Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/e9TQ2w3MSAn9Tukdmg32z3DHRNo.roa
File:                     e9TQ2w3MSAn9Tukdmg32z3DHRNo.roa (raw, json)
Hash identifier:          3kin8xLeZJvbd/6deP7Mqss+ssWotUGdAHhgAmrlCzY=
Subject key identifier:   7B:D4:D0:DB:0D:CC:48:09:FD:4E:E9:1D:9A:0D:F6:CF:70:C7:44:DA
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       7D
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/e9TQ2w3MSAn9Tukdmg32z3DHRNo.roa
Signing time:             Fri 10 Feb 2023 07:43:45 +0000
ROA not before:           Fri 10 Feb 2023 07:43:45 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     146979
IP address blocks:        202.236.90.38/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 10 07:43:45 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=7BD4D0DB0DCC4809FD4EE91D9A0DF6CF70C744DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:96:fc:93:95:4f:87:95:8a:28:cd:e4:64:36:
                    9b:12:f6:07:c2:ee:d1:c1:bf:51:ac:6b:ac:12:c2:
                    54:03:e6:81:28:8c:a2:a2:4f:64:0c:9d:89:07:3e:
                    c5:1c:0d:19:e9:3e:1b:9f:03:b4:b0:7a:f8:15:ec:
                    33:31:2b:69:80:93:bf:58:91:ce:0e:f2:92:1a:4d:
                    a5:35:50:c2:5e:d2:74:20:cb:b8:40:bd:c3:72:b4:
                    98:4d:91:a6:58:38:4b:4c:02:83:6a:fa:fc:c2:22:
                    80:c6:c8:c7:d1:a7:ee:4c:77:72:39:84:68:e6:e7:
                    fa:7e:b5:be:33:ed:c5:5b:c1:6e:96:8a:91:ed:ae:
                    50:60:53:bc:f9:1f:e2:78:75:1e:aa:90:27:7a:e0:
                    4c:66:f5:e2:98:24:70:f6:1a:af:5b:df:5e:a7:18:
                    15:ef:8f:c0:30:f6:6a:d3:7c:18:76:50:f0:05:08:
                    9b:b9:0c:5f:52:1a:b1:8b:e7:8e:9d:3b:cf:94:85:
                    42:bf:2f:4d:d3:7f:6d:8d:68:94:66:a1:e8:01:4b:
                    71:ba:7e:29:68:36:2a:5b:e6:6a:f0:19:89:70:c7:
                    df:2e:ab:eb:d9:90:f9:80:ea:1c:9a:78:8b:db:20:
                    2d:95:bf:61:49:93:4d:34:b2:37:f1:cd:69:ff:39:
                    40:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D4:D0:DB:0D:CC:48:09:FD:4E:E9:1D:9A:0D:F6:CF:70:C7:44:DA
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/e9TQ2w3MSAn9Tukdmg32z3DHRNo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.38/32

    Signature Algorithm: sha256WithRSAEncryption
         12:17:88:b2:f5:ca:7a:68:d1:78:ec:fa:17:52:ab:a9:68:64:
         c5:a2:6d:66:8e:04:31:ed:6c:0b:88:db:c2:2d:fb:1a:c9:a6:
         57:5f:1a:10:80:63:9f:5d:5e:49:50:18:b2:f8:6b:00:db:3f:
         4a:e5:b2:c7:ca:45:ef:91:81:b8:c6:43:f5:27:32:b2:52:9b:
         18:d5:51:6f:f3:c3:af:ca:b9:cc:a7:42:d6:50:22:3d:13:f2:
         25:09:c3:e1:89:a5:83:0f:2a:4e:6d:bb:6b:d9:a1:20:5e:9b:
         3b:d3:c3:50:f6:2d:b2:d4:45:e7:ae:76:96:73:db:ff:4a:dd:
         41:50:24:27:22:cc:b0:1c:8e:c9:ad:e0:84:8b:23:29:7a:70:
         da:60:d3:3e:61:23:e7:1b:78:86:ae:57:b3:49:b4:3c:79:09:
         a8:14:7d:ba:42:e4:c5:96:66:74:de:51:10:bd:6b:40:6a:a3:
         ba:e5:87:a1:28:3a:d4:41:32:70:6b:bf:b6:56:a0:00:8c:d3:
         3d:8a:e6:28:cc:64:7c:40:10:63:66:99:30:87:b1:9b:75:26:
         e6:64:55:1e:d9:ce:4d:00:aa:09:45:79:1b:c1:f4:71:37:b7:
         b6:6f:63:04:7f:14:db:f0:8d:c7:6e:4b:03:2f:d8:ca:d6:4e:
         ac:eb:cb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----