Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/nqv0VNpB6xMZGvA1iKoT0Lkstb8.roa
File:                     nqv0VNpB6xMZGvA1iKoT0Lkstb8.roa (raw, json)
Hash identifier:          yIo8xTexTTvR90Vo9qtQy693uaWn8EUDBgFIymzPWsE=
Subject key identifier:   9E:AB:F4:54:DA:41:EB:13:19:1A:F0:35:88:AA:13:D0:B9:2C:B5:BF
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       32
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/nqv0VNpB6xMZGvA1iKoT0Lkstb8.roa
Signing time:             Fri 29 Sep 2023 06:36:58 +0000
ROA not before:           Fri 29 Sep 2023 06:36:58 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     10000
IP address blocks:        202.169.80.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:31:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Sep 29 06:36:58 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=9EABF454DA41EB13191AF03588AA13D0B92CB5BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:20:af:19:16:4e:0b:33:4a:51:4b:b5:a4:6e:
                    b0:b6:f3:d4:71:36:39:0e:59:17:77:a1:1c:e4:e8:
                    3f:8c:bf:27:c1:8d:17:52:80:08:13:19:d1:d8:93:
                    4d:12:14:c5:18:99:3f:be:20:88:08:4d:40:57:eb:
                    7b:cb:80:3c:ee:13:c2:b3:b0:fb:f8:55:a1:70:cd:
                    82:cf:3e:9d:6d:46:7a:c5:be:25:6a:bd:c0:65:0e:
                    9a:75:86:c9:5b:ef:6f:e8:e4:d6:59:9f:fd:6b:c0:
                    e7:75:73:99:42:0c:9a:e3:0e:ae:dd:b9:8e:46:e2:
                    03:66:9b:3b:94:2b:51:19:d9:bb:f3:28:e4:8d:f1:
                    b2:37:9e:b4:6e:44:d5:29:94:cd:bc:ee:6a:8c:04:
                    0d:e3:c8:5a:52:94:92:cf:d8:0e:38:03:40:97:a7:
                    d9:70:74:ad:52:f1:8b:53:f1:ec:5d:d9:d0:31:e3:
                    63:eb:90:8a:2f:c9:cc:03:d8:bd:a8:bd:22:a0:c3:
                    ce:97:cf:b4:af:8f:e2:97:0d:7f:8f:d1:b2:0e:eb:
                    ce:89:73:eb:58:7c:a6:52:ec:88:5f:a3:7c:85:61:
                    71:c8:ae:c0:91:5b:d5:c2:c9:3d:fc:6d:6c:2c:f9:
                    61:f2:6b:fa:d7:e9:5f:34:cf:da:35:2c:23:94:61:
                    e6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AB:F4:54:DA:41:EB:13:19:1A:F0:35:88:AA:13:D0:B9:2C:B5:BF
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/nqv0VNpB6xMZGvA1iKoT0Lkstb8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         00:de:f9:d5:a9:ba:97:ee:17:7d:27:64:42:03:99:55:86:22:
         7a:09:e7:08:b9:68:2d:84:d5:3c:bc:97:f0:c5:a7:0c:6e:de:
         9d:20:fd:8b:73:07:81:ab:bb:fb:75:52:59:be:0c:f4:de:cc:
         5d:94:e6:49:55:6d:74:19:a1:0f:a6:86:5b:78:84:db:0e:ab:
         3f:35:36:99:cd:55:11:cf:9f:71:9e:f4:e1:13:ec:4d:6c:a0:
         56:b7:bd:f7:9c:ed:9c:38:b0:00:59:33:0d:d2:98:75:ae:0d:
         44:2d:fc:04:27:f1:af:cb:7f:7b:10:8f:01:2b:d5:fe:9b:46:
         a1:92:a5:00:d0:c9:24:4e:5d:7f:5f:31:e7:0f:70:86:84:25:
         35:8f:64:0c:be:90:8b:7b:96:48:e5:50:01:ce:6e:ac:1e:0a:
         88:cf:f0:dd:b5:04:c9:f8:93:9a:45:33:b1:4c:f7:3c:e7:f9:
         1f:d6:93:48:a5:41:68:1b:29:cb:5a:62:7a:46:8d:ff:0b:ea:
         fd:a7:66:58:9b:cd:3f:c5:42:37:e4:a5:12:ab:ad:eb:aa:19:
         66:1e:4b:6f:4c:d6:03:6c:92:5d:f5:e8:48:54:ab:8d:d6:98:
         51:d4:a9:b8:16:e0:48:71:69:27:d0:1a:b0:e1:e4:86:9f:85:
         40:d0:f1:3d
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRDQ3
NDFGMDM0OUZCQzE1QTcwOEUyOEEyQ0UzMDc5MDZDQUM1REUwMB4XDTIzMDkyOTA2
MzY1OFoXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoOUVBQkY0NTREQTQxRUIx
MzE5MUFGMDM1ODhBQTEzRDBCOTJDQjVCRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL8grxkWTgszSlFLtaRusLbz1HE2OQ5ZF3ehHOToP4y/J8GNF1KA
CBMZ0diTTRIUxRiZP74giAhNQFfre8uAPO4TwrOw+/hVoXDNgs8+nW1GesW+JWq9
wGUOmnWGyVvvb+jk1lmf/WvA53VzmUIMmuMOrt25jkbiA2abO5QrURnZu/Mo5I3x
sjeetG5E1SmUzbzuaowEDePIWlKUks/YDjgDQJen2XB0rVLxi1Px7F3Z0DHjY+uQ
ii/JzAPYvai9IqDDzpfPtK+P4pcNf4/Rsg7rzolz61h8plLsiF+jfIVhcciuwJFb
1cLJPfxtbCz5YfJr+tfpXzTP2jUsI5Rh5i0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSeq/RU2kHrExka8DWIqhPQuSy1vzAfBgNVHSMEGDAWgBStR0HwNJ+8FacI4oos
4weQbKxd4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDU0L3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5c1hlQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5
c1hlQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NTQvbnF2MFZOcEI2eE1aR3ZBMWlLb1QwTGtzdGI4LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBMqpUDANBgkqhkiG9w0BAQsFAAOCAQEAAN751am6l+4XfSdkQgOZVYYiegnn
CLloLYTVPLyX8MWnDG7enSD9i3MHgau7+3VSWb4M9N7MXZTmSVVtdBmhD6aGW3iE
2w6rPzU2mc1VEc+fcZ704RPsTWygVre995ztnDiwAFkzDdKYda4NRC38BCfxr8t/
exCPASvV/ptGoZKlANDJJE5df18x5w9whoQlNY9kDL6Qi3uWSOVQAc5urB4KiM/w
3bUEyfiTmkUzsUz3POf5H9aTSKVBaBspy1piekaN/wvq/admWJvNP8VCN+SlEqut
66oZZh5Lb0zWA2ySXfXoSFSrjdaYUdSpuBbgSHFpJ9AasOHkhp+FQNDxPQ==
-----END CERTIFICATE-----
Generated at Sat Aug 31 04:06:43 2024 by rpki-client on console-fra.rpki-client.org