Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/aD2QkOlWwco93y-oa6fqVa9IE5s.roa
File:                     aD2QkOlWwco93y-oa6fqVa9IE5s.roa (raw, json)
Hash identifier:          1145/jLUPe6zQ70WzVEUaM8FlAsG7KoWeX/y10cxyH4=
Subject key identifier:   68:3D:90:90:E9:56:C1:CA:3D:DF:2F:A8:6B:A7:EA:55:AF:48:13:9B
Certificate issuer:       /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial:       51
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/aD2QkOlWwco93y-oa6fqVa9IE5s.roa
Signing time:             Wed 01 Nov 2023 01:30:12 +0000
ROA not before:           Wed 01 Nov 2023 01:30:12 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     131896
IP address blocks:        103.198.111.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 01:30:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
        Validity
            Not Before: Nov  1 01:30:12 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=683D9090E956C1CA3DDF2FA86BA7EA55AF48139B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:78:69:9e:fb:cf:5c:b5:c4:aa:d8:c8:fe:d8:
                    6b:5c:e9:66:86:2a:c3:7a:e3:30:a5:1b:ed:fa:49:
                    bc:ac:a0:f8:51:06:f6:f4:e3:1b:dd:4e:a0:47:7c:
                    40:93:f0:d6:e9:7f:62:38:fa:81:ba:b3:11:32:dd:
                    c1:fc:c4:6a:de:43:c8:99:54:ab:ca:96:20:63:4f:
                    08:6e:94:45:45:38:8b:a7:d5:88:13:07:23:3b:ec:
                    69:7e:b9:cf:18:d6:20:dc:c3:6f:05:8a:63:25:ef:
                    fe:09:33:79:e5:a4:ca:e2:84:a9:97:9b:34:78:6b:
                    dd:42:cf:91:08:7c:ef:f8:c8:03:2b:7b:93:ad:12:
                    67:33:80:48:75:dc:35:d3:9e:b0:29:87:0e:3e:61:
                    00:d1:11:43:14:1f:75:e3:e7:7b:bb:2f:93:13:c4:
                    5f:e5:12:f9:c1:e3:43:39:69:87:b4:ba:d6:a0:f1:
                    09:32:09:4e:5a:1f:5f:f8:c7:91:11:51:5e:24:81:
                    bc:9b:ed:36:15:77:3e:5f:45:70:42:66:bf:52:e7:
                    f6:c8:e7:8b:b7:35:81:77:ff:b1:8d:71:77:05:3c:
                    4e:f5:e0:83:e9:18:b9:4b:9f:5d:fe:af:8f:a4:0e:
                    4a:68:c4:64:79:d3:5c:34:b7:09:da:4f:f0:04:40:
                    e7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3D:90:90:E9:56:C1:CA:3D:DF:2F:A8:6B:A7:EA:55:AF:48:13:9B
            X509v3 Authority Key Identifier:
                keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/aD2QkOlWwco93y-oa6fqVa9IE5s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:c4:88:a5:9a:9f:1c:4f:5e:4b:ea:b6:18:4e:3b:c1:5c:96:
         bf:a1:45:4c:81:12:b3:a0:9d:a6:81:c6:e9:8e:c1:df:96:2e:
         01:25:7d:f3:26:59:65:5d:f0:aa:4e:35:bb:9a:ca:75:50:1c:
         d6:26:3a:84:8b:ad:3f:51:c1:b7:d9:c4:4d:91:62:10:c9:52:
         6e:9e:bf:10:25:e8:b5:e9:50:94:e4:ed:8b:52:00:ec:83:cd:
         a3:57:24:1d:b6:ae:15:9a:ac:70:33:07:eb:e0:2b:71:e0:82:
         0e:3f:3a:13:16:f2:ac:cb:42:67:a7:50:de:83:64:90:11:8d:
         dd:29:8b:07:3b:e8:71:37:70:22:33:72:c8:20:52:43:b1:d9:
         27:af:ab:94:ea:99:44:d5:a7:d9:27:66:1c:23:99:15:53:ca:
         f0:fe:ce:0b:34:5c:b8:63:79:76:44:39:5a:21:8c:6b:fc:b5:
         ef:31:d2:4d:bd:01:1c:be:e6:85:15:23:6a:22:1d:97:57:c5:
         e7:72:d8:48:22:d3:13:5d:12:62:67:23:f1:96:3b:1f:da:39:
         a0:04:2f:14:62:43:1f:bd:36:66:14:a3:da:6b:53:14:00:c1:
         23:ed:fc:c2:da:9b:ff:08:5d:0a:d0:f7:fe:69:a0:2d:f8:cc:
         79:c2:1e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 03:16:01 2024 by rpki-client on console-fra.rpki-client.org