                  223.29.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:6d:b1:84:8a:24:ed:c0:d4:42:51:13:5c:87:06:c7:a2:d4:
         31:63:0a:24:48:2b:fc:d9:86:38:38:02:ff:82:75:99:1e:fc:
         56:aa:a9:f3:74:55:67:2d:7f:3d:86:ca:44:df:63:8c:fe:89:
         73:ce:d2:97:c7:0e:87:e2:41:68:14:d2:8f:51:8e:cb:55:f3:
         09:5b:40:37:d2:51:11:6b:96:b7:34:0c:ed:e9:b9:96:7e:8c:
         df:d8:bc:8c:8e:d2:2c:03:58:8a:69:51:e5:f7:be:bd:97:8e:
         56:65:ee:73:a0:50:73:99:7c:9e:72:9f:f5:51:6b:a9:f3:f0:
         95:ad:b4:1a:ed:ae:69:7a:e6:6c:ae:74:fd:e9:4c:a7:20:8f:
         c0:2b:f6:6c:24:75:6a:75:98:bf:8a:f2:35:4e:f3:51:a2:47:
         1b:b5:1b:2f:40:28:58:1b:f4:7b:11:c2:38:60:6f:07:70:e5:
         9d:97:4d:b9:60:29:f0:69:fb:fd:b1:44:ee:9b:18:2f:18:f2:
         c3:9e:98:65:c8:3f:6d:22:3e:78:ae:e4:4c:cb:a9:55:52:15:
         c4:6c:87:a8:36:2e:fb:92:4f:7d:63:09:15:8a:13:7d:19:4f:
         24:78:0d:12:f9:7d:5c:7b:93:f9:da:41:cf:55:b6:7f:19:73:
         db:3a:b6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----