Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ifu1afiIvfQki9mNEDi9hyjCmu8.roa
File:                     ifu1afiIvfQki9mNEDi9hyjCmu8.roa (raw, json)
Hash identifier:          Mq1IWKUJ8ad9y7gWv1eA/N3FUQIyl5sUpBhBl3/3/Yk=
Subject key identifier:   89:FB:B5:69:F8:88:BD:F4:24:8B:D9:8D:10:38:BD:87:28:C2:9A:EF
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0186
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ifu1afiIvfQki9mNEDi9hyjCmu8.roa
Signing time:             Fri 07 Jul 2023 04:12:32 +0000
ROA not before:           Fri 07 Jul 2023 04:12:32 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        61.5.246.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:12:32 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=89FBB569F888BDF4248BD98D1038BD8728C29AEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:55:19:2e:1d:37:5c:73:58:5b:b4:93:84:29:
                    17:0c:9f:9a:dd:14:e1:f3:fa:9d:05:d6:71:cb:4f:
                    58:56:1d:b2:9b:c5:0d:fe:3e:0b:ef:d0:39:70:a7:
                    13:6f:92:58:c7:c0:5f:b4:43:42:20:96:8f:00:1e:
                    37:e4:18:0e:96:a8:91:45:40:06:d7:61:27:38:e0:
                    92:1b:08:94:1a:35:8f:22:65:02:32:a6:3c:de:ab:
                    e3:b6:c2:7d:56:40:76:a4:e3:ab:5a:3c:7d:21:cc:
                    ac:cb:6a:24:5b:fc:c5:54:05:18:26:f3:62:c9:ec:
                    88:68:8a:f5:a4:0a:b7:b9:56:17:83:ef:2f:98:d5:
                    ac:2d:26:2a:c6:a2:75:87:1f:61:70:d5:ee:b8:bb:
                    1b:7e:59:3e:e4:37:e5:e9:66:97:12:36:0a:2e:6c:
                    a6:ff:6a:33:9c:78:3e:c6:4a:ed:3e:db:2d:c9:d3:
                    b7:d9:0e:76:fa:22:2c:73:85:90:7c:93:3e:5b:81:
                    80:f7:05:19:70:ef:ff:b8:46:82:f2:51:4e:d5:3d:
                    ee:4a:15:91:a3:03:b9:3d:ee:93:cc:2b:80:f6:19:
                    0c:c1:fb:3f:7c:19:23:5e:70:65:6c:2d:25:fb:e9:
                    4f:ed:3e:5b:95:15:ec:a2:09:ad:71:64:de:d7:12:
                    25:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FB:B5:69:F8:88:BD:F4:24:8B:D9:8D:10:38:BD:87:28:C2:9A:EF
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ifu1afiIvfQki9mNEDi9hyjCmu8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.5.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:9d:42:ba:d6:a3:90:38:85:9a:64:15:28:78:dd:8e:35:ee:
         06:02:2d:4e:ee:fd:4b:57:93:68:c5:5f:37:44:e9:47:3b:b1:
         64:27:80:e2:84:6c:49:f9:cb:76:9a:c3:3a:b6:c0:25:0e:df:
         a1:b8:df:13:99:9b:4e:38:ff:4e:be:9b:4d:2c:cf:00:02:19:
         55:47:be:24:0c:99:88:f4:a4:a5:f0:8a:f3:02:42:90:51:52:
         d7:c7:a8:c1:41:43:8c:f4:4d:99:73:55:13:a5:09:c8:eb:84:
         55:ec:7d:de:3c:e1:96:ce:64:82:aa:26:be:4f:b1:5a:14:d7:
         67:9f:9f:48:53:9e:84:c4:0d:86:70:f7:6c:58:9a:bf:87:c0:
         ce:b6:c4:a6:19:18:e2:25:45:67:08:fd:bf:a9:dd:10:bd:aa:
         9f:f1:70:bc:38:f7:91:2b:5b:85:61:19:1a:34:50:92:91:89:
         5b:dd:25:83:c0:1c:57:70:97:2a:8d:a7:0c:3a:1f:78:48:06:
         4c:1d:c6:5a:e3:07:bd:ac:27:0b:66:96:a7:ed:2d:74:f6:04:
         a9:ef:16:d5:54:9f:96:62:36:57:ca:2c:fd:f5:fe:73:8e:ae:
         9d:ce:4a:4a:86:ef:d3:38:90:07:84:d1:00:83:ba:54:6f:36:
         59:09:99:03
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDEyMzJaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDg5RkJCNTY5Rjg4OEJE
RjQyNDhCRDk4RDEwMzhCRDg3MjhDMjlBRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDkVRkuHTdcc1hbtJOEKRcMn5rdFOHz+p0F1nHLT1hWHbKbxQ3+
Pgvv0DlwpxNvkljHwF+0Q0Iglo8AHjfkGA6WqJFFQAbXYSc44JIbCJQaNY8iZQIy
pjzeq+O2wn1WQHak46taPH0hzKzLaiRb/MVUBRgm82LJ7IhoivWkCre5VheD7y+Y
1awtJirGonWHH2Fw1e64uxt+WT7kN+XpZpcSNgoubKb/ajOceD7GSu0+2y3J07fZ
Dnb6IixzhZB8kz5bgYD3BRlw7/+4RoLyUU7VPe5KFZGjA7k97pPMK4D2GQzB+z98
GSNecGVsLSX76U/tPluVFeyiCa1xZN7XEiUvAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUifu1afiIvfQki9mNEDi9hyjCmu8wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L2lmdTFhZmlJdmZRa2k5bU5FRGk5aHlqQ211OC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAE9BfYwDQYJKoZIhvcNAQELBQADggEBACedQrrWo5A4hZpkFSh43Y417gYC
LU7u/UtXk2jFXzdE6Uc7sWQngOKEbEn5y3aawzq2wCUO36G43xOZm044/06+m00s
zwACGVVHviQMmYj0pKXwivMCQpBRUtfHqMFBQ4z0TZlzVROlCcjrhFXsfd484ZbO
ZIKqJr5PsVoU12efn0hTnoTEDYZw92xYmr+HwM62xKYZGOIlRWcI/b+p3RC9qp/x
cLw495ErW4VhGRo0UJKRiVvdJYPAHFdwlyqNpww6H3hIBkwdxlrjB72sJwtmlqft
LXT2BKnvFtVUn5ZiNlfKLP31/nOOrp3OSkqG79M4kAeE0QCDulRvNlkJmQM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:39:57 2025 by rpki-client