Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/wH8TsKUEoUXoLIvBY4xXP8hg4Q8.roa
File:                     wH8TsKUEoUXoLIvBY4xXP8hg4Q8.roa (raw, json)
Hash identifier:          HJ5KB/ZQ79WDK/4nBCbgL3qXxcWvvp3f/sWsVEZsfFM=
Subject key identifier:   C0:7F:13:B0:A5:04:A1:45:E8:2C:8B:C1:63:8C:57:3F:C8:60:E1:0F
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       021D
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/wH8TsKUEoUXoLIvBY4xXP8hg4Q8.roa
Signing time:             Mon 20 Feb 2023 07:59:21 +0000
ROA not before:           Mon 20 Feb 2023 07:59:21 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     146979
IP address blocks:        202.236.90.2/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Feb 20 07:59:21 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=C07F13B0A504A145E82C8BC1638C573FC860E10F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:94:15:93:df:ea:e5:c8:71:bf:01:da:92:b4:
                    0f:8a:1c:b6:c2:32:71:0f:22:19:73:a6:4b:e7:87:
                    e2:d5:e3:26:7b:3b:ce:77:7c:6d:22:f2:2a:1f:ff:
                    fd:3e:1e:37:2d:86:69:e7:ad:00:18:5f:2b:9f:ab:
                    e4:96:38:32:1b:3d:49:22:f5:e2:dd:45:6a:02:1d:
                    17:29:e1:ed:d9:67:36:53:13:9e:9f:01:c5:7d:bc:
                    3d:05:a9:50:07:05:2b:e9:1e:14:be:0e:c5:2a:ca:
                    c9:9c:cf:16:64:eb:ff:dc:65:6a:69:0a:39:fc:16:
                    ac:02:e8:1f:59:92:9c:0d:b5:e3:55:5f:00:51:db:
                    fd:80:2c:c1:59:36:ed:d4:7d:c7:88:46:a6:26:58:
                    ed:72:c5:9e:32:22:a3:44:b0:2a:6a:e1:dd:a5:3c:
                    3a:2d:bc:d5:68:31:85:8f:1c:0e:6e:83:94:a6:28:
                    b9:da:02:2e:55:ed:a9:d1:7d:4e:38:2c:35:14:83:
                    8b:a7:32:69:d3:2d:c6:4f:9d:f9:05:85:50:a1:c2:
                    4b:47:f8:88:12:43:0d:58:65:28:f7:e6:cc:9c:53:
                    e5:61:06:5a:27:98:c7:7a:7c:e7:7b:63:c4:93:3c:
                    25:90:93:e2:d0:cf:4f:9b:39:18:1e:e0:68:81:c7:
                    d6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7F:13:B0:A5:04:A1:45:E8:2C:8B:C1:63:8C:57:3F:C8:60:E1:0F
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/wH8TsKUEoUXoLIvBY4xXP8hg4Q8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.90.2/32

    Signature Algorithm: sha256WithRSAEncryption
         73:94:13:95:0b:23:02:92:f9:ea:96:d7:f6:49:7f:c4:9e:0d:
         5d:99:dc:04:59:1d:cc:6c:4f:78:c6:d8:73:12:ff:22:dc:99:
         07:12:05:33:54:65:b9:11:a4:79:8f:ce:95:eb:50:ab:cd:25:
         e9:17:47:c2:61:32:5d:0a:46:fc:f3:e2:07:73:53:6b:3b:89:
         10:1e:60:78:43:9b:0a:2f:a4:a5:0a:96:09:33:bd:36:a1:1f:
         da:9f:f8:c5:13:f8:c4:38:d4:34:dd:bc:5d:7e:1f:c6:65:32:
         8c:da:bf:cc:e8:36:83:19:1f:45:d0:ec:69:c0:c5:86:40:91:
         e3:e9:9a:3f:04:b8:0b:f4:b0:75:eb:0e:e4:01:4e:a0:10:0d:
         69:02:36:a6:69:42:d0:fc:65:27:23:fb:73:e6:79:e7:f2:12:
         a8:41:5e:4b:f2:27:08:75:df:94:d0:51:16:f6:81:06:f9:79:
         93:0d:9b:e8:7e:43:74:7d:0f:47:f2:90:74:97:ce:0b:3f:dc:
         12:6f:f3:d8:f1:92:16:9c:dc:69:47:ca:13:8b:6a:97:67:21:
         b7:70:ea:04:58:55:3f:e5:f0:93:68:5a:6c:c3:69:d0:8c:85:
         0b:2a:61:dc:8e:ea:34:aa:5c:fc:67:30:f4:c8:04:0a:a8:f5:
         1a:b9:d8:c6
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzAyMjAw
NzU5MjFaFw0yNDAyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEMwN0YxM0IwQTUwNEEx
NDVFODJDOEJDMTYzOEM1NzNGQzg2MEUxMEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4lBWT3+rlyHG/AdqStA+KHLbCMnEPIhlzpkvnh+LV4yZ7O853
fG0i8iof//0+HjcthmnnrQAYXyufq+SWODIbPUki9eLdRWoCHRcp4e3ZZzZTE56f
AcV9vD0FqVAHBSvpHhS+DsUqysmczxZk6//cZWppCjn8FqwC6B9ZkpwNteNVXwBR
2/2ALMFZNu3UfceIRqYmWO1yxZ4yIqNEsCpq4d2lPDotvNVoMYWPHA5ug5SmKLna
Ai5V7anRfU44LDUUg4unMmnTLcZPnfkFhVChwktH+IgSQw1YZSj35sycU+VhBlon
mMd6fOd7Y8STPCWQk+LQz0+bORge4GiBx9a/AgMBAAGjggIpMIICJTAdBgNVHQ4E
FgQUwH8TsKUEoUXoLIvBY4xXP8hg4Q8wHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My93SDhUc0tVRW9VWG9MSXZCWTR4WFA4aGc0UTgu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCAGCCsGAQUFBwEHAQH/BBEwDzAN
BAIAATAHAwUAyuxaAjANBgkqhkiG9w0BAQsFAAOCAQEAc5QTlQsjApL56pbX9kl/
xJ4NXZncBFkdzGxPeMbYcxL/ItyZBxIFM1RluRGkeY/OletQq80l6RdHwmEyXQpG
/PPiB3NTazuJEB5geEObCi+kpQqWCTO9NqEf2p/4xRP4xDjUNN28XX4fxmUyjNq/
zOg2gxkfRdDsacDFhkCR4+maPwS4C/SwdesO5AFOoBANaQI2pmlC0PxlJyP7c+Z5
5/ISqEFeS/InCHXflNBRFvaBBvl5kw2b6H5DdH0PR/KQdJfOCz/cEm/z2PGSFpzc
aUfKE4tql2cht3DqBFhVP+Xwk2habMNp0IyFCyph3I7qNKpc/Gcw9MgECqj1GrnY
xg==
-----END CERTIFICATE-----