Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/XLaD3yxZK-NjG_D8bwS-xILg1lg.roa
File:                     XLaD3yxZK-NjG_D8bwS-xILg1lg.roa (raw, json)
Hash identifier:          TaQaqbHfQ5IiYPR9seA+1eCSkxo1HTI69qsCb4LdHL4=
Subject key identifier:   5C:B6:83:DF:2C:59:2B:E3:63:1B:F0:FC:6F:04:BE:C4:82:E0:D6:58
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       01E7
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/XLaD3yxZK-NjG_D8bwS-xILg1lg.roa
Signing time:             Mon 20 Feb 2023 07:55:33 +0000
ROA not before:           Mon 20 Feb 2023 07:55:33 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.46/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 487 (0x1e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:55:33 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=5CB683DF2C592BE3631BF0FC6F04BEC482E0D658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:be:ea:8c:c5:9c:85:bc:d1:4a:1b:1b:12:93:
                    11:3c:1e:aa:3b:5c:f3:d1:a1:8f:68:82:b5:1c:b0:
                    ba:d1:96:67:8b:fb:d1:f1:c8:94:90:b4:4b:60:30:
                    8d:9b:89:18:75:eb:99:02:56:a0:2d:f9:2c:a9:1c:
                    65:f7:01:0d:26:cf:20:4d:5a:dc:32:0e:58:1b:ed:
                    48:86:80:4c:06:4a:3c:b4:97:cc:01:02:07:fd:88:
                    09:7b:de:3f:2a:38:ad:9b:36:20:41:22:dc:b0:8e:
                    5c:16:67:df:95:ba:4d:59:ac:e3:54:e8:ee:a5:51:
                    32:18:ac:5e:81:94:dd:4b:28:cc:78:5b:d6:5b:5a:
                    82:b9:37:60:3d:36:70:52:1f:4c:3d:58:41:47:13:
                    45:51:e4:e9:a3:41:9e:f5:d3:10:3e:11:bd:0f:d2:
                    22:e6:73:86:7c:75:1f:e0:da:6f:df:95:fd:40:28:
                    d5:41:19:c9:7a:37:c5:01:c2:a2:97:31:99:fe:f6:
                    ff:d2:b6:64:45:b6:b5:3f:45:37:e9:3e:5c:ff:ed:
                    9f:4e:45:43:b9:02:6a:f2:c0:e1:79:0d:46:cc:3e:
                    71:09:b3:5f:96:3a:a3:85:38:d3:90:d9:dc:d7:aa:
                    12:3e:ef:d5:e7:ad:2b:8c:d9:e5:7c:47:75:8f:79:
                    6e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B6:83:DF:2C:59:2B:E3:63:1B:F0:FC:6F:04:BE:C4:82:E0:D6:58
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/XLaD3yxZK-NjG_D8bwS-xILg1lg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.46/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:2c:e9:56:ed:b6:4b:c7:1c:74:86:66:98:ad:ab:cd:2e:be:
         6d:ee:39:9b:a8:57:dd:8c:d6:4d:b1:9c:78:90:02:47:f7:9e:
         85:5a:3b:f5:69:2a:dc:96:49:5f:a4:63:1d:21:64:e6:70:8b:
         87:fb:01:47:36:9a:21:07:6d:4f:26:8e:e3:c6:e1:9b:b4:57:
         e7:dc:02:78:b7:6f:30:64:57:2e:7d:ea:5a:19:85:ac:a9:18:
         04:38:10:ec:ab:e6:2c:b5:41:f4:81:8e:30:3d:1b:02:74:1b:
         83:65:f1:9c:47:64:ac:e6:c9:db:59:c4:11:54:30:db:e9:d0:
         33:aa:01:b5:15:7f:48:f7:2c:02:08:67:96:1b:c3:2d:b3:41:
         88:ec:2a:c0:2b:c1:ff:0c:97:bc:99:60:08:ba:0e:57:27:29:
         83:e3:e3:00:ee:b6:23:ac:fc:d1:14:a0:01:71:31:9e:3f:a8:
         dc:7f:34:81:ec:56:a0:b5:21:60:d3:43:27:4e:91:ac:16:92:
         dc:7e:7e:c0:50:f0:f1:13:81:77:8f:47:4e:06:e5:e3:5c:49:
         11:ff:77:58:0a:7f:e4:cc:bc:e0:f7:0c:74:65:1f:d8:e7:69:
         8b:a7:51:29:48:19:14:5a:fe:2d:18:b9:e5:3c:85:5d:a9:5c:
         86:57:d4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----