Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9B44589654F711EDBF0A4B11C4F9AE02.roa
File:                     9B44589654F711EDBF0A4B11C4F9AE02.roa (raw, json)
Hash identifier:          0L/xzs4EfxixEaR/hyJ3vQ7nQejw40vU2XmosiOmM/M=
Subject key identifier:   4D:17:66:18:B7:0A:9D:87:15:C8:F1:47:99:20:50:B8:8D:BC:D3:B6
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0990
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9B44589654F711EDBF0A4B11C4F9AE02.roa
Signing time:             Wed 26 Oct 2022 06:29:56 +0000
ROA not before:           Wed 26 Oct 2022 06:29:56 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     38547
IP address blocks:        115.167.2.0/24 maxlen: 24
                          115.167.24.0/22 maxlen: 24
                          115.167.28.0/22 maxlen: 24
                          115.167.50.0/24 maxlen: 24
                          115.167.72.0/22 maxlen: 24
                          115.167.116.0/22 maxlen: 24
                          115.167.124.0/22 maxlen: 24
                          202.92.16.0/24 maxlen: 24
                          202.92.17.0/24 maxlen: 24
                          202.92.23.0/24 maxlen: 24
                          202.92.24.0/24 maxlen: 24
                          202.92.24.32/27 maxlen: 27
                          202.92.25.0/24 maxlen: 24
                          202.92.26.0/24 maxlen: 24
                          202.92.27.0/24 maxlen: 24
                          202.92.28.0/24 maxlen: 24
                          202.92.29.0/24 maxlen: 24
                          202.92.30.0/24 maxlen: 24
                          202.92.31.0/24 maxlen: 24
                          2400:9560:1::/48 maxlen: 48
                          2400:9560:5::/48 maxlen: 48
                          2400:9560:9::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2448 (0x990)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Oct 26 06:29:56 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=6358d3e4-3576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7c:d0:b0:b7:58:1e:f7:d8:f0:16:cd:4f:44:
                    14:75:c2:38:e1:94:85:b2:33:36:c4:a8:f1:72:83:
                    5f:f6:65:6f:97:b5:bc:3a:bc:9a:74:dc:05:e0:20:
                    0b:bb:7f:17:14:3b:c3:5a:08:24:59:af:d5:3a:cf:
                    5f:6b:55:f4:60:c9:bd:73:cc:65:9c:da:be:0d:77:
                    30:75:9a:53:02:44:fe:dc:87:a7:1b:25:bd:73:7e:
                    09:44:ba:77:39:84:d7:d4:28:04:e0:d5:ad:e6:83:
                    18:82:3c:6a:18:d6:93:7f:86:cb:62:94:52:df:36:
                    77:4b:f3:aa:9f:53:b9:49:e4:91:f2:7d:4d:f7:58:
                    aa:ea:2e:d6:db:6c:c5:4b:99:9b:c1:73:d1:68:aa:
                    18:d1:f2:58:55:90:f7:a8:a2:47:ce:e4:c6:d9:1d:
                    28:60:dc:55:c5:f3:71:4c:d1:18:d9:2c:f7:87:b3:
                    e5:bd:e1:68:f3:4d:e7:a7:ad:16:31:c9:06:a9:1a:
                    b7:e9:77:fb:59:6c:d3:36:18:e1:d9:48:2d:25:04:
                    09:48:23:10:2c:1b:d7:a0:2d:0b:d1:e2:56:1d:3f:
                    76:7a:0c:6e:9f:1a:f1:ad:d5:d2:da:0c:06:77:1c:
                    9d:bc:63:01:27:d2:3c:33:25:2a:23:55:25:f7:a6:
                    af:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:17:66:18:B7:0A:9D:87:15:C8:F1:47:99:20:50:B8:8D:BC:D3:B6
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9B44589654F711EDBF0A4B11C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.2.0/24
                  115.167.24.0/21
                  115.167.50.0/24
                  115.167.72.0/22
                  115.167.116.0/22
                  115.167.124.0/22
                  202.92.16.0/23
                  202.92.23.0-202.92.31.255
                IPv6:
                  2400:9560:1::/48
                  2400:9560:5::/48
                  2400:9560:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:fb:8e:03:50:ee:f1:96:fc:af:0e:01:08:79:63:d3:d4:19:
         80:96:96:61:b8:82:b8:4a:c5:d9:75:49:c1:09:7a:cd:21:c3:
         be:fc:a3:03:73:40:ae:eb:7f:e9:d8:b5:bc:b2:42:c2:32:dc:
         b1:0a:86:5a:42:4d:10:8f:dc:33:27:4f:3a:e4:28:48:77:ff:
         81:fd:26:c8:3f:09:f0:b3:8f:04:da:6c:11:92:96:30:cf:a0:
         c0:30:62:66:95:4b:36:a0:53:8d:e9:d6:0d:9a:bc:9d:4f:0b:
         22:84:67:52:fe:da:86:d2:95:34:50:8f:d0:87:1e:d2:fb:8c:
         7e:a3:f8:ee:94:78:67:d7:95:c7:8c:de:c0:7b:60:07:76:a1:
         36:4d:87:cb:eb:19:c7:0d:96:f3:25:04:85:a9:18:04:1a:8b:
         53:26:ce:a0:0a:8d:60:0f:99:06:3b:f7:4f:65:26:60:fe:8b:
         4a:ae:b7:b9:d7:59:e5:a8:fa:22:6c:e4:00:54:18:93:48:21:
         8f:75:ab:de:67:4c:20:c7:b5:13:b1:f5:87:d8:54:03:95:c0:
         7f:d4:1d:66:2c:94:bd:8b:7e:1b:7a:92:3a:db:f6:00:51:9e:
         25:d6:c9:f0:13:6e:9e:a7:3f:05:84:47:29:cd:93:c8:0e:c6:
         82:2a:63:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----