Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/EFB6A4C2A47C11ED9F66DC62C4F9AE02.roa
File:                     EFB6A4C2A47C11ED9F66DC62C4F9AE02.roa (raw, json)
Hash identifier:          b4IC0DyMqi4inkNwf3Lbyo9rTgC7mxXl2CJD+VBjSXw=
Subject key identifier:   64:73:03:66:05:04:3D:A4:DE:58:1D:95:78:C9:E5:60:24:BF:A2:5E
Certificate issuer:       /CN=A91F5266/serialNumber=62D1119F188E3F7C1355F6539E06436DA268FF9D
Certificate serial:       0261
Authority key identifier: 62:D1:11:9F:18:8E:3F:7C:13:55:F6:53:9E:06:43:6D:A2:68:FF:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/EFB6A4C2A47C11ED9F66DC62C4F9AE02.roa
Signing time:             Sat 09 Sep 2023 02:13:52 +0000
ROA not before:           Sat 09 Sep 2023 02:13:52 +0000
ROA not after:            Thu 31 Oct 2024 00:00:00 +0000
asID:                     150740
IP address blocks:        103.170.230.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5266/serialNumber=62D1119F188E3F7C1355F6539E06436DA268FF9D
        Validity
            Not Before: Sep  9 02:13:52 2023 GMT
            Not After : Oct 31 00:00:00 2024 GMT
        Subject: CN=64fbd4df-97a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b0:e9:4f:63:79:55:d1:cf:a9:90:c2:66:db:
                    1c:a6:58:62:73:f8:cc:66:88:b8:28:d7:2d:c3:b9:
                    d8:1c:3a:75:b4:3f:d6:2a:68:e4:71:f7:55:dd:4d:
                    12:73:94:79:7b:ff:33:af:c6:52:a0:ae:a7:45:8e:
                    52:f4:89:f3:0d:66:13:82:4f:f1:6e:5a:1e:75:fe:
                    95:7d:a2:c0:2b:21:b5:a4:0d:14:8b:e2:fb:fa:3e:
                    bc:ea:08:5f:d6:89:0c:2f:5c:ae:2c:0e:b7:a3:9b:
                    5d:c5:f4:2d:54:c8:a2:9f:d1:b9:f3:df:a3:0b:b3:
                    b6:56:10:43:dc:67:38:fc:30:0f:e8:72:69:3d:48:
                    2c:57:e9:ff:b2:31:4c:4b:53:46:9f:de:24:1b:2b:
                    8c:64:23:22:7a:5a:96:9f:46:80:4b:be:72:47:04:
                    63:44:d1:6b:1f:34:87:f5:f8:81:cd:75:ce:ba:a0:
                    37:2c:3f:4c:5d:05:80:45:db:1c:f3:95:18:85:c6:
                    33:04:77:56:4a:66:1b:4a:a2:01:fe:19:b8:49:66:
                    f8:ea:eb:e1:3f:70:89:e4:0d:2d:c4:2f:3e:09:16:
                    73:c9:5e:81:f2:d0:63:c8:f0:28:f1:f9:d2:08:62:
                    ea:3d:6b:f9:de:4c:3f:b3:a3:ef:38:2a:a1:86:6c:
                    65:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:73:03:66:05:04:3D:A4:DE:58:1D:95:78:C9:E5:60:24:BF:A2:5E
            X509v3 Authority Key Identifier:
                keyid:62:D1:11:9F:18:8E:3F:7C:13:55:F6:53:9E:06:43:6D:A2:68:FF:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/YtERnxiOP3wTVfZTngZDbaJo_50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YtERnxiOP3wTVfZTngZDbaJo_50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5266/27BC50C4A13B11EC8343757EC4F9AE02/EFB6A4C2A47C11ED9F66DC62C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:c3:db:ff:21:f8:7f:07:78:7b:d9:f9:1f:27:e1:03:26:80:
         f2:c0:37:0c:41:06:29:3f:81:0f:0b:4c:e1:29:63:02:0d:65:
         a6:41:8e:cc:0a:1b:17:21:f5:5a:40:78:f9:29:70:82:23:bb:
         6c:9f:e5:a2:a8:b1:c1:99:5e:31:1a:f6:ac:2a:86:6a:1c:2a:
         65:ea:28:e3:94:c0:08:18:b9:cb:fb:c3:70:ec:e1:a2:1a:fe:
         d0:59:5e:a3:25:f2:9b:a5:f7:95:ff:4c:56:e4:3a:89:98:cf:
         48:8f:88:f0:8f:fd:d5:9c:56:3f:96:42:92:99:4d:e4:4d:e9:
         4a:a9:bf:90:8f:b3:e7:25:ed:e4:0c:8c:7d:0d:77:d7:89:3b:
         09:c9:1b:4a:03:a1:4e:5d:90:57:30:ff:44:dd:07:2d:7f:c2:
         db:81:6a:00:6b:8f:03:32:ef:30:c8:3d:0f:e0:51:7d:77:08:
         9e:f9:e3:29:2e:d2:90:71:b9:94:c7:4a:5b:16:58:71:80:60:
         29:20:5d:5a:2e:fd:c6:40:ee:53:17:a1:15:21:56:d8:7f:be:
         f4:0a:37:f3:de:9f:da:24:bc:05:25:fc:fb:cf:c1:fe:c1:55:
         3c:82:6d:e9:d8:d0:8c:78:bc:1b:34:7e:36:b8:95:b9:9b:75:
         4b:b6:0c:49
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjUyNjYxMTAvBgNVBAUTKDYyRDExMTlGMTg4RTNGN0MxMzU1RjY1MzlFMDY0MzZE
QTI2OEZGOUQwHhcNMjMwOTA5MDIxMzUyWhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGZiZDRkZi05N2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1rDpT2N5VdHPqZDCZtscplhic/jMZoi4KNctw7nYHDp1tD/WKmjkcfdV3U0S
c5R5e/8zr8ZSoK6nRY5S9InzDWYTgk/xbloedf6VfaLAKyG1pA0Ui+L7+j686ghf
1okML1yuLA63o5tdxfQtVMiin9G589+jC7O2VhBD3Gc4/DAP6HJpPUgsV+n/sjFM
S1NGn94kGyuMZCMielqWn0aAS75yRwRjRNFrHzSH9fiBzXXOuqA3LD9MXQWARdsc
85UYhcYzBHdWSmYbSqIB/hm4SWb46uvhP3CJ5A0txC8+CRZzyV6B8tBjyPAo8fnS
CGLqPWv53kw/s6PvOCqhhmxl5QIDAQABo4IClTCCApEwHQYDVR0OBBYEFGRzA2YF
BD2k3lgdlXjJ5WAkv6JeMB8GA1UdIwQYMBaAFGLREZ8Yjj98E1X2U54GQ22iaP+d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTI2Ni8yN0JDNTBDNEEx
M0IxMUVDODM0Mzc1N0VDNEY5QUUwMi9ZdEVSbnhpT1Azd1RWZlpUbmdaRGJhSm9f
NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1l0RVJueGlPUDN3VFZmWlRuZ1pEYmFKb181MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjUyNjYvMjdCQzUwQzRBMTNCMTFFQzgzNDM3NTdFQzRGOUFFMDIvRUZCNkE0QzJB
NDdDMTFFRDlGNjZEQzYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnquYwDQYJKoZIhvcNAQELBQADggEBACzD2/8h+H8HeHvZ
+R8n4QMmgPLANwxBBik/gQ8LTOEpYwINZaZBjswKGxch9VpAePkpcIIju2yf5aKo
scGZXjEa9qwqhmocKmXqKOOUwAgYucv7w3Ds4aIa/tBZXqMl8pul95X/TFbkOomY
z0iPiPCP/dWcVj+WQpKZTeRN6Uqpv5CPs+cl7eQMjH0Nd9eJOwnJG0oDoU5dkFcw
/0TdBy1/wtuBagBrjwMy7zDIPQ/gUX13CJ754yku0pBxuZTHSlsWWHGAYCkgXVou
/cZA7lMXoRUhVth/vvQKN/Pen9okvAUl/PvPwf7BVTyCbenY0Ix4vBs0fja4lbmb
dUu2DEk=