Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/fY0fbq3cxbRdI6du7mUjCTkyhjQ.roa
File:                     fY0fbq3cxbRdI6du7mUjCTkyhjQ.roa (raw, json)
Hash identifier:          89wLL05ooD/DWRVbaZEieb3MXLzkJQ1m9w9h5GlLeqw=
Subject key identifier:   7D:8D:1F:6E:AD:DC:C5:B4:5D:23:A7:6E:EE:65:23:09:39:32:86:34
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       B9
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/fY0fbq3cxbRdI6du7mUjCTkyhjQ.roa
Signing time:             Thu 13 Apr 2023 09:53:00 +0000
ROA not before:           Thu 13 Apr 2023 09:53:00 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9607
IP address blocks:        203.216.192.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Apr 13 09:53:00 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=7D8D1F6EADDCC5B45D23A76EEE65230939328634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4b:79:83:2e:08:74:26:66:14:d3:0d:4c:82:
                    4b:65:e6:25:bc:5b:4c:0c:76:36:e1:cd:f6:fb:51:
                    b2:31:50:d8:5b:27:5a:94:85:b1:b2:3e:d2:00:46:
                    a5:b5:c8:d1:f9:25:94:ab:be:4f:bd:2a:ef:9b:6a:
                    aa:04:10:8b:9c:26:d6:1c:54:96:8e:7e:83:33:4a:
                    8e:e7:88:8b:7c:df:ad:20:58:20:72:8c:16:3e:13:
                    ea:6a:1f:da:86:b2:62:f5:ea:42:25:ad:09:1a:ec:
                    03:84:26:4f:97:0a:89:7b:33:03:b6:90:e2:94:aa:
                    49:b3:c7:43:da:3b:d1:42:0a:33:19:cf:fb:55:5a:
                    e8:e4:af:b9:3b:da:bc:a8:f4:c0:9f:7f:e7:43:fa:
                    0c:1a:73:40:4b:bd:99:68:1e:c5:6d:f2:90:3c:df:
                    1b:19:08:f2:82:f0:ec:da:05:6a:72:4a:09:a3:09:
                    81:bb:ea:45:54:6f:ad:f5:ac:6a:92:72:2d:64:f6:
                    9a:4a:1d:70:37:ed:56:6a:26:25:39:9d:b2:5e:06:
                    7e:65:82:17:1d:28:1e:43:1b:8b:aa:4d:a9:c2:01:
                    81:02:fe:b3:60:e4:b5:98:d8:64:d6:bf:4e:31:44:
                    8d:d3:7b:be:fe:51:d5:81:fd:55:61:92:58:7f:a5:
                    a8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8D:1F:6E:AD:DC:C5:B4:5D:23:A7:6E:EE:65:23:09:39:32:86:34
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/fY0fbq3cxbRdI6du7mUjCTkyhjQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.216.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3e:c6:1e:18:80:65:42:11:29:99:5a:9a:09:a2:4e:cd:f0:4a:
         dc:73:0d:99:75:ef:8a:b5:83:85:1c:f3:c9:38:9c:cd:c8:dc:
         bb:c9:7a:ea:24:af:aa:23:5b:cf:7a:7d:0c:c2:83:06:eb:c9:
         4e:a7:af:4e:40:d6:32:d0:df:d6:86:6c:6d:b7:1d:20:94:e3:
         be:46:9c:a3:ee:70:05:07:ab:e5:f2:df:b6:48:43:94:d3:c1:
         a0:e9:57:9e:9f:0a:32:8c:20:0e:92:a5:f9:b8:1e:c6:35:75:
         9d:d6:fe:ed:fc:bb:67:d1:a4:e7:7d:9b:4c:33:92:74:a6:8c:
         13:3a:6b:59:74:50:6c:e5:ba:3f:2f:c4:fa:ad:0a:52:30:65:
         8e:7c:e2:25:45:1d:f6:1b:c1:8b:12:3d:0b:54:19:81:bb:46:
         1e:7e:4f:dd:40:a7:63:06:ba:5f:ab:b7:25:a5:ac:18:da:5e:
         a5:38:ce:4e:82:22:da:c0:30:b8:c2:95:6e:8d:e5:df:b8:f0:
         ee:79:42:f2:86:28:6d:50:32:81:60:61:e3:7a:18:56:81:2c:
         98:84:45:58:42:81:2a:d5:65:ca:9b:2f:49:9b:d4:e6:98:5f:
         3c:09:bc:c2:35:f6:dd:f8:4f:39:b1:42:2f:7d:5c:6d:a1:d3:
         8c:8d:12:22
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICALkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1
QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yMzA0MTMw
OTUzMDBaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKDdEOEQxRjZFQUREQ0M1
QjQ1RDIzQTc2RUVFNjUyMzA5MzkzMjg2MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSS3mDLgh0JmYU0w1Mgktl5iW8W0wMdjbhzfb7UbIxUNhbJ1qU
hbGyPtIARqW1yNH5JZSrvk+9Ku+baqoEEIucJtYcVJaOfoMzSo7niIt8360gWCBy
jBY+E+pqH9qGsmL16kIlrQka7AOEJk+XCol7MwO2kOKUqkmzx0PaO9FCCjMZz/tV
Wujkr7k72ryo9MCff+dD+gwac0BLvZloHsVt8pA83xsZCPKC8OzaBWpySgmjCYG7
6kVUb631rGqSci1k9ppKHXA37VZqJiU5nbJeBn5lghcdKB5DG4uqTanCAYEC/rNg
5LWY2GTWv04xRI3Te77+UdWB/VVhklh/pagNAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUfY0fbq3cxbRdI6du7mUjCTkyhjQwHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy
G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3
cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzU0L2ZZMGZicTNjeGJSZEk2ZHU3bVVqQ1RreWhqUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXL2MAwDQYJKoZIhvcNAQELBQADggEBAD7GHhiAZUIRKZlamgmiTs3wStxz
DZl174q1g4Uc88k4nM3I3LvJeuokr6ojW896fQzCgwbryU6nr05A1jLQ39aGbG23
HSCU475GnKPucAUHq+Xy37ZIQ5TTwaDpV56fCjKMIA6Spfm4HsY1dZ3W/u38u2fR
pOd9m0wzknSmjBM6a1l0UGzluj8vxPqtClIwZY584iVFHfYbwYsSPQtUGYG7Rh5+
T91Ap2MGul+rtyWlrBjaXqU4zk6CItrAMLjClW6N5d+48O55QvKGKG1QMoFgYeN6
GFaBLJiERVhCgSrVZcqbL0mb1OaYXzwJvMI19t34TzmxQi99XG2h04yNEiI=
-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:26 2024 by rpki-client on console-ams.rpki-client.org