Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/nYPdTXWnClbcX-XhFDCf2VdAfFU.roa
File:                     nYPdTXWnClbcX-XhFDCf2VdAfFU.roa (raw, json)
Hash identifier:          7kOdQAxTfSeOSJmdr016LrPXMESxyFVGJiwK57vJMoY=
Subject key identifier:   9D:83:DD:4D:75:A7:0A:56:DC:5F:E5:E1:14:30:9F:D9:57:40:7C:55
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       B7
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/nYPdTXWnClbcX-XhFDCf2VdAfFU.roa
Signing time:             Sat 01 Jul 2023 01:31:15 +0000
ROA not before:           Sat 01 Jul 2023 01:31:15 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     9370
IP address blocks:        202.181.96.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:31:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Jul  1 01:31:15 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=9D83DD4D75A70A56DC5FE5E114309FD957407C55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fb:cb:b7:7c:a0:64:8c:b9:3b:73:59:a7:aa:
                    29:69:b9:93:9d:7e:dd:68:aa:26:d8:cd:64:10:3d:
                    a5:59:6a:4d:17:68:30:c6:51:94:57:9a:05:45:4d:
                    71:3a:d5:51:66:b0:b4:8c:e8:09:b2:63:96:a9:cd:
                    7d:71:73:23:3f:e8:b5:7b:4b:d8:a7:f7:99:3d:22:
                    07:52:fc:0b:f5:60:0d:2c:6f:c2:ad:89:1c:00:c9:
                    60:b4:12:79:11:9c:ee:ef:65:80:f2:fe:4b:c5:6c:
                    3f:5e:03:c9:1a:6f:c3:1d:7f:74:86:77:d7:2e:da:
                    6c:82:54:41:05:9a:e4:9a:8c:15:17:2f:8e:0c:56:
                    b8:18:2e:1c:43:24:1f:60:1d:c6:3f:87:46:19:a5:
                    ea:c8:ed:91:98:27:22:0d:6e:be:1e:33:24:09:67:
                    c1:32:71:35:9e:42:5d:b8:50:fc:61:0f:5b:5b:55:
                    e0:4a:0a:d4:3d:b8:36:fe:9a:11:15:7f:09:1a:0e:
                    07:ab:f8:36:a0:66:68:f6:db:4a:1e:0c:8d:c3:fc:
                    9a:aa:e0:31:a6:94:75:c3:20:07:01:93:a8:ce:d9:
                    31:48:10:dd:ad:f2:dd:96:bb:7c:13:9d:36:67:10:
                    62:ae:7c:99:0d:74:0e:22:e9:da:8c:7a:5c:39:c7:
                    00:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:83:DD:4D:75:A7:0A:56:DC:5F:E5:E1:14:30:9F:D9:57:40:7C:55
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/nYPdTXWnClbcX-XhFDCf2VdAfFU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.181.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:d2:43:d4:01:a1:48:7c:00:83:7b:3f:6c:e2:0c:96:d7:85:
         42:db:6d:01:f8:ec:49:60:83:8e:8a:28:48:74:a3:6d:91:40:
         f4:c7:34:68:cb:96:98:b4:23:3a:9b:2f:87:57:3b:80:ea:35:
         7d:54:d3:a4:73:ae:e0:2b:ea:d1:92:4e:7d:df:f0:e4:30:07:
         3c:86:c1:12:67:c2:cb:0b:ad:0b:e2:11:c6:5f:c5:7d:e2:81:
         b3:b1:5e:63:00:0f:67:27:89:b1:fa:dc:e8:c0:4b:35:6e:8b:
         f3:3c:87:cc:6d:07:63:ee:a9:ae:66:56:d7:a5:bd:fe:c7:36:
         b2:92:d2:eb:ea:c7:77:50:55:3d:55:9d:24:d5:57:0a:4f:b8:
         32:03:c4:a6:c9:31:37:78:8c:eb:4c:cd:4a:bb:c2:43:d1:cc:
         c8:68:c3:15:11:0f:f0:8b:3f:2c:a7:41:3f:c0:0a:e3:c8:67:
         3e:9d:ad:01:ac:e1:51:70:5e:76:64:86:38:0a:82:b5:e0:65:
         ee:98:ad:d7:02:a5:2a:fc:32:9c:50:8d:bc:3a:6e:5f:52:42:
         2a:85:44:de:cb:af:e8:0d:5d:65:3c:a7:56:5e:e8:b2:a3:53:
         7a:75:95:ba:a1:bf:95:e2:50:2b:68:1f:01:27:76:9d:f4:d8:
         62:b1:cc:10
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICALcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy
MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yMzA3MDEw
MTMxMTVaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDlEODNERDRENzVBNzBB
NTZEQzVGRTVFMTE0MzA5RkQ5NTc0MDdDNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDP+8u3fKBkjLk7c1mnqilpuZOdft1oqibYzWQQPaVZak0XaDDG
UZRXmgVFTXE61VFmsLSM6AmyY5apzX1xcyM/6LV7S9in95k9IgdS/Av1YA0sb8Kt
iRwAyWC0EnkRnO7vZYDy/kvFbD9eA8kab8Mdf3SGd9cu2myCVEEFmuSajBUXL44M
VrgYLhxDJB9gHcY/h0YZperI7ZGYJyINbr4eMyQJZ8EycTWeQl24UPxhD1tbVeBK
CtQ9uDb+mhEVfwkaDger+DagZmj220oeDI3D/Jqq4DGmlHXDIAcBk6jO2TFIEN2t
8t2Wu3wTnTZnEGKufJkNdA4i6dqMelw5xwBvAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUnYPdTXWnClbcX+XhFDCf2VdAfFUwHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W
wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo
bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjQ3L25ZUGRUWFduQ2xiY1gtWGhGRENmMlZkQWZGVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATKtWAwDQYJKoZIhvcNAQELBQADggEBAG7SQ9QBoUh8AIN7P2ziDJbXhULb
bQH47Elgg46KKEh0o22RQPTHNGjLlpi0IzqbL4dXO4DqNX1U06RzruAr6tGSTn3f
8OQwBzyGwRJnwssLrQviEcZfxX3igbOxXmMAD2cnibH63OjASzVui/M8h8xtB2Pu
qa5mVtelvf7HNrKS0uvqx3dQVT1VnSTVVwpPuDIDxKbJMTd4jOtMzUq7wkPRzMho
wxURD/CLPyynQT/ACuPIZz6drQGs4VFwXnZkhjgKgrXgZe6YrdcCpSr8MpxQjbw6
bl9SQiqFRN7Lr+gNXWU8p1Ze6LKjU3p1lbqhv5XiUCtoHwEndp302GKxzBA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:56 2024 by rpki-client on console-ams.rpki-client.org