Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/EEF50A64216911EEBDC72749C4F9AE02.roa
File:                     EEF50A64216911EEBDC72749C4F9AE02.roa (raw, json)
Hash identifier:          LHKTERZ7ob4t4YZMmWbwBLY8NSGHhPIYLDefHzXkzyA=
Subject key identifier:   0F:BC:59:EE:59:8F:D1:8D:6B:2B:14:DA:BE:87:A1:33:AA:38:12:6B
Certificate issuer:       /CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76
Certificate serial:       04
Authority key identifier: 83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/EEF50A64216911EEBDC72749C4F9AE02.roa
Signing time:             Thu 13 Jul 2023 10:42:16 +0000
ROA not before:           Thu 13 Jul 2023 10:42:16 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     151467
IP address blocks:        103.229.191.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9C42/serialNumber=8379D747F74A55EDC73A0E0421C79B5EC0E4DE76
        Validity
            Not Before: Jul 13 10:42:16 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=64afd508-d4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:30:5f:7c:4a:75:bc:ff:5b:26:bb:61:4f:64:
                    e5:3c:7e:80:79:81:dc:ba:fd:4a:71:a2:7a:41:7d:
                    37:ab:dc:3d:a7:46:f7:ab:b6:84:96:b6:db:a9:97:
                    d1:3b:2c:73:c9:5e:7f:f3:d5:f4:49:cd:f0:b9:34:
                    8f:22:f3:d1:44:cc:35:26:34:10:87:5f:f3:e4:7a:
                    0e:98:0c:39:1b:8e:65:5f:fb:f2:33:0e:41:ea:24:
                    b7:33:a3:c6:02:27:0a:16:0b:3d:a7:b3:c5:07:49:
                    3e:1e:7f:cd:06:39:91:dd:63:2b:ca:f6:d8:aa:f2:
                    3c:22:be:7e:31:9f:ed:8a:fb:d1:52:f3:8c:d1:eb:
                    02:aa:2a:62:9d:6e:43:1e:c3:c3:2f:b6:90:cb:fd:
                    0d:05:6f:07:70:f2:c9:d3:b8:8d:dc:b5:3b:01:65:
                    78:7d:4e:5a:f0:c4:8a:cf:f4:69:00:5f:fe:2e:26:
                    a0:a0:16:75:01:fe:50:5f:f9:c2:27:26:c1:99:6e:
                    b6:e6:cb:bc:2a:3e:08:82:7f:9a:25:b3:42:a6:2a:
                    c8:79:fe:96:aa:14:b8:48:71:30:dc:0e:1a:d7:91:
                    b7:98:39:23:e7:20:f8:4a:84:0d:7c:dc:ab:80:d6:
                    00:78:63:9f:00:d3:41:8f:1d:50:df:d1:65:18:3f:
                    fb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BC:59:EE:59:8F:D1:8D:6B:2B:14:DA:BE:87:A1:33:AA:38:12:6B
            X509v3 Authority Key Identifier:
                keyid:83:79:D7:47:F7:4A:55:ED:C7:3A:0E:04:21:C7:9B:5E:C0:E4:DE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/g3nXR_dKVe3HOg4EIcebXsDk3nY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3nXR_dKVe3HOg4EIcebXsDk3nY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9C42/24A65EBE20D011EE90084F5CC4F9AE02/EEF50A64216911EEBDC72749C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:7a:17:0f:7d:3d:d2:b7:91:a5:ce:11:5b:90:b4:53:b8:47:
         82:81:aa:79:07:40:d1:9e:7e:19:69:89:92:8e:0e:de:83:92:
         68:30:02:86:c3:58:f9:03:39:1d:e6:f4:68:19:74:38:47:a6:
         55:b9:28:25:59:1f:a5:1e:a4:5c:33:35:e2:6b:0b:8e:5a:3d:
         e1:58:e8:05:dd:42:cb:04:38:d3:59:8b:b7:bb:05:58:80:29:
         99:e8:e1:da:41:ce:00:fb:26:77:a0:c4:73:a4:ce:3c:77:64:
         73:f8:8b:41:a3:d3:9a:b0:98:de:57:11:f6:af:c0:26:4c:c3:
         e4:78:97:8e:bc:08:b3:a2:4e:0f:0a:10:73:ce:16:da:87:5c:
         27:f3:78:40:ad:a4:72:4b:ce:b0:e5:0f:26:e8:2b:df:8c:c9:
         6d:06:c6:fb:e3:34:df:65:ce:13:c3:29:f0:36:a6:c0:30:50:
         ff:f1:2f:bf:04:3a:e5:12:f3:d0:4e:5e:cc:a0:c6:78:c1:10:
         b8:d0:53:7c:58:ce:24:52:74:05:10:52:52:17:93:e3:45:c6:
         6a:b9:86:a0:31:ab:1d:15:75:3d:46:e1:25:bc:d8:60:6f:d6:
         e4:31:8a:c2:a1:db:05:b5:f8:b7:8c:62:a9:c5:6a:ff:ab:0b:
         91:e5:48:f5
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
OUM0MjExMC8GA1UEBRMoODM3OUQ3NDdGNzRBNTVFREM3M0EwRTA0MjFDNzlCNUVD
MEU0REU3NjAeFw0yMzA3MTMxMDQyMTZaFw0yNDA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0YWZkNTA4LWQ0YTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDNMF98SnW8/1smu2FPZOU8foB5gdy6/UpxonpBfTer3D2nRvertoSWttupl9E7
LHPJXn/z1fRJzfC5NI8i89FEzDUmNBCHX/Pkeg6YDDkbjmVf+/IzDkHqJLczo8YC
JwoWCz2ns8UHST4ef80GOZHdYyvK9tiq8jwivn4xn+2K+9FS84zR6wKqKmKdbkMe
w8MvtpDL/Q0Fbwdw8snTuI3ctTsBZXh9TlrwxIrP9GkAX/4uJqCgFnUB/lBf+cIn
JsGZbrbmy7wqPgiCf5ols0KmKsh5/paqFLhIcTDcDhrXkbeYOSPnIPhKhA183KuA
1gB4Y58A00GPHVDf0WUYP/vrAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUD7xZ7lmP
0Y1rKxTavoehM6o4EmswHwYDVR0jBBgwFoAUg3nXR/dKVe3HOg4EIcebXsDk3nYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5QzQyLzI0QTY1RUJFMjBE
MDExRUU5MDA4NEY1Q0M0RjlBRTAyL2czblhSX2RLVmUzSE9nNEVJY2ViWHNEazNu
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZzNuWFJfZEtWZTNIT2c0RUljZWJYc0RrM25ZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OUM0Mi8yNEE2NUVCRTIwRDAxMUVFOTAwODRGNUNDNEY5QUUwMi9FRUY1MEE2NDIx
NjkxMUVFQkRDNzI3NDlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGflvzANBgkqhkiG9w0BAQsFAAOCAQEAnnoXD3090reRpc4R
W5C0U7hHgoGqeQdA0Z5+GWmJko4O3oOSaDAChsNY+QM5Heb0aBl0OEemVbkoJVkf
pR6kXDM14msLjlo94VjoBd1CywQ401mLt7sFWIApmejh2kHOAPsmd6DEc6TOPHdk
c/iLQaPTmrCY3lcR9q/AJkzD5HiXjrwIs6JODwoQc84W2odcJ/N4QK2kckvOsOUP
Jugr34zJbQbG++M032XOE8Mp8DamwDBQ//EvvwQ65RLz0E5ezKDGeMEQuNBTfFjO
JFJ0BRBSUheT40XGarmGoDGrHRV1PUbhJbzYYG/W5DGKwqHbBbX4t4xiqcVq/6sL
keVI9Q==
-----END CERTIFICATE-----