Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/rB4_-OnyhHwDbaz_0fFFm1yN_Vs.roa
File:                     rB4_-OnyhHwDbaz_0fFFm1yN_Vs.roa (raw, json)
Hash identifier:          A2iIZCWSeP/jSdyBaPbc37gtIvs4GuRd29iP72w2i+I=
Subject key identifier:   AC:1E:3F:F8:E9:F2:84:7C:03:6D:AC:FF:D1:F1:45:9B:5C:8D:FD:5B
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       1D
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/rB4_-OnyhHwDbaz_0fFFm1yN_Vs.roa
Signing time:             Wed 28 Feb 2024 04:59:55 +0000
ROA not before:           Wed 28 Feb 2024 04:59:55 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     7679
IP address blocks:        210.235.160.0/19 maxlen: 19
Validation:               Failed, certificate revoked on Fri 31 Jan 2025 01:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Feb 28 04:59:55 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=AC1E3FF8E9F2847C036DACFFD1F1459B5C8DFD5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b9:75:6b:32:6a:82:83:e2:88:1c:dc:cd:12:
                    8e:b2:85:51:a1:c0:e5:61:80:09:b7:73:c5:c8:62:
                    4c:a5:84:58:fc:81:c6:d7:73:62:dc:21:5c:68:e1:
                    59:2d:95:13:1d:74:0c:ab:a9:f4:f7:5c:bb:b2:8b:
                    b3:cf:4a:e2:36:97:13:58:ea:99:51:32:8c:5e:0a:
                    10:8f:70:ba:e8:9a:33:00:d7:af:da:a3:7a:83:ad:
                    64:59:9b:ee:8f:52:19:0a:a2:5d:d1:d7:8c:38:ba:
                    6b:95:73:3e:15:2e:a1:cf:63:17:eb:43:01:0a:10:
                    15:4f:dc:b3:0e:2f:ed:0f:9b:73:16:ca:f8:2d:18:
                    7e:58:10:83:34:4e:b8:ff:64:9d:82:8f:76:db:14:
                    e4:e4:59:4e:b3:b9:a7:0f:12:78:62:d7:fa:31:7e:
                    eb:20:05:26:3d:7d:7b:cd:e4:4e:b7:9d:7d:c3:ee:
                    ad:f1:f6:5b:e5:ce:d4:6c:44:0a:93:25:c3:02:b1:
                    64:02:44:94:6f:c3:c5:0e:6d:87:90:95:22:b2:db:
                    f2:24:c1:32:d8:21:af:4d:7b:c9:c1:90:33:c2:26:
                    5a:81:88:a0:b0:0d:9c:68:76:46:42:b7:7e:9b:3d:
                    48:20:27:d4:be:d9:dc:a5:ee:35:10:f6:f1:79:26:
                    40:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1E:3F:F8:E9:F2:84:7C:03:6D:AC:FF:D1:F1:45:9B:5C:8D:FD:5B
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/rB4_-OnyhHwDbaz_0fFFm1yN_Vs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.235.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a4:64:5e:23:d9:89:31:e6:ee:14:64:c9:80:5f:8a:61:c4:85:
         59:bb:4b:c6:46:37:61:ab:83:ca:a9:67:a5:25:b2:04:06:72:
         91:24:b4:55:17:6b:7d:16:bd:e4:39:e8:28:2b:85:b3:ec:e1:
         f6:20:70:b0:84:fb:a5:10:fb:05:ec:cd:f8:95:ba:3b:4d:8d:
         19:25:96:30:ce:d8:40:e3:32:d9:f4:dd:50:6a:cb:6e:b6:4c:
         be:95:2c:fa:24:4d:44:68:3d:5e:07:a5:64:60:c6:5f:f0:b9:
         f8:0c:15:be:dd:d3:97:60:07:22:d7:1a:43:15:62:88:3d:b6:
         0c:ee:39:26:b6:be:ae:7a:cb:4b:b6:65:1b:d8:a5:b5:cb:85:
         b7:58:ba:30:b3:32:c9:b1:03:a1:9f:10:e4:2d:e0:e5:1c:84:
         88:58:79:d3:0a:09:a2:c1:6b:03:65:83:a8:16:d2:84:82:1b:
         55:d1:ee:99:cf:b2:4e:e4:5f:25:8c:23:31:da:fc:4d:9f:6d:
         41:0e:dd:ce:39:4a:bf:06:8d:4c:07:52:57:f1:40:c9:2c:93:
         dc:9a:f0:ad:d3:ad:3f:c5:22:cf:0f:de:46:2f:5b:f4:e9:f6:
         f3:ba:d3:37:27:e0:dc:45:c9:99:85:66:89:45:e1:4a:7d:df:
         a2:bf:21:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:35:13 2025 by rpki-client