Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/vz_CBsSr0rVOArpIjf0dN5BJims.roa
File:                     vz_CBsSr0rVOArpIjf0dN5BJims.roa (raw, json)
Hash identifier:          UjRaxiS1zCwDTp78f8pZ2UJtTy94XYKr8JJ7szgvEQE=
Subject key identifier:   BF:3F:C2:06:C4:AB:D2:B5:4E:02:BA:48:8D:FD:1D:37:90:49:8A:6B
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       30
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/vz_CBsSr0rVOArpIjf0dN5BJims.roa
Signing time:             Thu 22 Jun 2023 00:34:00 +0000
ROA not before:           Thu 22 Jun 2023 00:34:00 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.175.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:34:00 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=BF3FC206C4ABD2B54E02BA488DFD1D3790498A6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2f:9e:a1:c7:f5:b9:ec:b2:40:a3:f5:0b:da:
                    cc:2d:b0:6b:b3:9a:1b:67:4d:fc:a3:9b:4e:4d:66:
                    01:48:8f:62:16:0e:cf:1a:d0:49:71:43:36:48:5f:
                    4a:8a:ec:d8:c2:6f:63:3a:f6:c2:97:3a:1f:a6:ad:
                    98:19:78:c3:3f:ef:a0:73:3a:f1:af:f4:e4:85:67:
                    23:25:26:0e:45:6f:18:c8:7d:ad:e3:5e:2c:aa:ef:
                    0b:34:ce:83:d2:2f:1e:42:d0:bf:46:11:02:ab:aa:
                    b6:66:f4:c7:ba:1d:29:e9:8a:89:b2:ae:3d:49:fe:
                    8f:30:f4:05:32:e1:b9:cf:86:bd:5e:18:77:ce:d5:
                    5c:fd:34:e6:67:58:b6:5d:b7:8e:36:7c:84:05:70:
                    fb:e2:9c:79:00:11:2f:de:48:5d:62:08:03:30:bd:
                    7e:02:a6:f8:4e:30:98:8a:59:74:db:54:30:0f:3b:
                    f6:71:ca:28:f8:25:1f:dc:2c:3e:46:c8:92:ac:39:
                    51:0c:36:5b:49:b3:cf:f9:c6:9f:9a:4f:93:fc:4c:
                    61:0b:82:3c:22:99:a5:87:ee:a9:c4:61:c6:2f:4b:
                    55:0a:e3:34:88:c6:53:47:67:a0:80:6d:ad:03:b4:
                    f0:ce:8a:f4:4a:e9:69:f2:e5:eb:6b:3a:32:e0:aa:
                    03:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3F:C2:06:C4:AB:D2:B5:4E:02:BA:48:8D:FD:1D:37:90:49:8A:6B
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/vz_CBsSr0rVOArpIjf0dN5BJims.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:45:c2:5d:07:e2:bb:9a:76:2f:05:2b:a0:e3:5f:91:80:9b:
         65:0a:17:00:64:ea:2f:23:19:68:70:28:11:fa:b7:71:4b:bc:
         01:21:06:a3:69:4b:0f:e9:e0:61:fe:3a:ae:07:48:0c:f1:8e:
         64:e4:4d:41:4e:c6:b6:37:55:e1:93:50:22:b4:0b:6b:be:3d:
         8c:44:7e:d5:8d:61:4c:ed:de:14:3c:df:84:1d:11:04:f5:f7:
         54:ea:68:d2:13:7d:ff:df:87:47:bc:6e:98:22:c2:ec:8b:03:
         d0:55:1d:88:5a:ab:45:e0:e0:97:a7:40:58:c7:1b:78:a3:2c:
         44:d2:53:aa:8c:f1:98:59:e4:8c:26:2b:60:4e:96:96:ee:c6:
         55:05:e5:4e:da:a0:eb:93:23:bd:49:6f:57:f6:81:82:e4:58:
         bd:0f:e7:09:da:1f:d2:89:22:4c:f7:24:5d:5e:c1:b5:ec:97:
         48:44:53:c3:6a:43:7d:6f:7b:5a:e5:75:95:57:cc:9e:c0:31:
         55:ae:9e:1b:69:e1:59:7c:17:7b:5b:dc:46:8d:b5:f3:ba:dc:
         d5:82:fa:78:ce:98:17:3e:60:37:00:5c:73:0d:14:50:73:ac:
         4e:6d:36:c8:23:2d:b9:68:7b:78:a0:44:56:9b:98:a9:c2:d4:
         5e:46:2e:be
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5REIw
NzY0QzZERkMxRTNERjZCRDU4MEVBNjk5NEExRTcwOThGNTJBMB4XDTIzMDYyMjAw
MzQwMFoXDTI0MDYxNDAxMzAwMlowMzExMC8GA1UEAxMoQkYzRkMyMDZDNEFCRDJC
NTRFMDJCQTQ4OERGRDFEMzc5MDQ5OEE2QjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK4vnqHH9bnsskCj9QvazC2wa7OaG2dN/KObTk1mAUiPYhYOzxrQ
SXFDNkhfSors2MJvYzr2wpc6H6atmBl4wz/voHM68a/05IVnIyUmDkVvGMh9reNe
LKrvCzTOg9IvHkLQv0YRAquqtmb0x7odKemKibKuPUn+jzD0BTLhuc+GvV4Yd87V
XP005mdYtl23jjZ8hAVw++KceQARL95IXWIIAzC9fgKm+E4wmIpZdNtUMA879nHK
KPglH9wsPkbIkqw5UQw2W0mzz/nGn5pPk/xMYQuCPCKZpYfuqcRhxi9LVQrjNIjG
U0dnoIBtrQO08M6K9ErpafLl62s6MuCqA6kCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBS/P8IGxKvStU4CukiN/R03kEmKazAfBgNVHSMEGDAWgBSdsHZMbfwePfa9WA6m
mUoecJj1KjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNjMvbmJCMlRHMzhIajMydlZnT3BwbEtIbkNZOVNvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbmJCMlRHMzhIajMydlZnT3BwbEtI
bkNZOVNvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDYzL3Z6X0NCc1NyMHJWT0FycElqZjBkTjVCSmltcy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABzpq8wDQYJKoZIhvcNAQELBQADggEBAHNFwl0H4ruadi8FK6DjX5GA
m2UKFwBk6i8jGWhwKBH6t3FLvAEhBqNpSw/p4GH+Oq4HSAzxjmTkTUFOxrY3VeGT
UCK0C2u+PYxEftWNYUzt3hQ834QdEQT191TqaNITff/fh0e8bpgiwuyLA9BVHYha
q0Xg4JenQFjHG3ijLETSU6qM8ZhZ5IwmK2BOlpbuxlUF5U7aoOuTI71Jb1f2gYLk
WL0P5wnaH9KJIkz3JF1ewbXsl0hEU8NqQ31ve1rldZVXzJ7AMVWunhtp4Vl8F3tb
3EaNtfO63NWC+njOmBc+YDcAXHMNFFBzrE5tNsgjLbloe3igRFabmKnC1F5GLr4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:39 2025 by rpki-client