Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/VFd8YKhLT06d8f2zvNnxTUalI6I.roa
File:                     VFd8YKhLT06d8f2zvNnxTUalI6I.roa (raw, json)
Hash identifier:          nTOgYibpEfhdC5nk//TIfePfXkQRl7cYi1tWqRlweeg=
Subject key identifier:   54:57:7C:60:A8:4B:4F:4E:9D:F1:FD:B3:BC:D9:F1:4D:46:A5:23:A2
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       017D
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/VFd8YKhLT06d8f2zvNnxTUalI6I.roa
Signing time:             Sat 01 Jul 2023 01:30:44 +0000
ROA not before:           Sat 01 Jul 2023 01:30:44 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        210.225.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:30:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jul  1 01:30:44 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=54577C60A84B4F4E9DF1FDB3BCD9F14D46A523A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:44:0b:8a:97:40:c6:3d:3a:5c:3d:5a:f0:7c:
                    6a:60:d5:93:34:43:14:ed:87:14:78:16:cb:57:90:
                    41:e4:dc:a9:c5:91:a0:55:56:3f:e3:31:00:a6:87:
                    e2:9e:df:90:70:e2:1a:db:23:d4:40:8d:0a:23:95:
                    e4:ab:82:c6:5f:ba:e7:a2:71:28:52:86:c3:26:e3:
                    ad:ad:c2:8d:83:7b:b1:d2:56:4d:85:d0:f8:bb:54:
                    3b:21:55:50:e3:2d:fa:01:76:76:6e:73:74:38:09:
                    b4:e7:cb:f7:0f:ed:ac:81:e6:61:fe:b1:d6:34:19:
                    1a:b3:7f:2c:b9:c1:84:68:a5:d3:80:04:ca:23:db:
                    d6:bf:fb:bf:05:ea:9b:7c:67:cc:ac:93:b7:83:10:
                    57:e8:65:37:70:dd:1e:e4:bc:ed:50:60:0b:4a:e8:
                    29:f9:c1:f5:67:16:4d:99:47:93:72:78:4c:6b:9f:
                    97:7d:1b:be:f8:15:49:6f:32:89:ed:02:79:aa:6b:
                    95:ae:89:7d:a1:72:b9:3b:80:e0:2f:93:59:24:67:
                    0f:ea:ae:16:a4:69:29:ad:9e:0e:1d:1e:e3:20:2d:
                    ec:00:e4:f8:cb:53:c2:90:fd:04:e9:b0:ea:78:a2:
                    6c:1c:95:bd:e9:bb:1d:72:66:72:35:42:d4:58:da:
                    b1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:57:7C:60:A8:4B:4F:4E:9D:F1:FD:B3:BC:D9:F1:4D:46:A5:23:A2
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/VFd8YKhLT06d8f2zvNnxTUalI6I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.225.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6a:9c:40:aa:e9:22:d4:eb:96:0c:dc:fb:e6:87:b0:57:08:7a:
         10:67:98:de:8e:d0:c9:8b:d2:96:a0:f2:b8:f9:be:94:eb:c0:
         59:ee:ee:e8:53:6a:9d:58:04:24:50:9e:83:ca:50:8b:a6:30:
         23:a5:93:fc:41:fc:59:b4:9a:b5:ee:ad:01:c8:64:37:fb:17:
         23:49:63:4f:4d:80:55:54:0b:cd:42:cf:95:5f:34:10:51:ba:
         a9:fa:a5:64:d3:7c:30:9c:db:ae:39:15:9c:a8:f3:51:c7:4e:
         7b:a6:df:87:2d:19:9d:92:f3:47:b0:be:f5:d9:db:be:64:73:
         9e:f9:28:83:eb:28:16:32:c3:25:09:39:70:c5:d2:37:18:cb:
         3f:78:ab:8d:45:45:ef:81:59:4d:42:a9:44:44:7e:a4:ce:40:
         12:9a:a8:db:55:24:2f:38:59:df:3c:1c:a1:77:66:59:ef:70:
         3f:20:1b:96:11:ae:a7:ac:95:0d:04:49:04:8c:22:88:d5:1d:
         0c:08:fa:20:ad:7b:d0:66:4a:1c:40:43:9e:9f:ce:32:63:e0:
         99:24:a6:c4:9b:e5:d1:5e:ae:d0:82:fd:7c:b8:8a:f7:16:1c:
         fe:b7:45:a3:02:b6:4e:57:96:5d:c9:6c:f9:c7:f5:92:83:db:
         bf:05:a8:71
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMzA3MDEw
MTMwNDRaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDU0NTc3QzYwQTg0QjRG
NEU5REYxRkRCM0JDRDlGMTRENDZBNTIzQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdRAuKl0DGPTpcPVrwfGpg1ZM0QxTthxR4FstXkEHk3KnFkaBV
Vj/jMQCmh+Ke35Bw4hrbI9RAjQojleSrgsZfuueicShShsMm462two2De7HSVk2F
0Pi7VDshVVDjLfoBdnZuc3Q4CbTny/cP7ayB5mH+sdY0GRqzfyy5wYRopdOABMoj
29a/+78F6pt8Z8ysk7eDEFfoZTdw3R7kvO1QYAtK6Cn5wfVnFk2ZR5NyeExrn5d9
G774FUlvMontAnmqa5WuiX2hcrk7gOAvk1kkZw/qrhakaSmtng4dHuMgLewA5PjL
U8KQ/QTpsOp4omwclb3pux1yZnI1QtRY2rEdAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUVFd8YKhLT06d8f2zvNnxTUalI6IwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL1ZGZDhZS2hMVDA2ZDhmMnp2Tm54VFVhbEk2SS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDS4TANBgkqhkiG9w0BAQsFAAOCAQEAapxAquki1OuWDNz75oewVwh6EGeY
3o7QyYvSlqDyuPm+lOvAWe7u6FNqnVgEJFCeg8pQi6YwI6WT/EH8WbSate6tAchk
N/sXI0ljT02AVVQLzULPlV80EFG6qfqlZNN8MJzbrjkVnKjzUcdOe6bfhy0ZnZLz
R7C+9dnbvmRznvkog+soFjLDJQk5cMXSNxjLP3irjUVF74FZTUKpRER+pM5AEpqo
21UkLzhZ3zwcoXdmWe9wPyAblhGup6yVDQRJBIwiiNUdDAj6IK170GZKHEBDnp/O
MmPgmSSmxJvl0V6u0IL9fLiK9xYc/rdFowK2TleWXcls+cf1koPbvwWocQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:32 2024 by rpki-client on console-ams.rpki-client.org