Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/VcudLID6IQLHHfFfS19QAtEi92k.roa
File:                     VcudLID6IQLHHfFfS19QAtEi92k.roa (raw, json)
Hash identifier:          D6gp4VmsORMxb2fCA1RsDNp3NXi2BEe2P6xQHudh2Jk=
Subject key identifier:   55:CB:9D:2C:80:FA:21:02:C7:1D:F1:5F:4B:5F:50:02:D1:22:F7:69
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       1F
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VcudLID6IQLHHfFfS19QAtEi92k.roa
Signing time:             Tue 30 May 2023 16:34:20 +0000
ROA not before:           Tue 30 May 2023 16:34:20 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        157.112.0.0/18 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: May 30 16:34:20 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=55CB9D2C80FA2102C71DF15F4B5F5002D122F769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ed:75:fb:9b:7a:5c:20:77:47:91:89:e2:7d:
                    f9:8d:a4:5f:ae:3d:09:20:b0:a8:ab:35:2f:18:13:
                    84:8f:b4:52:43:61:c6:03:27:08:5f:0b:2c:6d:10:
                    52:93:07:ff:e9:35:c8:be:aa:b2:be:75:b9:13:c5:
                    00:a0:79:79:7c:0f:11:b5:63:d6:e7:4a:0c:b9:85:
                    0a:05:ac:c8:cb:1a:bc:fa:60:0e:b3:ed:4e:9f:d7:
                    df:31:9c:33:e5:e6:65:46:98:03:4e:af:91:26:65:
                    43:ce:a4:a3:50:ce:41:0f:a7:f2:a9:d4:e8:a8:47:
                    b7:34:86:a3:b8:20:8d:12:1a:e1:4e:56:04:77:d4:
                    18:3a:3c:7c:02:c8:44:fa:30:1c:c5:c9:fc:c8:80:
                    91:7a:70:2c:43:22:2d:7d:40:dc:35:21:6d:3e:be:
                    51:aa:a8:1e:21:0c:a4:6c:13:9a:a3:47:1f:85:95:
                    ae:a3:2f:eb:8e:ca:9f:0c:4c:42:aa:eb:c2:2b:fb:
                    c1:5f:1b:f1:1f:14:63:0d:e7:ae:f3:4f:7e:21:bc:
                    01:02:f0:08:8a:71:1a:78:fd:06:51:3a:a5:88:fb:
                    6b:a1:38:b1:59:62:c4:7b:06:b5:6d:c7:a7:25:fa:
                    c6:04:aa:40:bd:47:0c:3d:f1:cf:4f:df:ca:83:c1:
                    54:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CB:9D:2C:80:FA:21:02:C7:1D:F1:5F:4B:5F:50:02:D1:22:F7:69
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VcudLID6IQLHHfFfS19QAtEi92k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.112.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0b:af:f4:77:90:6b:36:0d:81:07:56:53:76:69:7e:b9:4d:bb:
         3d:95:18:6f:1f:9e:65:69:21:57:f8:fa:9b:f7:7d:91:9c:c4:
         0c:db:4f:b9:58:ad:1b:71:84:1d:f9:fb:43:3d:50:1f:21:c5:
         3b:f2:13:22:d9:32:45:3d:9a:06:ba:78:40:23:71:d5:96:1f:
         07:60:82:5a:de:c5:ae:aa:58:e1:90:e6:c5:9f:d7:44:8c:59:
         89:6b:44:0d:12:e7:89:b1:60:64:d1:cc:10:28:4b:5d:94:8e:
         32:1f:f3:d3:07:fa:83:c3:94:41:8c:49:5e:1d:23:1f:20:0a:
         8c:5c:86:61:95:53:60:41:3b:c5:4c:8d:21:b3:ef:3e:a9:1b:
         76:50:4c:02:ba:43:da:98:7d:6f:54:5f:4e:8b:2c:69:5d:a3:
         06:09:f1:77:a3:96:64:2b:c6:3e:47:92:27:8c:87:59:c2:60:
         7c:df:c9:f7:0c:ba:4c:2f:72:9e:c5:8b:8c:13:bb:04:57:48:
         04:ee:01:bd:cc:09:2e:77:81:bc:38:02:4b:0a:0d:2c:12:43:
         e2:36:2a:ff:95:e5:94:5e:45:d2:3a:30:f8:ec:c0:50:ab:b1:
         63:73:c2:44:83:33:63:ad:5c:0f:c4:3c:63:c7:ce:09:12:2f:
         80:d0:06:c2
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGODlF
MEYxNUMxRTIwRTE5MUFBRjE3Mjg4RjZFMzBGRjAxODY5QTZFMB4XDTIzMDUzMDE2
MzQyMFoXDTI0MDUxNDAxMzAwMlowMzExMC8GA1UEAxMoNTVDQjlEMkM4MEZBMjEw
MkM3MURGMTVGNEI1RjUwMDJEMTIyRjc2OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANftdfubelwgd0eRieJ9+Y2kX649CSCwqKs1LxgThI+0UkNhxgMn
CF8LLG0QUpMH/+k1yL6qsr51uRPFAKB5eXwPEbVj1udKDLmFCgWsyMsavPpgDrPt
Tp/X3zGcM+XmZUaYA06vkSZlQ86ko1DOQQ+n8qnU6KhHtzSGo7ggjRIa4U5WBHfU
GDo8fALIRPowHMXJ/MiAkXpwLEMiLX1A3DUhbT6+UaqoHiEMpGwTmqNHH4WVrqMv
647KnwxMQqrrwiv7wV8b8R8UYw3nrvNPfiG8AQLwCIpxGnj9BlE6pYj7a6E4sVli
xHsGtW3HpyX6xgSqQL1HDD3xz0/fyoPBVMMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRVy50sgPohAscd8V9LX1AC0SL3aTAfBgNVHSMEGDAWgBT4ng8VweIOGRqvFyiP
bjD/AYaabjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA5Ly1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dHR21tNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dH
R21tNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDkvVmN1ZExJRDZJUUxISGZGZlMxOVFBdEVpOTJrLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBp1wADANBgkqhkiG9w0BAQsFAAOCAQEAC6/0d5BrNg2BB1ZTdml+uU27PZUY
bx+eZWkhV/j6m/d9kZzEDNtPuVitG3GEHfn7Qz1QHyHFO/ITItkyRT2aBrp4QCNx
1ZYfB2CCWt7FrqpY4ZDmxZ/XRIxZiWtEDRLnibFgZNHMEChLXZSOMh/z0wf6g8OU
QYxJXh0jHyAKjFyGYZVTYEE7xUyNIbPvPqkbdlBMArpD2ph9b1RfTossaV2jBgnx
d6OWZCvGPkeSJ4yHWcJgfN/J9wy6TC9ynsWLjBO7BFdIBO4BvcwJLneBvDgCSwoN
LBJD4jYq/5XllF5F0jow+OzAUKuxY3PCRIMzY61cD8Q8Y8fOCRIvgNAGwg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:58 2025 by rpki-client