Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E3B8BEBADCF511ED8458BD5BC4F9AE02.roa
File:                     E3B8BEBADCF511ED8458BD5BC4F9AE02.roa (raw, json)
Hash identifier:          6+MeN8R74ms7AzjkQbVzXrFFXRhSca+9tMH4rqTGQfI=
Subject key identifier:   77:01:6B:D2:1A:B6:65:81:E1:E8:9B:8B:29:DF:CB:6F:44:A2:BA:AC
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0AD7
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E3B8BEBADCF511ED8458BD5BC4F9AE02.roa
Signing time:             Mon 17 Apr 2023 08:00:16 +0000
ROA not before:           Mon 17 Apr 2023 08:00:16 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     140732
IP address blocks:        103.11.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2775 (0xad7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Apr 17 08:00:16 2023 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=643cfc90-01ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6b:fa:2c:29:ed:4e:a8:de:ae:51:f0:45:d3:
                    06:c3:d6:ad:cb:22:ad:09:1d:4f:14:6a:15:ae:ff:
                    a0:e1:2e:0f:93:bc:06:b8:b5:49:bc:e0:92:2a:96:
                    e4:b1:1a:83:57:55:61:80:32:49:82:cb:44:96:28:
                    1f:d7:56:c2:8e:09:90:85:ef:b3:e9:9f:16:0b:9b:
                    59:7d:b0:4c:df:bc:06:0b:a2:a8:9d:ef:83:d6:3e:
                    70:f0:14:dd:b2:0d:79:14:40:35:09:a9:3f:80:a4:
                    05:7d:05:92:b6:3b:35:7b:c0:e6:1b:d7:8d:4b:62:
                    5c:08:97:b3:79:c5:d8:a0:3d:01:6b:ed:b6:ca:8c:
                    fd:2d:ff:eb:58:99:d4:3b:92:0d:dd:0c:7a:86:6d:
                    77:b9:ed:23:e7:b1:3c:a1:5d:71:13:4d:77:c2:a3:
                    0d:68:c0:03:52:33:80:67:c7:0c:00:bb:fc:e7:db:
                    26:cd:32:bb:d8:2f:65:39:24:64:59:fe:3d:b3:4e:
                    f6:88:61:8e:b5:51:df:90:a7:8d:0b:21:8c:c7:c2:
                    23:50:49:70:49:3b:93:da:08:cb:6b:db:ad:79:cf:
                    b1:c4:9f:cf:da:2c:55:46:fb:e6:53:0b:d1:36:63:
                    a6:b9:a9:f2:2d:21:12:ab:f3:b8:e3:c8:2d:e2:e7:
                    77:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:01:6B:D2:1A:B6:65:81:E1:E8:9B:8B:29:DF:CB:6F:44:A2:BA:AC
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E3B8BEBADCF511ED8458BD5BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:e1:6f:41:1c:7f:d7:06:67:60:3b:42:5b:ea:e3:98:4d:6f:
         41:53:1f:bc:58:5c:82:fb:ad:9c:69:c6:36:59:a5:80:18:7e:
         97:4f:81:c8:47:ba:80:ea:be:cd:e6:e6:7f:11:2e:5a:f5:c0:
         2d:ab:aa:73:1d:2b:f3:e1:15:94:f2:b8:5b:e6:75:ea:4f:e8:
         f5:a9:e4:a6:00:4b:9b:00:43:24:43:06:a5:c6:20:03:6c:f0:
         13:cf:05:ee:05:bd:5b:26:8e:ba:85:8a:a6:6a:9d:3c:df:41:
         d3:a8:b7:57:78:c1:1b:df:a0:46:2b:53:b1:ec:47:91:5e:e9:
         21:5c:23:b6:06:04:aa:f2:54:02:d2:80:52:21:35:5a:b9:ef:
         1f:d3:a0:67:e0:36:25:d0:91:7c:0b:71:4a:7f:fb:7b:71:34:
         4e:86:a7:4c:80:22:2e:83:dd:ed:91:b7:5a:2f:9d:bf:13:7d:
         49:46:4e:d3:7e:83:37:7b:20:cc:72:b0:66:f8:00:7a:cf:8d:
         97:70:b4:80:b7:76:47:17:a3:a3:51:70:22:44:4c:a8:0e:fd:
         69:3e:15:bd:70:d8:d0:56:74:24:56:98:6f:8f:51:1d:2f:c5:
         40:e3:29:1b:b4:ea:21:a1:35:b4:68:b6:24:35:b5:d7:72:e2:
         11:63:fb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----