Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/3_sWsr4a9jQBrBNxsCEkiMHk3m4.roa
File:                     3_sWsr4a9jQBrBNxsCEkiMHk3m4.roa (raw, json)
Hash identifier:          SC/5BEFVM0yAQxWyKXEwUnZr4CiO9I0MnD65x7bAFc4=
Subject key identifier:   DF:FB:16:B2:BE:1A:F6:34:01:AC:13:71:B0:21:24:88:C1:E4:DE:6E
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0189
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/3_sWsr4a9jQBrBNxsCEkiMHk3m4.roa
Signing time:             Fri 07 Jul 2023 04:12:33 +0000
ROA not before:           Fri 07 Jul 2023 04:12:33 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        110.0.0.0/15 maxlen: 15

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:12:33 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=DFFB16B2BE1AF63401AC1371B0212488C1E4DE6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6d:76:c8:ab:36:8a:a0:d4:22:47:57:8d:74:
                    ab:aa:9f:87:44:9d:f1:9b:d1:97:07:76:59:ed:49:
                    0c:ef:57:b4:0d:b1:1d:4f:3b:11:b7:2c:e4:cc:c0:
                    3e:ca:8c:56:06:15:ef:85:10:92:21:37:e4:27:88:
                    4f:da:1e:d7:d6:c1:58:fb:1e:37:92:3d:66:2d:57:
                    c7:66:73:a4:41:2f:67:97:12:d6:02:26:10:58:34:
                    d6:98:50:85:9f:cc:55:2b:5d:f8:d8:83:53:7e:64:
                    48:42:7f:89:1c:11:75:ff:8b:ee:1b:db:47:54:31:
                    ec:31:72:b0:9a:75:46:4b:d5:97:60:12:c6:98:6f:
                    d6:c0:bc:6c:98:14:79:14:26:f2:f2:33:b3:ce:3d:
                    a4:9a:54:fc:fc:39:d5:d2:ca:24:8b:da:10:88:c0:
                    c1:4c:b3:9f:1e:1c:65:bf:ff:8e:b9:f0:b5:39:ee:
                    6d:e1:5e:4b:ac:82:17:59:ca:5d:24:59:13:3c:9e:
                    4b:d7:02:47:e8:f0:c2:e6:48:09:db:1d:3b:cf:7d:
                    fa:cb:c9:96:c1:97:da:2e:35:03:af:d6:d9:a1:30:
                    87:d3:db:70:b4:d2:b9:6b:20:82:f8:5d:1c:68:f8:
                    22:b8:4c:58:ba:a6:cb:4f:c7:e2:21:8a:20:8f:96:
                    7d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FB:16:B2:BE:1A:F6:34:01:AC:13:71:B0:21:24:88:C1:E4:DE:6E
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/3_sWsr4a9jQBrBNxsCEkiMHk3m4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.0.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         7b:e0:57:c0:66:23:b4:37:57:31:a8:d0:96:23:29:e7:e3:1d:
         bd:9a:e6:59:95:b7:2d:6d:34:da:41:fb:41:9e:4e:29:35:5b:
         24:b8:05:28:45:54:5d:de:a6:d0:03:e0:32:ca:c7:0b:e7:d7:
         d9:c4:41:58:3c:09:70:9e:05:99:76:9a:13:c0:21:ad:2b:2e:
         94:3b:ac:c9:44:7e:6a:e1:38:c6:e1:6e:98:1c:9b:42:cf:a3:
         ef:c0:a8:5b:62:2f:d8:52:d4:0a:0c:5e:87:72:51:42:ba:a3:
         ab:40:4e:db:95:d7:85:6c:c2:1c:c4:70:46:62:4c:2b:03:c9:
         8a:97:1a:2d:9e:bf:53:c0:22:75:81:4a:9c:25:1c:3a:ab:16:
         e2:3e:a5:d8:c9:f7:10:c0:6b:b9:fa:77:8c:1e:23:c6:e2:5f:
         38:30:e3:3a:38:9d:3e:d6:1c:d4:27:65:7b:6e:46:09:48:d7:
         27:24:aa:8a:52:cd:4b:b9:f3:86:48:eb:51:c7:25:fb:67:c2:
         9d:2d:b5:19:96:f2:49:29:85:ea:4e:29:ff:b9:6a:81:5d:5b:
         46:62:84:38:53:7a:b3:52:0c:b1:1e:8d:a9:30:f6:07:91:50:
         15:0b:a9:bb:9b:e1:44:0b:ef:a7:d7:e0:3e:14:71:a0:19:d6:
         3d:53:f0:83
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDEyMzNaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKERGRkIxNkIyQkUxQUY2
MzQwMUFDMTM3MUIwMjEyNDg4QzFFNERFNkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXbXbIqzaKoNQiR1eNdKuqn4dEnfGb0ZcHdlntSQzvV7QNsR1P
OxG3LOTMwD7KjFYGFe+FEJIhN+QniE/aHtfWwVj7HjeSPWYtV8dmc6RBL2eXEtYC
JhBYNNaYUIWfzFUrXfjYg1N+ZEhCf4kcEXX/i+4b20dUMewxcrCadUZL1ZdgEsaY
b9bAvGyYFHkUJvLyM7POPaSaVPz8OdXSyiSL2hCIwMFMs58eHGW//4658LU57m3h
XkusghdZyl0kWRM8nkvXAkfo8MLmSAnbHTvPffrLyZbBl9ouNQOv1tmhMIfT23C0
0rlrIIL4XRxo+CK4TFi6pstPx+IhiiCPln2TAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQU3/sWsr4a9jQBrBNxsCEkiMHk3m4wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0LzNfc1dzcjRhOWpRQnJCTnhzQ0VraU1IazNtNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwFuADANBgkqhkiG9w0BAQsFAAOCAQEAe+BXwGYjtDdXMajQliMp5+MdvZrm
WZW3LW002kH7QZ5OKTVbJLgFKEVUXd6m0APgMsrHC+fX2cRBWDwJcJ4FmXaaE8Ah
rSsulDusyUR+auE4xuFumBybQs+j78CoW2Iv2FLUCgxeh3JRQrqjq0BO25XXhWzC
HMRwRmJMKwPJipcaLZ6/U8AidYFKnCUcOqsW4j6l2Mn3EMBrufp3jB4jxuJfODDj
OjidPtYc1Cdle25GCUjXJySqilLNS7nzhkjrUccl+2fCnS21GZbySSmF6k4p/7lq
gV1bRmKEOFN6s1IMsR6NqTD2B5FQFQupu5vhRAvvp9fgPhRxoBnWPVPwgw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:03 2024 by rpki-client on console-ams.rpki-client.org