Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/xhdxzwqhWdOg8rgbJ3CUr2Z9pYM.roa
File:                     xhdxzwqhWdOg8rgbJ3CUr2Z9pYM.roa (raw, json)
Hash identifier:          Z+2cVsdhmCFtmumCC4/kcXhtkkzO5Vikg6Q0hUevNnU=
Subject key identifier:   C6:17:71:CF:0A:A1:59:D3:A0:F2:B8:1B:27:70:94:AF:66:7D:A5:83
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0178
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/xhdxzwqhWdOg8rgbJ3CUr2Z9pYM.roa
Signing time:             Sat 01 Jul 2023 01:30:43 +0000
ROA not before:           Sat 01 Jul 2023 01:30:43 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        210.154.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jul  1 01:30:43 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=C61771CF0AA159D3A0F2B81B277094AF667DA583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d6:5b:57:d0:53:22:be:4a:b5:a6:66:7a:2e:
                    e3:99:0b:83:10:91:e4:4e:24:fb:bb:00:6d:c7:12:
                    eb:bb:ea:ac:1e:a5:bc:41:b3:75:6d:7c:c4:f8:4b:
                    5b:e3:71:14:54:f8:f0:42:d3:17:19:33:0a:86:94:
                    2c:dd:1f:f1:40:4f:5c:2f:c3:46:f4:ab:3e:c4:df:
                    ea:02:fd:03:62:fc:99:cd:e9:c2:0e:fd:1b:e2:d0:
                    de:df:5c:9f:31:75:ce:4c:f5:c5:23:b6:dc:a8:b3:
                    aa:2f:ef:9f:0b:b2:c7:9e:fd:d7:b1:44:8f:2b:eb:
                    cc:a7:db:d4:96:91:d8:79:9f:66:41:e6:da:de:d8:
                    27:3c:ae:51:94:88:d0:32:e6:0c:76:dc:6b:36:98:
                    c0:a8:ef:f1:34:55:ef:0b:f5:3d:27:c7:d6:66:fe:
                    45:ce:c1:59:43:6a:91:4f:32:90:26:5b:2e:f2:99:
                    66:36:d0:9a:54:99:6c:11:37:b4:00:41:6f:25:77:
                    4f:52:4d:77:45:bc:e9:e0:f3:4f:48:ab:3f:e6:24:
                    df:09:c2:b9:10:63:98:da:2f:6c:3c:9d:ed:ae:63:
                    ed:f4:c1:0a:ef:ae:cc:c7:de:da:e5:08:24:52:5b:
                    28:b9:20:13:c3:a0:5b:4e:fd:d8:5d:7d:b3:75:bd:
                    07:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:17:71:CF:0A:A1:59:D3:A0:F2:B8:1B:27:70:94:AF:66:7D:A5:83
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/xhdxzwqhWdOg8rgbJ3CUr2Z9pYM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.154.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c5:43:ac:91:14:fb:23:7b:c7:7c:6b:97:57:06:09:d7:9a:01:
         1e:c8:0c:49:24:1e:95:2e:7a:f2:ee:c2:f5:d1:02:02:37:5f:
         a0:22:7b:38:29:56:fc:7a:7c:19:9f:bd:52:be:44:51:af:36:
         a4:aa:72:d3:e0:c0:9b:9a:a4:be:4f:27:87:9f:31:12:c6:73:
         c1:49:b8:a1:58:77:85:66:9c:cd:93:83:ce:93:01:af:6c:f3:
         fe:51:ad:48:c6:56:2f:df:a3:66:b5:3e:61:c6:26:2e:af:7a:
         58:6e:39:28:48:4e:ca:1f:63:d8:ec:38:d8:f4:fa:7a:ae:2f:
         93:27:24:f4:00:9e:5b:f0:75:b1:5c:cc:25:90:8c:7e:5d:ed:
         dd:80:a9:f2:ed:a6:25:28:c4:ea:bf:42:ec:59:e3:8b:d8:8d:
         b2:6f:d6:8c:82:f8:ab:a7:cf:82:7a:51:50:ce:ba:a5:01:94:
         93:5c:c8:cd:2a:2d:0a:f7:71:8b:ad:0a:8e:1a:e4:d9:e7:f7:
         cb:b4:f3:06:4e:d5:7c:94:47:c3:f4:e3:db:f8:3a:4c:e6:1b:
         b5:ba:32:79:57:fe:9f:b6:d7:52:3a:10:27:1c:80:84:2f:35:
         df:92:79:48:40:2f:1a:17:23:16:fc:21:e0:c4:b2:94:de:60:
         3e:37:20:62
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMzA3MDEw
MTMwNDNaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEM2MTc3MUNGMEFBMTU5
RDNBMEYyQjgxQjI3NzA5NEFGNjY3REE1ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDH1ltX0FMivkq1pmZ6LuOZC4MQkeROJPu7AG3HEuu76qwepbxB
s3VtfMT4S1vjcRRU+PBC0xcZMwqGlCzdH/FAT1wvw0b0qz7E3+oC/QNi/JnN6cIO
/Rvi0N7fXJ8xdc5M9cUjttyos6ov758Lssee/dexRI8r68yn29SWkdh5n2ZB5tre
2Cc8rlGUiNAy5gx23Gs2mMCo7/E0Ve8L9T0nx9Zm/kXOwVlDapFPMpAmWy7ymWY2
0JpUmWwRN7QAQW8ld09STXdFvOng809Iqz/mJN8JwrkQY5jaL2w8ne2uY+30wQrv
rszH3trlCCRSWyi5IBPDoFtO/dhdfbN1vQePAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUxhdxzwqhWdOg8rgbJ3CUr2Z9pYMwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL3hoZHh6d3FoV2RPZzhyZ2JKM0NVcjJaOXBZTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDSmjANBgkqhkiG9w0BAQsFAAOCAQEAxUOskRT7I3vHfGuXVwYJ15oBHsgM
SSQelS568u7C9dECAjdfoCJ7OClW/Hp8GZ+9Ur5EUa82pKpy0+DAm5qkvk8nh58x
EsZzwUm4oVh3hWaczZODzpMBr2zz/lGtSMZWL9+jZrU+YcYmLq96WG45KEhOyh9j
2Ow42PT6eq4vkyck9ACeW/B1sVzMJZCMfl3t3YCp8u2mJSjE6r9C7Fnji9iNsm/W
jIL4q6fPgnpRUM66pQGUk1zIzSotCvdxi60Kjhrk2ef3y7TzBk7VfJRHw/Tj2/g6
TOYbtboyeVf+n7bXUjoQJxyAhC8135J5SEAvGhcjFvwh4MSylN5gPjcgYg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org