Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/EdvWI25EwCrN0tMJ0_fDqmHC5B4.roa
File:                     EdvWI25EwCrN0tMJ0_fDqmHC5B4.roa (raw, json)
Hash identifier:          XJvmxMlvhcqxaERETKbTvfWZSHlug4AuKPKz7FFTBWE=
Subject key identifier:   11:DB:D6:23:6E:44:C0:2A:CD:D2:D3:09:D3:F7:C3:AA:61:C2:E4:1E
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       E3
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/EdvWI25EwCrN0tMJ0_fDqmHC5B4.roa
Signing time:             Wed 22 Sep 2021 06:34:01 +0000
ROA not before:           Wed 22 Sep 2021 06:34:01 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     131965
IP address blocks:        210.188.201.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 22 06:34:01 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=11DBD6236E44C02ACDD2D309D3F7C3AA61C2E41E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:49:f0:0e:14:16:1e:14:f6:90:e1:5d:99:61:
                    ef:ae:4f:43:a5:d2:f4:81:2b:1d:27:e6:31:e2:d9:
                    56:b6:52:0f:57:fe:5e:dc:93:d1:67:65:c3:b2:81:
                    68:34:32:01:cb:30:50:d7:1a:6f:03:ce:5c:c4:0a:
                    a6:1d:40:7e:11:d0:44:d8:d5:28:9a:29:b3:17:f6:
                    25:22:20:38:18:8e:d4:f6:9a:ed:7c:a8:33:22:9e:
                    ba:67:7b:2f:b7:06:06:56:0e:58:37:06:d8:ad:24:
                    c5:7e:98:f0:07:0c:d8:4d:20:c0:e2:f5:13:f4:86:
                    32:a7:d8:53:47:b2:02:5d:04:b9:4f:64:d0:97:0d:
                    c7:b9:7b:6c:b4:66:f5:89:d7:31:f7:67:cd:17:8f:
                    2c:9e:d1:b9:0f:7b:1e:6b:18:eb:c2:04:82:6a:d7:
                    52:0d:8f:28:65:2e:b4:8c:0d:16:52:ad:42:a2:a1:
                    34:a9:84:7f:36:b8:b4:fb:0b:9d:5a:5e:ee:3d:b9:
                    c1:c5:87:f0:2b:ca:25:b0:b2:9f:78:64:97:c9:7c:
                    65:1e:57:bf:14:ce:30:b8:82:b1:b1:8f:c2:07:5e:
                    74:21:4b:c9:9d:98:70:ae:2b:be:d1:2a:fc:1d:cf:
                    dd:c9:0b:7d:29:97:a6:c2:14:31:c0:22:60:0e:96:
                    f0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DB:D6:23:6E:44:C0:2A:CD:D2:D3:09:D3:F7:C3:AA:61:C2:E4:1E
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/EdvWI25EwCrN0tMJ0_fDqmHC5B4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:bf:df:65:bd:bb:fb:b3:b0:f3:48:61:21:0a:46:33:4b:59:
         23:bf:c9:a1:ce:fd:36:87:16:dd:45:07:c9:28:a4:a3:e1:ad:
         93:79:ae:28:1e:8a:e3:35:4d:ad:e3:05:04:b9:f8:df:96:31:
         8d:d7:86:b8:cb:a4:1c:d1:37:12:7f:0a:bf:98:2d:be:16:47:
         f0:ac:95:6c:47:f6:f6:b2:ed:31:06:30:2d:c9:45:ab:59:49:
         3e:ea:8d:0b:11:71:44:93:64:3b:5f:80:f5:30:7f:ae:91:ca:
         bc:c4:a1:1e:fa:c3:c4:17:68:1c:24:ea:66:b0:b2:58:fb:c2:
         8f:79:af:4a:eb:d4:0b:b2:2a:23:8b:e4:60:c5:64:29:6f:6e:
         43:8d:7f:94:95:18:7f:72:14:c6:dd:66:1b:26:0e:c3:f4:46:
         b1:c6:45:99:46:83:ef:82:10:ef:f7:aa:94:31:9f:c4:30:fc:
         38:40:12:e8:b9:05:24:68:df:b3:01:fb:76:26:6b:88:62:b8:
         d7:3c:95:f9:b7:c9:8e:e2:25:5e:fd:b8:c5:0d:dc:87:a4:40:
         3f:9e:34:09:ee:53:26:6b:8b:e0:b8:54:83:00:4e:12:39:92:
         1b:24:de:dd:2e:c6:cf:b8:6a:44:ae:ab:80:3c:4a:9b:0c:e2:
         44:3d:7c:29
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMTA5MjIw
NjM0MDFaFw0yMjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDExREJENjIzNkU0NEMw
MkFDREQyRDMwOUQzRjdDM0FBNjFDMkU0MUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCcSfAOFBYeFPaQ4V2ZYe+uT0Ol0vSBKx0n5jHi2Va2Ug9X/l7c
k9FnZcOygWg0MgHLMFDXGm8DzlzECqYdQH4R0ETY1SiaKbMX9iUiIDgYjtT2mu18
qDMinrpney+3BgZWDlg3BtitJMV+mPAHDNhNIMDi9RP0hjKn2FNHsgJdBLlPZNCX
Dce5e2y0ZvWJ1zH3Z80Xjyye0bkPex5rGOvCBIJq11INjyhlLrSMDRZSrUKioTSp
hH82uLT7C51aXu49ucHFh/AryiWwsp94ZJfJfGUeV78UzjC4grGxj8IHXnQhS8md
mHCuK77RKvwdz93JC30pl6bCFDHAImAOlvCvAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQUEdvWI25EwCrN0tMJ0/fDqmHC5B4wHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xMDI0Ny9FZHZXSTI1RXdDck4wdE1KMF9mRHFtSEM1QjQucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0rzJMA0GCSqGSIb3DQEBCwUA
A4IBAQAYv99lvbv7s7DzSGEhCkYzS1kjv8mhzv02hxbdRQfJKKSj4a2Tea4oHorj
NU2t4wUEufjfljGN14a4y6Qc0TcSfwq/mC2+FkfwrJVsR/b2su0xBjAtyUWrWUk+
6o0LEXFEk2Q7X4D1MH+ukcq8xKEe+sPEF2gcJOpmsLJY+8KPea9K69QLsioji+Rg
xWQpb25DjX+UlRh/chTG3WYbJg7D9EaxxkWZRoPvghDv96qUMZ/EMPw4QBLouQUk
aN+zAft2JmuIYrjXPJX5t8mO4iVe/bjFDdyHpEA/njQJ7lMma4vguFSDAE4SOZIb
JN7dLsbPuGpErquAPEqbDOJEPXwp
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:33 2025 by rpki-client