Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/KjVoLK8FBWsbFuc_v_Jm7eN2__g.roa
File:                     KjVoLK8FBWsbFuc_v_Jm7eN2__g.roa (raw, json)
Hash identifier:          yHs7jUljOyOp6S2T5VZSxFGTmQdMhkiadTqDjJ2e68s=
Subject key identifier:   2A:35:68:2C:AF:05:05:6B:1B:16:E7:3F:BF:F2:66:ED:E3:76:FF:F8
Certificate issuer:       /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial:       4C
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/KjVoLK8FBWsbFuc_v_Jm7eN2__g.roa
Signing time:             Thu 13 Apr 2023 09:54:17 +0000
ROA not before:           Thu 13 Apr 2023 09:54:17 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     37892
IP address blocks:        124.247.0.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:31:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
        Validity
            Not Before: Apr 13 09:54:17 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=2A35682CAF05056B1B16E73FBFF266EDE376FFF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d9:e8:cd:03:a3:26:9c:4d:d5:20:86:10:80:
                    67:78:0d:de:05:b3:fc:4f:d4:fd:51:fd:b1:10:1c:
                    85:b9:ca:c2:f2:b1:57:1d:14:f0:49:7b:cc:23:45:
                    ca:74:0b:c7:11:ca:b5:bc:ed:d2:bd:90:7b:66:f3:
                    5b:3b:a1:7f:61:20:32:9d:33:f6:2d:26:ae:3d:5d:
                    68:fc:09:e9:ad:0e:7a:9e:32:bd:14:66:0d:81:45:
                    9b:69:88:3f:8c:f6:23:85:4d:ed:dd:a2:37:35:3c:
                    64:47:08:5e:be:9c:5a:12:6f:49:a5:6d:24:41:82:
                    cc:1a:e4:81:de:55:cf:99:ac:6b:39:97:1d:f3:e5:
                    5f:85:d9:eb:ae:2a:98:15:3c:59:94:3d:4b:56:47:
                    80:88:18:45:f8:45:a2:ef:34:bf:ff:d8:22:9a:57:
                    ea:88:15:dc:00:b6:43:1c:f1:8b:43:93:b0:4d:f4:
                    d3:b0:7d:6f:ca:20:73:18:b1:b7:18:1f:be:32:d8:
                    03:e2:8d:0f:01:26:15:3f:1d:d4:d8:31:42:3d:98:
                    bc:6a:8c:d2:76:ef:5f:6a:d4:0b:63:40:9d:1c:11:
                    a0:70:8c:a1:ab:7b:17:5e:75:fb:f2:64:d3:6b:63:
                    43:cb:20:92:11:65:ed:95:82:66:c1:d6:14:3d:1e:
                    fa:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:35:68:2C:AF:05:05:6B:1B:16:E7:3F:BF:F2:66:ED:E3:76:FF:F8
            X509v3 Authority Key Identifier:
                keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/KjVoLK8FBWsbFuc_v_Jm7eN2__g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.247.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         91:24:08:9c:73:e2:78:f1:e1:0e:2c:c7:11:71:bb:b7:86:9d:
         48:e4:73:26:51:96:ae:01:74:38:0d:c0:33:57:3f:83:15:bd:
         e3:48:82:eb:f8:8f:6c:cd:09:8f:1a:e2:b8:e6:39:87:c8:09:
         12:b9:78:7d:01:02:c9:71:f7:e6:c9:b4:cc:23:be:b6:04:f4:
         d4:60:26:a5:5f:f9:f6:41:be:85:f4:08:af:be:4f:e0:84:28:
         e3:a2:50:fe:2d:bc:d6:25:f0:1f:5c:e0:dd:aa:f3:ea:7b:5b:
         cf:5a:93:24:be:b7:98:e1:5c:f5:4e:32:dc:39:50:46:5e:4c:
         7b:d1:40:c8:38:89:bb:08:e9:f7:8b:f3:39:b5:7a:14:c9:7d:
         c6:21:0d:27:5f:38:50:da:d1:44:29:27:aa:04:45:bb:d8:f8:
         3f:85:7a:56:76:7c:47:28:da:49:26:42:bc:40:91:1f:da:64:
         a4:16:f6:1c:07:0b:d7:61:46:5b:cd:b7:3b:50:0c:e0:57:70:
         73:48:de:a8:c0:a8:da:70:11:e3:65:fa:ce:ca:6f:0a:46:30:
         0c:62:b9:8c:99:b2:d3:11:34:47:09:e1:74:95:bf:41:3b:11:
         5d:5e:da:19:86:2f:05:0f:db:14:d7:11:f9:9f:ed:5e:99:ad:
         43:2d:70:57
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBTDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyQTRD
RkU5MDlDQTU4MzA3RTdDQTg3MzVBRjI0NUQ3MThEOTlGN0ZCMB4XDTIzMDQxMzA5
NTQxN1oXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoMkEzNTY4MkNBRjA1MDU2
QjFCMTZFNzNGQkZGMjY2RURFMzc2RkZGODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK3Z6M0DoyacTdUghhCAZ3gN3gWz/E/U/VH9sRAchbnKwvKxVx0U
8El7zCNFynQLxxHKtbzt0r2Qe2bzWzuhf2EgMp0z9i0mrj1daPwJ6a0Oep4yvRRm
DYFFm2mIP4z2I4VN7d2iNzU8ZEcIXr6cWhJvSaVtJEGCzBrkgd5Vz5msazmXHfPl
X4XZ664qmBU8WZQ9S1ZHgIgYRfhFou80v//YIppX6ogV3AC2Qxzxi0OTsE3007B9
b8ogcxixtxgfvjLYA+KNDwEmFT8d1NgxQj2YvGqM0nbvX2rUC2NAnRwRoHCMoat7
F151+/Jk02tjQ8sgkhFl7ZWCZsHWFD0e+p0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQqNWgsrwUFaxsW5z+/8mbt43b/+DAfBgNVHSMEGDAWgBQqTP6QnKWDB+fKhzWv
JF1xjZn3+zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTM0L0trei1rSnlsZ3dmbnlvYzFyeVJkY1kyWjlfcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0trei1rSnlsZ3dmbnlvYzFyeVJkY1ky
Wjlfcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85MzQvS2pWb0xLOEZCV3NiRnVjX3ZfSm03ZU4yX19nLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEB3z3ADANBgkqhkiG9w0BAQsFAAOCAQEAkSQInHPiePHhDizHEXG7t4adSORz
JlGWrgF0OA3AM1c/gxW940iC6/iPbM0JjxriuOY5h8gJErl4fQECyXH35sm0zCO+
tgT01GAmpV/59kG+hfQIr75P4IQo46JQ/i281iXwH1zg3arz6ntbz1qTJL63mOFc
9U4y3DlQRl5Me9FAyDiJuwjp94vzObV6FMl9xiENJ184UNrRRCknqgRFu9j4P4V6
VnZ8RyjaSSZCvECRH9pkpBb2HAcL12FGW823O1AM4Fdwc0jeqMCo2nAR42X6zspv
CkYwDGK5jJmy0xE0RwnhdJW/QTsRXV7aGYYvBQ/bFNcR+Z/tXpmtQy1wVw==
-----END CERTIFICATE-----
Generated at Thu Feb 29 02:02:26 2024 by rpki-client on console-ams.rpki-client.org