Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/1XYPi0Xc379FWx-lsx9K0G8SjU4.roa
File:                     1XYPi0Xc379FWx-lsx9K0G8SjU4.roa (raw, json)
Hash identifier:          DQKxB61pSvADSqC3/ymafCxJi7gF9tYgfC+rrp3peqg=
Subject key identifier:   D5:76:0F:8B:45:DC:DF:BF:45:5B:1F:A5:B3:1F:4A:D0:6F:12:8D:4E
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       018F
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/1XYPi0Xc379FWx-lsx9K0G8SjU4.roa
Signing time:             Sat 01 Jul 2023 01:30:52 +0000
ROA not before:           Sat 01 Jul 2023 01:30:52 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        219.96.128.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jul  1 01:30:52 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=D5760F8B45DCDFBF455B1FA5B31F4AD06F128D4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3d:b3:47:ef:3c:60:b7:4b:e1:0a:a4:41:e0:
                    a2:e7:e4:f8:5c:8b:85:02:17:e6:4f:a0:5a:14:2e:
                    3c:c5:89:60:3d:f9:fa:2f:c2:67:8c:1e:c2:0c:7a:
                    83:83:2a:9e:6e:e1:7a:06:48:d6:6b:af:99:3e:27:
                    0b:05:68:27:45:f0:51:72:1e:65:a6:2c:2b:7a:c0:
                    9c:79:7e:ca:22:03:25:00:61:a9:36:3f:56:8d:66:
                    e7:23:90:fb:14:a9:3e:f4:f0:8b:69:f6:5c:9b:91:
                    6a:45:46:01:f4:ab:69:e8:73:7d:11:ed:ca:2f:f4:
                    3c:03:7e:a8:9f:21:3e:a0:e3:05:b6:c8:75:6b:fe:
                    1a:a5:02:e3:a7:5a:2b:2a:56:d0:a4:88:1b:97:9c:
                    8c:a7:e7:26:8b:66:c2:0d:f2:48:74:ac:46:d4:f9:
                    cf:83:c5:f6:b2:f3:72:61:86:0a:15:99:58:08:b4:
                    cf:ba:32:ad:0e:4c:4c:16:37:cb:df:cf:bd:a1:9e:
                    70:9c:60:95:41:af:f4:18:01:62:8a:4a:4c:7a:18:
                    7d:dd:67:6b:0b:87:97:47:c2:26:4a:72:e1:21:9d:
                    2e:d2:a4:73:89:a9:31:87:8f:10:46:65:ab:85:b5:
                    2b:f2:e0:c2:0d:67:c1:72:e0:aa:76:9c:9e:32:3c:
                    03:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:76:0F:8B:45:DC:DF:BF:45:5B:1F:A5:B3:1F:4A:D0:6F:12:8D:4E
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/1XYPi0Xc379FWx-lsx9K0G8SjU4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.96.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         16:b4:24:f1:83:fa:49:26:27:a0:4e:93:0e:51:c3:c3:78:28:
         97:25:28:6d:e0:d3:f5:cc:d4:00:cd:03:8f:f8:22:24:56:f5:
         16:2c:79:84:5b:ef:52:9c:d8:93:71:d0:a9:8a:fc:3b:68:16:
         0b:23:b6:6b:ea:59:78:fa:b4:fa:9c:82:60:30:1a:25:88:93:
         f4:9c:5c:9f:c7:ec:df:bc:b2:c8:97:2f:7d:d6:59:60:92:6b:
         7a:e8:ef:69:0a:72:40:8c:9b:c7:cb:1c:80:21:da:dc:30:88:
         db:88:3e:cb:b9:e5:9d:5e:d7:58:12:93:a2:d6:e0:c5:10:d2:
         32:27:f3:f4:55:8a:ae:7d:09:2c:ca:e3:f5:0a:17:d3:d4:bb:
         8a:a3:49:31:eb:ae:07:45:ea:e6:ed:25:98:e4:15:c2:c4:f0:
         54:fd:32:9f:dc:91:d2:2a:b4:11:d4:93:ef:14:cc:db:6f:fc:
         01:4a:2c:78:3e:90:1e:8d:e9:5e:a5:2b:40:68:6f:2a:d4:e3:
         0d:0d:3d:13:47:20:31:6d:2c:57:53:c1:59:1e:44:4c:10:cc:
         20:77:48:45:06:e5:cf:a2:76:4c:a7:5a:64:46:cc:2f:c1:63:
         59:a6:fb:e5:51:83:2e:2c:05:d0:c6:18:85:91:c8:05:42:a6:
         9b:49:30:16
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMzA3MDEw
MTMwNTJaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEQ1NzYwRjhCNDVEQ0RG
QkY0NTVCMUZBNUIzMUY0QUQwNkYxMjhENEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgPbNH7zxgt0vhCqRB4KLn5Phci4UCF+ZPoFoULjzFiWA9+fov
wmeMHsIMeoODKp5u4XoGSNZrr5k+JwsFaCdF8FFyHmWmLCt6wJx5fsoiAyUAYak2
P1aNZucjkPsUqT708Itp9lybkWpFRgH0q2noc30R7cov9DwDfqifIT6g4wW2yHVr
/hqlAuOnWisqVtCkiBuXnIyn5yaLZsIN8kh0rEbU+c+Dxfay83JhhgoVmVgItM+6
Mq0OTEwWN8vfz72hnnCcYJVBr/QYAWKKSkx6GH3dZ2sLh5dHwiZKcuEhnS7SpHOJ
qTGHjxBGZauFtSvy4MINZ8Fy4Kp2nJ4yPAO7AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU1XYPi0Xc379FWx+lsx9K0G8SjU4wHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxLzFYWVBpMFhjMzc5Rld4LWxzeDlLMEc4U2pVNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAfbYIAwDQYJKoZIhvcNAQELBQADggEBABa0JPGD+kkmJ6BOkw5Rw8N4KJcl
KG3g0/XM1ADNA4/4IiRW9RYseYRb71Kc2JNx0KmK/DtoFgsjtmvqWXj6tPqcgmAw
GiWIk/ScXJ/H7N+8ssiXL33WWWCSa3ro72kKckCMm8fLHIAh2twwiNuIPsu55Z1e
11gSk6LW4MUQ0jIn8/RViq59CSzK4/UKF9PUu4qjSTHrrgdF6ubtJZjkFcLE8FT9
Mp/ckdIqtBHUk+8UzNtv/AFKLHg+kB6N6V6lK0BobyrU4w0NPRNHIDFtLFdTwVke
REwQzCB3SEUG5c+idkynWmRGzC/BY1mm++VRgy4sBdDGGIWRyAVCpptJMBY=
-----END CERTIFICATE-----
Generated at Fri May 31 04:12:40 2024 by rpki-client on console-fra.rpki-client.org