Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/-f-o3fOl87RIuPJn3LK__DENlUY.roa
File:                     -f-o3fOl87RIuPJn3LK__DENlUY.roa (raw, json)
Hash identifier:          zZZPfBTstFAajs03QyiJ/Qjw4ATgtn+Jdg4Vl51P0ks=
Subject key identifier:   F9:FF:A8:DD:F3:A5:F3:B4:48:B8:F2:67:DC:B2:BF:FC:31:0D:95:46
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0172
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/-f-o3fOl87RIuPJn3LK__DENlUY.roa
Signing time:             Fri 07 Jul 2023 04:10:40 +0000
ROA not before:           Fri 07 Jul 2023 04:10:40 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        59.156.64.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:35:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:10:40 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=F9FFA8DDF3A5F3B448B8F267DCB2BFFC310D9546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:59:4d:4e:64:7d:34:6f:19:94:4a:6f:4a:6d:
                    52:07:6e:c8:a9:98:40:34:6c:67:dd:9e:e8:e9:88:
                    f0:5f:2b:ad:75:e8:15:28:3d:f2:c8:75:45:7e:c1:
                    51:ec:9a:09:9f:72:67:79:44:33:3c:bf:fd:23:3f:
                    4a:9c:80:9e:e1:75:96:fa:2b:ae:9a:95:54:2d:60:
                    0f:7e:a5:09:a7:93:ae:71:94:dd:db:a8:39:49:8f:
                    57:76:58:4c:58:97:c6:cc:cf:8c:f2:ca:52:cc:ac:
                    94:02:86:44:5f:3a:d7:2b:3d:4d:a0:6b:ea:a6:ce:
                    88:35:38:ec:b3:43:ba:ff:01:83:7e:38:35:df:30:
                    5f:b6:98:d4:c3:9f:7b:a3:39:95:52:fe:ea:e6:f0:
                    3b:6f:a2:f9:4c:8a:e8:23:88:34:5e:24:0f:55:03:
                    60:a5:c4:9c:ff:53:df:e5:73:83:42:43:0c:25:c5:
                    18:b5:10:5f:c9:52:46:b5:e2:03:70:a0:b4:33:88:
                    38:88:cb:dc:cc:e1:dd:fd:1b:ac:d7:73:35:57:12:
                    b8:89:5c:77:8f:f3:2f:ab:23:31:8d:a2:d0:8f:a8:
                    d1:b1:94:48:91:b2:1e:bf:77:c3:e1:af:e4:32:41:
                    3e:ba:9b:21:29:02:4c:b1:d0:af:a9:bd:4c:36:88:
                    6a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FF:A8:DD:F3:A5:F3:B4:48:B8:F2:67:DC:B2:BF:FC:31:0D:95:46
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/-f-o3fOl87RIuPJn3LK__DENlUY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.156.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         90:bc:78:16:69:89:d3:fb:ff:86:71:2b:a4:85:43:5e:20:bc:
         44:a2:a5:90:67:75:53:32:96:30:26:18:4d:8e:ca:0c:d6:47:
         52:db:cb:02:74:c7:73:e8:58:e0:29:c0:28:85:f3:8e:89:f0:
         91:5f:b0:5f:4c:c7:07:47:20:2b:61:cb:ff:fd:8e:8d:12:ae:
         80:1a:9d:1c:20:78:82:58:f2:2c:db:b0:7b:7e:00:31:96:62:
         44:9b:3b:78:c1:a1:1f:09:d8:9c:72:e7:36:61:aa:58:d7:cb:
         dd:df:33:99:c4:64:0e:c0:0d:7c:16:39:e1:48:ec:a9:76:8c:
         df:0b:2b:e6:00:0f:f0:d2:b8:b0:a9:38:32:d8:52:76:15:c8:
         b8:f3:e3:b7:02:89:6d:26:a6:13:74:b9:bd:c6:1c:c9:96:a5:
         21:f7:50:77:38:21:97:dc:0e:54:49:7c:73:a1:ae:67:70:8e:
         ad:b3:8e:d8:e9:d6:a7:ef:64:70:13:70:81:3c:a8:f4:d4:be:
         f8:b2:a0:a0:4b:9a:71:7b:01:68:e7:98:f1:54:c2:66:a3:8c:
         c4:21:f1:20:64:bc:02:75:f8:8e:d2:93:b3:85:03:f6:ad:fb:
         ba:79:67:89:d3:c0:02:b7:70:b1:06:3c:f8:95:e1:4e:ee:94:
         37:00:b2:f3
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDEwNDBaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEY5RkZBOERERjNBNUYz
QjQ0OEI4RjI2N0RDQjJCRkZDMzEwRDk1NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqWU1OZH00bxmUSm9KbVIHbsipmEA0bGfdnujpiPBfK6116BUo
PfLIdUV+wVHsmgmfcmd5RDM8v/0jP0qcgJ7hdZb6K66alVQtYA9+pQmnk65xlN3b
qDlJj1d2WExYl8bMz4zyylLMrJQChkRfOtcrPU2ga+qmzog1OOyzQ7r/AYN+ODXf
MF+2mNTDn3ujOZVS/urm8DtvovlMiugjiDReJA9VA2ClxJz/U9/lc4NCQwwlxRi1
EF/JUka14gNwoLQziDiIy9zM4d39G6zXczVXEriJXHeP8y+rIzGNotCPqNGxlEiR
sh6/d8Phr+QyQT66myEpAkyx0K+pvUw2iGqzAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU+f+o3fOl87RIuPJn3LK//DENlUYwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0Ly1mLW8zZk9sODdSSXVQSm4zTEtfX0RFTmxVWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAY7nEAwDQYJKoZIhvcNAQELBQADggEBAJC8eBZpidP7/4ZxK6SFQ14gvESi
pZBndVMyljAmGE2OygzWR1LbywJ0x3PoWOApwCiF846J8JFfsF9MxwdHICthy//9
jo0SroAanRwgeIJY8izbsHt+ADGWYkSbO3jBoR8J2Jxy5zZhqljXy93fM5nEZA7A
DXwWOeFI7Kl2jN8LK+YAD/DSuLCpODLYUnYVyLjz47cCiW0mphN0ub3GHMmWpSH3
UHc4IZfcDlRJfHOhrmdwjq2zjtjp1qfvZHATcIE8qPTUvviyoKBLmnF7AWjnmPFU
wmajjMQh8SBkvAJ1+I7Sk7OFA/at+7p5Z4nTwAK3cLEGPPiV4U7ulDcAsvM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org