Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/5B56C330B50511EE92C72A20C4F9AE02.roa
File:                     5B56C330B50511EE92C72A20C4F9AE02.roa (raw, json)
Hash identifier:          BjSngiLHYsmqKnPCnXmhA6Tj5RhfmNyjh2/3c5JOyeg=
Subject key identifier:   41:50:E5:64:B4:81:60:1D:DA:E5:27:12:1D:00:65:A9:E5:4D:14:E0
Certificate issuer:       /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
Certificate serial:       09DD
Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/5B56C330B50511EE92C72A20C4F9AE02.roa
Signing time:             Wed 17 Jan 2024 06:55:11 +0000
ROA not before:           Wed 17 Jan 2024 06:55:11 +0000
ROA not after:            Mon 30 Dec 2024 00:00:00 +0000
asID:                     270215
IP address blocks:        223.119.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 21 Jun 2024 01:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2525 (0x9dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618
        Validity
            Not Before: Jan 17 06:55:11 2024 GMT
            Not After : Dec 30 00:00:00 2024 GMT
        Subject: CN=65a779ce-735e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:55:ad:cd:71:ed:cb:12:48:b6:31:cd:55:5d:
                    e1:89:9b:90:17:cc:57:ae:4d:9f:b8:f3:83:fb:f4:
                    82:62:40:bc:c8:b5:b1:38:7c:39:5c:6e:f2:65:c5:
                    cb:52:4f:9c:e5:f0:d1:fe:66:93:0f:45:55:a2:53:
                    ed:0b:89:3b:44:44:25:a4:45:b8:c3:fc:f8:55:78:
                    69:98:36:e4:71:92:79:21:f6:2b:7f:89:d5:56:0a:
                    d8:7b:d4:ad:62:df:70:04:f2:2d:a3:2c:17:d0:c7:
                    5e:ba:59:97:63:61:09:72:d8:20:6c:6f:df:3f:56:
                    12:29:65:92:0d:f5:79:a0:43:4a:e8:ac:4c:87:7c:
                    15:34:6b:2e:91:fc:40:f9:af:09:0a:6b:e8:99:17:
                    e4:1f:04:8c:2b:7a:db:5b:33:46:41:0a:0e:8d:92:
                    41:67:7c:4f:cd:46:ff:11:38:1d:fe:65:28:93:f2:
                    cb:3f:60:08:21:0d:6f:e3:ff:b4:a4:5c:76:cb:4f:
                    c9:9f:ac:0a:7f:c0:b2:2f:c0:5f:26:87:e0:ca:73:
                    f7:a5:5d:0a:06:e3:42:b1:34:12:d0:f2:fb:6b:3a:
                    f8:64:ab:fe:e4:85:3d:f7:14:a3:a9:2f:83:2f:db:
                    1c:9b:f9:66:96:2f:3f:8d:a7:3e:2a:05:4f:a3:e0:
                    9f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:50:E5:64:B4:81:60:1D:DA:E5:27:12:1D:00:65:A9:E5:4D:14:E0
            X509v3 Authority Key Identifier:
                keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/5B56C330B50511EE92C72A20C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.119.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:3a:6e:74:ea:08:d6:54:94:53:fd:90:94:51:7e:bf:a5:a4:
         d7:bd:93:c7:fa:bc:f6:29:0e:d2:25:f9:0a:bf:e0:10:2f:4d:
         fb:1f:ed:2e:e3:c7:86:20:7b:bf:5b:60:6e:6d:3c:29:d7:ea:
         33:fb:a8:5d:88:e0:4a:99:d2:d3:e2:a5:bf:b0:db:58:74:c2:
         5e:8d:2d:66:27:45:5f:8a:1c:40:47:f1:5f:88:98:cc:3c:b1:
         e8:99:bf:fb:13:77:a2:cf:0a:d1:39:b1:ea:64:14:be:ad:c5:
         0c:bb:0c:64:8a:05:52:ae:11:7b:da:25:21:3a:dd:84:ff:aa:
         a4:e9:b3:fd:1c:ff:b2:47:79:f1:48:6c:78:9f:20:9f:47:a1:
         47:1f:ce:39:68:6b:da:96:c4:d1:fa:e4:c4:42:ce:cc:38:3e:
         47:6e:4c:55:45:22:ca:f1:bf:c3:e7:94:8f:d6:3a:55:91:90:
         c0:4f:24:fa:d5:ce:76:8f:05:56:0b:15:2d:92:98:2c:3e:eb:
         88:cb:6c:88:78:a8:26:7e:bc:b2:34:fd:bc:61:76:7f:a6:db:
         1d:be:c8:ad:6d:0e:b2:ea:21:37:f2:cd:11:7a:18:6d:89:95:
         b5:f3:31:86:e2:0b:d0:c8:d5:da:51:68:eb:f0:10:3a:97:6f:
         e2:d1:d0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----