Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/UnLP_srLkaH5E3_SSX-KLw60jZg.roa
File:                     UnLP_srLkaH5E3_SSX-KLw60jZg.roa (raw, json)
Hash identifier:          6G7NEI2P+KGf9QjYH8BwL0Y//dtqZFa92u2TPPoQYe4=
Subject key identifier:   52:72:CF:FE:CA:CB:91:A1:F9:13:7F:D2:49:7F:8A:2F:0E:B4:8D:98
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       6A
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/UnLP_srLkaH5E3_SSX-KLw60jZg.roa
Signing time:             Thu 22 Jun 2023 00:36:55 +0000
ROA not before:           Thu 22 Jun 2023 00:36:55 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.199.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:36:55 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=5272CFFECACB91A1F9137FD2497F8A2F0EB48D98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b7:ad:d5:70:5f:e7:b5:5d:24:8a:4d:73:8e:
                    40:fe:9a:44:2f:b7:69:f0:fc:c9:74:1b:6c:a1:2a:
                    8b:3b:58:fa:34:bd:ad:e1:49:b2:bb:b6:13:35:88:
                    80:0a:58:08:d1:b3:79:46:73:b6:ec:b9:34:de:e0:
                    09:45:17:2c:41:8f:e9:62:ce:c7:1b:96:b8:d0:9c:
                    87:2d:07:a0:e3:77:b1:c9:b2:9c:bc:5a:ac:d5:11:
                    06:df:b8:e7:0e:29:d7:6b:2a:2c:79:a5:ab:4c:35:
                    2e:66:c7:df:6c:61:6b:e7:ae:14:32:6d:bf:d8:90:
                    78:de:ef:0e:4e:fa:fa:e3:b0:9f:e7:71:25:15:b6:
                    6f:57:1b:e8:d4:db:3e:93:99:67:09:06:60:58:2a:
                    f8:db:57:27:ef:44:1e:47:d9:15:5b:1d:05:aa:24:
                    94:97:e7:7f:71:f0:d4:33:c3:84:f5:08:88:02:81:
                    c4:06:00:63:46:49:4d:ad:42:cc:b5:50:12:7b:c6:
                    90:61:e9:c5:f8:43:bc:5a:2b:f6:2c:9f:26:b9:86:
                    09:cf:d6:23:f3:28:73:09:79:29:9b:56:d9:bd:83:
                    00:30:fe:b2:94:9d:25:59:3c:78:af:76:51:3a:ec:
                    27:e0:b0:18:d2:78:95:d5:4b:76:11:ec:4f:f2:6c:
                    63:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:72:CF:FE:CA:CB:91:A1:F9:13:7F:D2:49:7F:8A:2F:0E:B4:8D:98
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/UnLP_srLkaH5E3_SSX-KLw60jZg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:49:15:7f:44:03:7a:8e:d0:33:98:11:ba:1c:89:f5:38:40:
         d2:6f:6b:90:a7:9a:05:17:0e:9c:f0:49:1a:36:02:b2:b7:7a:
         bc:2d:b3:86:d2:3c:e8:33:09:3c:d3:0e:c7:16:b3:1d:11:70:
         e6:6c:00:92:7e:f1:f0:ef:f2:c3:86:65:71:ea:b3:db:75:13:
         43:d5:44:87:a9:30:f6:01:1b:e8:6d:76:ee:3f:ef:88:ba:75:
         de:46:e4:c6:06:3b:42:11:d8:a8:4c:ff:33:46:65:5f:d0:41:
         c5:82:80:42:0f:af:ed:20:ab:5b:5c:26:f9:e8:c7:e8:82:dd:
         69:5d:0e:43:47:73:af:e0:77:50:6c:5e:98:7b:8b:e9:c6:fb:
         e0:0f:a4:8c:13:04:1b:40:d3:a5:cb:19:6d:19:4e:9f:77:ff:
         d4:6c:de:a5:63:46:e4:85:f6:c3:ad:79:c4:1e:7e:6c:0e:10:
         5e:20:b6:83:7b:35:88:81:b3:dd:0d:93:6f:06:ac:98:ec:b5:
         48:55:53:e7:40:41:83:43:3b:6f:39:fd:3d:41:8c:1a:98:4e:
         8d:0a:21:6c:aa:84:21:1f:f2:da:11:6f:04:c8:09:55:1d:6c:
         79:b2:52:13:c3:97:b5:5f:fb:b8:63:cc:73:a1:ff:16:5b:67:
         f7:46:26:9b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBajANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5REIw
NzY0QzZERkMxRTNERjZCRDU4MEVBNjk5NEExRTcwOThGNTJBMB4XDTIzMDYyMjAw
MzY1NVoXDTI0MDYxNDAxMzAwMlowMzExMC8GA1UEAxMoNTI3MkNGRkVDQUNCOTFB
MUY5MTM3RkQyNDk3RjhBMkYwRUI0OEQ5ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALu3rdVwX+e1XSSKTXOOQP6aRC+3afD8yXQbbKEqiztY+jS9reFJ
sru2EzWIgApYCNGzeUZztuy5NN7gCUUXLEGP6WLOxxuWuNCchy0HoON3scmynLxa
rNURBt+45w4p12sqLHmlq0w1LmbH32xha+euFDJtv9iQeN7vDk76+uOwn+dxJRW2
b1cb6NTbPpOZZwkGYFgq+NtXJ+9EHkfZFVsdBaoklJfnf3Hw1DPDhPUIiAKBxAYA
Y0ZJTa1CzLVQEnvGkGHpxfhDvFor9iyfJrmGCc/WI/Mocwl5KZtW2b2DADD+spSd
JVk8eK92UTrsJ+CwGNJ4ldVLdhHsT/JsY98CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBRScs/+ysuRofkTf9JJf4ovDrSNmDAfBgNVHSMEGDAWgBSdsHZMbfwePfa9WA6m
mUoecJj1KjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNjMvbmJCMlRHMzhIajMydlZnT3BwbEtIbkNZOVNvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbmJCMlRHMzhIajMydlZnT3BwbEtI
bkNZOVNvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDYzL1VuTFBfc3JMa2FINUUzX1NTWC1LTHc2MGpaZy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABzpscwDQYJKoZIhvcNAQELBQADggEBAClJFX9EA3qO0DOYEbocifU4
QNJva5CnmgUXDpzwSRo2ArK3erwts4bSPOgzCTzTDscWsx0RcOZsAJJ+8fDv8sOG
ZXHqs9t1E0PVRIepMPYBG+htdu4/74i6dd5G5MYGO0IR2KhM/zNGZV/QQcWCgEIP
r+0gq1tcJvnox+iC3WldDkNHc6/gd1BsXph7i+nG++APpIwTBBtA06XLGW0ZTp93
/9Rs3qVjRuSF9sOtecQefmwOEF4gtoN7NYiBs90Nk28GrJjstUhVU+dAQYNDO285
/T1BjBqYTo0KIWyqhCEf8toRbwTICVUdbHmyUhPDl7Vf+7hjzHOh/xZbZ/dGJps=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:20:53 2025 by rpki-client