Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/rvNGKcbWPQu-_uQVnpooCcYKFKc.roa
File:                     rvNGKcbWPQu-_uQVnpooCcYKFKc.roa (raw, json)
Hash identifier:          L8BoS7MQDx9uR53vwMMNE0jb75plfVhL00Z+tf/QvHY=
Subject key identifier:   AE:F3:46:29:C6:D6:3D:0B:BE:FE:E4:15:9E:9A:28:09:C6:0A:14:A7
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       F7
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/rvNGKcbWPQu-_uQVnpooCcYKFKc.roa
Signing time:             Fri 01 Dec 2023 01:29:46 +0000
ROA not before:           Fri 01 Dec 2023 01:29:46 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     10021
IP address blocks:        114.31.88.0/21 maxlen: 32

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 01:30:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Dec  1 01:29:46 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=AEF34629C6D63D0BBEFEE4159E9A2809C60A14A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:91:c4:86:41:c5:90:c0:b0:81:d6:fb:93:0c:
                    90:08:25:ed:11:b7:a3:6b:f0:a6:cb:19:87:0d:e4:
                    47:6b:c2:6b:96:7c:df:b8:37:30:d9:9e:27:fd:49:
                    51:c3:ac:92:ac:c5:52:aa:a0:37:3c:48:e3:c2:e2:
                    90:48:68:ba:49:71:ed:28:fd:5b:fc:c6:9d:99:e9:
                    2d:65:a9:36:aa:cd:ad:e4:26:11:e3:b8:6f:4c:06:
                    aa:95:38:6c:a3:04:fe:2b:18:d6:c9:ef:81:04:d0:
                    ca:06:28:8d:79:51:39:ee:a8:01:4e:1e:7a:4d:25:
                    7b:d6:d0:ea:6e:e4:1c:9a:60:21:04:8a:ca:d6:41:
                    22:eb:61:eb:3c:bb:fc:3e:7f:2f:97:2c:7c:1b:b3:
                    53:1c:4a:20:90:1d:69:48:39:aa:f2:6b:86:0f:e9:
                    71:9d:2c:bd:db:de:64:de:4d:b8:aa:d9:0f:e8:12:
                    0a:55:ec:19:51:2b:cb:36:6d:97:94:dd:59:16:d7:
                    a8:f4:99:0f:e9:75:2d:8f:70:77:8a:d3:f3:3d:8a:
                    d2:72:fd:92:ca:5a:6a:6a:14:e3:bd:a9:a0:ed:71:
                    b3:90:7a:4f:e8:17:c9:6d:57:b7:c0:bd:3c:fa:b1:
                    57:2a:ba:61:72:69:4b:5d:ab:dc:7e:56:0f:5a:60:
                    43:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F3:46:29:C6:D6:3D:0B:BE:FE:E4:15:9E:9A:28:09:C6:0A:14:A7
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/rvNGKcbWPQu-_uQVnpooCcYKFKc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.31.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         61:77:44:b8:19:14:69:be:68:5a:86:58:31:42:ce:f1:e3:cd:
         31:3a:65:58:05:d5:46:fd:a3:3b:f0:6b:6c:87:d8:2a:c7:cc:
         21:4b:a6:bd:4a:ea:77:9d:6b:da:1e:ba:d9:fd:d9:41:b2:c2:
         b9:6b:89:44:3b:64:e7:5e:cb:f2:77:fa:66:0e:b7:bd:b2:3f:
         20:8c:5c:a7:34:a7:b6:8f:12:2f:95:54:2a:c4:1a:00:50:bc:
         78:ef:71:80:81:2a:ad:26:2f:27:eb:88:e3:ff:2c:9c:9a:6e:
         a2:61:c4:56:47:5a:b9:50:66:87:e0:1d:39:09:c1:36:36:5d:
         87:7a:66:a7:c2:ec:2d:28:ec:58:aa:b4:e7:65:be:3d:1b:b2:
         8e:1e:44:5b:15:c4:6a:71:39:cb:94:65:77:f4:d1:5a:10:bd:
         b5:97:b8:99:c6:4c:20:ac:35:bd:01:a2:90:e2:56:c4:e6:d2:
         03:2b:28:10:f6:d1:30:c5:25:b6:bb:ce:0e:8f:d7:41:36:7e:
         63:1f:1b:08:23:e0:cc:7d:e4:0f:ea:dd:d8:be:97:a2:61:33:
         e6:2f:38:fb:cc:af:c2:26:d1:1c:6c:a4:73:ce:0a:7e:4b:9a:
         73:6b:46:f7:0f:ee:04:82:4c:35:1c:c9:68:6d:bf:f8:54:16:
         ac:c9:bd:52
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2
MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yMzEyMDEw
MTI5NDZaFw0yNDExMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEFFRjM0NjI5QzZENjNE
MEJCRUZFRTQxNTlFOUEyODA5QzYwQTE0QTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXkcSGQcWQwLCB1vuTDJAIJe0Rt6Nr8KbLGYcN5EdrwmuWfN+4
NzDZnif9SVHDrJKsxVKqoDc8SOPC4pBIaLpJce0o/Vv8xp2Z6S1lqTaqza3kJhHj
uG9MBqqVOGyjBP4rGNbJ74EE0MoGKI15UTnuqAFOHnpNJXvW0Opu5ByaYCEEisrW
QSLrYes8u/w+fy+XLHwbs1McSiCQHWlIOarya4YP6XGdLL3b3mTeTbiq2Q/oEgpV
7BlRK8s2bZeU3VkW16j0mQ/pdS2PcHeK0/M9itJy/ZLKWmpqFOO9qaDtcbOQek/o
F8ltV7fAvTz6sVcqumFyaUtdq9x+Vg9aYEPXAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUrvNGKcbWPQu+/uQVnpooCcYKFKcwHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs
UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0
Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNDY5L3J2TkdLY2JXUFF1LV91UVZucG9vQ2NZS0ZLYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANyH1gwDQYJKoZIhvcNAQELBQADggEBAGF3RLgZFGm+aFqGWDFCzvHjzTE6
ZVgF1Ub9ozvwa2yH2CrHzCFLpr1K6neda9oeutn92UGywrlriUQ7ZOdey/J3+mYO
t72yPyCMXKc0p7aPEi+VVCrEGgBQvHjvcYCBKq0mLyfriOP/LJyabqJhxFZHWrlQ
ZofgHTkJwTY2XYd6ZqfC7C0o7FiqtOdlvj0bso4eRFsVxGpxOcuUZXf00VoQvbWX
uJnGTCCsNb0BopDiVsTm0gMrKBD20TDFJba7zg6P10E2fmMfGwgj4Mx95A/q3di+
l6JhM+YvOPvMr8Im0RxspHPOCn5LmnNrRvcP7gSCTDUcyWhtv/hUFqzJvVI=
-----END CERTIFICATE-----
Generated at Thu Oct 31 03:53:35 2024 by rpki-client on console-fra.rpki-client.org