Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/ag7Rpr64MW1vtZsJTB-c9IB81E0.roa
File:                     ag7Rpr64MW1vtZsJTB-c9IB81E0.roa (raw, json)
Hash identifier:          IFHpBN6bCDpAxE5YGJOaQ/yhr5AGKnUzrZqacMDwOZ8=
Subject key identifier:   6A:0E:D1:A6:BE:B8:31:6D:6F:B5:9B:09:4C:1F:9C:F4:80:7C:D4:4D
Certificate issuer:       /CN=A935D5AD33DC630C4611987140F5E468B7081D11
Certificate serial:       41
Authority key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/ag7Rpr64MW1vtZsJTB-c9IB81E0.roa
Signing time:             Thu 27 Jun 2024 02:37:36 +0000
ROA not before:           Thu 27 Jun 2024 02:37:36 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     18081
IP address blocks:        202.1.216.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jul 2024 04:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A935D5AD33DC630C4611987140F5E468B7081D11
        Validity
            Not Before: Jun 27 02:37:36 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=6A0ED1A6BEB8316D6FB59B094C1F9CF4807CD44D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:67:21:6f:63:6a:bb:22:3e:4a:81:33:af:11:
                    ea:a0:0e:d6:e3:6c:14:06:0d:7d:0d:36:c8:ab:de:
                    61:c0:cc:7c:0a:21:32:4f:d4:b5:3d:cf:fa:9c:67:
                    3f:1f:9c:52:54:c1:17:5a:4f:fc:47:38:52:b2:2d:
                    e0:16:a6:89:0c:00:f2:ed:48:cb:ab:98:3b:88:f6:
                    3e:77:1a:82:19:4d:7f:34:41:a9:a9:b0:a3:e2:f9:
                    14:30:8d:32:79:a3:b7:d2:41:c4:63:ca:76:56:0b:
                    0d:86:6d:af:56:62:84:14:a7:bb:a3:f3:e0:29:c1:
                    12:9f:20:9c:d0:91:d5:08:ec:f5:80:b1:c7:cc:2b:
                    d0:d3:0f:0a:36:2f:45:a5:56:cc:62:83:28:e6:a2:
                    c8:bc:4a:de:1b:d0:08:05:bf:b2:85:25:d9:2d:f7:
                    58:bc:a1:79:f6:0c:0a:63:00:11:ea:31:45:ea:b1:
                    9f:86:58:9f:b3:7c:e9:e6:d0:6f:9b:87:34:76:7a:
                    5b:61:d1:28:f7:01:ed:ee:21:39:cb:3e:33:19:c7:
                    be:28:05:8a:87:be:85:77:58:ea:19:de:e5:3a:06:
                    72:7a:16:9d:7e:5f:96:63:a8:0d:00:91:55:bb:e8:
                    d0:f3:c7:ca:4c:7d:51:50:08:42:2b:fe:9c:01:68:
                    c1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0E:D1:A6:BE:B8:31:6D:6F:B5:9B:09:4C:1F:9C:F4:80:7C:D4:4D
            X509v3 Authority Key Identifier:
                keyid:A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/ag7Rpr64MW1vtZsJTB-c9IB81E0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.1.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:60:c5:ab:c8:db:63:58:2b:21:f4:07:c0:b9:e1:b7:1c:e5:
         cf:bc:c9:36:31:71:24:2e:1d:6f:cc:52:85:d1:8d:b9:2d:f0:
         c6:b7:48:41:6b:87:c1:05:ad:02:06:39:1b:4c:8f:a1:86:0e:
         5a:f5:59:be:7f:75:86:62:c2:1d:0d:1f:25:d7:a2:78:69:7b:
         c8:c4:49:72:45:38:4d:e8:20:2f:56:89:d6:ff:71:28:14:36:
         92:81:f0:45:ad:09:56:9b:a3:d1:55:a9:39:2f:c6:5e:35:01:
         b2:06:6b:f5:cd:24:de:80:d8:32:12:bc:50:7c:d3:d8:7b:7b:
         86:ff:2d:2b:a4:cc:f7:38:5d:bd:4e:09:5a:9e:75:00:e5:da:
         c3:35:b8:7b:91:2c:25:e8:3c:0c:a9:ce:29:b2:fa:cd:b2:17:
         32:8e:24:a2:75:82:3e:ea:0f:58:66:2e:59:bf:6b:9d:10:59:
         da:e9:8b:6c:7a:27:36:c4:45:d2:a8:44:61:83:77:8a:54:a4:
         c3:b7:9d:83:6b:64:8f:ca:18:47:79:6f:ce:22:79:b8:3f:32:
         c4:29:53:a8:6e:88:60:87:e7:88:33:a8:ed:2e:37:bd:85:06:
         5c:92:6a:dd:ac:c6:3a:b6:99:76:df:4d:a0:df:7c:9c:36:e2:
         d7:bc:53:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 06:14:00 2024 by rpki-client on console-ams.rpki-client.org