Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/fVvR4WedVPVfipjjRo95oRBEycQ.roa
File:                     fVvR4WedVPVfipjjRo95oRBEycQ.roa (raw, json)
Hash identifier:          OrokIQWhOmuvVobI5OhGvEauYPZrq8I1ukxOEibht44=
Subject key identifier:   7D:5B:D1:E1:67:9D:54:F5:5F:8A:98:E3:46:8F:79:A1:10:44:C9:C4
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       019D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/fVvR4WedVPVfipjjRo95oRBEycQ.roa
Signing time:             Fri 07 Jul 2023 04:12:44 +0000
ROA not before:           Fri 07 Jul 2023 04:12:44 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        119.150.192.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Fri 31 May 2024 01:39:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:12:44 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=7D5BD1E1679D54F55F8A98E3468F79A11044C9C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:05:da:41:29:49:b3:57:a2:fb:61:9d:32:c8:
                    28:ec:89:e7:70:ca:3e:6e:da:37:44:15:89:68:5d:
                    bb:bf:4a:62:24:e5:01:13:16:c1:87:47:b3:e7:4c:
                    0a:7d:ce:8e:b2:1f:7a:7d:5e:33:1f:6f:3a:f2:02:
                    5e:5b:1f:29:77:1f:95:1c:e7:e7:0f:cf:0d:0e:0c:
                    30:1b:c5:f6:94:4e:d9:76:87:ee:73:9b:ea:28:51:
                    71:3f:5d:23:2f:1b:59:23:2c:6e:46:31:78:66:75:
                    a4:33:c2:17:b8:32:9c:58:52:45:3f:bc:62:87:59:
                    ab:46:d3:a2:d3:55:5d:85:2f:57:5f:6f:ab:39:04:
                    16:68:b4:af:69:ff:98:3e:35:18:ab:30:09:3c:c5:
                    96:e4:c7:e1:f8:4b:99:03:54:32:ee:40:d0:d5:33:
                    32:62:57:c3:4f:02:9d:73:24:6e:eb:74:8c:5c:67:
                    15:6d:fb:c9:36:d1:25:db:3a:46:cc:9e:68:ec:1a:
                    a6:31:67:14:ee:bb:a4:a6:3c:14:76:9a:66:ad:fc:
                    c5:52:75:17:5c:45:58:fc:10:50:a3:ef:3b:d6:f9:
                    27:00:9f:be:84:8b:48:ad:06:1e:64:58:bf:83:17:
                    56:f1:b4:cf:1a:2f:39:d3:8b:f5:a9:c0:25:5e:53:
                    6e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5B:D1:E1:67:9D:54:F5:5F:8A:98:E3:46:8F:79:A1:10:44:C9:C4
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/fVvR4WedVPVfipjjRo95oRBEycQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.150.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9d:c8:95:1e:61:f5:20:6c:91:d4:8b:d7:75:bd:08:b6:96:33:
         92:a9:03:66:1b:41:24:e2:ce:0e:e9:65:8e:31:e5:0d:5a:42:
         a9:3d:48:6a:92:6d:14:e4:e2:aa:d3:63:10:f3:a9:40:da:30:
         aa:4a:fd:52:7a:3f:98:54:f7:e6:25:71:30:b7:7b:b1:41:38:
         81:52:20:c4:8b:1f:7c:de:02:6a:7b:7a:c0:a2:80:99:f4:53:
         ba:58:8a:ad:fe:9a:88:a1:28:55:ed:eb:91:e2:1b:c9:2c:24:
         e3:f2:2b:50:be:8d:fc:3d:cb:d9:29:2e:a4:42:96:a4:ee:75:
         94:eb:0f:2c:4c:7f:f0:62:8a:04:36:39:af:50:1a:12:55:2f:
         13:e7:0e:74:25:0b:25:4e:d8:a4:2a:21:cf:84:94:cb:5d:56:
         51:ec:4c:97:06:7e:5b:ca:61:55:49:fa:d6:f3:b2:3c:a4:3d:
         02:3f:5f:0a:a0:5f:ed:5e:ff:e0:53:75:b7:3a:df:6f:2b:2c:
         81:75:95:5c:ed:da:62:32:cc:d0:a7:f6:e9:ff:8c:64:9f:14:
         0c:a9:a9:a7:88:91:b4:ea:0a:e7:92:43:4b:ec:12:b2:af:9b:
         a9:cd:f5:b0:dd:c9:26:c3:63:71:e8:51:4b:65:c2:f3:19:23:
         a8:54:0c:d7
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAZ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDEyNDRaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDdENUJEMUUxNjc5RDU0
RjU1RjhBOThFMzQ2OEY3OUExMTA0NEM5QzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYBdpBKUmzV6L7YZ0yyCjsiedwyj5u2jdEFYloXbu/SmIk5QET
FsGHR7PnTAp9zo6yH3p9XjMfbzryAl5bHyl3H5Uc5+cPzw0ODDAbxfaUTtl2h+5z
m+ooUXE/XSMvG1kjLG5GMXhmdaQzwhe4MpxYUkU/vGKHWatG06LTVV2FL1dfb6s5
BBZotK9p/5g+NRirMAk8xZbkx+H4S5kDVDLuQNDVMzJiV8NPAp1zJG7rdIxcZxVt
+8k20SXbOkbMnmjsGqYxZxTuu6SmPBR2mmat/MVSdRdcRVj8EFCj7zvW+ScAn76E
i0itBh5kWL+DF1bxtM8aLznTi/WpwCVeU25rAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUfVvR4WedVPVfipjjRo95oRBEycQwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L2ZWdlI0V2VkVlBWZmlwampSbzk1b1JCRXljUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAN3lsAwDQYJKoZIhvcNAQELBQADggEBAJ3IlR5h9SBskdSL13W9CLaWM5Kp
A2YbQSTizg7pZY4x5Q1aQqk9SGqSbRTk4qrTYxDzqUDaMKpK/VJ6P5hU9+YlcTC3
e7FBOIFSIMSLH3zeAmp7esCigJn0U7pYiq3+moihKFXt65HiG8ksJOPyK1C+jfw9
y9kpLqRClqTudZTrDyxMf/BiigQ2Oa9QGhJVLxPnDnQlCyVO2KQqIc+ElMtdVlHs
TJcGflvKYVVJ+tbzsjykPQI/XwqgX+1e/+BTdbc6328rLIF1lVzt2mIyzNCn9un/
jGSfFAypqaeIkbTqCueSQ0vsErKvm6nN9bDdySbDY3HoUUtlwvMZI6hUDNc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:53 2024 by rpki-client on console-fra.rpki-client.org