Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/F633qZOZ3R9tGXThopRZK6IfF44.roa
File:                     F633qZOZ3R9tGXThopRZK6IfF44.roa (raw, json)
Hash identifier:          B7LkeMvFDSQdj9jQ5iObKsISAn9KM6z1bFxzFfUmtG8=
Subject key identifier:   17:AD:F7:A9:93:99:DD:1F:6D:19:74:E1:A2:94:59:2B:A2:1F:17:8E
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       57
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/F633qZOZ3R9tGXThopRZK6IfF44.roa
Signing time:             Sun 31 Mar 2024 01:30:38 +0000
ROA not before:           Sun 31 Mar 2024 01:30:38 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2554
IP address blocks:        61.206.32.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 01:30:38 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=17ADF7A99399DD1F6D1974E1A294592BA21F178E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:93:cd:59:39:0d:f2:97:21:72:64:6f:48:b2:
                    a4:7a:09:39:c1:38:76:37:4a:e8:a2:6a:08:cd:40:
                    85:08:de:91:45:28:42:b0:fc:c9:9d:f3:8a:92:eb:
                    4b:20:43:49:fa:0a:66:fc:ca:b5:cf:27:63:01:05:
                    e9:bb:db:ea:b8:21:51:f6:9e:e4:25:f9:fd:d1:c4:
                    f9:1f:12:dd:50:d6:f6:c7:27:22:74:52:0c:8b:f3:
                    8e:ec:44:4e:01:5a:1e:94:b7:c8:91:f8:5b:15:35:
                    3e:7a:80:09:86:f9:8b:94:e2:38:7b:63:6d:3a:43:
                    0f:e1:53:18:17:f9:ca:0d:93:67:db:0c:ae:f6:bc:
                    72:0c:9b:cc:63:14:8c:9f:ca:03:72:50:8d:f7:bd:
                    61:3f:69:2f:0e:13:2a:50:a0:38:f0:92:3a:9d:a4:
                    dc:e3:ee:d0:61:3e:28:6f:85:13:94:9c:e5:ff:35:
                    3b:82:3c:d5:0f:e1:c1:4a:56:cc:91:af:d7:d7:8b:
                    56:b1:d2:43:f9:a9:78:1f:66:3d:66:75:db:cf:3e:
                    52:1f:31:ba:b3:30:e6:55:5c:56:4e:4e:fe:4e:fb:
                    65:1d:42:95:5e:06:ec:e5:12:9a:68:0a:cc:14:d5:
                    4c:69:a4:4b:f5:66:72:e7:25:61:96:c8:c0:2b:7a:
                    75:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AD:F7:A9:93:99:DD:1F:6D:19:74:E1:A2:94:59:2B:A2:1F:17:8E
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/F633qZOZ3R9tGXThopRZK6IfF44.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.206.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4e:4a:18:b4:a9:ec:00:0a:d6:f6:de:bf:ca:39:85:ba:42:b9:
         19:84:ba:e6:ed:05:08:9f:1f:5d:5a:f3:f8:6d:bb:1a:f4:62:
         82:b1:19:56:bb:12:55:a0:60:93:8e:a8:a5:76:5d:e2:7d:f9:
         52:22:2a:ec:f5:ce:f8:e7:5b:cc:3e:62:a8:c6:1f:53:c3:9c:
         bc:10:6f:75:63:d7:56:f6:30:f2:84:03:9a:2e:49:1a:32:38:
         71:90:92:67:cd:dd:e8:ea:b9:34:17:c4:a2:b9:13:9f:b8:88:
         fe:a7:87:2b:ed:6b:42:27:b2:16:f5:fe:6b:a5:f1:78:a1:b5:
         3e:d6:b6:8e:00:02:59:11:7e:1d:6c:3a:b3:3b:9c:74:22:7b:
         fd:af:ab:8d:84:e1:3a:dc:4a:fd:1d:d8:50:1f:4a:c9:99:e3:
         35:65:5c:65:c5:df:57:ee:aa:8b:56:7b:0f:1e:52:81:d9:f6:
         60:99:f3:9f:c3:4a:36:fa:94:3d:3b:ee:9c:41:1b:11:1f:e8:
         bd:ba:5c:c1:b7:31:b4:5d:d6:2a:90:3e:04:90:e4:49:fe:72:
         7c:5f:83:2b:22:35:b8:dc:ec:7d:12:13:d8:37:bf:5a:e0:67:
         42:00:b2:13:59:c2:ea:e1:0e:d4:95:c5:c0:02:25:ae:e5:18:
         57:eb:e8:b4
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBVzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OTBB
ODIyODhEMkUyM0RCRkE4NzYzOEYzRUI4Qjk5NUUxODk3RTk1MB4XDTI0MDMzMTAx
MzAzOFoXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMTdBREY3QTk5Mzk5REQx
RjZEMTk3NEUxQTI5NDU5MkJBMjFGMTc4RTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALWTzVk5DfKXIXJkb0iypHoJOcE4djdK6KJqCM1AhQjekUUoQrD8
yZ3zipLrSyBDSfoKZvzKtc8nYwEF6bvb6rghUfae5CX5/dHE+R8S3VDW9scnInRS
DIvzjuxETgFaHpS3yJH4WxU1PnqACYb5i5TiOHtjbTpDD+FTGBf5yg2TZ9sMrva8
cgybzGMUjJ/KA3JQjfe9YT9pLw4TKlCgOPCSOp2k3OPu0GE+KG+FE5Sc5f81O4I8
1Q/hwUpWzJGv19eLVrHSQ/mpeB9mPWZ1288+Uh8xurMw5lVcVk5O/k77ZR1ClV4G
7OUSmmgKzBTVTGmkS/VmcuclYZbIwCt6dZUCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQXrfepk5ndH20ZdOGilFkroh8XjjAfBgNVHSMEGDAWgBRZCoIojS4j2/qHY48+
uLmV4Yl+lTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwODMvV1FxQ0tJMHVJOXY2aDJPUFByaTVsZUdKZnBVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV1FxQ0tJMHVJOXY2aDJPUFByaTVs
ZUdKZnBVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDgzL0Y2MzNxWk9aM1I5dEdYVGhvcFJaSzZJZkY0NC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAQ9ziAwDQYJKoZIhvcNAQELBQADggEBAE5KGLSp7AAK1vbev8o5hbpC
uRmEuubtBQifH11a8/htuxr0YoKxGVa7ElWgYJOOqKV2XeJ9+VIiKuz1zvjnW8w+
YqjGH1PDnLwQb3Vj11b2MPKEA5ouSRoyOHGQkmfN3ejquTQXxKK5E5+4iP6nhyvt
a0Inshb1/mul8XihtT7Wto4AAlkRfh1sOrM7nHQie/2vq42E4TrcSv0d2FAfSsmZ
4zVlXGXF31fuqotWew8eUoHZ9mCZ85/DSjb6lD077pxBGxEf6L26XMG3MbRd1iqQ
PgSQ5En+cnxfgysiNbjc7H0SE9g3v1rgZ0IAshNZwurhDtSVxcACJa7lGFfr6LQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:27 2025 by rpki-client