Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/sggESawLvrc1XPWs3lOG2rdBa6U.roa
File:                     sggESawLvrc1XPWs3lOG2rdBa6U.roa (raw, json)
Hash identifier:          R9Fhs3VSRBWwkJhQ+hE0K+cnHAR4QVZrYPmCU5NydKY=
Subject key identifier:   B2:08:04:49:AC:0B:BE:B7:35:5C:F5:AC:DE:53:86:DA:B7:41:6B:A5
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       07
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/sggESawLvrc1XPWs3lOG2rdBa6U.roa
Signing time:             Wed 28 Feb 2024 04:47:55 +0000
ROA not before:           Wed 28 Feb 2024 04:47:55 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     7679
IP address blocks:        61.114.128.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Feb 28 04:47:55 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=B2080449AC0BBEB7355CF5ACDE5386DAB7416BA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ec:8d:a6:77:cd:9e:ad:cc:1d:20:0f:24:89:
                    cb:b4:5e:d9:9a:90:96:e1:e5:82:88:b5:88:fd:20:
                    bf:c3:b4:92:2a:f9:1e:10:90:6a:3e:cb:b3:ee:78:
                    9e:6e:47:f9:ce:a7:6f:e7:39:c8:99:d6:0c:97:97:
                    d8:a0:1a:63:be:09:36:64:57:2c:88:c5:b4:28:19:
                    49:61:57:72:90:99:3f:28:26:5f:c0:d1:88:f8:2b:
                    4b:fa:2a:e3:0e:b7:61:df:d1:a5:0b:c3:6c:1a:19:
                    f2:78:bd:b8:c8:01:22:40:b3:46:10:bf:bb:6b:94:
                    57:1c:e7:c9:e8:f1:ea:4a:18:8a:95:0d:2f:bb:43:
                    1e:6e:16:6d:59:c8:ea:5b:f4:87:78:4c:c2:99:a3:
                    2e:8d:74:7e:4b:72:f1:20:b1:da:d9:63:76:53:e3:
                    d4:89:90:f3:79:17:c6:0a:f5:42:3c:eb:b4:c5:89:
                    d2:08:48:aa:b4:27:93:fa:51:10:ff:25:36:ee:1b:
                    2f:33:f0:85:84:23:16:c1:ee:76:b5:55:7c:cc:9e:
                    76:21:38:5a:f1:cf:5d:d1:93:39:3d:ca:91:46:67:
                    fd:9a:41:8f:d2:a5:92:4c:ea:7b:dd:06:b6:3e:5b:
                    99:45:ed:77:44:34:f8:81:f2:19:d7:7f:d3:fd:46:
                    63:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:08:04:49:AC:0B:BE:B7:35:5C:F5:AC:DE:53:86:DA:B7:41:6B:A5
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/sggESawLvrc1XPWs3lOG2rdBa6U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.114.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         17:72:c9:8d:7c:df:5f:91:52:9b:09:eb:43:cb:f8:55:79:19:
         0a:34:ba:9c:93:94:c0:e8:30:00:e4:68:a1:02:87:a8:d3:b0:
         df:e1:6b:a7:59:9b:fd:97:bc:ba:0f:c2:38:b7:9d:b0:a7:64:
         db:24:86:57:00:61:d2:31:1a:5f:79:c3:69:52:a3:3a:65:67:
         ed:8a:d3:13:2e:35:c0:df:e4:81:c8:93:3d:aa:5c:cf:fe:96:
         a2:74:41:9b:bb:3a:1e:3e:3a:b1:df:98:88:c3:8b:6e:c1:ee:
         80:33:9c:7b:de:85:c8:35:1f:75:e7:51:2c:ac:54:80:e5:23:
         25:49:dd:41:a0:61:20:81:b3:0c:5a:f9:34:fc:b9:f6:68:52:
         95:ab:9d:45:c8:1e:5f:0b:63:91:e8:df:1a:b3:a5:d3:65:17:
         df:c6:bb:cd:a8:37:2a:fb:29:f5:1f:3b:9d:03:dd:c2:5b:1f:
         38:05:31:5b:d2:c5:58:3b:23:fe:7e:f0:ff:cc:75:05:72:87:
         c5:34:99:bc:8a:55:90:fd:f7:6c:b6:ac:fb:6b:bc:bd:95:5d:
         e5:ff:19:4c:65:0f:37:0b:99:fa:51:5a:09:26:56:50:51:fd:
         8a:d1:46:28:0b:a3:c6:66:fe:be:4e:9f:31:ae:78:ca:2a:83:
         7b:7f:7f:3a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNzVE
OTc4MkIxM0U5OTEyOENEMzRGMjJDMDlGRThFN0I1Q0JBNzBCMB4XDTI0MDIyODA0
NDc1NVoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoQjIwODA0NDlBQzBCQkVC
NzM1NUNGNUFDREU1Mzg2REFCNzQxNkJBNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKzsjaZ3zZ6tzB0gDySJy7Re2ZqQluHlgoi1iP0gv8O0kir5HhCQ
aj7Ls+54nm5H+c6nb+c5yJnWDJeX2KAaY74JNmRXLIjFtCgZSWFXcpCZPygmX8DR
iPgrS/oq4w63Yd/RpQvDbBoZ8ni9uMgBIkCzRhC/u2uUVxznyejx6koYipUNL7tD
Hm4WbVnI6lv0h3hMwpmjLo10fkty8SCx2tljdlPj1ImQ83kXxgr1QjzrtMWJ0ghI
qrQnk/pREP8lNu4bLzPwhYQjFsHudrVVfMyediE4WvHPXdGTOT3KkUZn/ZpBj9Kl
kkzqe90Gtj5bmUXtd0Q0+IHyGdd/0/1GY1cCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSyCARJrAu+tzVc9azeU4bat0FrpTAfBgNVHSMEGDAWgBQnXZeCsT6ZEozTTyLA
n+jntcunCzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjQ5L0oxMlhnckUtbVJLTTAwOGl3Sl9vNTdYTHB3cy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0oxMlhnckUtbVJLTTAwOGl3Sl9vNTdY
THB3cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yNDkvc2dnRVNhd0x2cmMxWFBXczNsT0cycmRCYTZVLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBT1ygDANBgkqhkiG9w0BAQsFAAOCAQEAF3LJjXzfX5FSmwnrQ8v4VXkZCjS6
nJOUwOgwAORooQKHqNOw3+Frp1mb/Ze8ug/COLedsKdk2ySGVwBh0jEaX3nDaVKj
OmVn7YrTEy41wN/kgciTPapcz/6WonRBm7s6Hj46sd+YiMOLbsHugDOce96FyDUf
dedRLKxUgOUjJUndQaBhIIGzDFr5NPy59mhSlaudRcgeXwtjkejfGrOl02UX38a7
zag3Kvsp9R87nQPdwlsfOAUxW9LFWDsj/n7w/8x1BXKHxTSZvIpVkP33bLas+2u8
vZVd5f8ZTGUPNwuZ+lFaCSZWUFH9itFGKAujxmb+vk6fMa54yiqDe39/Og==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:18 2025 by rpki-client