Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/STCF9gAsN4DjNNUN957pMerjpjQ.roa
File:                     STCF9gAsN4DjNNUN957pMerjpjQ.roa (raw, json)
Hash identifier:          HIFPcjYUc0pkCNebsI0qCdAJI3fWo01kUPaaj2cFOLE=
Subject key identifier:   49:30:85:F6:00:2C:37:80:E3:34:D5:0D:F7:9E:E9:31:EA:E3:A6:34
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       5B
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/STCF9gAsN4DjNNUN957pMerjpjQ.roa
Signing time:             Tue 23 Feb 2021 08:57:40 +0000
ROA not before:           Tue 23 Feb 2021 08:57:40 +0000
ROA not after:            Tue 15 Feb 2022 01:30:02 +0000
asID:                     2527
IP address blocks:        121.2.0.0/15 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Feb 23 08:57:40 2021 GMT
            Not After : Feb 15 01:30:02 2022 GMT
        Subject: CN=493085F6002C3780E334D50DF79EE931EAE3A634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:14:e3:43:1a:d4:83:ed:7e:ae:29:c5:fd:5d:
                    ed:4c:fe:e9:cc:53:1e:b5:27:c4:25:e0:32:c5:fd:
                    7e:10:9e:3c:8d:be:c8:5f:94:a0:21:56:1e:01:40:
                    d1:5d:0c:d0:92:03:c3:24:9f:c5:c8:cf:16:2a:97:
                    aa:a4:ed:d8:28:fb:d9:3c:1b:23:b3:ff:7e:cc:f6:
                    9a:7a:d2:24:ac:62:d0:06:19:b2:8c:08:6f:40:00:
                    67:4a:64:94:5c:6d:51:ad:c3:9c:00:94:2b:d4:80:
                    23:8f:3b:12:6a:48:f4:64:e0:b3:27:3d:98:81:0c:
                    0b:54:5a:5a:09:47:3f:aa:69:95:6d:5d:a9:74:5d:
                    13:93:87:04:f4:95:b0:fd:1b:e8:65:1a:8b:55:75:
                    78:41:c7:24:bf:c1:d9:26:9d:78:47:c8:b5:ad:58:
                    db:b1:a0:37:f7:fa:06:45:44:91:3f:10:40:fe:2a:
                    ac:79:05:4b:7e:af:d5:71:8e:08:5c:7c:46:fd:f9:
                    cb:5d:1f:ab:57:3a:cb:64:5e:f3:8d:c1:6d:c4:b8:
                    d2:a8:ea:23:c9:e8:a1:77:15:1f:16:e6:17:c0:47:
                    d6:19:21:2b:ad:a1:0c:83:9e:a1:03:23:67:47:cb:
                    e4:a8:3e:3e:b3:0e:c2:2b:a8:ce:57:f8:d1:6f:0c:
                    9e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:30:85:F6:00:2C:37:80:E3:34:D5:0D:F7:9E:E9:31:EA:E3:A6:34
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/STCF9gAsN4DjNNUN957pMerjpjQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.2.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         6f:03:be:61:15:9c:20:81:0e:b0:d1:a7:5b:a0:73:02:75:89:
         7c:7d:0c:25:a6:79:1a:45:d9:13:b6:1a:9e:46:5e:df:4f:ff:
         78:1c:ee:4d:97:9c:a5:15:2f:38:16:13:a7:9f:4b:ac:ba:f0:
         53:62:78:57:d9:4e:c0:56:b3:e7:0c:f1:5a:41:6c:f2:09:bb:
         12:bb:df:9f:f3:7d:56:f5:19:a5:36:a2:5f:0e:7a:5f:d1:e7:
         37:03:e6:05:aa:4d:d4:b0:ac:76:ff:b9:1b:09:9b:68:e2:ef:
         27:5b:2c:22:f3:a9:27:fd:d3:a8:9f:bf:65:f9:81:35:e9:6a:
         29:25:45:d2:3e:e4:94:0b:7b:aa:25:1a:76:3f:9d:0a:be:63:
         23:5c:86:fd:79:a4:25:fb:e6:64:01:65:75:99:f3:85:7b:1d:
         32:1b:04:6f:f4:b1:6e:5a:18:e5:be:c2:ed:f0:ca:48:b8:bb:
         f3:f8:3b:dd:3e:de:10:7d:a7:f1:e4:ef:87:fb:b5:2c:01:4a:
         62:99:fc:9a:98:c4:c1:41:31:93:8b:ce:c6:6a:e6:8c:d6:70:
         54:89:d1:10:f7:18:cb:eb:e6:3f:d7:71:e8:2b:78:70:57:86:
         a4:53:9e:07:b2:0f:cc:2b:10:fe:ae:fa:16:a9:a5:cf:56:ab:
         bb:8b:bb:f7
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIBWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwOTVB
MTgyRkExOEQ0NTgyMzMyODRBQThEQzg4QkQwNzVFNUQ3MDJEMB4XDTIxMDIyMzA4
NTc0MFoXDTIyMDIxNTAxMzAwMlowMzExMC8GA1UEAxMoNDkzMDg1RjYwMDJDMzc4
MEUzMzRENTBERjc5RUU5MzFFQUUzQTYzNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALcU40Ma1IPtfq4pxf1d7Uz+6cxTHrUnxCXgMsX9fhCePI2+yF+U
oCFWHgFA0V0M0JIDwySfxcjPFiqXqqTt2Cj72TwbI7P/fsz2mnrSJKxi0AYZsowI
b0AAZ0pklFxtUa3DnACUK9SAI487EmpI9GTgsyc9mIEMC1RaWglHP6pplW1dqXRd
E5OHBPSVsP0b6GUai1V1eEHHJL/B2SadeEfIta1Y27GgN/f6BkVEkT8QQP4qrHkF
S36v1XGOCFx8Rv35y10fq1c6y2Re843BbcS40qjqI8nooXcVHxbmF8BH1hkhK62h
DIOeoQMjZ0fL5Kg+PrMOwiuozlf40W8Mnr0CAwEAAaOCAdYwggHSMB0GA1UdDgQW
BBRJMIX2ACw3gOM01Q33nukx6uOmNDAfBgNVHSMEGDAWgBQJWhgvoY1FgjMoSqjc
iL0HXl1wLTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDMvQ1ZvWUw2R05SWUl6S0VxbzNJaTlCMTVkY0MwLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQ1ZvWUw2R05SWUl6S0VxbzNJaTlCMTVk
Y0MwLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUF
BzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL1NUQ0Y5Z0FzTjREak5OVU45NTdwTWVyanBqUS5yb2EwHgYIKwYB
BQUHAQcBAf8EDzANMAsEAgABMAUDAwF5AjANBgkqhkiG9w0BAQsFAAOCAQEAbwO+
YRWcIIEOsNGnW6BzAnWJfH0MJaZ5GkXZE7YankZe30//eBzuTZecpRUvOBYTp59L
rLrwU2J4V9lOwFaz5wzxWkFs8gm7Ervfn/N9VvUZpTaiXw56X9HnNwPmBapN1LCs
dv+5GwmbaOLvJ1ssIvOpJ/3TqJ+/ZfmBNelqKSVF0j7klAt7qiUadj+dCr5jI1yG
/XmkJfvmZAFldZnzhXsdMhsEb/SxbloY5b7C7fDKSLi78/g73T7eEH2n8eTvh/u1
LAFKYpn8mpjEwUExk4vOxmrmjNZwVInREPcYy+vmP9dx6Ct4cFeGpFOeB7IPzCsQ
/q76Fqmlz1aru4u79w==
-----END CERTIFICATE-----
Generated at Wed Apr 16 09:12:27 2025 by rpki-client