Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8DF5/EE567128D98511EDA25CC831C4F9AE02/FFCBADF6E0EC11EDB8C1E674C4F9AE02.roa
File:                     FFCBADF6E0EC11EDB8C1E674C4F9AE02.roa (raw, json)
Hash identifier:          KQSgp+Vsm1ZY/m819PEfub2Z49/jgjNpdFf3CoEiOfs=
Subject key identifier:   B5:2A:36:57:AF:11:3E:D9:B9:48:7C:C4:D8:AB:E4:69:D9:28:B5:64
Certificate issuer:       /CN=A91E8DF5/serialNumber=029649105BEF3C16B764C83E0121F63BF5032CAA
Certificate serial:       0A
Authority key identifier: 02:96:49:10:5B:EF:3C:16:B7:64:C8:3E:01:21:F6:3B:F5:03:2C:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ApZJEFvvPBa3ZMg-ASH2O_UDLKo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8DF5/EE567128D98511EDA25CC831C4F9AE02/FFCBADF6E0EC11EDB8C1E674C4F9AE02.roa
Signing time:             Sat 22 Apr 2023 09:06:43 +0000
ROA not before:           Sat 22 Apr 2023 09:06:43 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     202828
IP address blocks:        103.244.163.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8DF5/serialNumber=029649105BEF3C16B764C83E0121F63BF5032CAA
        Validity
            Not Before: Apr 22 09:06:43 2023 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=6443a3a3-849c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c8:81:7c:07:51:4c:e6:6a:9d:4b:20:7d:6a:
                    8e:c1:00:10:5b:4e:7a:84:4d:6c:89:37:bc:05:98:
                    d0:cd:7f:c1:48:dd:02:c7:d2:92:f1:c1:01:3d:af:
                    3b:90:3a:0b:61:af:03:67:32:c4:fe:82:26:16:52:
                    05:6c:e1:6c:4a:1b:e0:04:a0:45:b2:3b:b0:b9:88:
                    55:9a:01:d9:2f:5d:08:d6:2b:b3:55:3b:ff:e2:b4:
                    e9:fe:b5:4a:bc:67:7a:dd:cf:b2:a9:ab:9c:36:8a:
                    41:d5:40:67:b6:de:4f:15:70:d6:8b:18:78:d3:1e:
                    a0:6a:ca:9e:0c:a8:7c:1b:2d:c3:05:13:83:33:d8:
                    00:94:2f:02:47:e2:55:9f:d2:28:63:c3:ad:d6:65:
                    ab:f7:16:3f:f8:a1:41:8a:85:54:e7:97:ef:e5:80:
                    d8:7c:1a:ce:4f:05:84:90:18:3b:da:b3:4e:b1:f2:
                    e2:27:c9:31:ad:8d:b8:48:1d:54:e9:31:2c:1b:31:
                    cb:d4:43:88:67:af:53:6d:cc:b7:43:f1:e3:7f:93:
                    bb:ba:2a:1d:5f:4b:c6:ec:94:e7:29:93:bc:89:77:
                    e4:f5:5b:36:06:c2:17:c8:cf:ee:b1:2b:df:f5:0a:
                    1e:a2:4f:2d:dd:cb:03:ea:9b:b5:19:ab:70:47:45:
                    ef:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2A:36:57:AF:11:3E:D9:B9:48:7C:C4:D8:AB:E4:69:D9:28:B5:64
            X509v3 Authority Key Identifier:
                keyid:02:96:49:10:5B:EF:3C:16:B7:64:C8:3E:01:21:F6:3B:F5:03:2C:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/EE567128D98511EDA25CC831C4F9AE02/ApZJEFvvPBa3ZMg-ASH2O_UDLKo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ApZJEFvvPBa3ZMg-ASH2O_UDLKo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8DF5/EE567128D98511EDA25CC831C4F9AE02/FFCBADF6E0EC11EDB8C1E674C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:02:53:a7:f7:e0:d0:51:1a:24:73:48:83:14:9d:b6:f7:0d:
         e0:47:ca:86:df:04:df:9e:eb:4d:f5:53:79:1f:c7:cb:92:6a:
         77:49:1a:e8:55:42:92:ce:ee:bf:b4:57:89:b5:5e:2d:68:8f:
         e7:86:54:d8:98:9b:d2:e5:e1:c9:e9:4d:fc:66:39:15:be:84:
         9d:94:be:17:c0:52:78:82:e5:56:8f:57:fd:56:00:79:d1:42:
         e5:b3:c0:ab:8a:e6:e7:52:ca:2f:ab:a7:1d:5e:7f:21:2a:e5:
         cf:09:81:b3:fd:af:19:0c:94:55:ea:8e:98:ac:26:5e:c8:de:
         e0:33:98:ad:ff:85:c4:6f:09:d9:cf:af:4f:d9:b5:4b:44:c9:
         f8:7e:92:52:00:a2:1c:b2:52:a4:d1:4f:12:7c:fe:69:8a:49:
         46:81:b9:be:8b:fe:99:8e:21:d3:d9:a3:63:37:2a:44:25:ff:
         d3:65:46:94:af:0d:68:44:4c:03:02:0b:65:8d:8a:9e:97:ca:
         43:be:c3:f9:75:3a:5b:a2:a5:65:ba:cb:dd:37:e4:93:f3:b3:
         f5:33:ad:b2:ca:29:ef:8a:61:7d:53:a8:a9:7d:40:89:b0:05:
         21:21:27:4d:17:0a:c1:c5:e4:e3:5f:f7:8b:52:1d:9d:15:d6:
         56:c8:d5:28
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
OERGNTExMC8GA1UEBRMoMDI5NjQ5MTA1QkVGM0MxNkI3NjRDODNFMDEyMUY2M0JG
NTAzMkNBQTAeFw0yMzA0MjIwOTA2NDNaFw0yNDA3MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0NDNhM2EzLTg0OWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDuyIF8B1FM5mqdSyB9ao7BABBbTnqETWyJN7wFmNDNf8FI3QLH0pLxwQE9rzuQ
OgthrwNnMsT+giYWUgVs4WxKG+AEoEWyO7C5iFWaAdkvXQjWK7NVO//itOn+tUq8
Z3rdz7Kpq5w2ikHVQGe23k8VcNaLGHjTHqBqyp4MqHwbLcMFE4Mz2ACULwJH4lWf
0ihjw63WZav3Fj/4oUGKhVTnl+/lgNh8Gs5PBYSQGDvas06x8uInyTGtjbhIHVTp
MSwbMcvUQ4hnr1NtzLdD8eN/k7u6Kh1fS8bslOcpk7yJd+T1WzYGwhfIz+6xK9/1
Ch6iTy3dywPqm7UZq3BHRe+BAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUtSo2V68R
Ptm5SHzE2KvkadkotWQwHwYDVR0jBBgwFoAUApZJEFvvPBa3ZMg+ASH2O/UDLKow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4REY1L0VFNTY3MTI4RDk4
NTExRURBMjVDQzgzMUM0RjlBRTAyL0FwWkpFRnZ2UEJhM1pNZy1BU0gyT19VRExL
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQXBaSkVGdnZQQmEzWk1nLUFTSDJPX1VETEtvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OERGNS9FRTU2NzEyOEQ5ODUxMUVEQTI1Q0M4MzFDNEY5QUUwMi9GRkNCQURGNkUw
RUMxMUVEQjhDMUU2NzRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGf0ozANBgkqhkiG9w0BAQsFAAOCAQEAcgJTp/fg0FEaJHNI
gxSdtvcN4EfKht8E357rTfVTeR/Hy5Jqd0ka6FVCks7uv7RXibVeLWiP54ZU2Jib
0uXhyelN/GY5Fb6EnZS+F8BSeILlVo9X/VYAedFC5bPAq4rm51LKL6unHV5/ISrl
zwmBs/2vGQyUVeqOmKwmXsje4DOYrf+FxG8J2c+vT9m1S0TJ+H6SUgCiHLJSpNFP
Enz+aYpJRoG5vov+mY4h09mjYzcqRCX/02VGlK8NaERMAwILZY2KnpfKQ77D+XU6
W6KlZbrL3Tfkk/Oz9TOtssop74phfVOoqX1AibAFISEnTRcKwcXk41/3i1IdnRXW
VsjVKA==
-----END CERTIFICATE-----