Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/k3rZ9at5FgMsgoDlCdXHVsQ_FLg.roa
File:                     k3rZ9at5FgMsgoDlCdXHVsQ_FLg.roa (raw, json)
Hash identifier:          zC2etkqqLwy2tiPxzCi0GQs2tRxFRHzqjiT85H591UI=
Subject key identifier:   93:7A:D9:F5:AB:79:16:03:2C:82:80:E5:09:D5:C7:56:C4:3F:14:B8
Certificate issuer:       /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Certificate serial:       29
Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/k3rZ9at5FgMsgoDlCdXHVsQ_FLg.roa
Signing time:             Tue 26 Sep 2023 06:27:19 +0000
ROA not before:           Tue 26 Sep 2023 06:27:19 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     23637
IP address blocks:        112.140.32.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
        Validity
            Not Before: Sep 26 06:27:19 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=937AD9F5AB7916032C8280E509D5C756C43F14B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dc:8b:31:48:1b:62:e8:03:4a:a6:dc:e5:4e:
                    b3:b6:7a:19:95:df:7b:e9:dd:7f:c2:19:36:62:1e:
                    b6:86:c0:bc:9c:ec:63:43:73:05:5c:8f:c0:c0:b1:
                    5e:63:c7:aa:e0:e0:50:e3:1c:91:ac:41:76:9d:a8:
                    7c:51:aa:85:27:42:83:8c:53:5a:9f:c4:c2:f5:44:
                    6b:47:5e:12:99:cd:e2:93:dd:43:1b:ad:64:38:62:
                    28:8c:ac:a2:c4:0d:f1:fc:e1:1a:d1:29:e0:ab:d2:
                    bc:a4:49:68:ec:e0:dd:e8:07:ca:3e:d7:97:c6:14:
                    2c:93:19:f7:83:26:0c:51:a9:1e:67:d6:04:7d:38:
                    49:03:df:10:8e:a3:51:f5:ad:24:11:58:26:36:1c:
                    57:a5:37:32:c2:09:d6:e7:25:0e:45:2e:ca:9f:ea:
                    3c:6b:45:80:5b:ad:3a:2b:1e:2d:be:46:56:b2:44:
                    0d:a2:61:82:df:7c:90:e1:50:a3:00:52:37:f5:ec:
                    35:a2:9b:32:3b:cb:92:f3:5d:83:c9:bb:82:5f:07:
                    2a:0e:5c:8d:a0:d7:00:8c:0d:12:8b:0a:5a:eb:ad:
                    74:03:80:bf:bb:c2:be:c6:44:23:9b:01:8f:73:7d:
                    71:6b:a1:5d:af:f2:65:d9:4e:4b:7d:51:28:32:ed:
                    bf:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7A:D9:F5:AB:79:16:03:2C:82:80:E5:09:D5:C7:56:C4:3F:14:B8
            X509v3 Authority Key Identifier:
                keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/k3rZ9at5FgMsgoDlCdXHVsQ_FLg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.140.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         70:3f:8d:86:49:b3:b3:c8:87:d3:16:41:e3:d9:eb:de:da:d6:
         92:35:9e:a6:a1:50:86:3d:9e:24:ed:53:fa:1e:e5:1e:26:1f:
         56:39:07:9c:b9:35:62:3e:4d:93:4f:b0:68:00:e2:96:13:0d:
         e0:ab:df:c6:b6:15:e6:bc:37:26:6e:18:44:c1:e4:5a:c4:0c:
         99:b1:db:09:2d:61:fb:40:99:8d:63:47:b5:4c:3e:90:47:2f:
         ff:b6:6a:7c:87:a6:7e:de:81:1f:84:aa:75:30:50:16:3b:52:
         5d:d9:c6:ff:88:9f:d4:ff:f4:7a:a1:14:51:be:f8:02:76:ee:
         97:41:b9:fd:5b:ca:e9:72:72:b8:ba:20:41:01:c6:a9:9b:d1:
         4d:63:a6:0a:07:11:42:5d:78:db:7d:56:b6:8c:ab:30:42:24:
         9b:e2:25:0a:3d:00:df:9e:61:35:a8:3d:58:e8:35:fe:a0:48:
         67:55:57:e3:db:ed:7a:f2:28:c2:b8:90:2d:94:9f:43:d1:87:
         4f:98:36:ac:2a:73:26:35:d8:6e:8d:a1:5d:d3:f4:4f:64:9d:
         03:67:d2:de:2e:bb:35:11:e4:91:5d:62:f2:30:52:fc:d4:6e:
         c1:16:3d:b9:c3:29:7f:16:21:7b:57:f9:36:8a:d7:b0:df:36:
         33:dc:92:2f
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RjNF
NjM5NkM5RDc2Q0JERjRFRDJENURFN0EyQTc2MDIxNEM5ODM3MB4XDTIzMDkyNjA2
MjcxOVoXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoOTM3QUQ5RjVBQjc5MTYw
MzJDODI4MEU1MDlENUM3NTZDNDNGMTRCODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMLcizFIG2LoA0qm3OVOs7Z6GZXfe+ndf8IZNmIetobAvJzsY0Nz
BVyPwMCxXmPHquDgUOMckaxBdp2ofFGqhSdCg4xTWp/EwvVEa0deEpnN4pPdQxut
ZDhiKIysosQN8fzhGtEp4KvSvKRJaOzg3egHyj7Xl8YULJMZ94MmDFGpHmfWBH04
SQPfEI6jUfWtJBFYJjYcV6U3MsIJ1uclDkUuyp/qPGtFgFutOiseLb5GVrJEDaJh
gt98kOFQowBSN/XsNaKbMjvLkvNdg8m7gl8HKg5cjaDXAIwNEosKWuutdAOAv7vC
vsZEI5sBj3N9cWuhXa/yZdlOS31RKDLtv9cCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSTetn1q3kWAyyCgOUJ1cdWxD8UuDAfBgNVHSMEGDAWgBRPPmOWyddsvfTtLV3n
oqdgIUyYNzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjEwNDIvVHo1amxzblhiTDMwN1MxZDU2S25ZQ0ZNbURjLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVHo1amxzblhiTDMwN1MxZDU2S25Z
Q0ZNbURjLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIxMDQyL2szclo5YXQ1RmdNc2dvRGxDZFhIVnNRX0ZMZy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAVwjCAwDQYJKoZIhvcNAQELBQADggEBAHA/jYZJs7PIh9MWQePZ697a
1pI1nqahUIY9niTtU/oe5R4mH1Y5B5y5NWI+TZNPsGgA4pYTDeCr38a2Fea8NyZu
GETB5FrEDJmx2wktYftAmY1jR7VMPpBHL/+2anyHpn7egR+EqnUwUBY7Ul3Zxv+I
n9T/9HqhFFG++AJ27pdBuf1byulycri6IEEBxqmb0U1jpgoHEUJdeNt9VraMqzBC
JJviJQo9AN+eYTWoPVjoNf6gSGdVV+Pb7XryKMK4kC2Un0PRh0+YNqwqcyY12G6N
oV3T9E9knQNn0t4uuzUR5JFdYvIwUvzUbsEWPbnDKX8WIXtX+TaK17DfNjPcki8=
-----END CERTIFICATE-----
Generated at Sat Aug 31 04:11:54 2024 by rpki-client on console-ams.rpki-client.org