Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/kpdOIucJBrYn4pt6vcEaDVR-erk.roa
File:                     kpdOIucJBrYn4pt6vcEaDVR-erk.roa (raw, json)
Hash identifier:          c9DLZQZT/ChpKckX/CD3L1UuhJpDAHdrnY0IpxcYNi8=
Subject key identifier:   92:97:4E:22:E7:09:06:B6:27:E2:9B:7A:BD:C1:1A:0D:54:7E:7A:B9
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       38
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/kpdOIucJBrYn4pt6vcEaDVR-erk.roa
Signing time:             Thu 22 Jun 2023 00:34:03 +0000
ROA not before:           Thu 22 Jun 2023 00:34:03 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.170.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:34:03 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=92974E22E70906B627E29B7ABDC11A0D547E7AB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:82:74:67:14:23:f8:64:1f:d6:ec:f9:aa:fe:
                    34:92:95:20:56:72:6d:b7:80:36:77:56:d0:52:30:
                    58:9f:ba:d6:0e:85:cc:47:12:05:9c:ce:f0:90:e2:
                    2b:54:b2:8a:7b:66:14:cb:f5:a3:21:19:7a:a9:02:
                    19:aa:74:f7:6f:48:66:13:01:26:10:28:cd:6b:db:
                    a5:83:fc:01:70:fd:9f:98:5a:18:77:5b:23:01:87:
                    86:5f:d4:32:8a:a9:bf:50:92:6b:54:26:3e:48:98:
                    ef:c6:64:de:c3:1d:0e:0f:fd:fa:97:bd:c7:eb:63:
                    c2:84:a9:22:6e:b7:2d:b1:b1:a9:f1:cc:af:be:e7:
                    ff:d6:08:fe:f4:1e:b9:dd:f1:f5:34:8b:1b:a7:07:
                    98:66:94:8d:ab:63:3d:56:e2:7e:a3:88:3b:9c:6b:
                    84:cb:79:b2:e9:18:6e:99:39:77:e9:ca:79:4a:30:
                    11:34:0e:b4:70:5e:5d:2a:b8:1f:0d:64:62:e4:16:
                    a7:3a:10:dc:6b:12:5e:0d:37:11:b0:af:0f:3f:51:
                    36:4e:7d:dc:d3:13:a9:d6:59:d1:03:75:b4:22:00:
                    99:95:cd:f0:4f:65:b2:d1:81:44:a3:5a:35:23:97:
                    de:bc:7a:42:62:52:82:b4:9a:5a:0b:7e:10:de:c5:
                    5a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:97:4E:22:E7:09:06:B6:27:E2:9B:7A:BD:C1:1A:0D:54:7E:7A:B9
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/kpdOIucJBrYn4pt6vcEaDVR-erk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:2d:52:31:a2:73:21:53:bd:29:ec:5f:be:f6:04:e0:dd:3f:
         9b:db:42:08:9b:47:8a:29:c1:e1:11:77:10:98:8c:6c:ff:53:
         2b:45:7f:64:e5:61:ef:3f:ac:a7:ed:a2:d2:2a:50:f3:e0:fe:
         c0:ee:da:86:5f:d5:8b:5e:8d:a0:66:bf:72:b5:ce:5f:14:26:
         f5:ee:a4:2f:61:ec:25:55:24:85:da:75:13:e2:50:4e:c1:33:
         f0:72:19:2a:8a:5b:a2:ee:25:db:e9:85:98:85:8a:be:1c:5d:
         5b:ba:78:63:79:0b:03:4c:00:98:62:6e:d0:3e:38:e1:08:3d:
         aa:26:63:40:23:c0:20:55:b3:84:e5:f1:ea:06:4d:23:c6:0c:
         2f:6e:70:ed:d5:14:51:40:64:14:b0:76:30:bd:e3:bf:c4:7e:
         f2:28:89:73:0d:70:09:b3:d6:99:fb:e6:72:d4:d2:dd:8f:58:
         69:d0:ca:69:69:be:70:0c:91:c3:0d:60:7e:8d:ed:d4:3b:16:
         1a:62:1b:36:a2:97:d3:da:87:46:05:66:04:11:e3:e3:c5:f6:
         83:1c:22:f6:1c:21:bf:13:cb:29:1f:66:e0:b9:00:ff:aa:3c:
         c5:24:49:ef:e7:6b:ec:2f:e3:c7:5b:c5:82:8a:0c:fa:8f:de:
         92:a7:fc:4e
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBODANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5REIw
NzY0QzZERkMxRTNERjZCRDU4MEVBNjk5NEExRTcwOThGNTJBMB4XDTIzMDYyMjAw
MzQwM1oXDTI0MDYxNDAxMzAwMlowMzExMC8GA1UEAxMoOTI5NzRFMjJFNzA5MDZC
NjI3RTI5QjdBQkRDMTFBMEQ1NDdFN0FCOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJuCdGcUI/hkH9bs+ar+NJKVIFZybbeANndW0FIwWJ+61g6FzEcS
BZzO8JDiK1SyintmFMv1oyEZeqkCGap0929IZhMBJhAozWvbpYP8AXD9n5haGHdb
IwGHhl/UMoqpv1CSa1QmPkiY78Zk3sMdDg/9+pe9x+tjwoSpIm63LbGxqfHMr77n
/9YI/vQeud3x9TSLG6cHmGaUjatjPVbifqOIO5xrhMt5sukYbpk5d+nKeUowETQO
tHBeXSq4Hw1kYuQWpzoQ3GsSXg03EbCvDz9RNk593NMTqdZZ0QN1tCIAmZXN8E9l
stGBRKNaNSOX3rx6QmJSgrSaWgt+EN7FWvcCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSSl04i5wkGtifim3q9wRoNVH56uTAfBgNVHSMEGDAWgBSdsHZMbfwePfa9WA6m
mUoecJj1KjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNjMvbmJCMlRHMzhIajMydlZnT3BwbEtIbkNZOVNvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbmJCMlRHMzhIajMydlZnT3BwbEtI
bkNZOVNvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDYzL2twZE9JdWNKQnJZbjRwdDZ2Y0VhRFZSLWVyay5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABzpqowDQYJKoZIhvcNAQELBQADggEBAEgtUjGicyFTvSnsX772BODd
P5vbQgibR4opweERdxCYjGz/UytFf2TlYe8/rKftotIqUPPg/sDu2oZf1YtejaBm
v3K1zl8UJvXupC9h7CVVJIXadRPiUE7BM/ByGSqKW6LuJdvphZiFir4cXVu6eGN5
CwNMAJhibtA+OOEIPaomY0AjwCBVs4Tl8eoGTSPGDC9ucO3VFFFAZBSwdjC947/E
fvIoiXMNcAmz1pn75nLU0t2PWGnQymlpvnAMkcMNYH6N7dQ7FhpiGzail9Pah0YF
ZgQR4+PF9oMcIvYcIb8TyykfZuC5AP+qPMUkSe/na+wv48dbxYKKDPqP3pKn/E4=
-----END CERTIFICATE-----
Generated at Tue May 6 09:33:18 2025 by rpki-client