Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9/A185HuFRmfJkL0_bw2ZTWPDrhBc.roa
File:                     A185HuFRmfJkL0_bw2ZTWPDrhBc.roa (raw, json)
Hash identifier:          yl5CcHiWBfghL569sJaXBa1/duvoveFz3BuU4Qnfb0A=
Subject key identifier:   03:5F:39:1E:E1:51:99:F2:64:2F:4F:DB:C3:66:53:58:F0:EB:84:17
Certificate issuer:       /CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Certificate serial:       59
Authority key identifier: 16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/A185HuFRmfJkL0_bw2ZTWPDrhBc.roa
Signing time:             Fri 31 Jan 2025 01:31:51 +0000
ROA not before:           Fri 31 Jan 2025 01:31:51 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     2500
IP address blocks:        202.249.128.0/18 maxlen: 18
Validation:               Failed, certificate revoked on Thu 27 Mar 2025 04:57:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16851F56697ED9D56929BD0242D43B0278FC16E0
        Validity
            Not Before: Jan 31 01:31:51 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=035F391EE15199F2642F4FDBC3665358F0EB8417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a5:5f:52:5a:5b:88:ac:f9:2e:84:56:ff:82:
                    19:04:d1:01:b7:3c:ef:a2:8c:87:59:1e:ad:22:46:
                    71:f2:74:dc:a0:0d:31:0b:82:13:d6:a6:5c:39:15:
                    c9:13:3b:9d:d6:2b:36:fe:54:e5:e9:5f:62:11:ef:
                    02:58:1e:fe:c3:df:a8:db:c3:86:97:93:a8:59:61:
                    1d:1d:09:b0:f3:88:bd:75:fe:48:ad:5c:ba:13:7c:
                    fe:56:58:dc:7d:c6:30:11:71:b6:a2:26:67:2d:bc:
                    31:92:ae:71:b8:a8:7a:e9:be:b3:47:1f:51:f9:ba:
                    09:a3:64:da:52:31:94:2d:9c:c8:63:01:52:be:9b:
                    5f:45:e8:82:1b:99:aa:c1:bd:71:9c:d9:65:0d:b4:
                    5b:19:01:e6:99:b7:93:9c:6c:5e:dc:7d:9d:c2:70:
                    66:96:a8:3d:0a:0e:51:65:d7:f8:65:dc:a9:8e:bf:
                    4b:57:25:d1:ce:80:f9:34:16:de:1c:dd:35:da:cd:
                    2f:36:c6:f0:1c:5d:1a:02:48:39:2f:b8:ca:99:9e:
                    38:af:b9:ce:e9:3d:c4:95:7f:46:4a:48:be:27:d5:
                    19:2d:aa:85:f9:5d:fd:13:74:dc:1c:8f:4a:91:3b:
                    44:5b:d4:de:7f:de:70:11:52:90:24:b1:e8:e2:69:
                    2c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5F:39:1E:E1:51:99:F2:64:2F:4F:DB:C3:66:53:58:F0:EB:84:17
            X509v3 Authority Key Identifier:
                keyid:16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/A185HuFRmfJkL0_bw2ZTWPDrhBc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.249.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         39:f0:13:c8:c6:93:7c:ac:da:a8:31:76:91:14:78:fb:37:12:
         ca:98:d9:0c:a4:cc:d3:2b:96:87:47:1f:3f:78:d9:b2:af:93:
         91:25:23:fa:31:16:dc:58:58:6e:87:7e:fe:a0:9b:d3:68:66:
         f2:43:d0:3e:2d:fb:c3:e0:87:45:dc:e5:fa:60:7e:47:49:d2:
         de:a5:45:89:e5:a1:e1:fb:2c:02:69:e0:d5:08:39:d3:40:0f:
         7a:4c:1c:f7:36:ea:b0:51:91:f1:76:d0:50:35:df:bb:67:bc:
         c5:9b:bb:23:33:ed:82:d8:6e:9b:a3:9d:a5:c8:d3:1c:b0:01:
         69:ac:16:60:a9:a1:c0:b1:c2:d9:56:d1:1f:64:2c:d0:b5:1d:
         e1:8f:47:e3:3c:56:b1:e5:77:a0:cc:7e:c6:d9:81:b3:dc:2a:
         ee:13:f1:4e:a6:dd:d4:cb:ed:4f:ef:c2:c7:10:8b:08:6c:44:
         92:e2:28:2b:f6:6e:fb:ed:c1:1f:a5:10:d9:1e:79:da:1b:35:
         ce:c7:cd:8c:cc:64:18:c0:6e:eb:a2:8c:a4:58:72:c2:20:ef:
         3f:30:d8:60:26:50:55:6f:9a:78:65:88:e2:cb:38:04:08:5d:
         e3:2a:3f:16:a8:22:d5:fe:a1:b2:71:b8:7a:a9:38:15:1a:73:
         69:80:6f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:18 2025 by rpki-client