Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/b6CM4zaHBMFgcckQhy1a-6lsJo0.roa
File:                     b6CM4zaHBMFgcckQhy1a-6lsJo0.roa (raw, json)
Hash identifier:          j+pqQrD2D813OsFZiGJXVZW7gesEqtcN5p1BQq3S9NM=
Subject key identifier:   6F:A0:8C:E3:36:87:04:C1:60:71:C9:10:87:2D:5A:FB:A9:6C:26:8D
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       CF
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/b6CM4zaHBMFgcckQhy1a-6lsJo0.roa
Signing time:             Tue 01 Aug 2023 01:30:39 +0000
ROA not before:           Tue 01 Aug 2023 01:30:39 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     23816
IP address blocks:        203.216.224.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Sun 30 Jun 2024 01:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Aug  1 01:30:39 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=6FA08CE3368704C16071C910872D5AFBA96C268D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0e:fa:fb:cf:65:be:0c:b4:83:01:ad:b6:13:
                    4a:fa:38:77:b0:9c:80:ca:ea:a4:15:52:5d:9c:da:
                    96:4a:ba:af:29:00:2e:dd:11:ab:91:b4:71:b8:35:
                    f2:84:8e:85:dd:c5:a3:97:3b:8c:09:b6:b5:61:6e:
                    30:22:f9:41:6a:37:04:f9:09:8d:1c:90:38:4b:f6:
                    1a:6c:20:14:a0:4b:28:c2:26:65:27:8d:d6:d2:68:
                    40:90:14:ad:c0:73:a9:f9:45:db:65:ca:58:f0:b9:
                    7c:93:ed:f3:27:4a:9c:ef:04:7c:97:7b:6b:e0:35:
                    18:cf:46:eb:df:2f:22:89:1b:86:99:49:46:3f:b1:
                    d9:e1:24:a1:37:71:ab:67:4e:26:c7:df:c4:f5:43:
                    62:e1:c4:3b:c5:1b:3b:55:01:06:82:42:1f:ed:65:
                    63:c6:66:09:c8:83:63:91:5c:b6:53:94:92:2f:9c:
                    dc:3d:23:48:97:65:88:60:66:7e:ed:e6:05:c3:48:
                    51:25:8b:68:48:cc:b7:fc:29:01:50:43:aa:17:9b:
                    3e:99:dd:6a:7b:27:7c:11:fc:24:42:77:d6:dc:5f:
                    35:55:96:30:15:48:e8:4c:68:8a:37:5a:36:3f:04:
                    4e:5b:8f:11:91:3e:14:cd:7a:b0:35:0e:7d:26:6f:
                    e8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A0:8C:E3:36:87:04:C1:60:71:C9:10:87:2D:5A:FB:A9:6C:26:8D
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/b6CM4zaHBMFgcckQhy1a-6lsJo0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.216.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         09:0b:82:a6:a8:87:d0:b6:0c:17:b7:a0:9c:88:f0:bd:59:51:
         e9:f2:e8:ec:0a:db:ac:07:38:50:2c:c0:55:50:2c:66:99:91:
         18:6f:cb:9c:0d:11:36:cf:bd:1b:4e:42:c7:14:c4:f7:c8:db:
         ff:f4:99:0b:c8:95:db:46:54:51:5a:72:60:bc:ee:b1:d1:7a:
         59:99:a1:7a:45:4d:16:e3:bf:54:65:fe:1c:0d:08:84:72:1f:
         f7:93:8b:be:15:f5:5f:b4:23:88:ad:d8:bf:6e:20:75:9b:5d:
         75:f9:51:b2:97:fb:10:8b:7b:5d:cf:af:76:3e:94:bc:57:f5:
         ab:ae:05:53:c9:71:f3:0d:ff:91:21:00:fc:1e:35:74:66:02:
         49:40:5f:a8:9a:ee:d0:fc:b3:e7:09:48:1c:c5:04:e3:fa:7b:
         e2:95:3b:2f:12:39:06:b4:bd:f0:cc:2c:54:d9:a9:66:66:97:
         d7:fc:f4:31:e6:5c:55:c2:7b:3f:84:c4:5e:fc:db:e9:8f:5a:
         80:d7:76:14:65:e5:c1:5d:56:9c:aa:6c:44:83:29:21:c3:92:
         d9:70:8c:83:82:c7:9f:e9:25:ac:1b:69:11:69:a8:cd:85:a3:
         7e:10:31:39:66:f8:28:1b:c1:e2:3d:ea:29:e4:d4:04:af:d9:
         e4:e7:02:04
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1
QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yMzA4MDEw
MTMwMzlaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDZGQTA4Q0UzMzY4NzA0
QzE2MDcxQzkxMDg3MkQ1QUZCQTk2QzI2OEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6Dvr7z2W+DLSDAa22E0r6OHewnIDK6qQVUl2c2pZKuq8pAC7d
EauRtHG4NfKEjoXdxaOXO4wJtrVhbjAi+UFqNwT5CY0ckDhL9hpsIBSgSyjCJmUn
jdbSaECQFK3Ac6n5RdtlyljwuXyT7fMnSpzvBHyXe2vgNRjPRuvfLyKJG4aZSUY/
sdnhJKE3catnTibH38T1Q2LhxDvFGztVAQaCQh/tZWPGZgnIg2ORXLZTlJIvnNw9
I0iXZYhgZn7t5gXDSFEli2hIzLf8KQFQQ6oXmz6Z3Wp7J3wR/CRCd9bcXzVVljAV
SOhMaIo3WjY/BE5bjxGRPhTNerA1Dn0mb+iLAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUb6CM4zaHBMFgcckQhy1a+6lsJo0wHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy
G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3
cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzU0L2I2Q000emFIQk1GZ2Nja1FoeTFhLTZsc0pvMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXL2OAwDQYJKoZIhvcNAQELBQADggEBAAkLgqaoh9C2DBe3oJyI8L1ZUeny
6OwK26wHOFAswFVQLGaZkRhvy5wNETbPvRtOQscUxPfI2//0mQvIldtGVFFacmC8
7rHRelmZoXpFTRbjv1Rl/hwNCIRyH/eTi74V9V+0I4it2L9uIHWbXXX5UbKX+xCL
e13Pr3Y+lLxX9auuBVPJcfMN/5EhAPweNXRmAklAX6ia7tD8s+cJSBzFBOP6e+KV
Oy8SOQa0vfDMLFTZqWZml9f89DHmXFXCez+ExF782+mPWoDXdhRl5cFdVpyqbESD
KSHDktlwjIOCx5/pJawbaRFpqM2Fo34QMTlm+CgbweI96ink1ASv2eTnAgQ=
-----END CERTIFICATE-----
Generated at Sun Jun 30 02:59:41 2024 by rpki-client on console-ams.rpki-client.org