Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/YUw1YTiuwvrHPf3W-QOoNP-df0o.roa
File:                     YUw1YTiuwvrHPf3W-QOoNP-df0o.roa (raw, json)
Hash identifier:          5RVod6jA7EvKaYyhrs1tkxs/2/uJZm38Ko7IclEpnj0=
Subject key identifier:   61:4C:35:61:38:AE:C2:FA:C7:3D:FD:D6:F9:03:A8:34:FF:9D:7F:4A
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       61
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/YUw1YTiuwvrHPf3W-QOoNP-df0o.roa
Signing time:             Tue 23 Feb 2021 08:57:42 +0000
ROA not before:           Tue 23 Feb 2021 08:57:42 +0000
ROA not after:            Tue 15 Feb 2022 01:30:02 +0000
asID:                     2527
IP address blocks:        220.211.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Feb 23 08:57:42 2021 GMT
            Not After : Feb 15 01:30:02 2022 GMT
        Subject: CN=614C356138AEC2FAC73DFDD6F903A834FF9D7F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cd:23:ed:40:5f:4a:6f:e1:e2:98:c4:ec:78:
                    a7:03:c2:42:79:e4:e7:c9:2d:3f:c4:e7:bd:b3:ee:
                    9f:91:8b:75:32:f6:b1:ff:25:9d:d0:08:a0:59:c5:
                    78:0c:80:21:29:6d:4c:36:1e:9a:ec:b0:d3:d3:45:
                    55:ac:17:5b:16:31:74:a9:33:12:79:f2:55:c2:1f:
                    ba:ce:f4:c2:9f:5e:d7:63:1d:29:c6:da:f2:eb:0a:
                    8a:25:a6:b7:5b:1c:11:89:48:41:d8:4f:cc:06:e1:
                    7f:81:dd:bc:50:d7:43:0b:b6:97:6d:8d:68:16:e2:
                    c5:f6:d4:36:15:fd:ab:0d:7d:13:b3:fd:f2:4b:02:
                    2c:a1:f1:b1:80:11:a5:d8:dc:86:f2:e3:54:bf:26:
                    26:a9:d1:d2:3f:6f:f1:f2:f1:0c:7b:73:1a:ba:85:
                    37:fb:cb:4c:48:fd:53:e5:70:48:54:6d:06:6b:0d:
                    35:f5:22:1e:b8:01:c2:8c:33:d7:dd:c9:65:b6:a4:
                    bf:5a:6d:da:05:8a:5f:d9:67:0e:9f:01:a5:fe:e7:
                    bb:a3:8d:80:3c:ce:b4:6e:27:d6:f7:cf:54:89:13:
                    ab:16:28:4f:a7:a1:f3:73:03:73:1f:cc:e2:17:47:
                    a5:d4:a5:00:76:1d:e7:31:fe:78:e8:d1:fc:f5:d6:
                    d1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4C:35:61:38:AE:C2:FA:C7:3D:FD:D6:F9:03:A8:34:FF:9D:7F:4A
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/YUw1YTiuwvrHPf3W-QOoNP-df0o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.211.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         03:7f:ce:bd:af:29:e0:bd:30:c9:65:82:0d:cd:1b:7e:3a:6f:
         4d:01:57:b0:4c:56:10:50:be:47:b3:da:5b:e9:08:f9:8a:23:
         b7:64:9e:5c:bd:50:82:f7:fc:2f:97:90:6f:5e:26:79:74:e9:
         0d:e3:be:48:c9:43:d9:ac:bf:14:03:df:a7:a9:0c:cb:45:32:
         af:5f:33:61:85:d2:7e:ba:ec:49:3e:f2:00:cc:8f:2a:8c:16:
         16:af:e5:38:91:85:31:4b:00:b8:85:87:fe:3f:63:15:98:f4:
         51:a1:71:12:94:e1:32:de:dd:03:f2:f2:26:10:a3:ef:79:08:
         b2:a4:5b:78:5b:c6:64:c6:85:25:26:c6:30:23:07:bc:df:9c:
         97:b4:51:c0:7d:5f:ed:e1:35:98:e4:b4:79:59:5b:b8:8a:6f:
         f4:a3:19:75:a3:68:f6:72:61:d1:56:3b:a3:54:94:92:14:7a:
         ef:a6:41:2b:e3:ce:db:63:67:25:a1:a3:24:e1:50:27:04:3d:
         ae:93:8e:a2:0b:d0:35:d6:69:7c:e9:01:cc:2f:c7:87:d4:91:
         56:5c:10:0c:32:8d:67:95:0e:a6:74:eb:7b:bb:4d:3d:23:4b:
         1c:dc:e5:b0:55:0b:1a:9a:2f:83:0a:77:78:fc:74:03:d4:0b:
         6d:4f:25:f4
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIBYTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwOTVB
MTgyRkExOEQ0NTgyMzMyODRBQThEQzg4QkQwNzVFNUQ3MDJEMB4XDTIxMDIyMzA4
NTc0MloXDTIyMDIxNTAxMzAwMlowMzExMC8GA1UEAxMoNjE0QzM1NjEzOEFFQzJG
QUM3M0RGREQ2RjkwM0E4MzRGRjlEN0Y0QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK7NI+1AX0pv4eKYxOx4pwPCQnnk58ktP8TnvbPun5GLdTL2sf8l
ndAIoFnFeAyAISltTDYemuyw09NFVawXWxYxdKkzEnnyVcIfus70wp9e12MdKcba
8usKiiWmt1scEYlIQdhPzAbhf4HdvFDXQwu2l22NaBbixfbUNhX9qw19E7P98ksC
LKHxsYARpdjchvLjVL8mJqnR0j9v8fLxDHtzGrqFN/vLTEj9U+VwSFRtBmsNNfUi
HrgBwowz193JZbakv1pt2gWKX9lnDp8Bpf7nu6ONgDzOtG4n1vfPVIkTqxYoT6eh
83MDcx/M4hdHpdSlAHYd5zH+eOjR/PXW0T0CAwEAAaOCAdYwggHSMB0GA1UdDgQW
BBRhTDVhOK7C+sc9/db5A6g0/51/SjAfBgNVHSMEGDAWgBQJWhgvoY1FgjMoSqjc
iL0HXl1wLTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDMvQ1ZvWUw2R05SWUl6S0VxbzNJaTlCMTVkY0MwLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQ1ZvWUw2R05SWUl6S0VxbzNJaTlCMTVk
Y0MwLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUF
BzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL1lVdzFZVGl1d3ZySFBmM1ctUU9vTlAtZGYwby5yb2EwHgYIKwYB
BQUHAQcBAf8EDzANMAsEAgABMAUDAwDc0zANBgkqhkiG9w0BAQsFAAOCAQEAA3/O
va8p4L0wyWWCDc0bfjpvTQFXsExWEFC+R7PaW+kI+Yojt2SeXL1Qgvf8L5eQb14m
eXTpDeO+SMlD2ay/FAPfp6kMy0Uyr18zYYXSfrrsST7yAMyPKowWFq/lOJGFMUsA
uIWH/j9jFZj0UaFxEpThMt7dA/LyJhCj73kIsqRbeFvGZMaFJSbGMCMHvN+cl7RR
wH1f7eE1mOS0eVlbuIpv9KMZdaNo9nJh0VY7o1SUkhR676ZBK+PO22NnJaGjJOFQ
JwQ9rpOOogvQNdZpfOkBzC/Hh9SRVlwQDDKNZ5UOpnTre7tNPSNLHNzlsFULGpov
gwp3ePx0A9QLbU8l9A==
-----END CERTIFICATE-----
Generated at Wed Apr 16 05:15:35 2025 by rpki-client