Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/-BO7_d09QVFjb6-NMVi0CYyb5Qw.roa
File:                     -BO7_d09QVFjb6-NMVi0CYyb5Qw.roa (raw, json)
Hash identifier:          BVnp7uyu6X6T1e0kEsQnC8NNysczd1vF49ErALtgUGY=
Subject key identifier:   F8:13:BB:FD:DD:3D:41:51:63:6F:AF:8D:31:58:B4:09:8C:9B:E5:0C
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       0A
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/-BO7_d09QVFjb6-NMVi0CYyb5Qw.roa
Signing time:             Wed 28 Feb 2024 04:47:56 +0000
ROA not before:           Wed 28 Feb 2024 04:47:56 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     7679
IP address blocks:        110.54.0.0/17 maxlen: 17
Validation:               Failed, certificate revoked on Fri 31 Jan 2025 01:33:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Feb 28 04:47:56 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=F813BBFDDD3D4151636FAF8D3158B4098C9BE50C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:40:6d:96:7d:49:d1:34:59:36:da:35:8c:
                    a9:52:69:18:c2:81:de:e4:94:45:8d:be:26:02:0b:
                    a7:77:e0:ce:8e:40:ac:80:9b:66:61:f4:5c:63:99:
                    88:50:1b:16:6c:63:8b:44:69:02:bf:26:7e:5b:75:
                    68:b4:62:f6:2b:c8:ee:df:49:da:30:e6:57:7e:f9:
                    df:2d:34:a6:ac:5f:3b:ce:1a:60:04:12:f8:66:6e:
                    70:25:44:e8:07:78:b0:ac:1a:51:b5:94:39:12:68:
                    4a:03:8b:03:ef:c8:3d:da:41:3d:eb:69:63:eb:f9:
                    75:61:33:cb:7f:95:2c:08:e6:cc:c7:71:d8:fa:59:
                    64:85:db:4e:ba:33:65:87:17:c2:4e:af:dd:31:2b:
                    58:ff:a7:31:ff:d6:9e:85:a7:7a:e5:0e:a4:25:4c:
                    1d:f0:63:7a:96:48:56:02:d3:2a:d5:f2:f8:85:0e:
                    5e:25:f9:2d:6d:22:74:da:b2:75:25:29:b3:cd:b6:
                    d8:c7:e7:5b:dc:a6:5f:e4:af:da:88:cb:ba:ec:ee:
                    cc:3a:a9:8d:48:dd:1c:e1:41:99:dc:54:4c:8b:04:
                    ed:6d:a1:b1:62:80:50:21:ff:1e:29:8a:b4:df:03:
                    1c:97:79:85:03:33:c7:5e:c8:fc:4e:05:09:61:ba:
                    f1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:13:BB:FD:DD:3D:41:51:63:6F:AF:8D:31:58:B4:09:8C:9B:E5:0C
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/-BO7_d09QVFjb6-NMVi0CYyb5Qw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.54.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         12:bd:61:2c:d8:2a:98:87:1c:58:19:f1:89:d2:b8:6d:9d:df:
         e8:84:0d:ea:d8:d3:6b:24:fe:59:14:8b:5c:72:a3:c5:c4:bd:
         f9:a6:d0:35:af:45:89:86:de:d4:72:4a:f6:19:8e:7e:4c:2e:
         67:79:3f:6b:7f:48:a0:27:30:b4:a2:2d:51:99:66:8d:0b:13:
         a0:ee:4f:f7:cc:ce:0f:b0:91:50:43:fa:0b:ab:b0:09:aa:60:
         41:80:49:63:e0:a1:88:2b:91:c7:10:29:88:4b:0f:7b:a1:24:
         fe:87:b1:d1:8b:82:d6:aa:f0:16:bb:96:3f:d7:6f:2a:ba:98:
         39:1b:8b:6e:e5:d9:bc:fb:ca:6a:fb:14:0e:21:f1:01:b0:5c:
         c2:fe:ce:28:c3:60:1d:92:89:eb:ca:48:32:d7:99:40:5c:fb:
         1e:55:54:0f:ec:fb:d1:f9:62:63:03:ac:13:ed:c4:d0:cb:fb:
         82:01:1a:84:49:aa:a9:f9:0b:85:58:e4:b8:5c:a4:ce:54:5f:
         34:99:cb:db:bc:e0:1d:13:f7:d4:e8:06:17:e8:fb:f3:ba:0d:
         c8:62:6a:0c:99:da:b3:45:e4:8b:ea:ce:7a:ef:13:49:ac:a3:
         a0:c4:f6:30:a2:f0:1e:98:2e:ad:d2:a1:c5:ff:fe:2b:f5:5f:
         ed:b0:69:4b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBCjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNzVE
OTc4MkIxM0U5OTEyOENEMzRGMjJDMDlGRThFN0I1Q0JBNzBCMB4XDTI0MDIyODA0
NDc1NloXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoRjgxM0JCRkRERDNENDE1
MTYzNkZBRjhEMzE1OEI0MDk4QzlCRTUwQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALyfQG2WfUnRNFk22jWMqVJpGMKB3uSURY2+JgILp3fgzo5ArICb
ZmH0XGOZiFAbFmxji0RpAr8mflt1aLRi9ivI7t9J2jDmV3753y00pqxfO84aYAQS
+GZucCVE6Ad4sKwaUbWUORJoSgOLA+/IPdpBPetpY+v5dWEzy3+VLAjmzMdx2PpZ
ZIXbTrozZYcXwk6v3TErWP+nMf/WnoWneuUOpCVMHfBjepZIVgLTKtXy+IUOXiX5
LW0idNqydSUps8222MfnW9ymX+Sv2ojLuuzuzDqpjUjdHOFBmdxUTIsE7W2hsWKA
UCH/HimKtN8DHJd5hQMzx17I/E4FCWG68V8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBT4E7v93T1BUWNvr40xWLQJjJvlDDAfBgNVHSMEGDAWgBQnXZeCsT6ZEozTTyLA
n+jntcunCzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjQ5L0oxMlhnckUtbVJLTTAwOGl3Sl9vNTdYTHB3cy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0oxMlhnckUtbVJLTTAwOGl3Sl9vNTdY
THB3cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yNDkvLUJPN19kMDlRVkZqYjYtTk1WaTBDWXliNVF3LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEB242ADANBgkqhkiG9w0BAQsFAAOCAQEAEr1hLNgqmIccWBnxidK4bZ3f6IQN
6tjTayT+WRSLXHKjxcS9+abQNa9FiYbe1HJK9hmOfkwuZ3k/a39IoCcwtKItUZlm
jQsToO5P98zOD7CRUEP6C6uwCapgQYBJY+ChiCuRxxApiEsPe6Ek/oex0YuC1qrw
FruWP9dvKrqYORuLbuXZvPvKavsUDiHxAbBcwv7OKMNgHZKJ68pIMteZQFz7HlVU
D+z70fliYwOsE+3E0Mv7ggEahEmqqfkLhVjkuFykzlRfNJnL27zgHRP31OgGF+j7
87oNyGJqDJnas0Xki+rOeu8TSayjoMT2MKLwHpgurdKhxf/+K/Vf7bBpSw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:00 2025 by rpki-client