Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D812BC28312911EDB244411CC4F9AE02.roa
File:                     D812BC28312911EDB244411CC4F9AE02.roa (raw, json)
Hash identifier:          hyThxV70WI9b0L4rKbFGjEiYCMOCpKC0qMdY2GOpstc=
Subject key identifier:   35:B4:B3:3E:FE:04:04:FE:21:6B:1E:FE:48:68:FB:BC:84:43:3B:FF
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       091F
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D812BC28312911EDB244411CC4F9AE02.roa
Signing time:             Wed 14 Sep 2022 06:39:01 +0000
ROA not before:           Wed 14 Sep 2022 06:39:01 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     38547
IP address blocks:        115.167.2.0/24 maxlen: 24
                          115.167.20.0/22 maxlen: 24
                          115.167.24.0/22 maxlen: 24
                          115.167.28.0/22 maxlen: 24
                          115.167.50.0/24 maxlen: 24
                          115.167.72.0/22 maxlen: 24
                          175.110.64.0/22 maxlen: 24
                          175.110.80.0/21 maxlen: 24
                          175.110.88.0/22 maxlen: 24
                          175.110.104.0/24 maxlen: 24
                          175.110.107.2/32 maxlen: 32
                          175.110.107.14/32 maxlen: 32
                          175.110.107.114/32 maxlen: 32
                          202.92.16.0/24 maxlen: 24
                          202.92.17.0/24 maxlen: 24
                          202.92.18.0/24 maxlen: 24
                          202.92.19.0/24 maxlen: 24
                          202.92.20.0/24 maxlen: 24
                          202.92.21.0/24 maxlen: 24
                          202.92.23.0/24 maxlen: 24
                          202.92.24.0/24 maxlen: 24
                          202.92.24.32/27 maxlen: 27
                          202.92.25.0/24 maxlen: 24
                          202.92.26.0/24 maxlen: 24
                          202.92.27.0/24 maxlen: 24
                          202.92.28.0/24 maxlen: 24
                          202.92.29.0/24 maxlen: 24
                          202.92.30.0/24 maxlen: 24
                          202.92.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2335 (0x91f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Sep 14 06:39:01 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=63217705-7cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:84:64:15:83:15:c1:00:f2:2b:7c:70:85:8f:
                    3b:ba:d4:97:90:60:d3:6e:14:e5:fa:e8:e4:99:f3:
                    5e:7a:4a:07:b2:0c:e1:e3:46:60:18:8d:6b:1d:d8:
                    d1:ac:92:71:eb:e9:a3:4a:7b:99:70:41:5d:42:b1:
                    a4:c6:7c:33:d8:4d:ef:37:a7:a3:5d:3d:a8:cd:d9:
                    51:ea:90:6c:cc:38:e1:db:f0:35:75:76:30:26:04:
                    86:86:42:4c:e6:1b:e3:6f:c4:d0:89:d2:6f:5d:17:
                    73:e1:ba:9b:9c:30:ec:b0:bb:c6:98:91:6c:9d:14:
                    34:50:c9:1c:cf:07:9a:af:ce:71:d1:4e:af:72:eb:
                    d3:78:01:5e:fb:9b:f0:f0:3a:c9:70:60:18:63:60:
                    45:a4:c3:b4:78:7a:2e:b7:7a:b5:4d:fc:57:56:a3:
                    fa:e6:48:d4:7b:81:a9:3c:67:ab:bc:17:d3:30:d5:
                    05:b6:b5:e0:d6:81:a6:27:c9:26:b6:98:ec:d5:0c:
                    3f:ca:50:09:88:f7:fd:bd:da:cb:e6:db:3d:39:80:
                    12:74:1c:2a:27:93:6a:56:19:34:81:f6:90:48:99:
                    58:e0:07:db:c6:c9:e3:38:3f:d8:ba:3a:fc:cf:9c:
                    60:b8:1a:cb:97:37:d2:76:2a:fd:4b:ba:c1:a2:ae:
                    fe:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B4:B3:3E:FE:04:04:FE:21:6B:1E:FE:48:68:FB:BC:84:43:3B:FF
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D812BC28312911EDB244411CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.2.0/24
                  115.167.20.0-115.167.31.255
                  115.167.50.0/24
                  115.167.72.0/22
                  175.110.64.0/22
                  175.110.80.0-175.110.91.255
                  175.110.104.0/24
                  175.110.107.2/32
                  175.110.107.14/32
                  175.110.107.114/32
                  202.92.16.0-202.92.21.255
                  202.92.23.0-202.92.31.255

    Signature Algorithm: sha256WithRSAEncryption
         c0:fc:05:64:88:45:66:ef:82:77:b5:cf:47:0c:2d:c6:45:0d:
         2f:47:b2:01:b7:b3:bf:93:b8:c3:a3:64:a5:dd:bb:20:1d:c5:
         66:45:87:ac:b2:9b:b7:64:d6:9f:8d:77:7a:ec:b3:bc:49:4f:
         44:1b:e4:8b:ea:25:02:48:c1:38:03:2b:73:46:6a:e2:0b:6e:
         00:06:82:02:f6:2f:1a:44:6c:5e:24:20:1b:ac:38:8e:e0:75:
         4a:3a:9c:45:eb:2e:dd:9c:2a:64:9d:33:d6:c7:3f:32:24:b1:
         7c:ea:a0:f2:66:79:9c:1c:fa:cc:99:73:a9:33:64:5b:04:d2:
         64:36:32:22:82:0c:35:84:58:28:c8:db:a4:0b:ea:7e:15:1b:
         f7:42:e4:f1:50:5a:e9:07:96:65:f4:0e:e7:78:3b:51:41:36:
         13:68:b9:fa:59:95:03:c7:f6:9a:5f:6b:48:c5:7c:17:a2:7c:
         96:5c:30:ab:6f:2c:fb:7e:d6:9e:68:06:35:2f:c1:5c:21:ce:
         7e:1d:59:35:f5:99:5b:f6:1f:bf:61:70:6d:63:4b:e2:6e:f6:
         87:60:86:46:5f:3f:0d:2d:db:77:8e:35:42:63:f1:94:bf:03:
         35:ab:14:01:4b:b3:4d:4f:da:aa:28:ac:45:45:b8:de:10:ff:
         6f:a4:c9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----