Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/D18CCB885C2A11ED86B05D2CC4F9AE02.roa
File:                     D18CCB885C2A11ED86B05D2CC4F9AE02.roa (raw, json)
Hash identifier:          //ZNBzHlHI4o3+2FmRKQHm5maLSPFDntyx09F51hddc=
Subject key identifier:   AF:16:6D:40:5B:EF:93:39:87:E5:25:F3:D0:BC:08:52:DB:38:60:EB
Certificate issuer:       /CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
Certificate serial:       132E
Authority key identifier: 12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/D18CCB885C2A11ED86B05D2CC4F9AE02.roa
Signing time:             Fri 04 Nov 2022 10:24:09 +0000
ROA not before:           Fri 04 Nov 2022 10:24:09 +0000
ROA not after:            Sun 30 Jul 2023 00:00:00 +0000
asID:                     208046
IP address blocks:        103.114.191.0/24 maxlen: 24
                          2402:d240:1776::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4910 (0x132e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
        Validity
            Not Before: Nov  4 10:24:09 2022 GMT
            Not After : Jul 30 00:00:00 2023 GMT
        Subject: CN=6364e849-68f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:08:f2:fc:3d:eb:8b:dd:2e:d8:08:6e:dd:50:
                    7d:1f:ef:93:4e:07:1b:58:99:22:b4:78:fb:4d:49:
                    54:fa:af:87:93:6f:d3:03:de:55:17:4b:1f:71:03:
                    58:3e:7f:e0:c7:0f:f8:53:f4:ce:bf:30:50:ea:f8:
                    92:9e:7f:78:03:7b:5a:d9:fa:7f:ab:98:4f:b0:b9:
                    97:01:25:ec:37:9f:e4:72:9c:8e:b1:1e:96:d6:0a:
                    f3:37:02:5e:e6:1c:08:df:58:cd:b7:49:ea:34:17:
                    e1:79:0f:df:72:6a:ee:26:c2:c7:84:22:5d:e2:4e:
                    82:99:be:d8:a9:35:aa:8a:dd:63:ae:ec:59:23:22:
                    7d:3c:7a:83:97:3f:20:04:e9:bb:f4:1d:c7:40:cd:
                    c0:27:89:6c:74:95:db:5d:cd:fc:50:c4:3e:99:8e:
                    a3:ab:68:ed:a9:af:3b:fc:ab:03:f2:35:04:7d:01:
                    66:e6:b7:84:18:2e:c2:b3:ae:2a:57:d6:c4:f3:57:
                    f0:24:33:e5:d8:30:86:ee:7b:24:13:e1:c8:a1:38:
                    b4:96:ea:c4:1e:eb:a9:57:be:21:de:a8:24:64:c7:
                    32:bf:98:3c:01:9c:81:30:fc:c2:1e:20:0a:5d:e1:
                    67:e9:2b:ea:e3:90:bf:7f:d3:a6:83:3c:73:18:bd:
                    e5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:16:6D:40:5B:EF:93:39:87:E5:25:F3:D0:BC:08:52:DB:38:60:EB
            X509v3 Authority Key Identifier:
                keyid:12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/D18CCB885C2A11ED86B05D2CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.191.0/24
                IPv6:
                  2402:d240:1776::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:b0:14:40:70:24:f9:d5:00:07:bb:28:59:8b:97:bd:c3:b2:
         f7:b2:d6:7c:f4:f2:83:c8:24:a6:2b:e1:01:1e:2b:d9:26:e9:
         89:49:f2:c9:c8:7d:4b:8d:41:40:d4:f1:23:4d:71:24:28:d3:
         d4:3a:13:99:46:3e:21:08:3f:1b:bf:c4:5d:23:35:61:16:49:
         26:4b:ae:51:cb:80:6f:a6:ea:53:d5:65:7a:95:a2:fc:22:cc:
         a3:2b:98:cd:55:8c:76:eb:a4:e5:30:ff:2a:87:9c:9e:48:8b:
         f7:98:10:ea:4f:d8:0e:74:a7:19:e9:04:71:42:ad:cf:fc:f9:
         4c:d6:41:57:4c:ff:8b:92:83:93:ae:17:62:a1:5c:e1:0d:f2:
         af:dd:f7:5f:7c:1f:91:ff:48:a8:d8:14:10:46:65:0f:5b:b6:
         0e:f9:57:2a:b2:c4:1a:5e:51:7b:91:80:33:14:c3:f4:5a:73:
         87:42:db:cc:ec:fe:d9:6a:b7:5f:87:2e:88:8c:61:44:2f:8e:
         b2:1c:e5:9b:55:63:6e:ee:d8:14:40:b8:91:8d:45:3b:c8:d6:
         7a:67:e4:13:66:7e:0a:23:34:22:08:52:e1:a3:e1:8e:ef:80:
         91:25:c3:e3:10:9b:06:df:81:6c:ec:d9:1b:70:0a:da:e0:10:
         a6:62:08:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----