Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/_YIE-mWYJjCSXZ8dwpn2RW_IQN0.roa
File:                     _YIE-mWYJjCSXZ8dwpn2RW_IQN0.roa (raw, json)
Hash identifier:          4wDHoNsavKoMuugaS4kcqzPNLhzSIDoyTiJTCHPxX5s=
Subject key identifier:   FD:82:04:FA:65:98:26:30:92:5D:9F:1D:C2:99:F6:45:6F:C8:40:DD
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       40
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/_YIE-mWYJjCSXZ8dwpn2RW_IQN0.roa
Signing time:             Thu 22 Jun 2023 00:34:06 +0000
ROA not before:           Thu 22 Jun 2023 00:34:06 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.174.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:34:06 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=FD8204FA65982630925D9F1DC299F6456FC840DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:20:6a:fc:8b:77:9b:09:e0:6d:36:ef:e6:f7:
                    24:d1:9e:6e:6c:de:b3:a6:53:1f:ab:96:ca:48:6b:
                    43:0f:45:77:9f:32:93:05:cf:97:03:8a:ee:c8:23:
                    bd:ff:d2:49:e1:e9:4f:67:66:50:b1:ca:d1:89:de:
                    b1:23:fb:b6:69:2f:24:f3:93:eb:a9:3d:1c:b6:8f:
                    65:53:e7:af:a4:63:b2:ff:43:28:8b:b3:1a:17:7c:
                    ac:e9:e7:16:49:26:cc:48:8b:87:ef:fb:4a:dc:66:
                    6e:03:10:f5:7b:b7:d2:d0:9f:68:31:2c:5c:a5:99:
                    19:a6:d8:23:bc:58:3d:0e:2d:89:da:a0:03:52:97:
                    aa:33:65:5b:05:1f:59:80:c6:1a:34:bb:02:ab:1f:
                    db:84:9a:15:25:62:9f:70:49:d2:00:f3:98:be:e3:
                    73:78:21:a9:5a:67:78:a6:f4:9a:4c:71:19:75:df:
                    2e:ca:b3:b0:33:b6:71:ea:6d:d1:3a:a2:bc:ab:fe:
                    ec:0c:8d:47:22:52:33:b1:75:e1:7d:93:9d:3f:15:
                    00:0c:40:81:75:93:73:6b:84:7e:24:3f:48:ca:a5:
                    75:08:1a:c6:91:31:40:25:19:b8:ce:b6:21:13:5b:
                    56:eb:95:53:a2:a0:54:36:17:de:8c:8f:76:5a:51:
                    ea:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:82:04:FA:65:98:26:30:92:5D:9F:1D:C2:99:F6:45:6F:C8:40:DD
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/_YIE-mWYJjCSXZ8dwpn2RW_IQN0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:20:61:da:62:a7:06:81:f5:fc:55:07:b9:17:90:b3:0e:58:
         47:de:fb:60:6c:f0:6a:d5:f9:e7:5a:62:68:a1:f3:9a:c6:e7:
         8b:ef:e9:ac:13:4e:3a:80:9b:9c:8c:fe:d9:b7:af:9d:51:87:
         3b:9a:9b:44:d7:f2:90:4d:82:7a:b5:93:e0:85:20:4f:03:82:
         32:13:0a:a7:26:ff:ac:5c:4f:15:31:62:aa:cf:70:b4:65:dc:
         16:51:2c:9c:d2:09:74:43:a9:3a:9d:c0:66:8a:1c:e0:f5:7d:
         5e:ad:f4:57:16:2e:dd:67:03:d2:6d:db:31:0d:da:2a:59:69:
         ca:3b:27:1b:5f:a2:a8:8c:85:d0:90:2f:b0:d4:90:3e:ea:00:
         fd:34:9b:34:51:ed:a4:f5:de:66:2c:4f:1d:27:cb:e3:a9:f3:
         84:df:33:79:5b:0b:80:56:50:f1:3b:62:82:25:53:f7:ef:d1:
         2c:8f:79:13:66:a4:21:77:59:da:68:7a:22:a2:d7:98:14:d8:
         11:b0:d0:ee:09:52:15:f6:db:49:68:d4:a4:f6:68:28:e6:4f:
         32:66:c8:8e:31:c7:8f:13:91:e8:46:53:e2:b9:0b:25:0c:6b:
         b2:ea:b7:2e:60:32:b5:ca:84:90:80:f5:09:45:d8:34:4a:64:
         4a:f6:e8:51
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBQDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5REIw
NzY0QzZERkMxRTNERjZCRDU4MEVBNjk5NEExRTcwOThGNTJBMB4XDTIzMDYyMjAw
MzQwNloXDTI0MDYxNDAxMzAwMlowMzExMC8GA1UEAxMoRkQ4MjA0RkE2NTk4MjYz
MDkyNUQ5RjFEQzI5OUY2NDU2RkM4NDBERDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPQgavyLd5sJ4G027+b3JNGebmzes6ZTH6uWykhrQw9Fd58ykwXP
lwOK7sgjvf/SSeHpT2dmULHK0YnesSP7tmkvJPOT66k9HLaPZVPnr6Rjsv9DKIuz
Ghd8rOnnFkkmzEiLh+/7StxmbgMQ9Xu30tCfaDEsXKWZGabYI7xYPQ4tidqgA1KX
qjNlWwUfWYDGGjS7Aqsf24SaFSVin3BJ0gDzmL7jc3ghqVpneKb0mkxxGXXfLsqz
sDO2cept0TqivKv+7AyNRyJSM7F14X2TnT8VAAxAgXWTc2uEfiQ/SMqldQgaxpEx
QCUZuM62IRNbVuuVU6KgVDYX3oyPdlpR6hkCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBT9ggT6ZZgmMJJdnx3CmfZFb8hA3TAfBgNVHSMEGDAWgBSdsHZMbfwePfa9WA6m
mUoecJj1KjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNjMvbmJCMlRHMzhIajMydlZnT3BwbEtIbkNZOVNvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbmJCMlRHMzhIajMydlZnT3BwbEtI
bkNZOVNvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDYzL19ZSUUtbVdZSmpDU1haOGR3cG4yUldfSVFOMC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABzpq4wDQYJKoZIhvcNAQELBQADggEBAFogYdpipwaB9fxVB7kXkLMO
WEfe+2Bs8GrV+edaYmih85rG54vv6awTTjqAm5yM/tm3r51Rhzuam0TX8pBNgnq1
k+CFIE8DgjITCqcm/6xcTxUxYqrPcLRl3BZRLJzSCXRDqTqdwGaKHOD1fV6t9FcW
Lt1nA9Jt2zEN2ipZaco7JxtfoqiMhdCQL7DUkD7qAP00mzRR7aT13mYsTx0ny+Op
84TfM3lbC4BWUPE7YoIlU/fv0SyPeRNmpCF3WdpoeiKi15gU2BGw0O4JUhX220lo
1KT2aCjmTzJmyI4xx48TkehGU+K5CyUMa7Lqty5gMrXKhJCA9QlF2DRKZEr26FE=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:39:07 2025 by rpki-client