Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/caVmA1dHViTa045ARhFi1aCb64s.roa
File:                     caVmA1dHViTa045ARhFi1aCb64s.roa (raw, json)
Hash identifier:          EIJowh+3zLxHL76OPzLaWOTsKrFunnbYguDTSox2S3c=
Subject key identifier:   71:A5:66:03:57:47:56:24:DA:D3:8E:40:46:11:62:D5:A0:9B:EB:8B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       06F3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/caVmA1dHViTa045ARhFi1aCb64s.roa
Signing time:             Tue 30 Apr 2024 01:49:45 +0000
ROA not before:           Tue 30 Apr 2024 01:49:45 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        110.163.42.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 01 Apr 2025 01:51:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1779 (0x6f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:49:45 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=71A5660357475624DAD38E40461162D5A09BEB8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8f:e2:07:7f:90:dd:6e:61:63:d8:3f:41:f9:
                    6f:2d:4a:e5:68:31:00:18:97:56:23:35:a5:df:24:
                    17:2b:b2:1c:b7:53:70:0c:04:35:4a:5a:3d:1f:2b:
                    e3:72:26:a6:d7:5b:29:e2:6d:4a:9d:9d:9f:08:c8:
                    0b:86:22:98:14:ed:b6:27:62:6f:19:a3:ac:65:b9:
                    ed:18:68:f9:dc:7f:3f:41:16:1a:90:8f:cd:6b:a6:
                    19:32:9a:01:44:bb:60:69:c8:4e:05:95:ea:37:52:
                    16:c2:32:ee:04:3b:2a:d9:27:1d:b5:65:f2:72:09:
                    46:e8:c0:23:cb:85:39:c0:ea:6b:17:56:f3:a6:3e:
                    44:e3:1c:15:b7:23:31:74:76:d1:c9:9f:b6:1f:4b:
                    ee:72:2c:41:b9:a2:5f:33:54:d3:9d:9b:c1:91:20:
                    0f:9c:ce:45:28:99:29:18:74:50:4d:fe:8c:1c:bc:
                    8d:22:ee:ca:5a:32:00:89:13:52:a0:6a:90:86:10:
                    df:90:a2:2e:10:ba:73:fc:a4:ef:b2:5a:cd:53:2e:
                    30:93:c4:39:5a:64:9f:dc:33:62:9d:da:2f:ef:c1:
                    58:92:74:14:24:a0:f3:bf:0f:9f:61:aa:2b:fb:f1:
                    7d:21:a3:47:e6:ce:df:33:1f:bb:aa:b8:8a:dc:a2:
                    57:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A5:66:03:57:47:56:24:DA:D3:8E:40:46:11:62:D5:A0:9B:EB:8B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/caVmA1dHViTa045ARhFi1aCb64s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.163.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:6c:44:ce:95:8d:80:b9:f1:d2:41:05:a6:7f:a0:ed:4a:66:
         72:fd:34:ef:e3:d3:f1:02:bd:3c:f9:c3:c4:bf:8b:e8:9b:c1:
         d9:d5:02:d5:66:b5:04:e3:c3:da:9a:67:c8:f2:37:e9:1c:0d:
         72:41:59:77:4f:03:a8:2c:3c:75:fd:d1:84:76:05:38:7f:90:
         2e:c0:65:bc:83:1e:f3:e0:3a:19:ab:68:94:67:38:a9:37:aa:
         ed:d8:0d:20:19:94:33:52:f5:f9:be:1b:4b:5f:62:2c:0a:57:
         38:35:76:cf:33:14:de:f1:61:43:f1:f1:86:13:84:ed:aa:09:
         3f:23:01:98:13:7d:9b:bf:a8:af:22:46:f2:6f:f8:f1:11:a3:
         b8:30:5a:e2:49:eb:34:25:aa:96:ba:73:78:66:91:91:82:3c:
         c5:a0:cb:b1:e5:9e:15:1b:3e:fe:97:31:76:9c:d8:f2:49:96:
         c1:58:43:0d:50:6e:25:42:8c:d0:b4:4f:ed:27:62:e0:09:29:
         e7:e6:d8:5a:1a:11:9b:c6:40:78:b3:40:38:f8:de:84:de:f7:
         2b:88:39:df:49:54:1d:a4:f2:5a:04:73:97:8d:6f:b9:06:49:
         11:98:01:ab:29:2e:d6:ad:17:30:6b:e0:8e:58:5d:37:f7:d9:
         b2:68:4c:e6
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBvMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MTQ5NDVaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDcxQTU2NjAzNTc0NzU2
MjREQUQzOEU0MDQ2MTE2MkQ1QTA5QkVCOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCj+IHf5DdbmFj2D9B+W8tSuVoMQAYl1YjNaXfJBcrshy3U3AM
BDVKWj0fK+NyJqbXWynibUqdnZ8IyAuGIpgU7bYnYm8Zo6xlue0YaPncfz9BFhqQ
j81rphkymgFEu2BpyE4Fleo3UhbCMu4EOyrZJx21ZfJyCUbowCPLhTnA6msXVvOm
PkTjHBW3IzF0dtHJn7YfS+5yLEG5ol8zVNOdm8GRIA+czkUomSkYdFBN/owcvI0i
7spaMgCJE1KgapCGEN+Qoi4QunP8pO+yWs1TLjCTxDlaZJ/cM2Kd2i/vwViSdBQk
oPO/D59hqiv78X0ho0fmzt8zH7uquIrcoldHAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUcaVmA1dHViTa045ARhFi1aCb64swHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L2NhVm1BMWRIVmlUYTA0NUFSaEZpMWFDYjY0cy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABuoyowDQYJKoZIhvcNAQELBQADggEBAHVsRM6VjYC58dJBBaZ/oO1KZnL9
NO/j0/ECvTz5w8S/i+ibwdnVAtVmtQTjw9qaZ8jyN+kcDXJBWXdPA6gsPHX90YR2
BTh/kC7AZbyDHvPgOhmraJRnOKk3qu3YDSAZlDNS9fm+G0tfYiwKVzg1ds8zFN7x
YUPx8YYThO2qCT8jAZgTfZu/qK8iRvJv+PERo7gwWuJJ6zQlqpa6c3hmkZGCPMWg
y7HlnhUbPv6XMXac2PJJlsFYQw1QbiVCjNC0T+0nYuAJKefm2FoaEZvGQHizQDj4
3oTe9yuIOd9JVB2k8loEc5eNb7kGSRGYAaspLtatFzBr4I5YXTf32bJoTOY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:20:20 2025 by rpki-client