Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/NTLctWG1N8ogKDv4yFcksbqT_1E.roa
File:                     NTLctWG1N8ogKDv4yFcksbqT_1E.roa (raw, json)
Hash identifier:          ePpY8Uq1ComOR6IrfIbcHhzue4CawIaFGqFFLGL/gCs=
Subject key identifier:   35:32:DC:B5:61:B5:37:CA:20:28:3B:F8:C8:57:24:B1:BA:93:FF:51
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       51
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/NTLctWG1N8ogKDv4yFcksbqT_1E.roa
Signing time:             Thu 22 Jun 2023 00:34:59 +0000
ROA not before:           Thu 22 Jun 2023 00:34:59 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.181.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:34:59 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=3532DCB561B537CA20283BF8C85724B1BA93FF51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4b:c4:5b:5e:8b:db:38:60:80:b8:86:bb:51:
                    ba:b5:4d:2c:e8:9c:34:17:be:98:07:03:a5:68:d8:
                    08:e5:ed:77:b6:f1:fa:fa:d8:96:f7:2c:70:e4:91:
                    22:03:7e:2f:38:f9:b2:47:83:04:de:9f:e2:31:47:
                    b5:1c:2f:d5:60:84:fa:96:31:e2:fe:14:0e:2a:99:
                    73:2b:af:e3:05:d1:0a:59:a3:79:b5:37:08:33:ca:
                    cb:52:2a:4f:1a:c9:b7:b0:a1:a1:a7:b1:cb:9a:33:
                    dc:3a:c9:44:fc:00:bb:79:67:11:43:75:8e:2b:4d:
                    87:61:52:dc:bb:90:0a:3f:49:2d:ef:9e:2e:bb:d4:
                    da:bf:b9:c3:11:2e:2d:5e:e4:cf:51:2e:0c:1c:83:
                    bb:e8:a5:ca:a6:aa:ff:20:8b:db:d3:93:15:fd:70:
                    6b:7b:21:52:73:09:44:6e:b2:9b:e1:57:9d:52:b9:
                    0c:22:a1:04:15:6f:a2:26:54:bb:29:76:8e:8f:ac:
                    65:d4:23:17:eb:53:60:46:ed:70:e2:1d:fd:7c:83:
                    9c:9b:99:eb:a9:e2:0e:e6:9a:fe:36:78:88:57:cd:
                    73:7b:2b:27:34:39:bd:40:80:bd:1d:01:aa:fe:4f:
                    83:95:a3:1e:f5:fe:92:1a:60:82:6d:da:47:c8:e9:
                    26:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:32:DC:B5:61:B5:37:CA:20:28:3B:F8:C8:57:24:B1:BA:93:FF:51
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/NTLctWG1N8ogKDv4yFcksbqT_1E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:f5:96:87:ed:89:43:41:72:2f:13:55:d9:ac:ea:5c:59:6f:
         1b:1b:5e:c1:d1:80:a1:93:41:1e:98:b2:3f:7b:03:ff:bf:4c:
         37:61:e3:a3:64:61:0c:e7:f9:cb:0d:1a:fb:9d:0b:3b:0a:6c:
         3b:ee:6f:48:f8:dd:c8:87:0d:73:92:f3:5a:55:19:37:1a:57:
         07:0b:b5:5a:4b:b4:a3:56:86:78:a9:3c:60:48:8a:f9:9b:a4:
         ff:30:29:56:e2:1b:6e:37:8f:99:f0:05:8e:d8:82:d9:ae:bf:
         3f:b3:be:fe:db:02:b7:b8:fc:66:3d:56:0c:bb:7e:bf:a5:be:
         0a:59:f0:f6:d3:14:e3:36:f0:56:33:7c:92:9b:91:03:bb:c8:
         68:6a:10:87:9e:f1:c5:72:49:09:e2:23:fe:6c:0a:77:a4:74:
         bf:c3:6e:6d:19:b2:1e:13:ae:b6:98:93:7f:da:d9:d2:64:7e:
         c9:42:ef:8e:b3:82:5e:15:9f:b1:ab:cf:ce:a6:52:11:fd:e6:
         51:ed:c4:3d:66:cb:9a:1e:0c:45:66:13:56:cf:e1:e1:ac:37:
         f5:38:c4:a8:0a:7d:69:e3:6d:97:82:2f:38:e4:e3:bf:e8:6f:
         6c:f6:8d:0d:ae:3f:b5:07:c0:8c:f1:7d:4c:aa:13:c9:32:df:
         69:ef:ff:3e
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5REIw
NzY0QzZERkMxRTNERjZCRDU4MEVBNjk5NEExRTcwOThGNTJBMB4XDTIzMDYyMjAw
MzQ1OVoXDTI0MDYxNDAxMzAwMlowMzExMC8GA1UEAxMoMzUzMkRDQjU2MUI1MzdD
QTIwMjgzQkY4Qzg1NzI0QjFCQTkzRkY1MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKVLxFtei9s4YIC4hrtRurVNLOicNBe+mAcDpWjYCOXtd7bx+vrY
lvcscOSRIgN+Lzj5skeDBN6f4jFHtRwv1WCE+pYx4v4UDiqZcyuv4wXRClmjebU3
CDPKy1IqTxrJt7Choaexy5oz3DrJRPwAu3lnEUN1jitNh2FS3LuQCj9JLe+eLrvU
2r+5wxEuLV7kz1EuDByDu+ilyqaq/yCL29OTFf1wa3shUnMJRG6ym+FXnVK5DCKh
BBVvoiZUuyl2jo+sZdQjF+tTYEbtcOId/XyDnJuZ66niDuaa/jZ4iFfNc3srJzQ5
vUCAvR0Bqv5Pg5WjHvX+khpggm3aR8jpJnUCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQ1Mty1YbU3yiAoO/jIVySxupP/UTAfBgNVHSMEGDAWgBSdsHZMbfwePfa9WA6m
mUoecJj1KjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNjMvbmJCMlRHMzhIajMydlZnT3BwbEtIbkNZOVNvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbmJCMlRHMzhIajMydlZnT3BwbEtI
bkNZOVNvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDYzL05UTGN0V0cxTjhvZ0tEdjR5RmNrc2JxVF8xRS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABzprUwDQYJKoZIhvcNAQELBQADggEBAG/1loftiUNBci8TVdms6lxZ
bxsbXsHRgKGTQR6Ysj97A/+/TDdh46NkYQzn+csNGvudCzsKbDvub0j43ciHDXOS
81pVGTcaVwcLtVpLtKNWhnipPGBIivmbpP8wKVbiG243j5nwBY7Ygtmuvz+zvv7b
Are4/GY9Vgy7fr+lvgpZ8PbTFOM28FYzfJKbkQO7yGhqEIee8cVySQniI/5sCnek
dL/Dbm0Zsh4TrraYk3/a2dJkfslC746zgl4Vn7Grz86mUhH95lHtxD1my5oeDEVm
E1bP4eGsN/U4xKgKfWnjbZeCLzjk47/ob2z2jQ2uP7UHwIzxfUyqE8ky32nv/z4=
-----END CERTIFICATE-----
Generated at Mon May 5 17:28:03 2025 by rpki-client