Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F7438F72F6D311EC8A6F0E26C4F9AE02.roa
File:                     F7438F72F6D311EC8A6F0E26C4F9AE02.roa (raw, json)
Hash identifier:          aRZCW/WIbgTcG+I/OJRIZuRKvIS1LW0i8RLeiH+0Fcc=
Subject key identifier:   C2:CC:26:BA:54:50:4B:3A:33:C8:12:29:35:EF:85:9E:E5:95:6D:0E
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       07F6
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F7438F72F6D311EC8A6F0E26C4F9AE02.roa
Signing time:             Tue 28 Jun 2022 11:17:59 +0000
ROA not before:           Tue 28 Jun 2022 11:17:59 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     43260
IP address blocks:        115.167.1.0/24 maxlen: 24
                          115.167.96.0/22 maxlen: 24
                          115.167.120.0/22 maxlen: 24
                          175.110.97.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2038 (0x7f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jun 28 11:17:59 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=62bae367-71b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:64:1e:85:e6:fd:49:07:e5:f5:11:92:67:25:
                    f9:ec:2e:a4:7c:24:97:45:29:f8:70:00:0a:c7:d8:
                    bc:ea:91:f8:0a:1a:10:5d:37:21:0c:36:18:dd:57:
                    78:8c:ab:19:40:63:2e:3e:a8:95:65:62:bc:b6:7e:
                    94:1f:6b:56:31:93:92:9d:a4:b4:83:d7:e8:27:17:
                    dd:19:92:1d:23:68:6c:7c:90:1b:78:4c:59:7c:46:
                    aa:0c:79:49:22:8b:53:7a:a7:44:46:6f:29:2c:42:
                    c5:24:69:fd:b0:73:9b:dd:c2:38:02:69:49:fa:fc:
                    5c:3f:b4:12:46:90:0c:6a:e2:4f:17:2e:d8:41:24:
                    65:68:ae:b9:24:fc:d1:24:29:f4:24:a5:fe:9b:65:
                    a1:0e:d8:82:29:37:b1:00:18:bc:58:72:9a:48:77:
                    fd:49:c5:c7:c6:cc:02:43:b3:f7:32:0b:cf:66:9d:
                    55:68:6e:23:7a:96:0d:d8:eb:4b:f5:5b:11:d4:3f:
                    ae:99:3a:b6:70:c0:ef:f8:f3:76:2c:5a:34:f4:be:
                    88:de:e7:7f:1e:58:72:74:bd:51:fc:d5:c7:41:cd:
                    d0:a4:8f:3c:a8:fe:90:ca:f0:d3:5c:c4:3f:b8:69:
                    09:41:45:b1:25:3d:86:e4:75:f7:fe:38:0d:41:3c:
                    fa:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CC:26:BA:54:50:4B:3A:33:C8:12:29:35:EF:85:9E:E5:95:6D:0E
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F7438F72F6D311EC8A6F0E26C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.167.1.0/24
                  115.167.96.0/22
                  115.167.120.0/22
                  175.110.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:c2:2e:82:c0:f2:7f:11:2e:12:d0:71:31:f9:f2:48:08:c9:
         d6:bb:c1:6f:61:a4:ce:3a:eb:b4:dd:f4:af:9a:07:37:63:b9:
         49:55:b8:0f:e6:85:0c:b2:09:a4:54:37:c4:b6:2f:01:9c:04:
         eb:66:55:e8:5b:8b:be:50:f1:45:17:6f:b4:38:f6:cf:83:34:
         fe:dd:b5:da:d5:ed:60:45:1b:3c:98:f9:a3:f1:8e:26:55:36:
         44:61:c2:d4:82:f2:15:83:ce:50:33:9b:ab:68:40:97:2c:1e:
         f1:a5:56:a3:b3:c5:7d:0d:01:d0:31:4a:93:46:77:86:01:2a:
         6b:40:68:18:78:82:f6:7f:91:2d:b9:eb:54:e7:3d:8a:6b:75:
         9f:e0:95:2c:2e:af:9c:ca:b3:e5:1c:92:53:41:1e:7c:90:95:
         69:b3:29:c7:52:a1:33:37:fa:72:50:93:01:f7:1d:d1:d9:c8:
         cd:c9:a2:25:59:64:c7:37:d5:93:18:3e:f2:38:61:81:27:c5:
         6c:4e:9b:0d:20:16:ae:45:ce:d0:56:3e:64:4c:70:45:b1:34:
         a9:bf:e5:f0:6a:0f:64:5b:93:cf:0a:13:e4:2d:49:ae:5a:73:
         b8:e5:6d:d6:93:4d:00:1c:a1:f7:fc:7d:70:9d:82:8b:32:2f:
         85:2d:7e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----