Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/961/fwqh3ApcxQ5p26EtSBAfBPfzuXc.roa
File:                     fwqh3ApcxQ5p26EtSBAfBPfzuXc.roa (raw, json)
Hash identifier:          2bSnaXY1GJPHtTdOBYx2Jh9UtLBtmfljxI0M2IQ7Y1c=
Subject key identifier:   7F:0A:A1:DC:0A:5C:C5:0E:69:DB:A1:2D:48:10:1F:04:F7:F3:B9:77
Certificate issuer:       /CN=E655C82691325EC8F4425BC0A66B1A6223231D71
Certificate serial:       20
Authority key identifier: E6:55:C8:26:91:32:5E:C8:F4:42:5B:C0:A6:6B:1A:62:23:23:1D:71
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5lXIJpEyXsj0QlvApmsaYiMjHXE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/961/fwqh3ApcxQ5p26EtSBAfBPfzuXc.roa
Signing time:             Fri 01 Dec 2023 01:28:06 +0000
ROA not before:           Fri 01 Dec 2023 01:28:06 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     38648
IP address blocks:        203.76.164.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 31 Oct 2024 01:28:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E655C82691325EC8F4425BC0A66B1A6223231D71
        Validity
            Not Before: Dec  1 01:28:06 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=7F0AA1DC0A5CC50E69DBA12D48101F04F7F3B977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b9:06:d5:15:a3:b1:1a:3b:76:41:99:ff:80:
                    41:48:28:6b:ad:6b:d5:f2:1d:23:09:9d:a0:d7:63:
                    6a:45:26:25:f2:42:d0:a8:cf:33:c8:08:16:e7:99:
                    c9:d2:bf:5c:80:9a:fc:31:da:4b:d7:c8:11:0a:b7:
                    e5:e1:68:cf:1d:8f:6d:26:ca:c5:55:e4:f8:33:b2:
                    8c:41:c0:ac:1e:7b:86:14:d4:b5:48:12:a1:97:86:
                    87:4d:c1:22:62:2b:a5:53:32:9b:3b:de:b6:be:6e:
                    96:d0:34:00:ba:2c:28:03:10:d4:06:86:b5:68:fc:
                    8d:21:92:fa:88:ec:a3:b7:db:22:cd:f8:39:19:8d:
                    93:97:98:67:c5:c4:f5:af:fa:10:96:cb:9f:4e:0b:
                    1a:b1:b8:e9:5f:97:a6:24:60:c5:67:16:51:ef:92:
                    27:af:89:d0:d5:2f:b0:fb:1f:7d:bd:7d:e1:5a:fb:
                    4b:cb:3a:45:da:bb:78:ad:d7:89:0d:23:4e:e0:ce:
                    72:01:bf:a6:52:7e:6f:c0:65:9b:1a:d2:2b:66:00:
                    85:84:30:95:c4:b2:26:69:71:83:24:96:3a:6e:56:
                    7f:e5:f0:c5:68:a4:bc:f7:38:4c:a2:4b:28:7c:3c:
                    a6:6d:13:73:66:01:7a:80:eb:93:b6:ee:03:79:01:
                    6f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0A:A1:DC:0A:5C:C5:0E:69:DB:A1:2D:48:10:1F:04:F7:F3:B9:77
            X509v3 Authority Key Identifier:
                keyid:E6:55:C8:26:91:32:5E:C8:F4:42:5B:C0:A6:6B:1A:62:23:23:1D:71

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/961/5lXIJpEyXsj0QlvApmsaYiMjHXE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5lXIJpEyXsj0QlvApmsaYiMjHXE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/961/fwqh3ApcxQ5p26EtSBAfBPfzuXc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.76.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:44:cb:92:6d:9b:5b:ce:c9:dc:df:9f:08:2a:22:2b:9e:91:
         75:93:bb:21:3c:a5:66:18:1c:06:38:4e:0f:df:8a:bc:a5:6e:
         ba:e0:47:eb:48:b0:b5:47:dc:4a:45:eb:5f:e6:f5:14:ec:63:
         15:69:63:d0:e8:af:4e:23:fb:6e:e6:db:32:6b:9d:a8:ef:41:
         41:58:32:5e:b0:f4:9e:d9:0d:b8:c4:74:a2:5b:91:44:72:5f:
         8c:0b:de:d9:0e:c4:e2:13:5c:8b:63:5a:17:b2:40:e5:8a:b6:
         9c:3f:8d:25:b1:0a:d9:ae:12:4a:5c:40:63:18:57:af:60:81:
         0a:dc:d5:7d:5f:7b:2d:b3:bf:e2:b3:8c:35:6f:dd:e8:ef:18:
         8d:37:21:b7:29:fe:42:93:ce:97:91:34:98:d3:9f:f7:7e:51:
         e9:f0:51:82:f0:3e:95:68:57:a7:64:63:80:0a:51:1a:8a:ad:
         b3:56:2b:f0:1a:6e:12:eb:11:0a:d5:81:34:d4:51:c6:12:e9:
         28:06:55:64:29:87:bf:72:72:a6:b8:cb:de:ab:98:92:0d:3d:
         98:51:ad:2c:b4:e0:2c:51:93:05:01:61:d2:c2:13:5a:d8:50:
         11:db:65:1e:ee:e5:3a:6f:8c:f5:28:c8:d0:8c:4b:18:95:7c:
         00:ec:d0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 03:53:35 2024 by rpki-client on console-fra.rpki-client.org