Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/7wr01TF6wn0viRgOOgvBlkX3T2M.roa
File:                     7wr01TF6wn0viRgOOgvBlkX3T2M.roa (raw, json)
Hash identifier:          udV141LC1F8BBSmyjrvH4HqJzcFwV0KpZcEnZGQIMw0=
Subject key identifier:   EF:0A:F4:D5:31:7A:C2:7D:2F:89:18:0E:3A:0B:C1:96:45:F7:4F:63
Certificate issuer:       /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial:       79
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/7wr01TF6wn0viRgOOgvBlkX3T2M.roa
Signing time:             Thu 13 Apr 2023 09:53:51 +0000
ROA not before:           Thu 13 Apr 2023 09:53:51 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     38631
IP address blocks:        103.2.30.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 29 Feb 2024 01:30:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Validity
            Not Before: Apr 13 09:53:51 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=EF0AF4D5317AC27D2F89180E3A0BC19645F74F63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:45:e9:5e:30:2b:c5:d5:14:41:99:d2:d2:d2:
                    da:25:fd:6b:8c:48:76:3c:da:19:54:3c:47:f2:d4:
                    d4:bb:fe:5f:ae:98:69:e1:1b:62:b3:f6:90:ee:8d:
                    96:ce:51:47:c7:fa:9d:b6:44:b5:67:3c:73:a7:75:
                    bf:be:f9:ef:9e:e5:32:80:ec:a1:1d:8e:3d:78:c2:
                    a4:5a:7f:32:1c:92:66:1e:9a:a1:ef:91:c2:46:e8:
                    c7:cb:bd:06:38:61:ba:2f:76:d0:92:6d:c6:3f:9f:
                    fa:32:a2:c6:85:be:bc:3b:98:79:78:eb:af:ee:de:
                    a8:f7:c4:37:45:00:b1:60:83:8b:cd:24:04:7f:12:
                    2a:38:aa:32:0f:14:41:9b:97:d6:f5:c9:51:2b:9c:
                    fc:47:43:9a:f5:45:98:14:b8:09:bd:69:a7:db:02:
                    20:b3:10:c8:4c:28:b3:89:10:e6:07:1f:3c:81:7f:
                    a7:16:e2:36:68:98:2b:c3:ac:ef:96:3a:00:de:8e:
                    e5:8e:a9:ab:0f:6e:cf:ca:a9:ec:09:a2:9b:f3:60:
                    5e:12:29:f2:fc:c9:ab:a9:80:99:8e:0e:2b:48:9a:
                    ee:33:81:de:a4:2a:6b:0a:ce:5e:d5:b5:bb:c8:6c:
                    52:c6:0d:f0:c6:80:d2:38:23:ef:6b:ca:1f:fb:b4:
                    fa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:0A:F4:D5:31:7A:C2:7D:2F:89:18:0E:3A:0B:C1:96:45:F7:4F:63
            X509v3 Authority Key Identifier:
                keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/7wr01TF6wn0viRgOOgvBlkX3T2M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:bf:8a:03:ae:34:84:42:09:d1:5a:eb:28:22:e5:c4:a7:88:
         45:70:db:b5:0e:02:77:ee:9f:37:21:91:ad:35:d2:81:2c:40:
         d5:ab:5e:35:b1:2f:69:8c:27:ad:bd:d9:fb:28:41:92:48:9d:
         84:8b:b6:06:38:bc:8f:03:49:6f:fb:86:e3:29:c3:53:5a:c0:
         31:a0:ca:89:5f:9a:e5:09:14:55:2e:a3:8f:a5:22:cc:40:60:
         47:72:f2:89:82:32:c3:64:ff:32:2c:19:7b:5d:99:54:85:f8:
         38:cd:ca:db:71:9c:87:1a:64:72:dd:72:94:b8:0c:1d:90:0d:
         d6:40:d7:77:26:b7:19:92:cc:55:27:20:21:a6:25:ba:73:d3:
         4e:be:bc:d0:cf:2c:fa:bf:47:41:66:a3:06:c3:a0:21:1c:bb:
         bf:9f:cd:09:5c:f0:9f:c6:21:51:98:32:d4:17:5b:04:b1:4e:
         5d:96:d4:5c:03:f0:3b:8d:c0:b4:8c:be:3d:b4:2c:15:4a:63:
         9e:f3:97:d5:6e:f6:ba:43:82:68:f6:75:39:b2:31:cf:97:38:
         1e:1e:8c:64:d0:10:0f:bb:5a:51:f1:07:3d:c9:ab:6f:ad:e4:
         40:aa:61:e0:e5:b2:b9:5c:eb:1a:ec:ad:c8:8e:c6:0e:e7:e6:
         40:a6:9b:e3
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBeTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5OTA0
RUNCQ0Q4NUYyMkEyRThBRTdFMUY5OTFFODM0NUQwNkE5ODE2MB4XDTIzMDQxMzA5
NTM1MVoXDTI0MDMxNDAxMzAwMlowMzExMC8GA1UEAxMoRUYwQUY0RDUzMTdBQzI3
RDJGODkxODBFM0EwQkMxOTY0NUY3NEY2MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMBF6V4wK8XVFEGZ0tLS2iX9a4xIdjzaGVQ8R/LU1Lv+X66YaeEb
YrP2kO6Nls5RR8f6nbZEtWc8c6d1v775757lMoDsoR2OPXjCpFp/MhySZh6aoe+R
wkbox8u9Bjhhui920JJtxj+f+jKixoW+vDuYeXjrr+7eqPfEN0UAsWCDi80kBH8S
KjiqMg8UQZuX1vXJUSuc/EdDmvVFmBS4Cb1pp9sCILMQyEwos4kQ5gcfPIF/pxbi
NmiYK8Os75Y6AN6O5Y6pqw9uz8qp7Amim/NgXhIp8vzJq6mAmY4OK0ia7jOB3qQq
awrOXtW1u8hsUsYN8MaA0jgj72vKH/u0+msCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTvCvTVMXrCfS+JGA46C8GWRfdPYzAfBgNVHSMEGDAWgBSZBOy82F8iouiufh+Z
HoNF0GqYFjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTU4L21RVHN2TmhmSXFMb3JuNGZtUjZEUmRCcW1CWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL21RVHN2TmhmSXFMb3JuNGZtUjZEUmRC
cW1CWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85NTgvN3dyMDFURjZ3bjB2aVJnT09ndkJsa1gzVDJNLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAWcCHjANBgkqhkiG9w0BAQsFAAOCAQEAYL+KA640hEIJ0VrrKCLlxKeIRXDb
tQ4Cd+6fNyGRrTXSgSxA1ateNbEvaYwnrb3Z+yhBkkidhIu2Bji8jwNJb/uG4ynD
U1rAMaDKiV+a5QkUVS6jj6UizEBgR3LyiYIyw2T/MiwZe12ZVIX4OM3K23Gchxpk
ct1ylLgMHZAN1kDXdya3GZLMVScgIaYlunPTTr680M8s+r9HQWajBsOgIRy7v5/N
CVzwn8YhUZgy1BdbBLFOXZbUXAPwO43AtIy+PbQsFUpjnvOX1W72ukOCaPZ1ObIx
z5c4Hh6MZNAQD7taUfEHPcmrb63kQKph4OWyuVzrGuytyI7GDufmQKab4w==
-----END CERTIFICATE-----
Generated at Thu Feb 29 01:58:11 2024 by rpki-client on console-fra.rpki-client.org