Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/n7zyZCVVP7jvsKh1zmgcbc6bqgk.roa
File:                     n7zyZCVVP7jvsKh1zmgcbc6bqgk.roa (raw, json)
Hash identifier:          6JJXjV1vwkRysOSF3MYvqQwCQyY3gmac1i2eh/zKUaU=
Subject key identifier:   9F:BC:F2:64:25:55:3F:B8:EF:B0:A8:75:CE:68:1C:6D:CE:9B:AA:09
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       55
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/n7zyZCVVP7jvsKh1zmgcbc6bqgk.roa
Signing time:             Sat 31 Aug 2024 01:30:51 +0000
ROA not before:           Sat 31 Aug 2024 01:30:51 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     17941
IP address blocks:        202.143.64.0/19 maxlen: 20
Validation:               Failed, certificate revoked on Tue 01 Oct 2024 07:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Aug 31 01:30:51 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=9FBCF26425553FB8EFB0A875CE681C6DCE9BAA09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:61:e9:44:2a:7f:f8:0a:dc:f3:5b:a5:72:b4:
                    54:bf:2a:36:0f:cb:93:e8:94:f3:a3:10:76:af:68:
                    ab:be:fb:ba:02:9c:eb:46:e8:15:99:74:92:4c:75:
                    be:2e:c4:bf:9e:cd:5d:b5:4b:e3:aa:6e:70:25:f5:
                    15:c9:d9:e7:2d:d5:07:7b:87:ff:01:a7:f7:e2:55:
                    94:94:34:15:d7:74:e8:e5:c2:1a:68:84:b0:2e:cc:
                    3a:9a:b1:7a:13:3f:e2:26:11:ff:0f:fb:c8:7e:e9:
                    8e:d2:3c:57:bc:97:af:81:4b:69:09:a8:eb:24:9c:
                    40:ef:d3:47:f9:ee:07:3a:14:55:3b:79:b8:7b:d3:
                    90:f9:52:34:92:7e:34:ce:d4:00:ad:49:5f:23:9c:
                    df:b8:e3:44:89:2f:a3:f4:e0:bd:a4:ca:f3:28:88:
                    44:5a:5e:72:98:45:22:52:7b:b6:bf:56:79:e1:75:
                    ff:ca:a0:81:c4:86:e7:4d:ad:1e:3d:44:09:ca:e7:
                    4c:8f:72:3d:05:a1:aa:a9:c9:ca:49:11:fd:52:6e:
                    dd:24:83:6a:d0:f8:b9:3f:44:fa:f0:6c:b5:c4:43:
                    4e:98:fc:86:b1:80:3f:2e:75:9a:86:fe:26:25:fc:
                    65:a7:87:64:cd:5f:29:c7:0d:bd:4b:62:f5:85:aa:
                    58:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BC:F2:64:25:55:3F:B8:EF:B0:A8:75:CE:68:1C:6D:CE:9B:AA:09
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/n7zyZCVVP7jvsKh1zmgcbc6bqgk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.143.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         62:0f:e7:3c:61:31:56:42:da:8f:f7:2b:49:b2:c2:42:41:0c:
         b2:50:5f:02:8f:a4:fd:10:9e:f8:99:39:cb:01:b9:b7:9c:e7:
         cf:44:f3:c1:1f:f7:04:dd:af:57:35:58:cc:7e:04:a2:1a:65:
         9d:a5:8d:ef:85:c3:10:f1:9c:9c:9a:c3:23:46:fd:21:2a:f0:
         9d:66:f0:e4:12:e7:e1:be:fa:dc:98:f1:57:06:6e:f3:7c:66:
         65:78:ac:48:5f:9a:b4:e4:6f:59:72:96:fb:7a:10:c4:f0:85:
         ab:69:4c:98:63:c5:86:99:18:28:f1:b0:00:04:d8:b7:41:39:
         b3:19:19:4f:e2:2a:12:1f:a4:ba:ab:5e:75:89:7f:75:31:28:
         8d:33:05:bb:0c:db:66:a5:53:f9:66:16:5e:14:c5:5d:e4:08:
         dd:fc:ab:78:1f:b4:00:78:79:1a:d2:84:0a:3a:55:23:a9:26:
         38:9a:63:8e:06:65:93:56:0e:88:49:15:71:be:d4:e0:9e:53:
         70:40:3e:37:63:40:d3:f5:55:0f:4d:ec:96:b4:f1:7a:1b:bb:
         c1:db:94:35:1f:dd:1e:75:6a:55:8a:dd:bb:26:09:52:82:6e:
         79:9e:30:ea:85:7e:35:6c:b3:a1:a5:c1:bd:26:18:a2:70:d3:
         cb:f4:b0:3f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:42 2025 by rpki-client