Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/-6jmahZ_49knws8XjsMJ1jd3Sxw.roa
File:                     -6jmahZ_49knws8XjsMJ1jd3Sxw.roa (raw, json)
Hash identifier:          AoU8EDScH+LTIMCDcbfnB88B5AZWXcTGTp1uj9pOgXw=
Subject key identifier:   FB:A8:E6:6A:16:7F:E3:D9:27:C2:CF:17:8E:C3:09:D6:37:77:4B:1C
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01D0
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/-6jmahZ_49knws8XjsMJ1jd3Sxw.roa
Signing time:             Fri 07 Jul 2023 04:16:41 +0000
ROA not before:           Fri 07 Jul 2023 04:16:41 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        182.236.16.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:41:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:16:41 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=FBA8E66A167FE3D927C2CF178EC309D637774B1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:da:d8:7f:6e:4a:50:56:bf:7f:c2:98:00:09:
                    98:4f:12:66:6a:1c:b1:76:fb:ed:44:bf:40:f2:e4:
                    36:f3:94:92:eb:be:3f:27:57:70:41:8e:4c:1d:6d:
                    c9:ae:a6:b9:e5:7c:9d:de:25:60:3c:03:96:43:92:
                    c2:b7:02:3a:ad:3c:a0:bd:f1:a1:39:c8:ca:1b:66:
                    72:9e:e8:bb:51:ed:76:9f:cc:49:ac:a3:09:2b:a8:
                    c2:2b:03:b7:79:d6:73:33:58:63:55:79:ea:57:4d:
                    6c:ce:73:95:32:8c:64:c1:50:de:ec:9c:1e:84:f0:
                    0f:ba:00:68:ac:74:1f:1d:80:dc:15:51:7c:76:32:
                    e6:7e:97:5c:ad:8a:d5:1f:1c:25:2e:cf:a5:08:67:
                    0a:73:76:cb:c6:66:db:85:fd:1d:08:85:d1:e3:61:
                    4f:52:1d:bf:62:15:6f:c6:46:21:89:16:9a:4f:e0:
                    15:c3:ad:75:c0:39:12:1f:cc:9e:e5:25:28:cd:e2:
                    29:ac:21:2a:8e:50:81:57:64:1b:49:d3:e7:ca:56:
                    13:24:67:41:19:f5:75:91:10:43:37:ce:ae:4a:ed:
                    9c:06:eb:0d:24:42:6d:25:72:f0:f8:76:90:3c:ac:
                    0c:6d:52:ea:85:e8:aa:fe:a1:66:f0:86:e1:1a:c7:
                    ab:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A8:E6:6A:16:7F:E3:D9:27:C2:CF:17:8E:C3:09:D6:37:77:4B:1C
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/-6jmahZ_49knws8XjsMJ1jd3Sxw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.236.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         60:51:62:b5:f5:09:be:38:52:4b:5d:b4:54:3a:ae:2c:a1:25:
         ec:cb:9c:3c:0a:81:50:9a:ab:e9:49:19:ca:0b:16:81:26:7a:
         22:1c:0a:cb:c9:1d:3e:82:ac:3e:b2:82:c1:a9:fd:21:3d:a0:
         91:c5:4b:03:70:48:6a:b5:b2:da:55:d5:19:d5:a8:ef:ed:c1:
         1a:a8:c7:53:0b:1b:29:ee:cb:42:19:02:cf:38:f0:de:48:44:
         46:3d:aa:a4:a8:2f:7b:dd:fd:cb:a1:13:07:53:9d:83:50:13:
         aa:5d:08:8d:20:a4:88:96:40:96:bb:0f:12:b1:a3:d1:5d:3f:
         0e:af:8a:50:08:bb:b5:20:65:18:f9:f5:c8:bb:1e:08:ad:44:
         c7:ed:c8:4a:6f:c0:5c:06:01:04:fa:53:47:72:2e:f0:c9:a0:
         83:42:7d:0c:98:f0:6f:84:97:94:08:32:c3:60:cb:a3:28:98:
         d2:6f:55:90:ab:b4:c0:1c:86:cb:e6:34:92:f0:43:59:6a:e0:
         1f:ad:3d:2f:8e:52:f4:5a:dd:3d:9a:12:3f:4b:1e:e2:c8:ed:
         ab:88:4f:97:7f:d9:11:d9:55:24:73:b0:9c:ed:4e:0b:ea:38:
         ed:6c:54:bb:21:d9:95:40:7a:c8:c1:75:85:54:70:d8:d9:1d:
         c9:5c:d2:e3
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDE2NDFaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEZCQThFNjZBMTY3RkUz
RDkyN0MyQ0YxNzhFQzMwOUQ2Mzc3NzRCMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCw2th/bkpQVr9/wpgACZhPEmZqHLF2++1Ev0Dy5DbzlJLrvj8n
V3BBjkwdbcmuprnlfJ3eJWA8A5ZDksK3AjqtPKC98aE5yMobZnKe6LtR7XafzEms
owkrqMIrA7d51nMzWGNVeepXTWzOc5UyjGTBUN7snB6E8A+6AGisdB8dgNwVUXx2
MuZ+l1ytitUfHCUuz6UIZwpzdsvGZtuF/R0IhdHjYU9SHb9iFW/GRiGJFppP4BXD
rXXAORIfzJ7lJSjN4imsISqOUIFXZBtJ0+fKVhMkZ0EZ9XWREEM3zq5K7ZwG6w0k
Qm0lcvD4dpA8rAxtUuqF6Kr+oWbwhuEax6urAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU+6jmahZ/49knws8XjsMJ1jd3SxwwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0Ly02am1haFpfNDlrbndzOFhqc01KMWpkM1N4dy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAS27BAwDQYJKoZIhvcNAQELBQADggEBAGBRYrX1Cb44UktdtFQ6riyhJezL
nDwKgVCaq+lJGcoLFoEmeiIcCsvJHT6CrD6ygsGp/SE9oJHFSwNwSGq1stpV1RnV
qO/twRqox1MLGynuy0IZAs848N5IREY9qqSoL3vd/cuhEwdTnYNQE6pdCI0gpIiW
QJa7DxKxo9FdPw6vilAIu7UgZRj59ci7HgitRMftyEpvwFwGAQT6U0dyLvDJoINC
fQyY8G+El5QIMsNgy6MomNJvVZCrtMAchsvmNJLwQ1lq4B+tPS+OUvRa3T2aEj9L
HuLI7auIT5d/2RHZVSRzsJztTgvqOO1sVLsh2ZVAesjBdYVUcNjZHclc0uM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org