Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C6CA7CC261B611EDA25A2B83C4F9AE02.roa
File:                     C6CA7CC261B611EDA25A2B83C4F9AE02.roa (raw, json)
Hash identifier:          m7WdEegCFyE59/hEk8tqdpV/0wbtdp5D4fa7g8ScsVc=
Subject key identifier:   5B:40:AB:D8:2A:E9:26:46:3E:21:E2:4D:D4:B7:13:75:5F:CF:79:65
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       09C9
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C6CA7CC261B611EDA25A2B83C4F9AE02.roa
Signing time:             Fri 11 Nov 2022 12:09:54 +0000
ROA not before:           Fri 11 Nov 2022 12:09:54 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     38547
IP address blocks:        103.151.27.0/24 maxlen: 24
                          115.167.2.0/24 maxlen: 24
                          115.167.72.0/22 maxlen: 24
                          115.167.78.0/24 maxlen: 24
                          115.167.108.0/22 maxlen: 24
                          115.167.116.0/22 maxlen: 24
                          115.167.120.0/22 maxlen: 24
                          115.167.125.0/24 maxlen: 24
                          115.167.126.0/24 maxlen: 24
                          115.167.127.0/24 maxlen: 24
                          175.110.96.0/24 maxlen: 24
                          202.92.16.0/24 maxlen: 24
                          202.92.17.0/24 maxlen: 24
                          202.92.23.0/24 maxlen: 24
                          202.92.24.0/24 maxlen: 24
                          202.92.24.32/27 maxlen: 27
                          202.92.25.0/24 maxlen: 24
                          202.92.26.0/24 maxlen: 24
                          202.92.27.0/24 maxlen: 24
                          202.92.28.0/24 maxlen: 24
                          202.92.29.0/24 maxlen: 24
                          202.92.30.0/24 maxlen: 24
                          202.92.31.0/24 maxlen: 24
                          2400:9560:1::/48 maxlen: 48
                          2400:9560:5::/48 maxlen: 48
                          2400:9560:9::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2505 (0x9c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Nov 11 12:09:54 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=636e3b91-2e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:64:73:d9:65:bb:a9:93:6c:57:6e:84:b6:bb:
                    bc:73:f8:da:6c:21:f1:17:ab:63:1c:57:ba:aa:cc:
                    65:6c:d5:d5:73:d5:f9:9f:c3:0b:5d:5c:91:10:9d:
                    0f:e9:3c:b5:9d:94:a0:2f:12:b5:f1:7b:c8:e2:c7:
                    ee:b9:14:af:36:e8:d0:ea:64:ac:58:fe:7a:cc:57:
                    0a:2b:8e:27:31:ea:6d:b9:c4:a2:0c:2d:e2:ac:49:
                    50:e3:e3:ff:2f:02:88:57:89:cf:1e:f3:4f:a8:b5:
                    f2:85:bb:b1:9a:e2:04:52:eb:9b:51:a1:27:19:df:
                    77:ee:24:c6:03:2d:87:d7:61:d0:e8:b6:b1:e4:55:
                    0b:64:96:84:56:08:89:c4:78:ac:49:53:80:d7:48:
                    76:45:6f:ff:62:ea:97:85:c7:18:7e:0b:d7:d9:29:
                    4c:73:25:a2:dc:11:f8:9f:06:4d:26:3f:ff:99:7b:
                    68:46:ab:b3:18:0e:9d:e0:f7:14:9f:e5:fc:f2:23:
                    90:e0:2e:6c:f7:e3:53:95:70:14:a2:81:af:03:5f:
                    a2:05:3d:76:2e:85:4b:43:e3:9f:63:8f:ac:0f:06:
                    5b:3a:81:47:c1:83:02:fb:13:67:df:b6:76:31:27:
                    36:37:41:94:13:1b:05:f9:55:d7:02:97:2e:8d:25:
                    d2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:40:AB:D8:2A:E9:26:46:3E:21:E2:4D:D4:B7:13:75:5F:CF:79:65
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C6CA7CC261B611EDA25A2B83C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.27.0/24
                  115.167.2.0/24
                  115.167.72.0/22
                  115.167.78.0/24
                  115.167.108.0/22
                  115.167.116.0-115.167.123.255
                  115.167.125.0-115.167.127.255
                  175.110.96.0/24
                  202.92.16.0/23
                  202.92.23.0-202.92.31.255
                IPv6:
                  2400:9560:1::/48
                  2400:9560:5::/48
                  2400:9560:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:a7:ab:ed:e0:6b:5f:c5:a0:89:2c:a0:83:96:8c:cb:65:d1:
         92:84:7e:37:d2:fb:61:9d:11:50:40:00:f3:57:fe:14:e5:85:
         5e:06:10:91:79:6c:e9:60:e7:86:a1:5c:f9:8e:8e:64:f7:f0:
         dc:e0:c8:e8:ff:e1:4e:0b:81:f2:ef:5c:b8:41:86:bd:43:ac:
         76:54:d9:78:db:31:8c:22:e1:11:47:b3:98:71:25:09:6a:88:
         e1:d5:69:49:11:34:15:5c:9a:f7:d6:1f:06:fe:f2:0e:7d:b8:
         8d:1f:5f:cb:ac:41:dd:29:cc:27:62:1d:30:9e:24:d1:dc:f7:
         6d:10:c0:11:ba:1c:64:d1:ad:74:a3:02:ef:45:17:55:bd:eb:
         ea:64:ae:d0:3f:bd:d3:36:e0:22:10:fb:b3:57:0b:13:00:96:
         93:b8:97:c6:ca:4c:f2:32:58:e1:56:93:fb:cd:6b:1a:1d:97:
         98:9d:56:92:75:01:a1:0e:28:1e:26:85:b3:e5:fb:34:81:b7:
         5b:2c:5b:93:71:59:5b:49:c8:37:91:90:3e:93:58:b1:1f:83:
         f5:a3:13:2d:9e:b6:b5:35:ed:1d:ca:dc:7c:99:3c:af:c5:c5:
         82:78:1c:be:04:ce:49:8c:ec:b9:de:7b:64:dd:0b:76:94:a0:
         e0:d3:c9:99
-----BEGIN CERTIFICATE-----
MIIF5DCCBMygAwIBAgICCckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjIxMTExMTIwOTU0WhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzZlM2I5MS0yZThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsmRz2WW7qZNsV26Etru8c/jabCHxF6tjHFe6qsxlbNXVc9X5n8MLXVyREJ0P
6Ty1nZSgLxK18XvI4sfuuRSvNujQ6mSsWP56zFcKK44nMeptucSiDC3irElQ4+P/
LwKIV4nPHvNPqLXyhbuxmuIEUuubUaEnGd937iTGAy2H12HQ6Lax5FULZJaEVgiJ
xHisSVOA10h2RW//YuqXhccYfgvX2SlMcyWi3BH4nwZNJj//mXtoRquzGA6d4PcU
n+X88iOQ4C5s9+NTlXAUooGvA1+iBT12LoVLQ+OfY4+sDwZbOoFHwYMC+xNn37Z2
MSc2N0GUExsF+VXXApcujSXS0QIDAQABo4IDCDCCAwQwHQYDVR0OBBYEFFtAq9gq
6SZGPiHiTdS3E3Vfz3llMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQzZDQTdDQzI2
MUI2MTFFREEyNUEyQjgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgZEGCCsGAQUFBwEHAQH/
BIGBMH8wWgQCAAEwVAMEAGeXGwMEAHOnAgMEAnOnSAMEAHOnTgMEAnOnbDAMAwQC
c6d0AwQCc6d4MAwDBABzp30DBAdzpwADBACvbmADBAHKXBAwDAMEAMpcFwMEBcpc
ADAhBAIAAjAbAwcAJACVYAABAwcAJACVYAAFAwcAJACVYAAJMA0GCSqGSIb3DQEB
CwUAA4IBAQBup6vt4GtfxaCJLKCDlozLZdGShH430vthnRFQQADzV/4U5YVeBhCR
eWzpYOeGoVz5jo5k9/Dc4Mjo/+FOC4Hy71y4QYa9Q6x2VNl42zGMIuERR7OYcSUJ
aojh1WlJETQVXJr31h8G/vIOfbiNH1/LrEHdKcwnYh0wniTR3PdtEMARuhxk0a10
owLvRRdVvevqZK7QP73TNuAiEPuzVwsTAJaTuJfGykzyMljhVpP7zWsaHZeYnVaS
dQGhDigeJoWz5fs0gbdbLFuTcVlbScg3kZA+k1ixH4P1oxMtnra1Ne0dytx8mTyv
xcWCeBy+BM5JjOy53ntk3Qt2lKDg08mZ
-----END CERTIFICATE-----