Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F7868AD09BC311ED8D3F9E23C4F9AE02.roa
File:                     F7868AD09BC311ED8D3F9E23C4F9AE02.roa (raw, json)
Hash identifier:          NKihXZ9yS5L3beSmFJqaoHrVaYRijg1ehVVHQngFo/c=
Subject key identifier:   9C:96:9F:CE:0F:BF:5F:54:37:00:B3:01:28:B0:6B:9D:CC:08:23:A1
Certificate issuer:       /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial:       0A75
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F7868AD09BC311ED8D3F9E23C4F9AE02.roa
Signing time:             Tue 24 Jan 2023 08:49:09 +0000
ROA not before:           Tue 24 Jan 2023 08:49:09 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     3507
IP address blocks:        202.92.20.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2677 (0xa75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
        Validity
            Not Before: Jan 24 08:49:09 2023 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=63cf9b85-0df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:db:4f:ee:28:ab:55:9f:c8:16:3c:dd:21:5a:
                    02:7b:87:55:71:88:07:09:e1:48:2c:0c:c9:d1:8a:
                    81:3e:36:b2:56:8e:2b:2e:17:aa:2e:02:d9:86:9b:
                    89:e0:4b:3b:c2:49:ba:4e:00:10:98:94:61:ce:be:
                    93:03:8a:66:09:f3:0f:1b:19:0f:b5:b0:3a:77:1f:
                    f0:0c:77:3f:56:28:ad:60:44:84:bb:d2:bc:78:54:
                    b2:90:74:37:e4:29:58:23:30:7f:fe:57:72:d8:ef:
                    40:8d:af:fe:40:98:72:e5:dc:83:45:81:b3:50:dc:
                    4b:4d:a0:03:1b:37:b9:d6:30:b4:9b:9a:e1:65:5a:
                    d6:25:33:58:84:d5:ea:6c:57:e8:80:96:cc:4c:e0:
                    b4:06:10:d9:39:ec:03:d8:e7:62:de:df:0d:7e:aa:
                    5d:59:b2:79:41:f8:25:3d:0c:22:46:be:0a:e8:17:
                    46:b2:d5:68:22:4a:5e:23:ee:00:2d:e2:39:03:59:
                    e9:cd:71:be:f0:e0:00:ef:48:c8:20:94:15:d7:79:
                    8b:d6:66:0f:57:ba:6c:9b:44:d5:72:1a:af:c0:d8:
                    7f:fb:18:60:ea:87:ad:a1:d8:c0:27:9d:47:57:9e:
                    30:6f:5d:90:9c:61:15:48:2e:9c:92:03:29:6b:4b:
                    fe:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:96:9F:CE:0F:BF:5F:54:37:00:B3:01:28:B0:6B:9D:CC:08:23:A1
            X509v3 Authority Key Identifier:
                keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F7868AD09BC311ED8D3F9E23C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.92.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:89:a4:9e:ac:d7:0f:2d:26:81:0d:f3:52:64:72:af:8e:43:
         ec:c4:fb:8d:0e:47:65:be:7a:72:31:48:e8:15:92:9b:37:47:
         42:67:bb:d3:f6:3c:ee:3b:33:9a:c5:e0:e2:cf:b0:fc:e1:63:
         b0:62:60:c0:27:f0:fb:a1:db:05:7d:cd:6c:38:a3:51:3c:91:
         1c:c7:6e:75:d4:c9:8a:aa:a5:88:4c:d4:99:13:6d:d3:31:de:
         f8:f3:fc:e6:e0:08:2d:0b:5c:25:a0:23:c1:78:75:09:54:d6:
         8d:0e:1d:7e:17:11:e2:0b:81:70:8d:41:cf:d5:ad:cc:20:c3:
         35:19:9c:bd:f3:48:fe:0a:ce:b5:6e:a4:58:64:ea:38:da:15:
         88:b8:6c:9b:19:63:ad:31:b3:cd:f5:97:f1:0c:88:4a:dd:c1:
         db:fd:3e:19:35:ff:4f:58:dd:af:22:f3:1a:c8:02:31:96:94:
         49:8d:d0:bd:d2:2b:cf:ba:be:57:61:60:13:a7:6c:6d:70:87:
         4a:2f:b8:63:65:f3:78:df:4f:35:b8:c5:86:a7:3f:db:ab:c8:
         18:85:7b:08:1a:44:94:5a:37:0f:85:d2:12:92:5e:c3:15:63:
         2d:52:c4:a2:ef:4f:5c:57:64:4c:61:b7:ac:31:f0:12:82:e5:
         72:fb:57:35
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjMwMTI0MDg0OTA5WhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2NmOWI4NS0wZGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt9tP7iirVZ/IFjzdIVoCe4dVcYgHCeFILAzJ0YqBPjayVo4rLheqLgLZhpuJ
4Es7wkm6TgAQmJRhzr6TA4pmCfMPGxkPtbA6dx/wDHc/ViitYESEu9K8eFSykHQ3
5ClYIzB//ldy2O9Aja/+QJhy5dyDRYGzUNxLTaADGze51jC0m5rhZVrWJTNYhNXq
bFfogJbMTOC0BhDZOewD2Odi3t8NfqpdWbJ5QfglPQwiRr4K6BdGstVoIkpeI+4A
LeI5A1npzXG+8OAA70jIIJQV13mL1mYPV7psm0TVchqvwNh/+xhg6oetodjAJ51H
V54wb12QnGEVSC6ckgMpa0v+mwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJyWn84P
v19UNwCzASiwa53MCCOhMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvRjc4NjhBRDA5
QkMzMTFFRDhEM0Y5RTIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADKXBQwDQYJKoZIhvcNAQELBQADggEBACuJpJ6s1w8tJoEN
81Jkcq+OQ+zE+40OR2W+enIxSOgVkps3R0Jnu9P2PO47M5rF4OLPsPzhY7BiYMAn
8Puh2wV9zWw4o1E8kRzHbnXUyYqqpYhM1JkTbdMx3vjz/ObgCC0LXCWgI8F4dQlU
1o0OHX4XEeILgXCNQc/VrcwgwzUZnL3zSP4KzrVupFhk6jjaFYi4bJsZY60xs831
l/EMiErdwdv9Phk1/09Y3a8i8xrIAjGWlEmN0L3SK8+6vldhYBOnbG1wh0ovuGNl
83jfTzW4xYanP9uryBiFewgaRJRaNw+F0hKSXsMVYy1SxKLvT1xXZExht6wx8BKC
5XL7VzU=
-----END CERTIFICATE-----