Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/9Zt82BKrWpbxQVqbZqC79gprf08.roa
File:                     9Zt82BKrWpbxQVqbZqC79gprf08.roa (raw, json)
Hash identifier:          JJq7IrxfCufFpaTOTT1qLJpopIUckO7X9kWAN2BGp9Y=
Subject key identifier:   F5:9B:7C:D8:12:AB:5A:96:F1:41:5A:9B:66:A0:BB:F6:0A:6B:7F:4F
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       029E
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/9Zt82BKrWpbxQVqbZqC79gprf08.roa
Signing time:             Mon 20 Feb 2023 08:05:29 +0000
ROA not before:           Mon 20 Feb 2023 08:05:29 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.25/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 670 (0x29e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:05:29 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=F59B7CD812AB5A96F1415A9B66A0BBF60A6B7F4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:13:11:57:a0:83:9a:8f:8e:6a:b4:15:ae:2d:
                    a5:36:70:ea:8f:19:80:8c:1b:ef:9c:8b:a7:42:44:
                    b9:1a:14:34:be:2c:4d:cd:56:a9:7c:06:ea:32:72:
                    30:88:2a:f3:0b:5f:b2:3f:c8:e7:ae:cf:3b:44:72:
                    95:2e:45:a4:07:24:a8:1f:7e:db:0a:29:dd:c2:5e:
                    01:e2:a7:a7:88:fb:fc:1a:19:a2:da:5c:ee:d8:2d:
                    4d:3b:f9:70:11:59:2e:bf:32:9c:33:1e:34:d5:fd:
                    c4:05:9e:11:b7:ba:32:ae:2e:a1:12:e8:a9:3c:8f:
                    27:7c:ac:b5:e4:f3:e5:4a:58:20:73:a4:f2:78:96:
                    64:c6:8a:42:af:77:09:7a:8a:94:a9:19:ad:51:af:
                    ba:15:eb:e4:6d:20:f2:7e:1c:7c:94:0f:4b:61:a4:
                    52:13:0b:35:90:1b:6f:83:f1:c6:d4:8f:e1:73:8a:
                    af:4e:6c:45:fd:7d:13:23:bb:a4:fe:ae:d0:6e:f4:
                    cb:c9:34:4e:59:6f:64:96:40:52:fd:eb:3a:9f:ac:
                    f5:dc:94:e5:e4:f6:f3:66:ea:54:62:a5:42:96:c9:
                    67:11:c5:be:5f:82:24:c1:5c:30:bd:1b:f1:19:1a:
                    cc:ed:d2:3b:ea:3c:5e:58:d1:46:75:17:5c:bb:d4:
                    f1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:9B:7C:D8:12:AB:5A:96:F1:41:5A:9B:66:A0:BB:F6:0A:6B:7F:4F
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/9Zt82BKrWpbxQVqbZqC79gprf08.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.25/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:8d:cb:8e:b4:d0:88:cf:2f:f7:b0:51:33:e1:5d:a7:9e:89:
         b7:5f:b8:93:bf:ee:7d:e2:20:d0:1c:c2:09:da:a8:df:d2:00:
         d5:55:f9:9a:3d:88:e6:59:7f:9d:1b:bb:20:29:9b:41:b2:4d:
         4c:e4:26:ec:2d:ed:19:97:2f:a9:76:42:7b:99:4a:0c:fa:d5:
         b0:fd:86:a1:bc:3f:29:2d:bd:21:c5:91:9b:21:dc:d0:52:e1:
         00:0b:13:34:49:44:38:60:00:ab:3d:4b:5c:c0:d2:d0:c4:32:
         3e:82:3f:fa:86:21:85:28:b6:94:34:53:a9:10:05:bb:02:28:
         ff:8d:2e:ff:13:4f:f0:e0:09:45:3a:0f:03:87:14:5b:49:66:
         74:a8:5c:e3:0e:8b:b1:1e:0c:f5:aa:62:5e:03:13:e3:a3:25:
         18:bc:4e:3a:ab:5b:9a:a9:c5:75:a4:86:31:10:0b:06:48:6b:
         84:98:d4:14:36:93:77:72:b7:03:7f:4f:de:94:b7:ab:92:a6:
         61:84:bf:68:ec:9c:0c:66:c9:85:6a:e9:ae:41:5f:a1:2e:d8:
         fe:1e:42:68:50:45:07:a8:cf:a5:cd:66:b1:c6:a0:cb:1b:63:
         92:17:d4:1d:b5:3b:ee:57:d9:55:ca:ac:5b:0d:b9:97:a6:05:
         37:f5:ac:44
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAp4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
ODA1MjlaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEY1OUI3Q0Q4MTJBQjVB
OTZGMTQxNUE5QjY2QTBCQkY2MEE2QjdGNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUExFXoIOaj45qtBWuLaU2cOqPGYCMG++ci6dCRLkaFDS+LE3N
Vql8BuoycjCIKvMLX7I/yOeuzztEcpUuRaQHJKgfftsKKd3CXgHip6eI+/waGaLa
XO7YLU07+XARWS6/MpwzHjTV/cQFnhG3ujKuLqES6Kk8jyd8rLXk8+VKWCBzpPJ4
lmTGikKvdwl6ipSpGa1Rr7oV6+RtIPJ+HHyUD0thpFITCzWQG2+D8cbUj+Fziq9O
bEX9fRMju6T+rtBu9MvJNE5Zb2SWQFL96zqfrPXclOXk9vNm6lRipUKWyWcRxb5f
giTBXDC9G/EZGszt0jvqPF5Y0UZ1F1y71PHnAgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQU9Zt82BKrWpbxQVqbZqC79gprf08wHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My85WnQ4MkJLcldwYnhRVnFiWnFDNzlncHJmMDgu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxcGTANBgkqhkiG9w0BAQsFAAOCAQEAHI3LjrTQiM8v97BRM+Fd
p56Jt1+4k7/ufeIg0BzCCdqo39IA1VX5mj2I5ll/nRu7ICmbQbJNTOQm7C3tGZcv
qXZCe5lKDPrVsP2Gobw/KS29IcWRmyHc0FLhAAsTNElEOGAAqz1LXMDS0MQyPoI/
+oYhhSi2lDRTqRAFuwIo/40u/xNP8OAJRToPA4cUW0lmdKhc4w6LsR4M9apiXgMT
46MlGLxOOqtbmqnFdaSGMRALBkhrhJjUFDaTd3K3A39P3pS3q5KmYYS/aOycDGbJ
hWrprkFfoS7Y/h5CaFBFB6jPpc1mscagyxtjkhfUHbU77lfZVcqsWw25l6YFN/Ws
RA==
-----END CERTIFICATE-----