Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/CvVSmX8DcLCGcfIyeO4r0MliT9s.roa
File:                     CvVSmX8DcLCGcfIyeO4r0MliT9s.roa (raw, json)
Hash identifier:          h1LJ2jU3AUOJl775LV9UpqUZFsH6gNS510bqvy4jTU4=
Subject key identifier:   0A:F5:52:99:7F:03:70:B0:86:71:F2:32:78:EE:2B:D0:C9:62:4F:DB
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       02C9
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/CvVSmX8DcLCGcfIyeO4r0MliT9s.roa
Signing time:             Mon 20 Feb 2023 08:07:27 +0000
ROA not before:           Mon 20 Feb 2023 08:07:27 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.132/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 713 (0x2c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:07:27 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=0AF552997F0370B08671F23278EE2BD0C9624FDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0e:af:72:67:13:dd:64:18:d1:e3:36:3c:41:
                    23:a3:3d:9a:71:13:9a:03:cb:33:5a:02:a1:dd:4f:
                    b2:1a:74:34:36:51:75:b6:f0:d3:a5:0c:44:8f:6c:
                    58:8a:6a:39:4d:89:6b:0a:fc:1e:26:ba:03:7a:42:
                    6e:12:62:0a:e7:21:22:61:e4:2c:14:fa:cc:08:ba:
                    9a:bf:05:b9:06:43:9e:75:4a:e5:74:79:73:d4:a2:
                    ff:e4:ae:ed:2a:20:85:69:53:2f:37:46:f6:56:36:
                    8b:06:23:58:48:72:14:87:4b:86:60:fb:2a:b4:79:
                    60:53:07:34:d8:b1:34:41:23:00:3a:26:2e:9c:c7:
                    15:c9:d5:e5:85:e6:95:d4:49:dd:b3:e7:06:f4:e9:
                    ac:31:04:d8:32:48:42:ee:ad:f8:47:1c:6b:f9:0b:
                    db:69:9e:0b:eb:8b:72:0e:99:20:80:44:ee:a9:c4:
                    59:65:de:51:00:0e:73:59:3e:95:31:d9:af:c0:05:
                    cb:df:4c:67:ec:fa:31:38:09:ec:86:a9:a6:17:8c:
                    cb:9d:c0:fe:fe:9a:7a:a7:26:e0:8b:c7:b3:cc:55:
                    18:4c:24:f5:3b:1d:16:2f:5b:ac:09:f6:c1:ad:f6:
                    0b:23:94:58:19:a1:a3:86:75:d6:ac:fb:31:bb:ba:
                    f5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F5:52:99:7F:03:70:B0:86:71:F2:32:78:EE:2B:D0:C9:62:4F:DB
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/CvVSmX8DcLCGcfIyeO4r0MliT9s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.132/32

    Signature Algorithm: sha256WithRSAEncryption
         46:c7:73:a5:4a:7e:63:46:76:75:85:03:dc:f6:73:b6:33:5f:
         b9:43:6d:a6:da:fe:b9:bf:63:53:fe:72:00:80:11:8a:64:2a:
         b2:85:f7:e2:88:24:63:29:7a:dd:88:a1:17:13:69:c5:7d:e7:
         e8:be:bd:c4:c3:59:b4:a1:68:1a:26:1c:89:ad:1d:6f:99:83:
         a4:82:d9:e8:3c:ee:56:4a:0c:20:3a:91:10:e1:ef:0d:a0:a5:
         20:48:7c:28:cd:3e:f6:e6:8b:88:93:7b:e9:f1:9d:c5:a8:e8:
         e7:01:0f:dc:55:6b:d0:de:1e:b6:c0:13:52:71:62:1c:de:d7:
         bc:be:80:69:3d:00:b4:8b:79:92:f4:3f:89:b9:56:42:6c:4a:
         73:af:bf:55:3a:07:3d:9b:eb:13:23:3c:18:2f:ba:06:0e:6c:
         aa:f3:18:06:14:bc:50:ed:4f:42:8d:34:df:15:34:b3:64:10:
         9b:73:79:aa:f0:29:e3:d1:8b:62:1d:2c:16:e9:64:92:cb:f7:
         26:7f:20:4f:e7:f5:a9:79:8e:55:b4:d2:7a:d8:1e:4e:7b:ab:
         81:c6:05:66:b1:6a:33:0e:aa:3c:81:5f:bf:26:f1:fc:ec:8c:
         b2:1a:30:1a:19:94:a9:d5:22:b0:1c:cd:33:53:0c:e7:c4:9d:
         b3:9e:57:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----