Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/CSV-ErBlixqrG9BAiCXNdskR9Ho.roa
File:                     CSV-ErBlixqrG9BAiCXNdskR9Ho.roa (raw, json)
Hash identifier:          CKP2FhjWbaPbFfWWEK8EF+2scxmOhmmyf3Qq0/3PJfQ=
Subject key identifier:   09:25:7E:12:B0:65:8B:1A:AB:1B:D0:40:88:25:CD:76:C9:11:F4:7A
Certificate issuer:       /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Certificate serial:       38
Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/CSV-ErBlixqrG9BAiCXNdskR9Ho.roa
Signing time:             Sun 30 Jun 2024 01:29:45 +0000
ROA not before:           Sun 30 Jun 2024 01:29:45 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     24121
IP address blocks:        112.140.128.0/20 maxlen: 20
Validation:               Failed, certificate revoked on Wed 30 Oct 2024 07:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
        Validity
            Not Before: Jun 30 01:29:45 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=09257E12B0658B1AAB1BD0408825CD76C911F47A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:87:57:a4:74:f7:5f:58:9b:f5:31:39:f7:5f:
                    97:a0:b7:f2:b8:2c:ae:6f:44:d3:64:bd:f1:37:b2:
                    1e:a8:15:fb:a0:ba:15:44:45:fd:40:ed:32:50:a0:
                    52:75:ee:c0:de:10:c3:68:c8:ea:f9:96:eb:e5:39:
                    65:a9:ad:7f:af:2a:ea:b1:55:b9:6e:73:31:0c:1f:
                    cd:7b:09:f0:e2:1c:0f:3e:2a:eb:6c:fd:fd:9f:a9:
                    e7:d1:21:d4:be:bf:ac:4c:12:03:52:be:b4:4b:fd:
                    f3:08:49:7f:5e:c6:f0:ab:95:28:c0:0a:4f:d1:d3:
                    a5:c5:73:d1:ab:d9:72:1a:00:d7:bf:cc:07:86:23:
                    5c:81:19:c7:87:f0:7c:bc:3f:1b:c5:f4:68:4f:17:
                    32:f2:22:36:b3:bf:a2:3e:de:26:84:0e:06:33:86:
                    2e:58:f8:47:13:c6:0a:77:60:c5:ee:28:8d:a0:91:
                    c1:7c:f5:2f:58:47:17:97:bd:24:2f:ca:f7:05:9b:
                    28:73:2c:02:84:16:88:6b:ed:1b:ae:dc:24:c8:9a:
                    6b:1b:71:cc:fb:58:b5:4e:3e:04:16:2c:a7:a3:33:
                    0f:4c:f6:d5:ea:de:d2:db:7a:d0:99:63:31:72:c4:
                    90:16:c2:9a:78:ad:d6:f0:40:18:fe:46:a3:e1:ba:
                    c8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:25:7E:12:B0:65:8B:1A:AB:1B:D0:40:88:25:CD:76:C9:11:F4:7A
            X509v3 Authority Key Identifier:
                keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/CSV-ErBlixqrG9BAiCXNdskR9Ho.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.140.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:b5:fa:cc:1a:a2:ad:d1:6b:56:dc:c4:cd:09:36:bf:32:41:
         7a:4c:35:01:6a:b6:25:15:28:12:95:73:cf:8f:64:c5:13:f9:
         2d:ca:d3:bf:ca:ff:64:5e:04:8a:d4:8f:8e:51:67:15:d0:2b:
         83:79:ae:1a:aa:9b:bf:f3:d8:16:70:81:6a:75:b8:58:ed:58:
         39:b9:f1:d0:76:89:31:15:ec:e3:81:f4:1c:f7:7f:6f:c8:85:
         e0:29:37:ec:6e:56:29:27:19:ec:36:1f:67:42:3c:70:0f:9a:
         9c:4b:ca:2a:cf:aa:f1:c3:10:bf:14:8b:33:08:77:2d:83:cb:
         17:09:97:95:55:20:00:34:63:fc:28:af:2b:f0:cd:9b:f3:95:
         c0:66:1d:de:46:12:43:c0:1d:c1:50:64:6b:aa:5b:39:14:14:
         d8:e9:dc:96:ef:48:8e:0e:1b:4f:4b:0b:ad:3f:a2:51:fb:f6:
         21:a3:41:9f:7a:32:7f:ea:82:57:b3:e3:b1:f4:76:b6:84:fa:
         ca:5a:7d:d9:54:0a:59:10:2b:40:24:b1:ac:20:2d:6b:35:7e:
         81:2d:80:90:cc:f0:67:86:e1:e7:f9:20:1c:a6:2e:74:49:64:
         3e:e1:98:17:e5:56:7d:68:c3:d5:18:76:55:8a:7c:5b:5d:cd:
         b9:91:01:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:21:36 2025 by rpki-client