Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/A3H__RX4rj2lpkO-hQEpZP1KiJ8.roa
File:                     A3H__RX4rj2lpkO-hQEpZP1KiJ8.roa (raw, json)
Hash identifier:          nxbeyBuD6aMc6oO8tGJjR7Qzu7z0FZyTvnHD2JxIQmM=
Subject key identifier:   03:71:FF:FD:15:F8:AE:3D:A5:A6:43:BE:85:01:29:64:FD:4A:88:9F
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0140
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/A3H__RX4rj2lpkO-hQEpZP1KiJ8.roa
Signing time:             Fri 07 Jul 2023 04:08:21 +0000
ROA not before:           Fri 07 Jul 2023 04:08:21 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        27.134.24.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:08:21 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=0371FFFD15F8AE3DA5A643BE85012964FD4A889F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:42:fd:8f:d9:a1:7d:cc:14:25:14:28:f1:92:
                    03:bb:68:8e:89:c8:e4:d9:0e:1a:1d:8f:89:10:2e:
                    4c:40:15:4e:72:c2:8e:d0:0a:5e:bd:60:65:b4:91:
                    cf:93:a7:5a:5f:aa:8b:bd:29:b4:f5:a8:36:e3:c7:
                    b8:37:aa:78:fa:4b:c6:1d:82:e2:fa:da:42:9a:c4:
                    90:ab:a1:01:e4:12:65:95:2c:f4:0a:2f:42:99:6e:
                    e6:80:74:15:63:c6:5b:4f:f8:f7:87:31:d7:86:72:
                    55:7e:65:0f:1d:25:21:bd:58:44:da:e5:87:36:e0:
                    68:b1:23:e5:e8:16:22:81:67:be:e0:52:12:c9:e1:
                    39:d2:00:cd:bb:8b:54:89:ad:82:7b:32:e0:1e:02:
                    32:83:a8:76:c8:96:a8:81:d7:62:0f:e9:f1:6c:b5:
                    f1:f6:ac:43:88:80:7c:28:f8:3a:05:8e:68:dd:8a:
                    0a:1c:0e:d0:6c:e6:fc:02:0d:60:54:c1:74:1c:09:
                    37:5c:30:1a:cd:e3:3b:4d:ff:20:00:50:aa:26:19:
                    63:7e:0b:9d:7b:db:7f:11:93:55:77:f8:51:10:5c:
                    c9:c4:c6:11:cb:43:db:36:3f:4b:b3:c2:58:9c:6b:
                    33:d5:ca:9b:c6:2d:8b:0e:65:66:10:59:81:7a:85:
                    30:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:71:FF:FD:15:F8:AE:3D:A5:A6:43:BE:85:01:29:64:FD:4A:88:9F
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/A3H__RX4rj2lpkO-hQEpZP1KiJ8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.134.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         88:35:a8:d6:47:a1:bb:99:d8:f9:54:6e:3d:68:b6:c3:6f:99:
         38:32:2f:de:ca:5f:a9:6a:1e:c1:bd:f9:9b:7e:ee:9c:29:b0:
         cf:b2:4f:0d:2a:67:c1:b4:97:5f:cc:d4:b8:d1:16:8b:1d:51:
         09:ea:e9:76:2e:03:85:57:19:28:39:ed:04:a7:a1:e2:03:5b:
         82:5c:21:90:fb:60:e5:38:d3:4a:42:0b:34:e0:59:67:78:56:
         b5:c9:16:2a:4c:a0:ca:f3:b1:ac:fb:e5:85:58:01:39:c4:e4:
         61:c0:13:05:b5:d7:d3:f5:60:b6:21:c1:ab:ca:19:91:23:83:
         0e:54:59:48:9f:c3:0c:34:a0:03:42:40:67:2d:85:b6:bf:5c:
         d6:43:43:7f:fb:9d:f7:87:c3:fb:21:63:c9:ea:c7:1b:bf:d3:
         73:b7:89:4e:3c:4c:d6:47:2a:89:24:51:64:fb:7b:91:02:e9:
         e2:3e:61:e7:b8:6d:a1:9e:8a:c2:f1:c8:e0:5d:3c:75:53:6d:
         ed:a1:41:43:ee:aa:28:a4:7d:75:40:83:65:58:61:92:3d:95:
         4b:f3:a0:de:49:fa:74:63:53:67:b8:b9:31:22:2f:35:8c:69:
         49:c9:c0:0b:39:12:9f:54:3a:51:b7:38:23:26:64:a6:02:df:
         d0:7b:fe:21
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDA4MjFaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDAzNzFGRkZEMTVGOEFF
M0RBNUE2NDNCRTg1MDEyOTY0RkQ0QTg4OUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNQv2P2aF9zBQlFCjxkgO7aI6JyOTZDhodj4kQLkxAFU5ywo7Q
Cl69YGW0kc+Tp1pfqou9KbT1qDbjx7g3qnj6S8YdguL62kKaxJCroQHkEmWVLPQK
L0KZbuaAdBVjxltP+PeHMdeGclV+ZQ8dJSG9WETa5Yc24GixI+XoFiKBZ77gUhLJ
4TnSAM27i1SJrYJ7MuAeAjKDqHbIlqiB12IP6fFstfH2rEOIgHwo+DoFjmjdigoc
DtBs5vwCDWBUwXQcCTdcMBrN4ztN/yAAUKomGWN+C517238Rk1V3+FEQXMnExhHL
Q9s2P0uzwlicazPVypvGLYsOZWYQWYF6hTBLAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUA3H//RX4rj2lpkO+hQEpZP1KiJ8wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L0EzSF9fUlg0cmoybHBrTy1oUUVwWlAxS2lKOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMbhhgwDQYJKoZIhvcNAQELBQADggEBAIg1qNZHobuZ2PlUbj1otsNvmTgy
L97KX6lqHsG9+Zt+7pwpsM+yTw0qZ8G0l1/M1LjRFosdUQnq6XYuA4VXGSg57QSn
oeIDW4JcIZD7YOU400pCCzTgWWd4VrXJFipMoMrzsaz75YVYATnE5GHAEwW119P1
YLYhwavKGZEjgw5UWUifwww0oANCQGcthba/XNZDQ3/7nfeHw/shY8nqxxu/03O3
iU48TNZHKokkUWT7e5EC6eI+Yee4baGeisLxyOBdPHVTbe2hQUPuqiikfXVAg2VY
YZI9lUvzoN5J+nRjU2e4uTEiLzWMaUnJwAs5Ep9UOlG3OCMmZKYC39B7/iE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:41:38 2025 by rpki-client