Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/9yEbpXHcOIsD4xNpPdB4ge-L3-0.roa
File:                     9yEbpXHcOIsD4xNpPdB4ge-L3-0.roa (raw, json)
Hash identifier:          EanWUC5WMO0lQxfEUdNvT7htEI/GTov6jwjd+duAgH0=
Subject key identifier:   F7:21:1B:A5:71:DC:38:8B:03:E3:13:69:3D:D0:78:81:EF:8B:DF:ED
Certificate issuer:       /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial:       4B
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/9yEbpXHcOIsD4xNpPdB4ge-L3-0.roa
Signing time:             Fri 01 Sep 2023 01:29:48 +0000
ROA not before:           Fri 01 Sep 2023 01:29:48 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     131896
IP address blocks:        103.239.16.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 01:28:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
        Validity
            Not Before: Sep  1 01:29:48 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=F7211BA571DC388B03E313693DD07881EF8BDFED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1e:cf:be:16:50:64:c2:00:e7:16:56:7f:f8:
                    4e:8f:6c:d4:7f:a2:47:67:7c:f9:73:fa:e3:ad:16:
                    eb:93:ab:14:45:e2:a8:8e:3e:bb:6d:47:cf:99:80:
                    e9:46:ce:bf:41:16:bd:24:fe:16:c1:7c:40:9b:e4:
                    88:e4:73:2c:8f:d4:77:dc:e0:87:34:93:61:34:47:
                    a6:13:b4:72:39:44:70:c3:55:6f:76:5a:ce:f2:9f:
                    e2:29:d6:0b:45:33:5b:e4:2d:6b:37:a6:52:3e:29:
                    5c:de:5b:20:d1:ec:2a:2c:2b:a5:ec:79:60:63:1f:
                    91:1d:96:86:43:72:09:37:33:8f:ed:f0:f6:dd:c9:
                    f4:b1:26:12:61:67:22:d4:bb:f7:10:cc:40:d9:55:
                    f8:2e:96:4a:b6:c4:22:c6:47:6c:09:36:6a:b8:3e:
                    2b:e4:d7:db:8a:dd:24:08:24:06:e3:32:c0:54:11:
                    5c:d8:b1:1b:ef:d1:d4:da:ad:cf:4a:c2:eb:93:57:
                    97:6f:de:c0:57:e4:1a:e6:8f:cc:bb:12:b1:b0:37:
                    79:08:53:cc:25:e4:50:5d:2f:b3:60:dd:f1:8b:cb:
                    15:9a:8c:59:4c:0e:6b:8a:a1:df:03:f3:d2:3e:a4:
                    e7:94:69:b6:be:f7:62:66:c8:49:9e:43:d0:77:8f:
                    3a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:21:1B:A5:71:DC:38:8B:03:E3:13:69:3D:D0:78:81:EF:8B:DF:ED
            X509v3 Authority Key Identifier:
                keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/9yEbpXHcOIsD4xNpPdB4ge-L3-0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:b8:7d:57:42:20:10:36:ca:de:50:73:01:ac:7a:ea:e5:0c:
         5b:82:4f:2a:c9:3a:ef:2f:5a:e1:1f:e1:d5:43:e6:66:0c:64:
         7c:ab:f2:83:ec:e3:2d:b2:0a:52:32:f9:2d:f9:87:a0:a3:d6:
         5e:c2:cd:04:7f:58:20:91:ac:05:a8:83:8f:27:fe:d9:51:14:
         27:aa:94:5f:ab:75:9c:e0:10:6a:93:58:b6:3b:87:eb:70:93:
         9f:7b:2e:d0:8b:3e:1d:e9:97:31:9c:8a:d3:dc:c7:fb:1b:b1:
         a1:97:1d:c8:23:3c:5a:12:e2:35:b4:fc:e1:56:0a:13:9c:86:
         66:f5:43:a2:e8:b5:e5:07:c9:a4:d6:f8:5d:57:43:42:a2:5e:
         0e:cc:bf:b3:bb:cb:1d:9f:a1:8c:ca:7e:64:49:b9:9a:a3:fd:
         f7:e1:3b:8f:df:2d:90:80:13:16:d7:21:69:99:9f:1c:5f:cc:
         9b:09:7b:41:8e:65:8f:bd:cc:2a:86:f8:c9:bf:fa:93:39:fa:
         67:01:9d:80:84:2f:99:b3:6e:41:ac:97:66:fb:f8:20:6f:2f:
         a4:28:c2:1f:41:a2:77:ca:dc:be:44:d4:e9:c1:27:51:04:f7:
         2d:7b:6a:ac:46:fb:c5:ba:ec:45:c6:48:3a:08:cd:30:42:f1:
         c6:db:2c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 03:01:49 2024 by rpki-client on console-ams.rpki-client.org