Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/mG9zeX9MEVteC_HyCPrGg6PQERM.roa
File:                     mG9zeX9MEVteC_HyCPrGg6PQERM.roa (raw, json)
Hash identifier:          SNLFEchtl6mV1/oYutwyihfDrEWsctzSRIKtKpprlKY=
Subject key identifier:   98:6F:73:79:7F:4C:11:5B:5E:0B:F1:F2:08:FA:C6:83:A3:D0:11:13
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0195
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/mG9zeX9MEVteC_HyCPrGg6PQERM.roa
Signing time:             Tue 01 Aug 2023 01:28:12 +0000
ROA not before:           Tue 01 Aug 2023 01:28:12 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     7684
IP address blocks:        182.48.15.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405 (0x195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Aug  1 01:28:12 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=986F73797F4C115B5E0BF1F208FAC683A3D01113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f2:0b:50:c8:57:0d:44:29:0b:01:89:fa:ce:
                    bd:90:36:01:4c:9e:c7:c0:84:36:7d:06:1e:52:39:
                    10:c2:d5:0e:10:2a:87:96:6a:58:df:78:9e:11:39:
                    56:a0:5e:51:c9:76:36:72:0f:1f:2d:85:a6:a6:3e:
                    c6:77:34:2c:45:f9:64:b4:34:3b:dd:80:1f:3c:3c:
                    62:77:b1:23:7c:ee:60:80:46:66:41:80:5d:a4:7f:
                    c4:93:e7:4b:6d:b2:31:96:4a:22:a1:d6:fc:11:ed:
                    71:e4:18:0f:d1:b9:82:28:f7:78:cc:60:ba:dd:c2:
                    4f:ca:f6:53:30:81:0d:5c:11:de:ea:b5:4b:4e:e6:
                    60:87:75:26:93:b5:76:f5:ff:09:00:d8:be:6a:0c:
                    82:b9:2c:2f:f8:0e:22:47:ae:09:4a:fd:a7:c3:83:
                    5b:5b:5c:cb:36:be:da:37:42:6b:46:27:47:0f:f7:
                    5b:a0:98:12:9e:b0:14:88:8b:12:5e:39:e8:b4:12:
                    3f:a8:42:64:94:0c:0f:84:bb:05:63:f1:d8:2e:f6:
                    25:a0:e8:7c:ec:5a:b7:97:a0:f9:85:79:19:42:c5:
                    ca:b9:77:3f:5a:0c:bf:01:80:cc:ec:70:1a:7c:57:
                    4d:7f:fd:46:ad:b7:7d:83:c6:fe:9b:8a:0b:db:bd:
                    fd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6F:73:79:7F:4C:11:5B:5E:0B:F1:F2:08:FA:C6:83:A3:D0:11:13
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/mG9zeX9MEVteC_HyCPrGg6PQERM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.48.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:c8:c6:bb:62:e6:04:83:4b:69:86:53:26:21:66:46:3f:06:
         dc:3a:cd:ea:09:1f:5d:7d:ee:3e:fa:39:7e:e0:c1:e9:dc:1b:
         32:9a:76:82:14:a2:c8:73:43:35:38:ae:42:24:45:f7:a9:58:
         a2:49:3e:cf:b9:42:3a:04:c7:1d:c5:34:7c:d7:3f:0a:ea:99:
         7f:df:ea:04:d8:13:be:8d:b4:7e:95:ea:ea:5c:d5:dd:73:56:
         ab:9d:59:2c:11:2b:1c:92:6a:06:ee:f9:ac:60:00:61:79:f1:
         e9:54:d8:20:e3:e8:bb:9a:67:cb:8b:7f:65:9a:30:a9:ff:1e:
         f3:43:49:7a:15:bb:db:06:cb:d7:4e:c5:d4:4b:18:d5:46:dc:
         ef:11:dc:6e:fb:70:37:c3:8a:d5:fa:50:66:00:b8:3b:7f:d2:
         f4:e9:9b:35:fe:f9:7b:b9:53:64:77:8c:f5:04:bb:0d:cb:69:
         a8:a3:f8:cf:a6:f4:9e:2a:d5:ec:78:76:ee:3d:be:b9:7e:c6:
         a6:c6:fc:90:34:ea:57:93:af:94:8c:40:1d:9f:d8:25:fc:4a:
         bf:72:e1:43:81:c4:f1:84:28:42:fc:cb:3d:e3:e7:f2:2b:d2:
         55:d5:aa:b0:4d:d4:24:1a:a6:90:64:53:3d:0d:08:6d:8c:66:
         64:86:7f:79
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMzA4MDEw
MTI4MTJaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDk4NkY3Mzc5N0Y0QzEx
NUI1RTBCRjFGMjA4RkFDNjgzQTNEMDExMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDo8gtQyFcNRCkLAYn6zr2QNgFMnsfAhDZ9Bh5SORDC1Q4QKoeW
aljfeJ4ROVagXlHJdjZyDx8thaamPsZ3NCxF+WS0NDvdgB88PGJ3sSN87mCARmZB
gF2kf8ST50ttsjGWSiKh1vwR7XHkGA/RuYIo93jMYLrdwk/K9lMwgQ1cEd7qtUtO
5mCHdSaTtXb1/wkA2L5qDIK5LC/4DiJHrglK/afDg1tbXMs2vto3QmtGJ0cP91ug
mBKesBSIixJeOei0Ej+oQmSUDA+EuwVj8dgu9iWg6HzsWreXoPmFeRlCxcq5dz9a
DL8BgMzscBp8V01//Uatt32Dxv6bigvbvf0vAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUmG9zeX9MEVteC/HyCPrGg6PQERMwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny9tRzl6ZVg5TUVWdGVDX0h5Q1ByR2c2UFFFUk0u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAtjAPMA0GCSqGSIb3DQEBCwUAA4IBAQB9yMa7YuYEg0tphlMmIWZG
PwbcOs3qCR9dfe4++jl+4MHp3BsymnaCFKLIc0M1OK5CJEX3qViiST7PuUI6BMcd
xTR81z8K6pl/3+oE2BO+jbR+lerqXNXdc1arnVksESsckmoG7vmsYABhefHpVNgg
4+i7mmfLi39lmjCp/x7zQ0l6FbvbBsvXTsXUSxjVRtzvEdxu+3A3w4rV+lBmALg7
f9L06Zs1/vl7uVNkd4z1BLsNy2moo/jPpvSeKtXseHbuPb65fsamxvyQNOpXk6+U
jEAdn9gl/Eq/cuFDgcTxhChC/Ms94+fyK9JV1aqwTdQkGqaQZFM9DQhtjGZkhn95
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:07 2025 by rpki-client