Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/-WLu_FElsfZ2TCMLaB-8L92hCzY.roa
File:                     -WLu_FElsfZ2TCMLaB-8L92hCzY.roa (raw, json)
Hash identifier:          H+GXXTtNweUfWorVAu6FSRPcpqecKCC/fZq8OOg7VIA=
Subject key identifier:   F9:62:EE:FC:51:25:B1:F6:76:4C:23:0B:68:1F:BC:2F:DD:A1:0B:36
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       D4
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/-WLu_FElsfZ2TCMLaB-8L92hCzY.roa
Signing time:             Tue 01 Aug 2023 01:30:41 +0000
ROA not before:           Tue 01 Aug 2023 01:30:41 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     23816
IP address blocks:        203.141.32.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:28:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Aug  1 01:30:41 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=F962EEFC5125B1F6764C230B681FBC2FDDA10B36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:79:63:e8:72:95:66:5d:18:61:11:1c:82:79:
                    cf:88:69:f0:2d:cc:c5:05:20:50:12:f8:ed:d9:04:
                    37:3d:70:d0:15:b3:69:45:6a:6d:36:f7:16:6f:78:
                    41:f8:20:b5:87:95:55:ca:f9:d7:3b:0d:21:7a:14:
                    db:d0:e9:b5:5b:7b:c4:25:5d:48:65:63:14:41:42:
                    01:95:dd:f3:2a:cd:08:ed:44:65:31:f0:06:12:6c:
                    ca:09:f4:02:0b:f9:bd:8f:88:a7:cf:f6:bd:50:5e:
                    9c:88:77:57:3a:d5:10:06:1f:3d:cd:a3:fa:0c:2b:
                    84:2c:42:93:5c:e0:45:71:84:c6:f4:5f:61:2b:87:
                    f9:f7:05:72:e7:a9:3e:b5:cf:04:4e:e4:0c:3b:d5:
                    f6:99:59:ae:39:05:2e:ea:c8:c9:28:c9:85:3b:7d:
                    f1:e8:d7:17:60:da:27:a0:3e:07:d0:e3:46:7e:36:
                    0e:fc:37:19:63:d5:4c:04:d6:2a:8f:ca:5e:3a:68:
                    6f:9b:21:ec:b2:38:f6:02:31:32:c5:6e:68:ef:e4:
                    53:15:f5:d6:a9:f5:33:6c:60:de:f2:c1:c6:26:b4:
                    3b:db:6e:fa:0b:4e:5f:60:4a:4d:d4:d0:de:a8:2d:
                    d8:0f:ac:0a:20:f8:be:47:b7:63:0c:93:0c:31:30:
                    2f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:62:EE:FC:51:25:B1:F6:76:4C:23:0B:68:1F:BC:2F:DD:A1:0B:36
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/-WLu_FElsfZ2TCMLaB-8L92hCzY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.141.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a6:6e:bc:6a:7a:b8:86:3e:2c:a0:fd:a0:39:d5:b8:37:9c:0b:
         40:ff:65:da:42:78:53:70:78:c6:df:23:3f:b9:4b:76:9b:a4:
         68:f8:ab:f0:3e:bf:f8:0f:e0:29:06:14:b3:68:77:f9:0a:35:
         63:f3:dd:a8:b7:a9:c2:7e:d6:97:1c:8d:fe:f8:9f:94:4a:95:
         65:72:2a:75:bc:32:92:e0:96:ab:21:43:9d:8a:89:27:59:3c:
         b5:84:fe:81:1b:79:58:76:a6:34:97:30:70:86:35:54:7c:d0:
         a7:13:fb:0f:52:2b:1c:1f:e9:73:2d:9c:15:1e:9b:d6:7f:9e:
         0a:01:74:3c:4d:18:82:4e:14:41:d3:57:ed:97:0b:3c:78:a0:
         a0:57:b1:4d:a9:46:bd:cc:28:f0:b6:6d:d6:88:92:0a:13:de:
         32:a8:80:10:c6:9b:4e:93:14:38:ae:2f:13:76:e1:c1:b6:55:
         b8:e6:84:06:3e:c6:98:d4:b0:df:38:87:76:44:e0:ca:a1:66:
         2b:b3:82:87:b2:67:0b:43:17:d3:c8:da:48:e2:cf:2e:4c:fa:
         ba:14:8c:92:88:c6:48:db:49:dd:12:e4:ea:0c:fb:24:1b:0d:
         f8:0d:27:36:30:4e:e6:56:b9:2f:90:d5:01:8f:25:61:95:ea:
         82:ee:8a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 03:11:26 2024 by rpki-client on console-fra.rpki-client.org