Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/AF9A7AC46BF711EE8E2E2E2FC4F9AE02.roa
File:                     AF9A7AC46BF711EE8E2E2E2FC4F9AE02.roa (raw, json)
Hash identifier:          9BC1d+f+5LHi470GFwOOoWHz5CgjW/x10QvgmeadNKk=
Subject key identifier:   F1:F5:97:69:EB:B5:2C:12:43:D8:B3:71:67:FE:91:12:F6:F6:87:E2
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0D86
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/AF9A7AC46BF711EE8E2E2E2FC4F9AE02.roa
Signing time:             Mon 16 Oct 2023 07:43:24 +0000
ROA not before:           Mon 16 Oct 2023 07:43:24 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     208485
IP address blocks:        113.203.211.0/24 maxlen: 24
                          113.203.219.0/24 maxlen: 24
                          180.178.171.0/24 maxlen: 24
                          180.178.184.0/24 maxlen: 24
                          180.178.186.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3462 (0xd86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Oct 16 07:43:24 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=652ce99c-8d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:21:b0:66:c8:61:e9:4a:8c:0c:97:5b:87:f3:
                    01:41:4c:b1:5a:a0:33:1c:75:24:6d:0d:a6:a1:c0:
                    f1:94:38:42:13:39:33:19:4c:34:dc:df:50:83:c4:
                    dd:b2:3a:dd:db:a3:b6:cb:60:69:1f:e1:a8:af:3c:
                    62:26:86:82:5b:8a:12:28:ce:91:35:7f:92:b3:d0:
                    c3:45:73:0a:65:1c:be:f0:56:bf:6c:79:ed:72:b1:
                    6c:fd:87:06:30:98:f8:69:28:47:a1:27:ad:0d:55:
                    15:54:7b:59:db:ff:69:9b:e7:9b:89:6e:49:dc:ac:
                    1b:58:b4:a0:ed:e9:a2:82:9a:81:9b:0f:2f:ef:ac:
                    f5:ec:6a:b6:af:40:23:40:f3:00:c5:d3:33:40:85:
                    12:12:93:cd:b2:ca:57:f0:4b:1d:3b:1e:12:1a:81:
                    51:0d:80:e3:ed:21:38:0d:79:d1:ce:63:fa:b4:fe:
                    12:9a:f8:7c:74:a3:39:04:60:1e:5c:5c:b0:3f:b5:
                    f2:4b:47:ba:76:94:3e:d5:cd:8c:c4:37:7d:a9:85:
                    89:03:55:7d:33:19:5b:65:14:38:16:83:e0:f9:8a:
                    23:34:95:e9:b6:36:73:a2:78:2f:45:1a:d2:4e:3a:
                    c5:6f:26:5e:15:bd:bc:9d:dc:8f:22:21:af:2f:90:
                    50:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F5:97:69:EB:B5:2C:12:43:D8:B3:71:67:FE:91:12:F6:F6:87:E2
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/AF9A7AC46BF711EE8E2E2E2FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.203.211.0/24
                  113.203.219.0/24
                  180.178.171.0/24
                  180.178.184.0/24
                  180.178.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:9e:ae:b5:0c:03:bd:0d:d3:60:5c:82:9f:24:73:0d:6c:9a:
         3c:a8:99:de:35:5d:59:fb:4c:2b:4a:1a:37:29:d0:5c:22:88:
         86:79:30:c3:d6:f9:1d:64:af:4e:39:6d:0d:dd:10:2f:d4:72:
         e3:73:6b:5d:1c:70:3c:1f:73:e4:13:45:5f:60:de:2b:d9:47:
         99:2c:ab:84:6f:ce:19:e9:9f:18:fb:c8:dc:ae:8d:03:6f:bc:
         70:d3:2f:d1:55:a5:67:32:fc:04:2c:b9:36:8f:21:dc:13:33:
         dc:c9:d4:85:c1:8e:4b:19:af:eb:e5:03:64:97:58:d2:89:89:
         fe:01:17:a4:c2:58:22:81:65:29:e9:d7:8f:cf:4d:c2:b9:cb:
         4c:71:22:33:4a:86:b9:92:1f:63:74:d1:39:09:07:8a:e3:9f:
         52:87:f5:b0:d3:2d:f4:90:e4:04:1a:a2:0f:da:b8:fc:dd:d8:
         94:85:f8:1a:16:96:45:44:5f:b1:da:b9:c4:a0:ef:ab:dc:93:
         7a:80:92:98:74:a5:49:7b:53:74:84:f1:fb:f8:9f:af:12:fd:
         02:cf:35:eb:4d:1b:26:cc:8f:8c:51:52:c2:7c:21:e0:5f:52:
         66:fb:12:b6:66:e2:2f:c9:8b:4d:3f:1a:23:8f:a2:9c:11:eb:
         14:3a:0b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----