Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/s9nBflG4UF7ZZ7-6dXiV4t8Q1p4.roa
File:                     s9nBflG4UF7ZZ7-6dXiV4t8Q1p4.roa (raw, json)
Hash identifier:          Kk0F30/KWfoOewklQXUwRyfTb55yWjliaQF83p19OMI=
Subject key identifier:   B3:D9:C1:7E:51:B8:50:5E:D9:67:BF:BA:75:78:95:E2:DF:10:D6:9E
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       013A
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/s9nBflG4UF7ZZ7-6dXiV4t8Q1p4.roa
Signing time:             Fri 07 Jul 2023 04:08:18 +0000
ROA not before:           Fri 07 Jul 2023 04:08:18 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        36.54.0.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:08:18 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=B3D9C17E51B8505ED967BFBA757895E2DF10D69E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e4:90:e7:c3:3e:23:25:24:83:90:1f:c2:51:
                    da:bc:62:33:0b:be:f1:d1:41:97:50:51:1d:90:07:
                    e7:1a:c8:ee:17:fe:81:28:bc:87:7f:1d:a8:72:49:
                    52:4a:7f:a1:c7:36:f4:69:19:ee:7c:4c:7a:1b:2f:
                    52:8a:43:92:c2:26:5c:52:12:6a:5d:83:c1:14:21:
                    04:7c:c4:b3:99:e4:d2:e1:45:d1:67:23:7b:be:e9:
                    91:52:b7:9e:92:df:28:e9:e6:bc:90:43:53:54:0d:
                    c2:02:29:72:ae:74:95:8d:41:f8:f0:40:af:1a:b2:
                    48:48:bc:e1:60:f6:de:8d:05:45:54:33:7c:40:b3:
                    19:5b:d0:a6:af:9b:26:50:e0:1d:37:fa:31:91:22:
                    3b:72:14:87:4f:a3:5e:75:1f:66:b0:c2:94:06:10:
                    33:f2:fc:a7:70:27:1c:a9:c7:25:2f:10:0d:c9:3f:
                    fb:fc:9b:7d:8d:22:10:ca:89:11:17:9e:1b:52:ca:
                    bb:7d:53:62:e6:e3:72:4c:bf:f3:fe:49:ca:3e:8f:
                    26:6a:de:d3:a5:02:dc:64:29:8d:e1:9e:60:ce:23:
                    ec:d5:4e:b6:c0:be:d5:45:80:ee:9f:c2:e4:22:fd:
                    fd:15:28:ef:4c:34:51:68:ba:dc:66:dd:53:a1:1a:
                    83:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D9:C1:7E:51:B8:50:5E:D9:67:BF:BA:75:78:95:E2:DF:10:D6:9E
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/s9nBflG4UF7ZZ7-6dXiV4t8Q1p4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.54.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         49:8f:2f:97:81:f5:a0:d3:e8:b6:05:b7:cb:26:2f:61:64:9e:
         20:b7:e8:2f:43:44:86:03:b9:a1:70:9e:14:0b:50:21:8e:87:
         d9:33:b7:a5:25:fe:12:84:26:42:bb:83:72:b7:eb:1c:b4:48:
         14:92:79:ec:7e:87:a0:7f:04:b7:bd:b3:8f:eb:0a:b2:97:65:
         0e:3e:13:fc:8b:1b:0b:2c:c3:01:f8:26:70:e7:17:6c:1c:0f:
         32:77:5d:d7:c2:1c:4d:b3:63:b7:ff:54:d4:0e:d2:d6:19:99:
         df:01:8d:d4:69:03:45:62:0b:86:43:44:5c:a9:eb:a7:f2:f0:
         0c:9a:a0:d0:a9:8a:de:49:7b:38:0a:10:d5:a3:f6:bb:d5:d6:
         5f:c0:42:a3:56:17:e1:99:98:f9:a2:35:b8:4f:91:0a:83:e9:
         7c:6a:26:b5:f4:a3:70:5c:24:ff:bc:99:83:f7:7f:13:56:4f:
         ba:f4:33:0a:e2:b6:22:05:e8:1d:20:00:f4:4c:d6:99:30:87:
         4e:87:5d:2a:d5:22:e5:aa:d5:c6:e6:cc:6a:12:27:8b:e5:0a:
         24:58:2f:fd:3c:d1:fa:3e:63:2c:b0:36:7b:b9:0a:23:41:bc:
         71:c0:b3:c2:ce:40:d7:25:35:8c:52:39:bd:4d:42:d4:99:aa:
         9e:7b:0f:99
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICATowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDA4MThaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEIzRDlDMTdFNTFCODUw
NUVEOTY3QkZCQTc1Nzg5NUUyREYxMEQ2OUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDK5JDnwz4jJSSDkB/CUdq8YjMLvvHRQZdQUR2QB+cayO4X/oEo
vId/HahySVJKf6HHNvRpGe58THobL1KKQ5LCJlxSEmpdg8EUIQR8xLOZ5NLhRdFn
I3u+6ZFSt56S3yjp5ryQQ1NUDcICKXKudJWNQfjwQK8askhIvOFg9t6NBUVUM3xA
sxlb0KavmyZQ4B03+jGRIjtyFIdPo151H2awwpQGEDPy/KdwJxypxyUvEA3JP/v8
m32NIhDKiREXnhtSyrt9U2Lm43JMv/P+Sco+jyZq3tOlAtxkKY3hnmDOI+zVTrbA
vtVFgO6fwuQi/f0VKO9MNFFoutxm3VOhGoPTAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUs9nBflG4UF7ZZ7+6dXiV4t8Q1p4wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L3M5bkJmbEc0VUY3Wlo3LTZkWGlWNHQ4UTFwNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUkNgAwDQYJKoZIhvcNAQELBQADggEBAEmPL5eB9aDT6LYFt8smL2FkniC3
6C9DRIYDuaFwnhQLUCGOh9kzt6Ul/hKEJkK7g3K36xy0SBSSeex+h6B/BLe9s4/r
CrKXZQ4+E/yLGwsswwH4JnDnF2wcDzJ3XdfCHE2zY7f/VNQO0tYZmd8BjdRpA0Vi
C4ZDRFyp66fy8AyaoNCpit5JezgKENWj9rvV1l/AQqNWF+GZmPmiNbhPkQqD6Xxq
JrX0o3BcJP+8mYP3fxNWT7r0MwritiIF6B0gAPRM1pkwh06HXSrVIuWq1cbmzGoS
J4vlCiRYL/080fo+YyywNnu5CiNBvHHAs8LOQNclNYxSOb1NQtSZqp57D5k=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:25 2025 by rpki-client