Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/O7k0jrpMSJm6twdDoZ5P_hgIlcw.roa
File:                     O7k0jrpMSJm6twdDoZ5P_hgIlcw.roa (raw, json)
Hash identifier:          bytjJdaWv1Knipk+85VwRqq8psf/CodQXkLkFJN1Zlc=
Subject key identifier:   3B:B9:34:8E:BA:4C:48:99:BA:B7:07:43:A1:9E:4F:FE:18:08:95:CC
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01F3
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/O7k0jrpMSJm6twdDoZ5P_hgIlcw.roa
Signing time:             Mon 20 Feb 2023 07:57:27 +0000
ROA not before:           Mon 20 Feb 2023 07:57:27 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.161/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 499 (0x1f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:57:27 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=3BB9348EBA4C4899BAB70743A19E4FFE180895CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:38:39:b0:8e:6a:19:a9:55:4c:a6:6f:5e:da:
                    4f:b0:e1:3b:d6:c4:7a:67:af:91:6b:7d:a6:9e:49:
                    8b:87:12:75:c7:05:34:27:ca:bd:e4:e1:62:f7:8e:
                    55:de:89:eb:28:33:30:7f:8f:04:d4:82:5c:ec:8f:
                    38:b6:4d:e8:2a:81:61:34:35:36:d6:fd:39:37:81:
                    c1:6c:e6:4f:c6:15:26:0a:e7:af:55:a4:92:63:b5:
                    da:a4:50:15:3e:c2:80:5c:a9:14:c6:82:41:1f:a4:
                    9c:6a:a0:78:02:a1:1e:7e:e6:fc:e5:a7:7e:87:6f:
                    01:07:60:4f:2a:1a:1c:12:23:ef:a8:d3:3b:35:ae:
                    92:2f:eb:34:c1:61:4a:bb:c4:5e:8b:6b:7f:ce:60:
                    bf:64:b2:c7:8d:28:fe:c1:a1:22:61:04:21:87:d1:
                    fc:6e:a0:8d:41:48:ae:94:3c:46:c2:7a:27:d1:3d:
                    3d:2b:f5:c4:71:7f:0b:31:15:d6:8b:51:c6:7a:b9:
                    65:78:a8:f9:19:5f:50:8e:75:6e:f3:18:99:a9:6e:
                    9e:26:a4:40:3a:9a:ff:52:7b:be:4e:43:7d:1f:8d:
                    6d:8a:cd:e1:98:81:09:71:2d:66:b4:9a:41:3d:88:
                    3d:25:52:a5:48:27:d6:03:9a:0d:9e:43:8a:65:04:
                    1a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B9:34:8E:BA:4C:48:99:BA:B7:07:43:A1:9E:4F:FE:18:08:95:CC
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/O7k0jrpMSJm6twdDoZ5P_hgIlcw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.161/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:97:a7:b4:74:eb:a5:b4:35:0c:e1:6f:66:4b:6c:8b:dd:b6:
         9e:bd:49:1b:0d:fb:9c:ae:69:68:de:37:7d:1b:c4:70:39:cf:
         8f:fa:ec:31:1b:2f:dd:eb:7d:d3:b9:ed:60:c7:1e:1f:96:c9:
         1c:12:94:87:c1:a1:64:f7:15:b7:09:d0:37:7e:8e:17:51:fb:
         1c:41:b7:b1:37:de:62:18:d7:e7:67:43:f4:4c:5f:16:56:cb:
         e2:90:72:a2:3a:ab:50:79:74:66:68:2b:38:f3:82:15:57:fd:
         51:3c:07:e3:1f:2e:be:7d:7c:36:35:42:0a:bb:3d:1d:7c:9e:
         cf:97:8e:68:cb:59:21:ce:1c:29:ad:0b:f3:92:29:80:cb:ab:
         43:e5:71:7d:7a:c9:72:b4:21:d6:9d:a4:7f:73:42:4e:12:51:
         48:f5:fb:ae:ed:66:3c:12:18:81:70:ba:c7:cf:49:b3:e9:a9:
         b9:a9:4f:3a:1f:a2:77:4c:96:bf:dd:fc:97:75:1b:63:b6:4c:
         fa:7f:75:c8:08:2c:8b:aa:7a:c3:a6:0b:ce:27:24:2c:44:08:
         a1:b2:81:11:2d:e2:68:5b:65:de:c7:8c:af:e8:44:aa:1b:3e:
         9b:ef:1e:01:44:54:9a:05:93:58:a5:6a:c3:83:b2:c5:1a:8d:
         df:b1:ba:e3
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
NzU3MjdaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDNCQjkzNDhFQkE0QzQ4
OTlCQUI3MDc0M0ExOUU0RkZFMTgwODk1Q0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIODmwjmoZqVVMpm9e2k+w4TvWxHpnr5FrfaaeSYuHEnXHBTQn
yr3k4WL3jlXeiesoMzB/jwTUglzsjzi2TegqgWE0NTbW/Tk3gcFs5k/GFSYK569V
pJJjtdqkUBU+woBcqRTGgkEfpJxqoHgCoR5+5vzlp36HbwEHYE8qGhwSI++o0zs1
rpIv6zTBYUq7xF6La3/OYL9ksseNKP7BoSJhBCGH0fxuoI1BSK6UPEbCeifRPT0r
9cRxfwsxFdaLUcZ6uWV4qPkZX1COdW7zGJmpbp4mpEA6mv9Se75OQ30fjW2KzeGY
gQlxLWa0mkE9iD0lUqVIJ9YDmg2eQ4plBBr7AgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUO7k0jrpMSJm6twdDoZ5P/hgIlcwwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9PN2swanJwTVNKbTZ0d2REb1o1UF9oZ0lsY3cu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxaoTANBgkqhkiG9w0BAQsFAAOCAQEAD5entHTrpbQ1DOFvZkts
i922nr1JGw37nK5paN43fRvEcDnPj/rsMRsv3et907ntYMceH5bJHBKUh8GhZPcV
twnQN36OF1H7HEG3sTfeYhjX52dD9ExfFlbL4pByojqrUHl0ZmgrOPOCFVf9UTwH
4x8uvn18NjVCCrs9HXyez5eOaMtZIc4cKa0L85IpgMurQ+VxfXrJcrQh1p2kf3NC
ThJRSPX7ru1mPBIYgXC6x89Js+mpualPOh+id0yWv938l3UbY7ZM+n91yAgsi6p6
w6YLzickLEQIobKBES3iaFtl3seMr+hEqhs+m+8eAURUmgWTWKVqw4OyxRqN37G6
4w==
-----END CERTIFICATE-----