Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/fhQ_fPJ8sWlYJvoQpWyUhCPPs1g.roa
File:                     fhQ_fPJ8sWlYJvoQpWyUhCPPs1g.roa (raw, json)
Hash identifier:          ITQ/Owr7QIcx/Njbidw96hG/coaAm1xb+w7fiaKXJD4=
Subject key identifier:   7E:14:3F:7C:F2:7C:B1:69:58:26:FA:10:A5:6C:94:84:23:CF:B3:58
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       027B
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/fhQ_fPJ8sWlYJvoQpWyUhCPPs1g.roa
Signing time:             Mon 20 Feb 2023 08:03:33 +0000
ROA not before:           Mon 20 Feb 2023 08:03:33 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.92.203/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 635 (0x27b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 08:03:33 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=7E143F7CF27CB1695826FA10A56C948423CFB358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:52:63:b5:4a:0b:98:f0:2a:39:bf:89:19:eb:
                    91:d6:d4:92:03:49:70:ef:ef:58:05:9c:0c:e1:8a:
                    94:25:c8:93:f3:0e:9a:42:90:00:07:e7:f8:ac:eb:
                    56:48:c3:f5:a4:2b:4a:f0:f0:3c:ed:a6:4e:79:a9:
                    c7:f8:ce:e1:06:85:6e:b0:a2:26:39:84:2e:d5:43:
                    da:35:66:93:f6:07:8d:ff:24:86:d4:3c:3a:04:db:
                    75:5b:1e:9f:f9:48:6b:74:e6:e9:28:e4:fd:a0:db:
                    77:27:78:2b:c3:82:c5:fe:c8:14:e0:07:bf:65:54:
                    3f:cc:d5:24:a1:c8:f6:f4:70:c1:3b:b9:ef:51:bf:
                    52:f2:8b:89:ce:61:67:d0:d4:88:8a:61:dd:31:06:
                    56:18:bd:44:73:0e:21:43:21:56:c9:7e:a1:a1:74:
                    7f:2c:c3:3f:80:1b:9f:31:33:98:3d:ca:22:e3:e0:
                    c8:1a:90:ce:7a:8e:d7:df:44:4a:64:c3:da:4a:ba:
                    55:54:36:8c:4f:ce:1e:ec:de:b1:9d:b5:64:97:0c:
                    9c:fd:1b:1b:6e:68:31:f7:93:77:02:b3:6d:77:10:
                    28:39:f5:36:22:d2:e5:7e:a3:1b:9e:33:64:e3:c9:
                    6c:40:fa:99:d0:01:9c:d3:08:f4:eb:3d:3a:0e:b2:
                    e7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:14:3F:7C:F2:7C:B1:69:58:26:FA:10:A5:6C:94:84:23:CF:B3:58
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/fhQ_fPJ8sWlYJvoQpWyUhCPPs1g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.92.203/32

    Signature Algorithm: sha256WithRSAEncryption
         97:fc:3b:01:b9:26:84:6b:0e:5d:69:7f:f0:46:b6:b5:42:62:
         2b:bc:27:a2:09:51:2d:55:89:38:d8:38:b0:2a:ef:05:ff:61:
         75:40:74:f8:9a:e4:f2:9a:f9:2a:f6:37:52:6c:68:61:fd:b7:
         a1:b6:b1:46:67:37:01:15:09:50:c0:59:0a:6c:48:7e:b8:b7:
         1c:a6:23:6b:8a:d3:48:67:18:f4:13:73:65:2d:48:65:e5:f6:
         ca:66:fd:81:2d:81:16:38:80:12:43:8e:6b:a3:70:62:f3:5f:
         5c:6d:51:a5:6a:7b:c9:79:52:50:07:7a:e2:13:38:d1:bf:f6:
         61:5a:67:89:24:a7:72:24:08:2d:7f:2a:f3:3e:7d:d3:3c:6c:
         ad:22:13:63:20:66:5d:60:53:ce:a0:be:2b:7e:da:4f:f3:48:
         b1:af:59:6f:1e:5c:f1:78:40:58:bd:4f:95:5c:a6:44:e9:d0:
         fa:47:21:13:fa:64:a0:94:43:10:d3:52:48:c8:c3:8e:97:02:
         60:59:f6:8d:85:4f:47:79:ac:46:43:04:7e:28:41:d5:59:96:
         c5:96:9f:5f:3a:c4:7e:e7:33:d6:c4:0b:4b:e6:8f:7e:68:04:
         eb:6f:8b:6d:80:f9:7f:c0:f5:8b:74:e0:6d:57:09:45:36:8b:
         66:87:43:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----