Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20196/gO9eFBjR7UGzyg-XwpX3Tm2aJBs.roa
File:                     gO9eFBjR7UGzyg-XwpX3Tm2aJBs.roa (raw, json)
Hash identifier:          H3VZFrBEN927wHecl5FA45w/24PttiCIsnXcznI6FB8=
Subject key identifier:   80:EF:5E:14:18:D1:ED:41:B3:CA:0F:97:C2:95:F7:4E:6D:9A:24:1B
Certificate issuer:       /CN=F81BD2E58E8035E57254CDB51651C4E319EFDE6B
Certificate serial:       02
Authority key identifier: F8:1B:D2:E5:8E:80:35:E5:72:54:CD:B5:16:51:C4:E3:19:EF:DE:6B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-BvS5Y6ANeVyVM21FlHE4xnv3ms.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20196/gO9eFBjR7UGzyg-XwpX3Tm2aJBs.roa
Signing time:             Tue 04 Jul 2023 04:54:50 +0000
ROA not before:           Tue 04 Jul 2023 04:54:50 +0000
ROA not after:            Wed 03 Jul 2024 03:28:31 +0000
asID:                     150359
IP address blocks:        103.38.210.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Mon 10 Jul 2023 00:05:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F81BD2E58E8035E57254CDB51651C4E319EFDE6B
        Validity
            Not Before: Jul  4 04:54:50 2023 GMT
            Not After : Jul  3 03:28:31 2024 GMT
        Subject: CN=80EF5E1418D1ED41B3CA0F97C295F74E6D9A241B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9e:19:3d:63:11:7e:91:73:8b:00:ba:eb:f6:
                    cb:48:4e:3b:34:d9:8e:72:d1:3c:92:ee:ba:7a:9c:
                    97:20:be:99:2b:ab:f5:52:9a:86:fe:0a:a6:d7:32:
                    df:e6:ae:84:d3:88:47:8c:59:ef:b7:1e:73:82:e9:
                    c7:9d:62:f5:33:1f:10:43:47:37:7c:4b:d2:57:32:
                    3f:9f:f3:df:4e:e9:30:f6:f7:ff:b4:5e:2a:35:28:
                    3e:23:b6:a4:14:ac:77:e8:74:29:ca:6b:aa:52:5d:
                    e1:c3:8b:b7:10:6c:60:05:b2:8f:b6:ee:2d:28:c4:
                    2f:8b:6d:e3:d0:04:08:bf:c2:1d:5d:2a:9d:f5:be:
                    de:5b:43:87:e8:d6:2a:3d:77:d1:5c:6d:2d:4f:fb:
                    91:47:2e:e6:58:81:87:66:79:d4:b9:93:75:c3:e9:
                    d3:8a:72:4c:64:8c:08:34:5a:12:3b:3f:d4:07:d4:
                    ba:58:10:e8:82:a9:dc:4c:85:0e:92:87:4e:6d:f8:
                    f1:89:27:9a:28:c8:c5:6e:9e:f1:44:cb:78:14:5c:
                    b7:72:03:38:ff:ea:24:23:f7:76:be:75:a7:14:8a:
                    bc:9e:de:61:ff:68:58:e9:2f:d8:a4:b6:ed:c5:e6:
                    2e:5a:83:0a:3b:ee:24:d0:06:c4:fa:d3:3a:be:ac:
                    94:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:EF:5E:14:18:D1:ED:41:B3:CA:0F:97:C2:95:F7:4E:6D:9A:24:1B
            X509v3 Authority Key Identifier:
                keyid:F8:1B:D2:E5:8E:80:35:E5:72:54:CD:B5:16:51:C4:E3:19:EF:DE:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20196/-BvS5Y6ANeVyVM21FlHE4xnv3ms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-BvS5Y6ANeVyVM21FlHE4xnv3ms.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20196/gO9eFBjR7UGzyg-XwpX3Tm2aJBs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:7f:86:b1:9f:87:97:32:57:22:6e:d2:1e:2d:87:a8:37:a5:
         9c:d6:37:8c:d0:29:51:0d:bc:bd:1a:29:8a:77:44:cd:9b:cf:
         12:d9:ef:98:93:c4:95:c8:83:80:61:2d:b6:63:7e:d6:71:dd:
         1b:21:41:2d:71:98:c9:ff:5e:24:12:ff:4f:ed:f9:37:6e:eb:
         75:b1:aa:b5:07:e0:91:82:2f:12:b2:f7:f8:e6:e7:a9:67:c8:
         a6:60:08:44:3a:92:72:68:6a:e8:d0:17:a7:7e:5a:62:32:59:
         56:9c:53:6c:bc:1a:99:2e:5c:5b:8c:f1:bb:a9:31:2b:38:6b:
         1c:b2:5f:eb:8f:f0:21:9e:36:4c:6c:fb:fd:20:04:82:13:ca:
         9f:c6:c1:40:4f:50:17:3e:23:52:d2:19:5b:e1:ff:9b:df:f6:
         b0:d2:00:f7:e3:a0:67:90:df:ef:78:2b:52:5d:54:42:35:52:
         cc:9a:97:e6:12:fc:0d:84:8f:a6:40:ae:49:ca:82:1d:dd:35:
         8e:e3:d8:e2:94:40:df:0b:bf:9e:55:b2:77:8f:96:cd:95:17:
         26:11:30:70:a9:2b:84:f9:2a:a7:61:c7:04:4c:2e:b4:ff:bd:
         ec:32:5c:06:ff:b9:3e:7a:4a:08:c9:29:5f:4b:d6:4e:9e:5e:
         6b:19:3f:b4
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGODFC
RDJFNThFODAzNUU1NzI1NENEQjUxNjUxQzRFMzE5RUZERTZCMB4XDTIzMDcwNDA0
NTQ1MFoXDTI0MDcwMzAzMjgzMVowMzExMC8GA1UEAxMoODBFRjVFMTQxOEQxRUQ0
MUIzQ0EwRjk3QzI5NUY3NEU2RDlBMjQxQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANqeGT1jEX6Rc4sAuuv2y0hOOzTZjnLRPJLuunqclyC+mSur9VKa
hv4Kptcy3+auhNOIR4xZ77cec4Lpx51i9TMfEENHN3xL0lcyP5/z307pMPb3/7Re
KjUoPiO2pBSsd+h0KcprqlJd4cOLtxBsYAWyj7buLSjEL4tt49AECL/CHV0qnfW+
3ltDh+jWKj130VxtLU/7kUcu5liBh2Z51LmTdcPp04pyTGSMCDRaEjs/1AfUulgQ
6IKp3EyFDpKHTm348YknmijIxW6e8UTLeBRct3IDOP/qJCP3dr51pxSKvJ7eYf9o
WOkv2KS27cXmLlqDCjvuJNAGxPrTOr6slPkCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSA714UGNHtQbPKD5fClfdObZokGzAfBgNVHSMEGDAWgBT4G9LljoA15XJUzbUW
UcTjGe/eazAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxOTYvLUJ2UzVZNkFOZVZ5Vk0yMUZsSEU0eG52M21zLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvLUJ2UzVZNkFOZVZ5Vk0yMUZsSEU0
eG52M21zLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTk2L2dPOWVGQmpSN1VHenlnLVh3cFgzVG0yYUpCcy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAFnJtIwDQYJKoZIhvcNAQELBQADggEBAEV/hrGfh5cyVyJu0h4th6g3
pZzWN4zQKVENvL0aKYp3RM2bzxLZ75iTxJXIg4BhLbZjftZx3RshQS1xmMn/XiQS
/0/t+Tdu63WxqrUH4JGCLxKy9/jm56lnyKZgCEQ6knJoaujQF6d+WmIyWVacU2y8
GpkuXFuM8bupMSs4axyyX+uP8CGeNkxs+/0gBIITyp/GwUBPUBc+I1LSGVvh/5vf
9rDSAPfjoGeQ3+94K1JdVEI1Usyal+YS/A2Ej6ZArknKgh3dNY7j2OKUQN8Lv55V
snePls2VFyYRMHCpK4T5KqdhxwRMLrT/vewyXAb/uT56SgjJKV9L1k6eXmsZP7Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:48 2024 by rpki-client on console-fra.rpki-client.org