Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6DB8ACB690BF11ED9A87EF53C4F9AE02.roa
File:                     6DB8ACB690BF11ED9A87EF53C4F9AE02.roa (raw, json)
Hash identifier:          32CaxbKWQ3tT17n9RQXbBvJeiQCJIs+KwsVJVyX3H5g=
Subject key identifier:   86:45:AD:72:43:69:71:6F:54:44:94:49:BE:45:78:F6:51:4C:03:AF
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0A65
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6DB8ACB690BF11ED9A87EF53C4F9AE02.roa
Signing time:             Fri 13 Jan 2023 16:29:02 +0000
ROA not before:           Fri 13 Jan 2023 16:29:02 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     38547
IP address blocks:        115.167.0.0/24 maxlen: 24
                          115.167.1.0/24 maxlen: 24
                          115.167.2.0/24 maxlen: 24
                          115.167.4.0/24 maxlen: 24
                          115.167.72.0/22 maxlen: 24
                          115.167.78.0/24 maxlen: 24
                          115.167.104.0/22 maxlen: 24
                          115.167.108.0/22 maxlen: 24
                          115.167.112.0/22 maxlen: 24
                          115.167.116.0/22 maxlen: 24
                          115.167.126.0/24 maxlen: 24
                          115.167.127.0/24 maxlen: 24
                          175.110.96.0/24 maxlen: 24
                          175.110.105.0/24 maxlen: 24
                          175.110.111.0/24 maxlen: 24
                          202.92.16.0/24 maxlen: 24
                          202.92.17.0/24 maxlen: 24
                          202.92.18.0/24 maxlen: 24
                          202.92.19.0/24 maxlen: 24
                          202.92.20.0/24 maxlen: 24
                          202.92.21.0/24 maxlen: 24
                          202.92.23.0/24 maxlen: 24
                          202.92.24.0/24 maxlen: 24
                          202.92.24.32/27 maxlen: 27
                          202.92.25.0/24 maxlen: 24
                          202.92.26.0/24 maxlen: 24
                          202.92.27.0/24 maxlen: 24
                          202.92.28.0/24 maxlen: 24
                          202.92.29.0/24 maxlen: 24
                          202.92.30.0/24 maxlen: 24
                          202.92.31.0/24 maxlen: 24
                          2400:9560:1::/48 maxlen: 48
                          2400:9560:5::/48 maxlen: 48
                          2400:9560:9::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2661 (0xa65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jan 13 16:29:02 2023 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=63c186cd-c162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8c:bd:7e:5e:7e:24:a5:d2:d7:eb:22:ef:bd:
                    4c:f9:2a:44:ee:29:06:9e:3e:86:65:00:bf:f2:2d:
                    0f:c6:04:57:db:e3:bc:67:25:df:70:d1:e8:67:62:
                    f2:33:99:4b:5e:fa:50:06:ee:67:c7:94:e4:8c:d1:
                    70:57:54:13:27:9f:f0:4b:a3:f7:ef:c9:53:1a:9c:
                    81:56:76:a9:0d:38:74:fc:4e:8a:98:97:61:1c:e5:
                    82:07:39:10:d3:87:82:b5:89:b0:bd:a9:fa:20:35:
                    2b:f5:af:17:ec:87:4f:d4:30:dc:d4:28:15:66:15:
                    d2:17:92:3c:9d:ac:e8:41:c1:96:d7:78:43:af:1e:
                    da:64:9b:38:69:5a:e4:fc:24:74:b4:03:4e:e1:83:
                    e1:68:a9:5e:6a:4d:d0:03:46:07:90:41:d5:93:b9:
                    05:0f:8a:b2:6c:2a:a1:7c:43:95:81:fa:3c:88:1d:
                    01:01:5a:93:17:cc:b4:27:19:0f:59:0c:17:7a:2b:
                    9d:b7:3d:7e:d3:79:b7:3f:87:07:5a:cf:2c:d4:3d:
                    83:28:26:fa:ab:d9:24:4a:f2:7c:c3:22:fb:17:e4:
                    56:4d:74:9a:b6:7e:bf:d1:ab:0f:79:fb:b6:61:c3:
                    3c:27:38:0b:52:f9:ef:c1:b5:ef:ea:b6:60:d3:1f:
                    c9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:45:AD:72:43:69:71:6F:54:44:94:49:BE:45:78:F6:51:4C:03:AF
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6DB8ACB690BF11ED9A87EF53C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.0.0-115.167.2.255
                  115.167.4.0/24
                  115.167.72.0/22
                  115.167.78.0/24
                  115.167.104.0-115.167.119.255
                  115.167.126.0/23
                  175.110.96.0/24
                  175.110.105.0/24
                  175.110.111.0/24
                  202.92.16.0-202.92.21.255
                  202.92.23.0-202.92.31.255
                IPv6:
                  2400:9560:1::/48
                  2400:9560:5::/48
                  2400:9560:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:45:fd:71:87:98:a1:f3:69:5f:ea:d6:f9:a0:6d:70:e8:e3:
         39:30:6d:e1:93:c3:e2:01:36:a6:f3:3e:04:33:20:6c:2c:a2:
         46:15:a6:a3:31:72:a9:75:d8:f8:f3:1d:de:12:5a:be:be:f9:
         60:4d:c6:09:7b:46:76:1c:9f:02:b1:a6:2c:f0:a9:5d:5c:98:
         4e:63:6a:6e:5e:bb:77:fd:a4:3e:c8:8a:7f:32:38:a1:0a:a6:
         f7:07:c7:87:ca:26:99:10:13:3a:61:31:ae:8f:5a:a1:6a:be:
         87:5d:ec:bd:a4:0a:00:72:16:23:8d:e8:7d:39:66:80:0e:fe:
         19:da:44:18:c5:8b:0e:7b:01:bd:23:7c:aa:b3:9f:72:7d:44:
         e6:e0:a6:d6:39:bd:df:52:64:0e:b2:7f:0d:78:df:54:55:7d:
         18:09:aa:aa:61:10:1d:ef:fc:c1:1b:22:e9:24:89:63:c8:17:
         03:a0:19:b1:dc:a0:62:61:6c:d0:e0:61:d5:a6:e8:84:9f:59:
         3e:7a:1d:53:ca:ad:7c:c6:72:6e:27:74:f2:ad:82:ae:fa:70:
         bb:d2:79:55:d5:bd:b9:82:72:1b:a0:2b:23:68:87:e5:b2:55:
         c2:76:c4:5d:be:2e:9e:3a:8c:6f:ba:10:dc:dd:5d:ec:52:d8:
         25:d3:1f:71
-----BEGIN CERTIFICATE-----
MIIF8jCCBNqgAwIBAgICCmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjMwMTEzMTYyOTAyWhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2MxODZjZC1jMTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4Yy9fl5+JKXS1+si771M+SpE7ikGnj6GZQC/8i0PxgRX2+O8ZyXfcNHoZ2Ly
M5lLXvpQBu5nx5TkjNFwV1QTJ5/wS6P378lTGpyBVnapDTh0/E6KmJdhHOWCBzkQ
04eCtYmwvan6IDUr9a8X7IdP1DDc1CgVZhXSF5I8nazoQcGW13hDrx7aZJs4aVrk
/CR0tANO4YPhaKleak3QA0YHkEHVk7kFD4qybCqhfEOVgfo8iB0BAVqTF8y0JxkP
WQwXeiudtz1+03m3P4cHWs8s1D2DKCb6q9kkSvJ8wyL7F+RWTXSatn6/0asPefu2
YcM8JzgLUvnvwbXv6rZg0x/JVQIDAQABo4IDFjCCAxIwHQYDVR0OBBYEFIZFrXJD
aXFvVESUSb5FePZRTAOvMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNkRCOEFDQjY5
MEJGMTFFRDlBODdFRjUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgZ8GCCsGAQUFBwEHAQH/
BIGPMIGMMGcEAgABMGEwCwMDAHOnAwQAc6cCAwQAc6cEAwQCc6dIAwQAc6dOMAwD
BANzp2gDBANzp3ADBAFzp34DBACvbmADBACvbmkDBACvbm8wDAMEBMpcEAMEAcpc
FDAMAwQAylwXAwQFylwAMCEEAgACMBsDBwAkAJVgAAEDBwAkAJVgAAUDBwAkAJVg
AAkwDQYJKoZIhvcNAQELBQADggEBAKZF/XGHmKHzaV/q1vmgbXDo4zkwbeGTw+IB
NqbzPgQzIGwsokYVpqMxcql12PjzHd4SWr6++WBNxgl7RnYcnwKxpizwqV1cmE5j
am5eu3f9pD7Iin8yOKEKpvcHx4fKJpkQEzphMa6PWqFqvodd7L2kCgByFiON6H05
ZoAO/hnaRBjFiw57Ab0jfKqzn3J9RObgptY5vd9SZA6yfw1431RVfRgJqqphEB3v
/MEbIukkiWPIFwOgGbHcoGJhbNDgYdWm6ISfWT56HVPKrXzGcm4ndPKtgq76cLvS
eVXVvbmCchugKyNoh+WyVcJ2xF2+Lp46jG+6ENzdXexS2CXTH3E=
-----END CERTIFICATE-----