Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/njsuDG1QmTgk2SKzP3pcVGEuiWA.roa
File:                     njsuDG1QmTgk2SKzP3pcVGEuiWA.roa (raw, json)
Hash identifier:          t/t36tBIYsKWANsGI+aniUYoC0xXUpZ8lIs3mYbohjM=
Subject key identifier:   9E:3B:2E:0C:6D:50:99:38:24:D9:22:B3:3F:7A:5C:54:61:2E:89:60
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       02BC
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/njsuDG1QmTgk2SKzP3pcVGEuiWA.roa
Signing time:             Sun 31 Mar 2024 01:33:18 +0000
ROA not before:           Sun 31 Mar 2024 01:33:18 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        118.155.128.0/18 maxlen: 18
Validation:               Failed, certificate revoked on Wed 18 Dec 2024 01:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 700 (0x2bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 01:33:18 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=9E3B2E0C6D50993824D922B33F7A5C54612E8960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c6:9e:e5:37:51:04:ae:ff:5b:e6:71:1a:62:
                    6e:ad:99:da:76:25:a4:8b:73:2b:de:f5:1f:c1:f7:
                    fd:68:3f:58:39:5e:81:7e:a5:d9:f4:92:9b:8e:2f:
                    da:99:04:bb:4b:f5:3f:db:53:d5:02:99:43:28:c9:
                    62:30:f3:0c:49:2a:87:df:ea:2b:72:6a:9b:58:e6:
                    79:af:35:47:44:b0:08:30:15:4d:9c:cb:c9:2f:52:
                    16:5e:c0:73:01:7e:db:8b:a2:a9:e2:48:fd:19:6b:
                    5d:f0:81:5a:61:6f:7b:79:9e:65:49:3a:2c:3e:a0:
                    aa:50:02:5c:3f:81:99:bf:85:ba:97:eb:2d:a1:2c:
                    8b:68:cd:3c:11:4a:76:a9:3e:b9:da:d1:74:b5:55:
                    58:7c:93:36:3b:c5:fb:61:20:60:27:30:00:b4:df:
                    cd:ab:c1:a7:80:81:87:ed:91:20:8d:71:ed:28:c1:
                    55:60:2e:7f:83:9a:47:9d:fc:7a:cf:6c:98:e2:57:
                    f4:80:2c:6a:fc:36:0e:02:79:50:1c:4b:4a:6e:1e:
                    03:a4:49:0a:70:ea:0d:d7:11:0e:4c:e3:ee:c5:e7:
                    18:90:2a:a6:4d:a9:c7:62:c3:44:8f:5d:4b:03:f3:
                    ff:0e:8a:b1:56:b9:b7:6c:fd:02:38:dc:31:79:51:
                    5f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3B:2E:0C:6D:50:99:38:24:D9:22:B3:3F:7A:5C:54:61:2E:89:60
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/njsuDG1QmTgk2SKzP3pcVGEuiWA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.155.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         91:0b:0e:61:e7:b4:2a:44:ca:d2:9d:cb:99:25:f4:3e:82:66:
         1c:31:a3:96:cc:5f:84:ba:cd:03:a2:cb:d2:84:14:22:b9:3e:
         66:f5:be:ce:b6:2e:64:50:95:c9:fd:ac:04:2a:8e:42:f3:1e:
         28:70:ea:15:4f:1d:a7:2b:a0:60:c3:47:87:39:db:b4:a8:61:
         e5:f4:4a:4c:54:6c:2f:71:26:86:f6:4b:92:b3:39:fc:84:de:
         56:3c:c4:ef:e2:93:30:7a:99:02:09:b5:fb:bc:fb:66:ef:fc:
         c1:a4:d1:20:6d:9b:e4:21:84:af:91:b9:6b:e1:99:10:54:ac:
         af:28:75:54:18:1e:d3:99:98:75:49:f6:86:06:28:6d:6b:89:
         ac:61:8b:64:a6:dd:e0:da:d6:83:ae:54:64:2d:cf:90:12:c3:
         c3:46:14:ca:76:55:69:15:bc:5a:38:6c:15:f5:b8:34:3a:6d:
         b3:d1:14:35:14:de:2f:f3:b7:e8:75:78:ad:a9:a4:90:ca:e4:
         87:60:44:5f:a4:52:73:28:14:d1:42:32:57:08:f0:5e:c4:ba:
         05:b6:d4:8d:76:7c:32:c3:22:83:e4:9f:22:47:27:99:fe:34:
         a0:3d:c7:56:3d:44:64:99:34:00:3f:67:c0:61:80:db:73:40:
         86:a1:35:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:25 2025 by rpki-client