Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/A_C3xHGL91jLIu_0QimSfcz3qNg.roa
File:                     A_C3xHGL91jLIu_0QimSfcz3qNg.roa (raw, json)
Hash identifier:          JwzjO9erhJQVH3k+h8JRNWb/xlPT0OQhgNQM9G6Z1FM=
Subject key identifier:   03:F0:B7:C4:71:8B:F7:58:CB:22:EF:F4:42:29:92:7D:CC:F7:A8:D8
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       4E
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/A_C3xHGL91jLIu_0QimSfcz3qNg.roa
Signing time:             Thu 22 Jun 2023 00:34:57 +0000
ROA not before:           Thu 22 Jun 2023 00:34:57 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        122.128.115.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Jun 2023 00:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:34:57 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=03F0B7C4718BF758CB22EFF44229927DCCF7A8D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ac:d9:21:39:2f:96:75:d6:a7:2f:2d:c9:0c:
                    d9:db:9c:6a:c3:a8:82:67:60:d0:b2:0d:d0:77:e0:
                    25:19:2a:2b:f4:a1:e1:8b:23:4f:b7:c8:0f:16:2e:
                    ac:6f:c6:73:08:a8:db:3a:ab:7c:30:9b:76:e1:fe:
                    12:5f:68:ca:7b:dc:b0:3e:2e:b5:3a:a8:58:9a:9c:
                    a7:d3:86:3b:8b:11:f4:ee:c6:47:37:b1:aa:2b:f7:
                    a1:55:47:49:ca:e9:5e:fe:44:86:b5:1e:c8:eb:04:
                    45:33:4e:9e:08:89:1b:68:53:de:dd:84:04:5b:d6:
                    7a:b3:e6:d8:2f:ff:5e:7b:ed:3a:78:d3:b5:4b:26:
                    eb:0f:f2:dc:c2:1d:38:01:06:18:d2:7c:8d:3f:5d:
                    d4:2a:6c:18:7e:ad:79:31:04:46:db:c5:b2:e5:d9:
                    04:6f:b4:c1:bd:8d:78:17:43:87:e8:b1:34:e4:08:
                    92:58:ea:49:31:cf:c6:06:dd:de:c0:cf:e6:0c:84:
                    33:55:a3:4d:6b:a9:85:0d:4d:14:dc:18:04:05:3d:
                    49:a3:be:9f:7b:31:4f:ad:d5:cb:82:04:14:7f:02:
                    12:e5:33:a2:12:cc:32:7d:76:e8:19:e2:8e:5f:85:
                    13:b5:66:68:72:09:52:18:de:d2:2b:d7:88:5d:3e:
                    8a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F0:B7:C4:71:8B:F7:58:CB:22:EF:F4:42:29:92:7D:CC:F7:A8:D8
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/A_C3xHGL91jLIu_0QimSfcz3qNg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.128.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:0d:a0:53:0c:4d:6f:2d:38:6f:6e:ed:19:a6:3f:b7:94:63:
         2b:78:58:75:c9:df:52:8d:53:3d:18:f1:8b:2b:ec:7d:7f:80:
         17:3b:5d:62:a0:50:90:29:b9:cc:c0:81:c6:5c:bf:74:2f:59:
         67:e4:10:e1:b6:08:59:1e:02:28:c3:d3:6c:a5:31:97:99:67:
         57:ea:ca:98:06:8d:48:d8:f3:d2:aa:9d:a2:ff:16:23:05:52:
         4d:08:e4:26:eb:32:3d:3e:8a:7d:ad:19:8c:80:31:0f:42:c0:
         ff:30:ea:4d:37:dd:69:42:5c:ae:6b:42:24:11:1e:67:9d:ca:
         fa:c4:8b:9a:be:e5:c5:2f:2a:d0:96:96:9d:77:7d:04:99:12:
         f2:98:dc:6b:11:2f:1e:4e:7f:80:57:05:6e:6e:11:d4:f5:de:
         90:09:07:4f:1c:4e:ae:c8:e8:0b:41:62:56:4c:35:18:e9:9f:
         1d:e8:7e:b5:de:b3:05:dc:37:9a:f1:b4:92:ae:ac:4b:f6:5d:
         3d:60:c4:c2:3a:b2:f8:b7:7c:20:4b:fa:0f:6c:8a:42:09:ab:
         3f:d9:5e:f7:7d:80:00:af:f3:35:97:94:73:40:37:1d:cf:7a:
         95:33:32:3b:f6:a9:6e:8e:d1:ca:31:3e:0e:2e:09:46:9a:7f:
         24:26:e0:96
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5REIw
NzY0QzZERkMxRTNERjZCRDU4MEVBNjk5NEExRTcwOThGNTJBMB4XDTIzMDYyMjAw
MzQ1N1oXDTI0MDYxNDAxMzAwMlowMzExMC8GA1UEAxMoMDNGMEI3QzQ3MThCRjc1
OENCMjJFRkY0NDIyOTkyN0RDQ0Y3QThEODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKSs2SE5L5Z11qcvLckM2ducasOogmdg0LIN0HfgJRkqK/Sh4Ysj
T7fIDxYurG/Gcwio2zqrfDCbduH+El9oynvcsD4utTqoWJqcp9OGO4sR9O7GRzex
qiv3oVVHScrpXv5EhrUeyOsERTNOngiJG2hT3t2EBFvWerPm2C//XnvtOnjTtUsm
6w/y3MIdOAEGGNJ8jT9d1CpsGH6teTEERtvFsuXZBG+0wb2NeBdDh+ixNOQIkljq
STHPxgbd3sDP5gyEM1WjTWuphQ1NFNwYBAU9SaO+n3sxT63Vy4IEFH8CEuUzohLM
Mn126Bnijl+FE7VmaHIJUhje0ivXiF0+ir8CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQD8LfEcYv3WMsi7/RCKZJ9zPeo2DAfBgNVHSMEGDAWgBSdsHZMbfwePfa9WA6m
mUoecJj1KjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNjMvbmJCMlRHMzhIajMydlZnT3BwbEtIbkNZOVNvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbmJCMlRHMzhIajMydlZnT3BwbEtI
bkNZOVNvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDYzL0FfQzN4SEdMOTFqTEl1XzBRaW1TZmN6M3FOZy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAB6gHMwDQYJKoZIhvcNAQELBQADggEBAKINoFMMTW8tOG9u7RmmP7eU
Yyt4WHXJ31KNUz0Y8Ysr7H1/gBc7XWKgUJApuczAgcZcv3QvWWfkEOG2CFkeAijD
02ylMZeZZ1fqypgGjUjY89KqnaL/FiMFUk0I5CbrMj0+in2tGYyAMQ9CwP8w6k03
3WlCXK5rQiQRHmedyvrEi5q+5cUvKtCWlp13fQSZEvKY3GsRLx5Of4BXBW5uEdT1
3pAJB08cTq7I6AtBYlZMNRjpnx3ofrXeswXcN5rxtJKurEv2XT1gxMI6svi3fCBL
+g9sikIJqz/ZXvd9gACv8zWXlHNANx3PepUzMjv2qW6O0coxPg4uCUaafyQm4JY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:44 2024 by rpki-client on console-fra.rpki-client.org