Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/RKf3W-450XrJsYbn6Fa3oePGO2w.roa
File:                     RKf3W-450XrJsYbn6Fa3oePGO2w.roa (raw, json)
Hash identifier:          xoxSkgauqTcJFx2YCM3IbBv+8oAu/CQ6RjEwxWEdoEw=
Subject key identifier:   44:A7:F7:5B:EE:39:D1:7A:C9:B1:86:E7:E8:56:B7:A1:E3:C6:3B:6C
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       018B
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/RKf3W-450XrJsYbn6Fa3oePGO2w.roa
Signing time:             Sun 01 Oct 2023 01:34:34 +0000
ROA not before:           Sun 01 Oct 2023 01:34:34 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        114.198.224.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Sat 31 Aug 2024 01:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395 (0x18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:34:34 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=44A7F75BEE39D17AC9B186E7E856B7A1E3C63B6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:92:cf:51:46:2a:41:29:1b:96:67:6b:eb:65:
                    c1:e2:c1:06:b6:1f:b5:da:8a:7d:8c:28:a3:64:e8:
                    de:1c:6a:33:d5:ba:d6:8f:cb:30:f9:08:bb:c7:e4:
                    d6:51:a9:a4:f0:2e:96:aa:80:15:7e:93:dd:7d:3a:
                    fa:cd:6d:ee:32:9d:71:c3:2b:3c:0c:76:7d:db:fc:
                    79:a6:35:e7:87:61:3a:19:96:5b:aa:73:d2:eb:90:
                    4a:56:6c:a6:3d:c5:fe:db:3e:6a:e1:ec:7d:4e:61:
                    e2:2b:dd:aa:e0:06:df:42:87:03:b6:7a:2f:da:ac:
                    e7:94:3e:9e:82:d1:b1:fd:29:95:ef:b2:b9:01:0d:
                    04:6e:b6:7f:b1:fa:41:56:21:d7:a6:4f:8f:79:54:
                    72:c9:af:1b:36:89:bf:37:96:c2:ca:41:7e:68:db:
                    13:36:e1:c3:32:c0:02:38:63:aa:f6:3c:05:33:1f:
                    7e:88:57:4e:09:ea:43:9e:94:29:07:56:fc:64:db:
                    af:86:ac:84:a5:33:91:05:4d:85:bb:2e:29:83:93:
                    63:89:81:97:0a:7f:f4:8d:da:15:21:41:99:af:45:
                    55:e3:82:81:87:38:77:3e:6b:90:6c:7d:a3:18:a8:
                    dc:89:68:db:c9:3c:b1:fe:ff:82:3d:7a:6a:77:b1:
                    f1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A7:F7:5B:EE:39:D1:7A:C9:B1:86:E7:E8:56:B7:A1:E3:C6:3B:6C
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/RKf3W-450XrJsYbn6Fa3oePGO2w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.198.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:18:e0:74:6d:89:dc:5b:c1:2b:b9:5d:36:3e:e9:54:d7:b5:
         4e:4e:72:17:7f:09:44:09:72:8a:8f:4e:51:ce:06:2a:22:ed:
         70:4c:a0:6b:a1:47:4c:b4:e9:25:da:fa:68:ac:9c:12:81:04:
         79:18:bd:ce:aa:a4:1b:12:84:6e:e2:79:bc:9c:8e:fb:6d:7c:
         a8:58:9c:d2:b2:b2:60:7c:6f:ca:25:b2:28:76:58:fc:80:c3:
         b3:1c:82:90:05:b8:cb:13:ce:48:ee:6d:19:92:91:2f:41:bf:
         31:f3:3b:4d:b6:76:41:c6:18:e0:9b:f5:f5:6a:dc:95:cc:05:
         21:e0:7b:68:0a:ee:bd:af:47:f1:af:50:72:19:06:03:5c:c1:
         f6:56:8d:5f:e7:e3:c2:25:b4:b3:e4:09:9c:37:f7:16:28:44:
         68:e5:30:06:7e:6a:4b:78:05:f4:b3:c2:1c:75:f5:7c:ab:e3:
         da:c5:26:42:62:a6:7d:fb:39:d0:9a:c0:7c:e6:21:c0:78:ae:
         3b:0e:83:2a:6a:4b:83:27:fa:df:4f:e7:22:17:1c:f2:be:61:
         44:b1:5e:2b:69:6d:30:14:03:4b:94:66:a9:d0:13:53:73:2f:
         7e:4f:2d:2d:d4:69:06:f0:ef:74:76:01:10:cd:e7:f1:21:ff:
         dd:57:2b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 04:11:55 2024 by rpki-client on console-ams.rpki-client.org