Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/94E78118FFAA11ED81F4244CC4F9AE02.roa
File:                     94E78118FFAA11ED81F4244CC4F9AE02.roa (raw, json)
Hash identifier:          nHxM4IDcht4GH17EXd/IirUHVTbHQOvnpoNBi0yR5Kw=
Subject key identifier:   16:A6:99:2F:3C:76:F1:1C:AA:1A:FB:61:4B:82:5F:4A:A3:77:54:11
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0BF0
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/94E78118FFAA11ED81F4244CC4F9AE02.roa
Signing time:             Wed 31 May 2023 11:59:23 +0000
ROA not before:           Wed 31 May 2023 11:59:23 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     209371
IP address blocks:        113.203.248.0/24 maxlen: 24
                          113.203.249.0/24 maxlen: 24
                          113.203.250.0/24 maxlen: 24
                          113.203.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3056 (0xbf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: May 31 11:59:23 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6477369a-892f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:dd:b6:1c:57:a7:bb:83:3e:57:9a:e8:8e:5d:
                    5e:20:46:02:08:0e:f6:57:7e:c7:45:e9:ba:c6:87:
                    2e:ff:32:71:7f:a9:68:98:d9:a6:6e:53:23:98:16:
                    aa:b2:d3:a9:0f:fe:65:c3:2b:ec:c5:a0:56:1d:01:
                    4e:75:e2:7c:1c:ef:c6:e0:f9:d8:ad:00:9a:ba:59:
                    23:8c:06:cb:28:91:fd:21:71:36:54:2c:60:c3:02:
                    6f:4a:f3:b6:3a:de:8d:fc:8b:86:04:dc:1b:bf:4b:
                    f0:46:1d:67:4b:a4:b7:6b:2a:d0:29:5e:57:61:d9:
                    9c:69:56:7d:9e:75:ec:72:c0:4e:50:7c:87:fd:a8:
                    62:c0:c8:5b:a6:81:83:f0:8f:12:95:22:e6:0a:56:
                    df:fc:a1:a6:48:0f:0f:35:54:51:00:01:b9:7b:da:
                    2e:c9:0c:ef:cb:1b:04:88:3e:28:df:80:ea:5c:72:
                    1a:b8:29:d1:65:90:7f:64:ce:dd:97:aa:1c:73:39:
                    3f:cd:b2:a5:67:66:1a:9a:9e:43:f9:6a:f9:59:9b:
                    74:24:f8:bc:ac:a8:39:a3:0c:5d:fb:19:f0:47:89:
                    1f:01:e2:21:f2:f8:eb:fa:a8:98:c7:66:d0:76:49:
                    43:3f:42:f5:18:01:bf:55:78:e2:11:32:8f:c9:1e:
                    72:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A6:99:2F:3C:76:F1:1C:AA:1A:FB:61:4B:82:5F:4A:A3:77:54:11
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/94E78118FFAA11ED81F4244CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.203.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:3b:51:90:8d:7c:d4:d5:65:ba:b5:68:f2:34:14:5b:ac:c9:
         96:d5:1f:7d:b3:db:1d:e7:00:71:ae:06:23:70:7e:c2:58:c0:
         3c:e4:31:1b:c6:9d:60:e6:d7:62:8f:51:68:0a:2f:02:6c:86:
         46:e1:8b:99:69:8c:08:ee:5a:2d:0f:50:9d:d4:de:bd:18:b8:
         56:68:39:2c:bd:88:ae:7b:50:2f:c5:15:ec:81:89:49:2c:5b:
         1f:ab:b7:46:7c:73:eb:e6:e1:aa:7a:3f:44:cd:6e:8b:e1:7f:
         91:92:b1:f0:c1:e8:a0:21:b2:c2:a3:74:aa:c8:81:a9:01:f7:
         04:9e:95:0d:14:4d:14:74:15:3b:74:17:72:5f:9b:c6:23:2b:
         2e:ad:38:40:cf:55:6c:7e:28:14:df:4b:06:30:c6:89:79:41:
         da:63:e4:f4:28:af:31:91:4c:e8:83:fc:e8:50:88:84:f4:2a:
         6c:c2:5c:b8:89:29:39:92:8c:86:d1:0d:b9:77:f6:02:7d:d8:
         42:12:08:ea:89:96:c6:df:7f:c3:6b:45:58:d0:8a:bf:83:46:
         71:a2:9c:e2:7e:8d:eb:c5:8c:ca:84:7a:4d:32:dc:c9:9e:7b:
         17:d6:db:90:0a:2a:f3:3e:0f:9b:e3:98:95:46:c5:9d:65:ea:
         36:64:4c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----