Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/641YINrLnVv6Y7OTDw8zmfJvlnI.roa
File:                     641YINrLnVv6Y7OTDw8zmfJvlnI.roa (raw, json)
Hash identifier:          qxXbVPjF1hnqgC6ckCPHZx2/Ko+ZCe7SmJFKYrbk3wc=
Subject key identifier:   EB:8D:58:20:DA:CB:9D:5B:FA:63:B3:93:0F:0F:33:99:F2:6F:96:72
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0150
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/641YINrLnVv6Y7OTDw8zmfJvlnI.roa
Signing time:             Wed 15 Feb 2023 02:28:30 +0000
ROA not before:           Wed 15 Feb 2023 02:28:30 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.30/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 15 02:28:30 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=EB8D5820DACB9D5BFA63B3930F0F3399F26F9672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d7:da:f2:0e:27:7b:fb:44:c6:2a:84:d3:ce:
                    cc:9d:4c:81:6b:4e:87:bf:98:1f:77:cd:4d:2c:dc:
                    e5:bb:a2:30:a6:c9:ab:e2:cb:a5:e3:c7:59:81:3a:
                    a5:0c:a3:3b:56:92:29:a6:17:6a:90:98:83:ad:ba:
                    29:4b:fb:73:3d:8c:6e:0f:93:49:87:ad:c4:f7:40:
                    f1:c3:1e:fa:0e:b0:4d:4e:90:37:cb:87:d5:d0:70:
                    0a:ab:cf:7b:0a:b4:13:5a:35:71:1a:2b:33:fa:bc:
                    9a:8f:17:a3:a4:81:a1:9d:4d:00:78:01:ab:4c:55:
                    3e:c9:b9:a6:66:68:65:2c:ff:85:8a:47:47:be:91:
                    1f:45:91:e2:8b:37:c3:fc:f7:2b:45:5e:1b:4e:31:
                    fb:b9:5c:0d:b5:bd:be:65:f7:24:51:77:c6:ca:b4:
                    20:67:a4:9c:4f:ad:41:03:5a:c4:75:56:01:1f:3d:
                    38:82:33:b7:e3:3d:5c:09:dd:32:2d:53:65:a5:c4:
                    6a:ba:8a:c6:fc:bc:8d:4c:ee:16:3e:be:08:5a:ef:
                    e5:a6:ca:ed:af:dc:65:85:04:21:56:cb:5a:d5:97:
                    c4:6d:f3:22:91:c5:2d:28:27:83:e4:79:87:15:32:
                    e0:be:d2:0a:55:f0:f1:5b:13:8f:0c:74:97:4e:7e:
                    bd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:8D:58:20:DA:CB:9D:5B:FA:63:B3:93:0F:0F:33:99:F2:6F:96:72
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/641YINrLnVv6Y7OTDw8zmfJvlnI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.30/32

    Signature Algorithm: sha256WithRSAEncryption
         29:2b:06:9c:b0:64:82:00:d3:85:6f:1c:e6:a4:1a:c8:b7:06:
         8f:6a:ef:ba:bf:ef:0a:bb:8f:75:ae:a1:d5:c2:1a:db:ad:31:
         0b:5a:0d:87:6d:7c:1b:72:62:35:1e:49:f4:a8:59:b1:a0:ff:
         1b:07:2b:eb:17:c5:c7:60:62:16:fa:5e:44:83:a2:ec:ed:00:
         e6:3a:16:62:4a:84:25:19:cc:4c:1a:7e:39:00:82:f2:ff:da:
         9b:d7:b7:0c:8b:93:4b:ec:cd:81:21:36:70:e2:9c:54:15:b3:
         4e:b4:bf:f9:30:c8:5c:2d:8f:4a:77:31:09:11:4f:ad:97:c2:
         bc:03:3b:b9:1c:c8:a1:c5:c2:f3:4a:f4:b7:f5:f2:67:84:3f:
         1f:43:89:d8:ab:96:38:66:9a:00:93:8e:b5:01:f8:84:70:6d:
         23:7f:95:8d:a4:04:a1:98:8a:1c:69:68:76:d0:70:27:3c:26:
         79:61:35:ed:e2:63:d5:7f:6e:5a:c3:82:c8:7d:7a:cd:14:89:
         43:32:71:7f:d3:a8:16:3b:54:fd:8f:00:fb:2c:3e:d3:3c:7f:
         2f:a9:14:64:87:ed:35:83:79:40:cc:12:22:c7:dd:82:89:fe:
         a3:0a:b3:4d:1d:68:86:ca:4e:10:3e:d6:e7:1c:9a:b3:a9:18:
         3b:8f:68:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----