Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E0C9B52E249E11EEA265B749C4F9AE02.roa
File:                     E0C9B52E249E11EEA265B749C4F9AE02.roa (raw, json)
Hash identifier:          tk0l+ajOO9itMj2ezYEZDbqf3aBzAooz0CKOO0WfUcs=
Subject key identifier:   C4:FB:80:28:04:E3:AD:D1:11:36:41:E4:CC:43:11:9A:29:7D:CF:5F
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0C5E
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E0C9B52E249E11EEA265B749C4F9AE02.roa
Signing time:             Mon 17 Jul 2023 12:38:49 +0000
ROA not before:           Mon 17 Jul 2023 12:38:49 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     138241
IP address blocks:        43.254.12.0/22 maxlen: 24
                          115.167.28.0/22 maxlen: 24
                          115.167.48.0/24 maxlen: 24
                          115.167.77.0/24 maxlen: 24
                          115.167.78.0/24 maxlen: 24
                          115.167.79.0/24 maxlen: 24
                          180.178.164.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3166 (0xc5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jul 17 12:38:49 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=64b53659-09c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c2:f6:93:97:4e:e0:c7:f4:ca:d6:1d:96:b1:
                    03:bf:73:54:13:61:8f:16:9d:a8:ab:40:5f:2d:78:
                    10:ba:f6:2b:eb:2f:e0:c8:3a:cb:5f:08:bf:82:2f:
                    ec:a3:12:e4:80:8a:7f:de:20:b2:e7:6a:81:51:33:
                    a7:2e:ae:e6:63:66:e9:9b:1c:7d:a9:e0:90:f0:28:
                    91:73:2b:a4:3b:81:73:2d:14:f3:db:c8:e9:d3:bc:
                    7c:0b:56:2c:ca:43:90:b2:73:4a:09:37:e4:0f:03:
                    aa:6b:03:f1:eb:13:dd:f2:7c:d1:49:57:53:52:74:
                    5b:98:41:80:fc:4d:5b:44:76:76:da:bf:57:c0:c6:
                    48:56:b2:a5:50:96:ac:d0:32:47:39:e5:eb:90:7b:
                    0c:cc:41:22:a5:59:47:3e:23:46:78:04:40:41:9e:
                    7c:4a:94:d3:ea:7d:a7:0f:05:e7:a3:0b:bd:00:e8:
                    d2:0a:57:45:de:30:e4:e2:03:5a:41:5d:77:30:9e:
                    62:da:36:39:83:8e:9a:07:dc:86:27:a7:7c:b4:2c:
                    10:55:66:eb:68:a0:38:8b:0c:13:3b:0a:10:dd:a3:
                    90:76:4f:5c:4b:38:46:35:ea:f1:c4:3d:69:40:1f:
                    8c:92:63:bb:0c:75:5e:5f:ff:51:20:16:81:76:19:
                    10:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FB:80:28:04:E3:AD:D1:11:36:41:E4:CC:43:11:9A:29:7D:CF:5F
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E0C9B52E249E11EEA265B749C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.254.12.0/22
                  115.167.28.0/22
                  115.167.48.0/24
                  115.167.77.0-115.167.79.255
                  180.178.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:6f:36:8f:eb:e8:e2:b0:1d:5a:e1:32:19:db:b1:60:2c:72:
         7b:15:cd:a3:04:d4:b4:72:a5:fd:61:5a:31:bf:b4:b8:54:93:
         46:7e:1a:81:86:5c:27:ed:a2:62:c3:f7:68:87:ab:84:f4:3f:
         3d:be:30:ab:ff:7b:e1:c9:b5:28:30:04:71:98:72:6f:ef:44:
         6b:16:f0:59:e6:d1:73:4e:93:8e:0a:e6:79:ec:c0:e5:c4:05:
         42:12:b5:5a:73:7d:99:2d:96:67:de:6a:6f:ce:ce:63:19:a7:
         f4:36:a2:2f:39:97:ec:02:e0:e5:72:79:25:a9:b8:ab:51:1a:
         b7:8e:60:13:df:fc:b9:40:f9:c0:8b:b3:24:74:b1:14:4a:52:
         5d:8b:30:5c:ec:ab:79:09:49:41:48:f3:6c:75:5f:e7:17:cd:
         e7:a8:69:be:ed:38:b4:c5:05:c9:40:a1:55:c0:5c:07:40:3e:
         a7:3f:b3:bf:30:df:fb:b9:88:88:de:d3:3b:88:55:4e:83:0c:
         0c:b8:a7:47:bc:45:60:08:52:1f:13:5d:3d:97:ea:b1:ff:82:
         6f:eb:df:6f:37:c7:ac:e7:ff:fe:1c:c0:bd:9b:ba:77:2e:95:
         db:32:ee:29:78:a7:8b:37:9e:02:a5:59:b2:72:0e:d0:38:ac:
         24:c6:fa:dd
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgICDF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjMwNzE3MTIzODQ5WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGI1MzY1OS0wOWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyML2k5dO4Mf0ytYdlrEDv3NUE2GPFp2oq0BfLXgQuvYr6y/gyDrLXwi/gi/s
oxLkgIp/3iCy52qBUTOnLq7mY2bpmxx9qeCQ8CiRcyukO4FzLRTz28jp07x8C1Ys
ykOQsnNKCTfkDwOqawPx6xPd8nzRSVdTUnRbmEGA/E1bRHZ22r9XwMZIVrKlUJas
0DJHOeXrkHsMzEEipVlHPiNGeARAQZ58SpTT6n2nDwXnowu9AOjSCldF3jDk4gNa
QV13MJ5i2jY5g46aB9yGJ6d8tCwQVWbraKA4iwwTOwoQ3aOQdk9cSzhGNerxxD1p
QB+MkmO7DHVeX/9RIBaBdhkQ7wIDAQABo4ICtTCCArEwHQYDVR0OBBYEFMT7gCgE
463RETZB5MxDEZopfc9fMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvRTBDOUI1MkUy
NDlFMTFFRUEyNjVCNzQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E
MDAuMCwEAgABMCYDBAIr/gwDBAJzpxwDBABzpzAwDAMEAHOnTQMEBHOnQAMEArSy
pDANBgkqhkiG9w0BAQsFAAOCAQEAB282j+vo4rAdWuEyGduxYCxyexXNowTUtHKl
/WFaMb+0uFSTRn4agYZcJ+2iYsP3aIerhPQ/Pb4wq/974cm1KDAEcZhyb+9Eaxbw
WebRc06TjgrmeezA5cQFQhK1WnN9mS2WZ95qb87OYxmn9DaiLzmX7ALg5XJ5Jam4
q1Eat45gE9/8uUD5wIuzJHSxFEpSXYswXOyreQlJQUjzbHVf5xfN56hpvu04tMUF
yUChVcBcB0A+pz+zvzDf+7mIiN7TO4hVToMMDLinR7xFYAhSHxNdPZfqsf+Cb+vf
bzfHrOf//hzAvZu6dy6V2zLuKXinizeeAqVZsnIO0DisJMb63Q==
-----END CERTIFICATE-----