Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/49GJzH_hE_OdGh71enV7QsId7R4.roa
File:                     49GJzH_hE_OdGh71enV7QsId7R4.roa (raw, json)
Hash identifier:          R8xcTc9doClCTV9wXodIEgekPQjuEHdOkSiJImmcI4E=
Subject key identifier:   E3:D1:89:CC:7F:E1:13:F3:9D:1A:1E:F5:7A:75:7B:42:C2:1D:ED:1E
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       57
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/49GJzH_hE_OdGh71enV7QsId7R4.roa
Signing time:             Sat 31 Aug 2024 01:30:51 +0000
ROA not before:           Sat 31 Aug 2024 01:30:51 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     17941
IP address blocks:        202.53.16.0/20 maxlen: 20
Validation:               Failed, certificate revoked on Tue 01 Oct 2024 06:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Aug 31 01:30:51 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=E3D189CC7FE113F39D1A1EF57A757B42C21DED1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:90:e2:ec:6b:ba:b9:98:19:0d:a3:c0:02:2e:
                    fd:02:0c:ff:32:5c:50:7b:5c:9c:de:b6:3f:43:52:
                    83:91:19:d0:26:6b:8b:46:83:c3:ee:d0:99:2a:5b:
                    61:b8:1e:c2:2b:bb:13:eb:d4:cf:96:bc:9f:49:93:
                    7c:ee:5f:14:6d:16:d8:d3:be:ef:99:9d:75:33:5c:
                    97:4d:09:8e:97:89:50:3f:ea:b8:ac:ff:b0:81:83:
                    69:fd:aa:65:f1:a1:98:26:8f:9f:44:b8:6c:d9:e0:
                    65:0a:c9:f8:93:5d:6f:fc:b0:cf:d9:43:5e:41:3c:
                    79:28:43:b6:db:ac:08:45:cc:0a:61:b4:8a:8f:04:
                    77:28:e3:a6:e0:25:98:99:87:8c:d3:a6:05:f5:08:
                    cc:bf:4f:cc:a8:b2:28:98:1c:0d:55:e8:8f:9b:06:
                    d0:6a:e4:d2:e5:34:1a:6d:7a:5f:2b:61:ad:0a:b0:
                    37:1f:95:69:2a:2e:19:0f:1b:88:9f:e2:88:5b:56:
                    a1:60:5c:48:20:a0:3f:5d:74:15:21:a4:59:83:fe:
                    2e:ae:ec:df:19:93:a7:f3:e6:81:9b:ec:5b:fc:7b:
                    75:d2:ec:a1:cc:f4:ee:95:c8:8b:a5:bf:b2:85:1e:
                    01:bd:14:ad:8b:e4:92:31:37:b2:2f:b2:64:e2:c3:
                    b3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D1:89:CC:7F:E1:13:F3:9D:1A:1E:F5:7A:75:7B:42:C2:1D:ED:1E
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/49GJzH_hE_OdGh71enV7QsId7R4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.53.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         13:a0:af:0a:9e:32:ca:82:b1:c7:3f:a9:68:c9:12:2d:c2:9c:
         84:e9:7e:83:c2:84:9a:cf:ca:cc:ce:d7:96:57:a8:12:c8:76:
         12:ca:75:6b:83:b2:f2:10:ce:83:cc:9f:3b:7d:cd:1e:0d:d2:
         58:28:c8:c5:17:5a:03:f7:0f:00:9f:ce:4a:86:8a:28:f4:16:
         d6:cc:ff:2d:38:f4:8f:6f:20:92:17:d7:88:62:ea:2e:8f:c5:
         e8:3d:79:10:c4:dc:d6:1b:ec:6c:e5:67:73:2f:51:57:45:ce:
         0f:16:24:a1:02:ad:c3:b9:72:1e:ce:a8:0a:fe:d2:1b:65:22:
         59:67:9a:1e:84:a9:18:40:ea:cb:5b:cd:61:51:b0:79:5a:9a:
         99:a6:74:64:bf:bb:f2:cb:67:09:9e:e7:ae:ae:f0:b5:d0:19:
         8c:4f:32:49:4a:90:b3:c4:c0:aa:d5:5d:e0:58:f7:c8:b0:e0:
         98:e9:67:29:f5:c8:3c:cd:f6:df:dc:20:5e:af:76:3f:da:fa:
         c0:d9:84:d9:c8:4a:b1:8c:d8:51:f0:6d:a4:1f:3e:70:9e:08:
         86:6f:c4:a9:9f:82:f1:52:20:89:05:c8:50:84:32:9c:43:57:
         1e:40:bc:19:bc:01:b0:34:9e:60:ba:26:10:86:2f:ee:66:e1:
         13:bd:2e:76
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBVzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NjFC
QzE4NTEyNzIyQUFGOUE5MEQ4OThBREVBOUFGNzc5M0MyNTQzMB4XDTI0MDgzMTAx
MzA1MVoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoRTNEMTg5Q0M3RkUxMTNG
MzlEMUExRUY1N0E3NTdCNDJDMjFERUQxRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMqQ4uxrurmYGQ2jwAIu/QIM/zJcUHtcnN62P0NSg5EZ0CZri0aD
w+7QmSpbYbgewiu7E+vUz5a8n0mTfO5fFG0W2NO+75mddTNcl00JjpeJUD/quKz/
sIGDaf2qZfGhmCaPn0S4bNngZQrJ+JNdb/ywz9lDXkE8eShDttusCEXMCmG0io8E
dyjjpuAlmJmHjNOmBfUIzL9PzKiyKJgcDVXoj5sG0Grk0uU0Gm16XythrQqwNx+V
aSouGQ8biJ/iiFtWoWBcSCCgP110FSGkWYP+Lq7s3xmTp/PmgZvsW/x7ddLsocz0
7pXIi6W/soUeAb0UrYvkkjE3si+yZOLDs5kCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTj0YnMf+ET850aHvV6dXtCwh3tHjAfBgNVHSMEGDAWgBSWG8GFEnIqr5qQ2Jit
6pr3eTwlQzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNDIvbGh2QmhSSnlLcS1ha05pWXJlcWE5M2s4SlVNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbGh2QmhSSnlLcS1ha05pWXJlcWE5
M2s4SlVNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDQyLzQ5R0p6SF9oRV9PZEdoNzFlblY3UXNJZDdSNC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBATKNRAwDQYJKoZIhvcNAQELBQADggEBABOgrwqeMsqCscc/qWjJEi3C
nITpfoPChJrPyszO15ZXqBLIdhLKdWuDsvIQzoPMnzt9zR4N0lgoyMUXWgP3DwCf
zkqGiij0FtbM/y049I9vIJIX14hi6i6Pxeg9eRDE3NYb7GzlZ3MvUVdFzg8WJKEC
rcO5ch7OqAr+0htlIllnmh6EqRhA6stbzWFRsHlampmmdGS/u/LLZwme566u8LXQ
GYxPMklKkLPEwKrVXeBY98iw4JjpZyn1yDzN9t/cIF6vdj/a+sDZhNnISrGM2FHw
baQfPnCeCIZvxKmfgvFSIIkFyFCEMpxDVx5AvBm8AbA0nmC6JhCGL+5m4RO9LnY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:09 2025 by rpki-client