Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/TkZhTzgXfQYMVgeEw5tF48N3KL8.roa
File:                     TkZhTzgXfQYMVgeEw5tF48N3KL8.roa (raw, json)
Hash identifier:          EGArYWh6mUHVhSVZpLC8MrhBXIQ9VUVFJb3kytIdPsM=
Subject key identifier:   4E:46:61:4F:38:17:7D:06:0C:56:07:84:C3:9B:45:E3:C3:77:28:BF
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       011D
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/TkZhTzgXfQYMVgeEw5tF48N3KL8.roa
Signing time:             Fri 07 Jul 2023 04:05:57 +0000
ROA not before:           Fri 07 Jul 2023 04:05:57 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        27.133.92.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:05:57 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=4E46614F38177D060C560784C39B45E3C37728BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c8:18:53:41:4e:71:b3:91:b9:cc:de:5b:e2:
                    3f:18:41:3d:9c:4c:18:37:28:22:b5:6d:84:5a:2c:
                    aa:c6:45:2e:f5:41:57:71:1e:34:7f:27:58:80:bc:
                    99:6b:98:2f:a0:34:8d:ce:bd:36:60:ef:88:fc:aa:
                    25:9f:b4:8e:b0:ac:a9:20:b4:e2:2d:b1:de:1e:63:
                    12:73:9f:38:4e:40:17:be:49:94:07:9b:eb:5e:26:
                    2c:43:db:a1:ca:78:7d:33:d0:85:53:45:69:21:13:
                    45:17:04:12:65:48:63:8e:21:07:9d:55:c7:b9:6f:
                    8f:8d:ab:75:8c:60:54:2a:53:1f:9f:69:06:2e:ef:
                    95:32:e8:0f:13:29:96:fc:c3:b3:f7:0f:62:14:6a:
                    ea:9c:cf:26:c5:76:45:6a:af:82:ce:c7:c3:21:aa:
                    5f:53:01:c9:6a:95:79:d2:82:6c:03:0a:d9:03:8c:
                    cf:6f:c7:ee:44:f7:02:24:2a:50:62:5b:a2:0e:49:
                    dd:82:4f:3d:fc:0b:28:19:1b:cf:61:58:ba:de:ba:
                    99:dc:90:d7:fa:03:3d:27:2d:2b:b8:94:0e:99:ce:
                    4e:85:e7:49:71:1d:2e:f6:bb:a3:76:1b:c0:2e:ca:
                    6d:9f:8c:c8:1d:a2:87:c0:0c:93:c0:99:c4:a7:8f:
                    e9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:46:61:4F:38:17:7D:06:0C:56:07:84:C3:9B:45:E3:C3:77:28:BF
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/TkZhTzgXfQYMVgeEw5tF48N3KL8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.133.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:27:d3:4e:6e:e9:ac:fb:71:34:2b:b1:4f:bf:9f:26:14:db:
         ef:76:82:4b:36:5e:36:0f:3d:3f:17:05:b1:da:85:cf:63:f4:
         97:1f:23:f4:fa:86:43:1a:ea:5c:9a:37:31:03:cc:c9:53:34:
         90:e4:8e:97:99:2e:9d:59:ab:d3:f8:2e:d0:91:48:00:b7:8b:
         ae:bd:99:66:03:f1:8c:98:13:b7:73:36:91:c8:e6:a7:27:7f:
         6c:35:a0:ea:00:25:5e:0e:72:9d:94:0e:3a:c7:d2:87:14:e8:
         19:12:dd:dd:17:c4:4f:3f:86:fd:ea:da:55:c7:23:39:c0:18:
         8c:61:61:4e:0d:c6:de:3b:76:97:25:8c:2b:94:08:19:60:01:
         96:ca:2d:c0:e9:a8:c2:af:a9:c0:55:2f:92:d0:71:52:61:d6:
         f3:97:d9:30:f7:da:07:d9:75:fc:82:2a:53:01:d1:e2:8d:97:
         ab:fb:89:40:4a:9c:0b:5d:90:b4:f1:70:49:d9:a9:2a:8e:7d:
         e2:0c:d2:6c:93:8e:a6:d9:a3:12:35:37:66:41:4d:d5:8f:e6:
         6b:02:0d:73:9f:da:dd:ab:da:a0:6b:b7:45:f7:a7:8e:fa:dd:
         73:d6:d9:d5:36:0b:9d:21:69:3e:7d:43:96:9c:38:23:6f:f8:
         79:34:9e:5f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDA1NTdaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDRFNDY2MTRGMzgxNzdE
MDYwQzU2MDc4NEMzOUI0NUUzQzM3NzI4QkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGyBhTQU5xs5G5zN5b4j8YQT2cTBg3KCK1bYRaLKrGRS71QVdx
HjR/J1iAvJlrmC+gNI3OvTZg74j8qiWftI6wrKkgtOItsd4eYxJznzhOQBe+SZQH
m+teJixD26HKeH0z0IVTRWkhE0UXBBJlSGOOIQedVce5b4+Nq3WMYFQqUx+faQYu
75Uy6A8TKZb8w7P3D2IUauqczybFdkVqr4LOx8Mhql9TAclqlXnSgmwDCtkDjM9v
x+5E9wIkKlBiW6IOSd2CTz38CygZG89hWLreupnckNf6Az0nLSu4lA6Zzk6F50lx
HS72u6N2G8Auym2fjMgdoofADJPAmcSnj+m5AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUTkZhTzgXfQYMVgeEw5tF48N3KL8wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L1RrWmhUemdYZlFZTVZnZUV3NXRGNDhOM0tMOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIbhVwwDQYJKoZIhvcNAQELBQADggEBADIn005u6az7cTQrsU+/nyYU2+92
gks2XjYPPT8XBbHahc9j9JcfI/T6hkMa6lyaNzEDzMlTNJDkjpeZLp1Zq9P4LtCR
SAC3i669mWYD8YyYE7dzNpHI5qcnf2w1oOoAJV4Ocp2UDjrH0ocU6BkS3d0XxE8/
hv3q2lXHIznAGIxhYU4Nxt47dpcljCuUCBlgAZbKLcDpqMKvqcBVL5LQcVJh1vOX
2TD32gfZdfyCKlMB0eKNl6v7iUBKnAtdkLTxcEnZqSqOfeIM0myTjqbZoxI1N2ZB
TdWP5msCDXOf2t2r2qBrt0X3p4763XPW2dU2C50haT59Q5acOCNv+Hk0nl8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:05 2025 by rpki-client