Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/lSN6T8p7Yd-IwESyuDjxi9KePRc.roa
File:                     lSN6T8p7Yd-IwESyuDjxi9KePRc.roa (raw, json)
Hash identifier:          DgQrMTKbBa9U3r69UK9ga+vP0p2E2/tNP7Nb/z5mX1E=
Subject key identifier:   95:23:7A:4F:CA:7B:61:DF:88:C0:44:B2:B8:38:F1:8B:D2:9E:3D:17
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       43
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/lSN6T8p7Yd-IwESyuDjxi9KePRc.roa
Signing time:             Thu 22 Jun 2023 00:34:53 +0000
ROA not before:           Thu 22 Jun 2023 00:34:53 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.163.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:34:53 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=95237A4FCA7B61DF88C044B2B838F18BD29E3D17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:27:68:cb:d4:9e:0e:26:b9:c9:e5:62:10:f1:
                    ec:31:9b:dc:67:74:a7:6e:d6:ac:a2:12:06:f6:67:
                    f7:f5:25:0f:22:b8:8a:6d:63:88:f0:10:0d:d6:3a:
                    01:24:44:16:4f:ca:72:88:71:2a:2e:69:26:fb:f7:
                    9a:fc:7b:1f:9e:f9:ab:31:47:8f:94:b7:e8:55:24:
                    28:90:d5:e5:d4:23:69:53:04:b2:82:85:55:68:5a:
                    d2:7a:47:4e:4e:44:fb:a2:1a:50:a6:b4:bf:a4:80:
                    16:17:8c:9b:c1:57:26:15:c1:ea:04:eb:33:9c:ad:
                    6d:76:db:72:60:19:9d:8e:34:a9:95:c3:e6:3a:b7:
                    10:98:05:40:55:62:fe:95:87:4a:11:d3:6c:ca:48:
                    b9:44:68:40:52:be:79:27:1c:78:0a:7c:10:58:4d:
                    a5:c1:89:5b:37:bf:ee:69:d6:ca:dc:01:33:ee:13:
                    f9:b7:ff:38:41:4d:5e:cd:42:78:8b:13:dc:6d:c3:
                    1c:09:8f:f6:d5:8f:9d:07:ab:63:b3:98:14:84:4d:
                    7c:30:6d:d8:be:6e:dd:f3:c6:fd:ec:b0:12:31:5f:
                    d5:75:1e:79:db:1c:ea:af:b1:b6:fe:98:72:a9:02:
                    c1:b0:c7:30:39:dd:ad:97:db:fd:9a:06:dd:80:42:
                    97:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:23:7A:4F:CA:7B:61:DF:88:C0:44:B2:B8:38:F1:8B:D2:9E:3D:17
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/lSN6T8p7Yd-IwESyuDjxi9KePRc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:ff:4f:55:a4:4f:2f:86:df:66:5c:ee:0f:89:57:94:a9:09:
         fd:a7:5b:61:88:87:6c:79:36:13:08:b5:9c:06:c0:61:3f:2e:
         6b:c2:cf:a3:5f:1c:00:e8:e3:b7:cd:e9:7d:e1:71:7d:b2:f5:
         27:45:8a:54:7e:63:6a:fa:74:15:2e:45:8c:1f:e8:08:ff:6f:
         45:00:8d:e5:99:bf:6f:9e:82:8d:f4:cc:fd:ac:ee:49:8f:d6:
         ad:f6:75:85:8e:b4:44:8d:fe:4c:ff:79:57:36:eb:2d:a0:76:
         ae:ab:ed:1f:21:ca:e8:db:43:5e:23:5e:2b:9c:27:82:dc:29:
         e0:41:bb:ac:8d:62:d7:98:8d:51:25:dd:30:08:30:59:35:33:
         3d:42:5a:7f:ae:9a:5e:5c:03:54:98:9d:e6:a6:a3:03:a4:3a:
         1b:85:79:2b:cd:0c:06:8a:b0:db:bf:dc:89:9f:71:6a:0c:08:
         da:52:4d:a1:6d:d3:a5:36:28:40:e4:35:78:74:19:e5:2b:98:
         c7:a1:99:08:c5:11:63:1f:da:c8:d7:48:e4:11:53:51:98:64:
         b5:72:db:33:08:47:c8:27:9b:5f:fa:8b:b2:34:63:0f:9c:b5:
         8f:4f:ea:df:6c:25:d6:70:69:ba:2b:67:4c:ce:8e:cf:eb:73:
         82:c7:7b:91
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5REIw
NzY0QzZERkMxRTNERjZCRDU4MEVBNjk5NEExRTcwOThGNTJBMB4XDTIzMDYyMjAw
MzQ1M1oXDTI0MDYxNDAxMzAwMlowMzExMC8GA1UEAxMoOTUyMzdBNEZDQTdCNjFE
Rjg4QzA0NEIyQjgzOEYxOEJEMjlFM0QxNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALQnaMvUng4mucnlYhDx7DGb3Gd0p27WrKISBvZn9/UlDyK4im1j
iPAQDdY6ASREFk/KcohxKi5pJvv3mvx7H575qzFHj5S36FUkKJDV5dQjaVMEsoKF
VWha0npHTk5E+6IaUKa0v6SAFheMm8FXJhXB6gTrM5ytbXbbcmAZnY40qZXD5jq3
EJgFQFVi/pWHShHTbMpIuURoQFK+eScceAp8EFhNpcGJWze/7mnWytwBM+4T+bf/
OEFNXs1CeIsT3G3DHAmP9tWPnQerY7OYFIRNfDBt2L5u3fPG/eywEjFf1XUeedsc
6q+xtv6YcqkCwbDHMDndrZfb/ZoG3YBClz0CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSVI3pPynth34jARLK4OPGL0p49FzAfBgNVHSMEGDAWgBSdsHZMbfwePfa9WA6m
mUoecJj1KjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNjMvbmJCMlRHMzhIajMydlZnT3BwbEtIbkNZOVNvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbmJCMlRHMzhIajMydlZnT3BwbEtI
bkNZOVNvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDYzL2xTTjZUOHA3WWQtSXdFU3l1RGp4aTlLZVBSYy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABzpqMwDQYJKoZIhvcNAQELBQADggEBAGL/T1WkTy+G32Zc7g+JV5Sp
Cf2nW2GIh2x5NhMItZwGwGE/LmvCz6NfHADo47fN6X3hcX2y9SdFilR+Y2r6dBUu
RYwf6Aj/b0UAjeWZv2+ego30zP2s7kmP1q32dYWOtESN/kz/eVc26y2gdq6r7R8h
yujbQ14jXiucJ4LcKeBBu6yNYteYjVEl3TAIMFk1Mz1CWn+uml5cA1SYneamowOk
OhuFeSvNDAaKsNu/3ImfcWoMCNpSTaFt06U2KEDkNXh0GeUrmMehmQjFEWMf2sjX
SOQRU1GYZLVy2zMIR8gnm1/6i7I0Yw+ctY9P6t9sJdZwaborZ0zOjs/rc4LHe5E=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:41:08 2025 by rpki-client