Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/3TLyTlsO_syEa5Gd3MBgORXwboA.roa
File:                     3TLyTlsO_syEa5Gd3MBgORXwboA.roa (raw, json)
Hash identifier:          k1QL+c4mCualY6C75BHzZtspNL0qfkJyDbVJcpjsWqU=
Subject key identifier:   DD:32:F2:4E:5B:0E:FE:CC:84:6B:91:9D:DC:C0:60:39:15:F0:6E:80
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0184
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/3TLyTlsO_syEa5Gd3MBgORXwboA.roa
Signing time:             Thu 01 Dec 2022 01:29:28 +0000
ROA not before:           Thu 01 Dec 2022 01:29:28 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     9371
IP address blocks:        183.181.76.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Dec  1 01:29:28 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=DD32F24E5B0EFECC846B919DDCC0603915F06E80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:22:7d:c5:ad:f6:36:aa:8c:bb:80:24:7b:
                    c8:f0:a6:bf:d2:0d:a9:7c:a7:a9:7a:23:1d:ef:6f:
                    ed:8b:bf:60:85:41:c8:7f:78:f8:b3:3e:ae:9f:93:
                    f6:33:1c:96:46:d4:5e:a4:0c:48:43:35:e0:b2:1b:
                    37:77:7b:74:9c:c2:99:ef:4f:af:d0:f8:38:99:a2:
                    71:60:90:84:f6:34:18:a9:87:0b:ce:85:cf:db:eb:
                    1d:e9:5e:a2:3d:51:97:5d:3c:6d:bf:84:2b:ad:85:
                    d0:97:28:de:10:90:1c:1d:b9:04:98:61:2e:52:63:
                    4d:32:4b:9a:f6:65:e3:c3:1b:bb:50:e0:10:b6:6d:
                    c9:cb:4a:37:a6:1d:ba:0c:ee:ce:51:e8:d9:ea:17:
                    57:ee:24:7b:24:ed:e1:67:e5:c9:b1:48:60:2e:aa:
                    08:1e:74:8b:f6:0c:64:57:f1:9c:65:7c:1d:39:f2:
                    a7:83:af:b1:8e:de:db:d7:72:e0:be:f0:37:e8:7a:
                    6b:36:86:41:e3:19:d9:86:e1:b6:fb:05:6e:90:f0:
                    08:5b:a5:db:2d:24:94:f5:35:36:d1:5f:30:ec:ac:
                    96:fd:a8:e0:22:d2:fd:27:e7:00:cf:a1:75:b6:37:
                    2a:96:1c:c7:02:ea:cf:d6:a9:fc:19:4c:58:74:cd:
                    db:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:32:F2:4E:5B:0E:FE:CC:84:6B:91:9D:DC:C0:60:39:15:F0:6E:80
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/3TLyTlsO_syEa5Gd3MBgORXwboA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:16:83:66:d2:77:34:0f:d7:3d:81:7f:17:ea:34:9c:73:81:
         6d:b2:0c:f2:4a:b2:c3:e1:c8:ab:c8:5b:44:a5:a3:82:16:cb:
         a6:03:dc:28:17:6c:ef:40:ad:31:ff:69:0c:ad:2b:42:5e:4c:
         9f:18:ad:f2:c8:c6:41:35:f1:a9:41:b9:f3:0b:c2:69:6e:cc:
         e4:57:ba:a9:dd:36:1f:ac:fd:b9:85:30:0a:71:67:22:61:b8:
         83:f4:82:e6:c3:28:d6:81:68:c4:ca:75:df:2a:44:88:0b:ab:
         fc:38:44:c3:cc:6c:e7:2f:71:60:2d:e1:46:7c:80:12:e4:25:
         c5:ff:f3:7d:37:5e:fc:13:a6:f5:4c:3e:f5:8d:1b:f5:49:95:
         03:96:6e:f7:64:ac:96:fb:f4:bb:7e:f2:df:2d:8a:b1:ce:3b:
         ec:63:db:ac:b5:5c:58:a4:74:7d:8c:8c:7e:d4:20:1c:f8:ad:
         1a:02:7c:77:58:d7:95:08:4c:a1:4f:30:f1:66:ec:12:2f:0a:
         91:26:12:5a:e4:94:cd:18:c5:ad:35:34:af:2c:85:d0:28:0a:
         51:48:ba:2b:50:50:23:4e:3c:66:dd:13:51:dc:f1:79:b2:d0:
         bb:d7:b6:f7:41:c0:6e:84:5a:ef:ff:1f:f1:e8:5b:94:57:a7:
         fb:fc:52:92
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMjEyMDEw
MTI5MjhaFw0yMzExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEREMzJGMjRFNUIwRUZF
Q0M4NDZCOTE5RERDQzA2MDM5MTVGMDZFODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4SyJ9xa32NqqMu4Ake8jwpr/SDal8p6l6Ix3vb+2Lv2CFQch/
ePizPq6fk/YzHJZG1F6kDEhDNeCyGzd3e3ScwpnvT6/Q+DiZonFgkIT2NBiphwvO
hc/b6x3pXqI9UZddPG2/hCuthdCXKN4QkBwduQSYYS5SY00yS5r2ZePDG7tQ4BC2
bcnLSjemHboM7s5R6NnqF1fuJHsk7eFn5cmxSGAuqggedIv2DGRX8ZxlfB058qeD
r7GO3tvXcuC+8Dfoems2hkHjGdmG4bb7BW6Q8AhbpdstJJT1NTbRXzDsrJb9qOAi
0v0n5wDPoXW2NyqWHMcC6s/WqfwZTFh0zduPAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQU3TLyTlsO/syEa5Gd3MBgORXwboAwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny8zVEx5VGxzT19zeUVhNUdkM01CZ09SWHdib0Eu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBt7VMMA0GCSqGSIb3DQEBCwUAA4IBAQBOFoNm0nc0D9c9gX8X6jSc
c4FtsgzySrLD4ciryFtEpaOCFsumA9woF2zvQK0x/2kMrStCXkyfGK3yyMZBNfGp
QbnzC8JpbszkV7qp3TYfrP25hTAKcWciYbiD9ILmwyjWgWjEynXfKkSIC6v8OETD
zGznL3FgLeFGfIAS5CXF//N9N178E6b1TD71jRv1SZUDlm73ZKyW+/S7fvLfLYqx
zjvsY9ustVxYpHR9jIx+1CAc+K0aAnx3WNeVCEyhTzDxZuwSLwqRJhJa5JTNGMWt
NTSvLIXQKApRSLorUFAjTjxm3RNR3PF5stC717b3QcBuhFrv/x/x6FuUV6f7/FKS
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:44 2025 by rpki-client