Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/CBC25F08D1EF11ECA096D95BC4F9AE02.roa
File:                     CBC25F08D1EF11ECA096D95BC4F9AE02.roa (raw, json)
Hash identifier:          9orkzOHxgCX2LRIMTm4e1aXuhoz2Sb1VxXnzUoKQN30=
Subject key identifier:   B0:A6:F4:2E:CF:EB:8A:A0:6C:81:F7:BF:B5:7E:AB:80:8D:B5:41:B5
Certificate issuer:       /CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748
Certificate serial:       01F2
Authority key identifier: A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/CBC25F08D1EF11ECA096D95BC4F9AE02.roa
Signing time:             Wed 11 Jan 2023 10:23:09 +0000
ROA not before:           Wed 11 Jan 2023 10:23:09 +0000
ROA not after:            Fri 01 Mar 2024 00:00:00 +0000
asID:                     136166
IP address blocks:        103.82.176.0/22 maxlen: 25
                          2400:8740::/36 maxlen: 36
                          2400:8740:1000::/36 maxlen: 36
                          2400:8740:2000::/36 maxlen: 36
                          2400:8740:3000::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 498 (0x1f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5F2D/serialNumber=A013B1388A3933BE106BEAEDDFE9F3B8346D3748
        Validity
            Not Before: Jan 11 10:23:09 2023 GMT
            Not After : Mar  1 00:00:00 2024 GMT
        Subject: CN=63be8e0c-0ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:79:0b:62:e8:8f:64:1c:03:ed:ef:eb:82:7e:
                    98:ee:00:45:2c:e5:be:d7:ff:53:46:c2:5d:1d:ee:
                    2a:d3:25:06:b1:24:08:ee:31:59:e3:89:bd:d8:7f:
                    43:2b:92:8d:7a:58:f7:e1:96:0f:d5:78:62:41:62:
                    94:71:e4:ec:f0:5b:c9:f1:36:ac:ae:37:0b:0f:9b:
                    8e:9d:e0:e9:c8:9e:33:6f:cd:d5:0b:0a:98:60:21:
                    08:70:31:11:c8:c0:ff:9c:f0:45:77:d7:b5:d6:0c:
                    66:aa:2a:86:5e:cb:87:53:ba:3f:28:9f:4f:ad:46:
                    ca:39:bd:0a:a2:d2:06:fb:1a:db:46:6b:9d:a4:50:
                    ce:15:38:4c:45:4e:48:76:71:c6:a3:ef:7f:a9:5b:
                    df:7c:bd:8e:fc:b1:ca:9b:68:30:ff:af:0d:a0:64:
                    e8:2c:9b:15:91:9f:54:b8:ce:a3:44:b5:de:24:47:
                    9b:65:bf:2d:81:61:de:42:a1:f0:24:4a:0c:79:04:
                    2d:64:56:77:1e:24:b6:cd:54:42:fd:d9:d8:84:6c:
                    2b:ba:99:20:c1:57:dc:a1:37:42:7f:19:a5:4e:5b:
                    17:3e:30:79:e5:d1:0d:3a:3c:3d:07:ae:33:4d:a4:
                    ed:85:55:41:a8:80:f2:70:1c:94:4e:3b:60:c2:37:
                    79:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A6:F4:2E:CF:EB:8A:A0:6C:81:F7:BF:B5:7E:AB:80:8D:B5:41:B5
            X509v3 Authority Key Identifier:
                keyid:A0:13:B1:38:8A:39:33:BE:10:6B:EA:ED:DF:E9:F3:B8:34:6D:37:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/oBOxOIo5M74Qa-rt3-nzuDRtN0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oBOxOIo5M74Qa-rt3-nzuDRtN0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5F2D/CD6D6E56989211EC8F93573BC4F9AE02/CBC25F08D1EF11ECA096D95BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.176.0/22
                IPv6:
                  2400:8740::/34

    Signature Algorithm: sha256WithRSAEncryption
         92:0a:83:7d:71:45:58:67:a2:4c:5c:aa:52:3d:3c:da:c7:12:
         4f:be:a2:55:26:49:fd:a8:0b:08:3e:2f:42:50:0a:78:95:ea:
         fd:05:73:13:97:01:d0:04:50:06:79:e3:70:b8:26:29:db:6e:
         01:09:7c:ac:72:f1:2f:6c:4d:3b:ff:36:9b:16:b9:2b:2c:31:
         d6:82:21:1b:38:16:fb:9f:b3:01:9f:5d:ca:3a:e2:ac:67:1e:
         0b:14:47:d9:64:2e:c1:a7:17:93:f6:0c:7b:71:de:12:ca:d3:
         22:50:18:09:de:19:da:62:db:0d:34:f3:98:ef:ca:a5:47:af:
         ce:89:1d:88:9b:a1:b8:8a:f6:9b:c8:aa:6e:ce:25:1a:b5:e7:
         c7:24:ef:80:f1:f4:4e:4e:1c:2e:74:5e:09:2a:58:c4:77:4d:
         4a:cd:de:f3:ae:20:39:05:a4:3d:49:da:a7:68:1d:2d:7c:63:
         7f:dc:df:54:04:a1:88:9e:94:f0:82:7b:38:00:84:aa:19:72:
         c6:e5:03:df:45:eb:12:7c:0a:bb:4f:fc:db:2f:e5:46:03:6a:
         c6:f8:dc:d3:b2:d9:df:69:10:41:8e:1c:6c:c2:0f:97:e9:8b:
         0c:53:d7:89:59:38:8c:99:cd:0f:a3:5b:39:88:77:f1:5b:7b:
         b5:0a:c6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----