Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/YWj0iKvGXH7Z1UxCJzD4Ea4gI10.roa
File:                     YWj0iKvGXH7Z1UxCJzD4Ea4gI10.roa (raw, json)
Hash identifier:          Eq5TNbfKqxtcydeK/xnfMp4U5T7hMpmgIuSOZp8qpN0=
Subject key identifier:   61:68:F4:88:AB:C6:5C:7E:D9:D5:4C:42:27:30:F8:11:AE:20:23:5D
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0232
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/YWj0iKvGXH7Z1UxCJzD4Ea4gI10.roa
Signing time:             Mon 20 Feb 2023 07:59:29 +0000
ROA not before:           Mon 20 Feb 2023 07:59:29 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.245/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562 (0x232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:59:29 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=6168F488ABC65C7ED9D54C422730F811AE20235D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5a:05:8f:fb:e6:7d:21:c3:76:44:52:d2:df:
                    eb:7c:88:13:db:e4:03:19:75:e6:ad:e2:98:67:67:
                    dc:5c:cf:60:04:f0:2b:7a:0a:05:65:a4:3a:6b:e9:
                    c3:e9:09:d5:5a:0d:59:0d:8c:6e:7f:dc:09:29:f3:
                    38:1c:fa:15:f7:6a:5b:0a:d5:99:88:30:08:1b:58:
                    08:c0:f7:d3:a0:8d:bc:48:b6:bb:d2:f3:a1:84:ef:
                    a8:3d:af:ce:7e:43:b6:9c:96:9f:3e:28:15:40:7d:
                    b3:f2:f5:0f:e9:96:0c:3b:69:df:1e:ca:dd:5d:3c:
                    8b:7d:8e:fe:5b:bd:5e:0f:52:7d:94:6e:ab:bc:a9:
                    a9:00:b8:a0:b7:69:92:10:bf:bc:4f:20:2d:56:9f:
                    72:ce:e2:d3:b6:ae:ec:f6:92:64:c0:6a:83:7c:54:
                    50:b4:95:2d:43:1e:cc:b3:ae:fe:9a:b8:0b:44:c2:
                    37:d1:eb:7c:e7:2f:30:32:d4:6d:4b:3c:15:3e:c3:
                    ec:8b:75:ba:c5:d3:1c:db:3e:11:7d:cd:a2:cf:fc:
                    c4:bd:09:6e:6f:89:86:fd:0d:4a:70:ca:cb:87:68:
                    3b:84:fd:6f:2d:dc:79:71:e5:51:e0:dc:e3:9f:97:
                    6a:43:1d:86:d3:8d:c6:9e:2e:4c:04:03:bf:91:29:
                    da:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:68:F4:88:AB:C6:5C:7E:D9:D5:4C:42:27:30:F8:11:AE:20:23:5D
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/YWj0iKvGXH7Z1UxCJzD4Ea4gI10.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.245/32

    Signature Algorithm: sha256WithRSAEncryption
         06:bb:41:a5:04:87:f7:6c:23:64:8f:0a:82:59:27:1a:f4:fc:
         c1:b9:4a:51:11:d4:59:fd:a5:92:f6:b3:46:f8:c0:3b:e5:e5:
         04:dd:d4:82:67:ca:e9:3a:5e:c2:61:22:44:f3:14:da:27:dc:
         e9:3b:56:92:35:c2:b9:8e:5f:2b:11:7b:82:05:e0:b3:81:10:
         8d:17:71:e1:dc:ed:8c:bd:7f:1b:74:e6:04:bc:51:2c:d1:99:
         71:1a:dd:15:7b:cf:97:a4:ac:14:83:66:3f:b3:67:d3:50:81:
         c8:0e:8a:e3:e5:e4:4c:ba:bb:9e:2c:59:9e:ba:eb:35:56:13:
         f8:5b:9f:3c:ec:81:1a:9b:96:c2:14:46:64:b0:c9:c6:12:8b:
         4d:1e:c1:5b:9c:53:af:a3:00:0f:c6:41:b7:51:11:03:90:8b:
         74:af:cb:58:b4:71:c5:69:e4:ab:e7:ad:b3:78:10:58:18:93:
         b8:bf:ad:cf:0b:fa:f5:51:c7:f4:a3:5e:f9:20:7e:bb:43:a9:
         cf:1f:01:01:43:42:5f:46:c4:05:99:94:66:7d:40:16:6c:9e:
         68:c9:19:0d:5e:46:70:88:c5:10:a0:75:c9:62:ef:f1:d5:29:
         0d:5c:c3:f1:eb:60:7c:19:ef:b6:a2:68:8a:15:51:9e:d3:05:
         d7:63:28:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----