Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/bj2ip_uc0bYXwPV0rA-6Q0uJEJ8.roa
File:                     bj2ip_uc0bYXwPV0rA-6Q0uJEJ8.roa (raw, json)
Hash identifier:          I2ilJWZ3KrDsdDDyyAj9t65KxvIeWrbFD2IK/oMhwY8=
Subject key identifier:   6E:3D:A2:A7:FB:9C:D1:B6:17:C0:F5:74:AC:0F:BA:43:4B:89:10:9F
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       32
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/bj2ip_uc0bYXwPV0rA-6Q0uJEJ8.roa
Signing time:             Fri 06 Oct 2023 06:05:44 +0000
ROA not before:           Fri 06 Oct 2023 06:05:44 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9374
IP address blocks:        202.224.64.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct  6 06:05:44 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=6E3DA2A7FB9CD1B617C0F574AC0FBA434B89109F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:80:b5:37:1f:ff:02:af:08:1c:c3:00:a6:ca:
                    30:c9:9c:6e:50:4f:1c:9a:f7:e7:09:bd:a4:33:16:
                    53:d4:ab:06:72:aa:27:1f:22:b9:dc:28:c2:ff:a8:
                    83:b5:53:cd:40:50:28:fb:b4:54:f9:a9:37:a5:af:
                    e3:38:bf:6e:d3:dd:f8:55:cb:07:3b:a5:d3:4b:cd:
                    ae:aa:d1:d6:f1:50:f7:e6:74:6f:59:fe:ea:58:a4:
                    04:94:f0:05:c8:1d:5b:31:52:d4:0f:bd:cb:b3:3e:
                    0a:4b:0c:3d:84:3e:57:d4:e4:e1:fd:73:ea:7d:b4:
                    e9:8f:29:da:e4:57:1b:54:47:bc:b3:a4:35:07:6b:
                    4a:d6:11:23:34:8e:cd:61:1d:75:ce:79:f4:da:ac:
                    08:3f:2d:e9:9e:be:8f:46:ff:79:ed:b0:1a:13:a5:
                    01:db:26:b7:5c:a4:d0:1e:5d:58:a4:c6:9f:d4:a9:
                    ca:55:b8:de:c1:a7:72:3c:d5:59:43:56:bb:a6:4d:
                    ee:48:ca:df:60:7a:9c:ec:2f:e4:60:c6:90:62:41:
                    87:63:df:71:e9:b5:33:93:5f:c5:d1:bc:6f:fa:c9:
                    f4:ec:9b:4c:85:be:bf:eb:c3:bb:8e:29:17:b5:bf:
                    ae:b5:9c:34:22:c9:bb:05:a1:0f:1e:3b:8f:10:df:
                    80:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3D:A2:A7:FB:9C:D1:B6:17:C0:F5:74:AC:0F:BA:43:4B:89:10:9F
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/bj2ip_uc0bYXwPV0rA-6Q0uJEJ8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.224.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         05:ad:4b:f8:fb:37:be:41:05:2f:c8:7e:33:b1:42:b7:39:c2:
         f2:d8:de:dc:d6:e1:6e:5a:de:b3:05:08:76:c1:bb:b9:e0:7e:
         36:a6:92:44:6d:65:39:45:0b:6c:c4:53:9a:ba:f3:98:34:9e:
         f3:27:36:e3:fa:c6:0a:a1:6d:82:58:c3:bf:9b:e4:72:2a:7a:
         dc:af:bb:cf:28:12:22:ac:a2:12:2a:18:ea:15:00:96:3d:56:
         f3:d6:89:3e:e7:c0:ac:85:7d:1c:0d:ec:9b:54:58:2c:c1:99:
         0d:8f:54:44:34:ea:b3:39:6e:4e:7d:91:13:e6:f2:d3:5e:00:
         ad:36:55:75:82:2c:ed:53:3c:15:39:d0:22:ab:d4:b2:a2:a5:
         23:1f:83:19:6b:43:7f:36:3a:11:d9:91:75:32:8a:eb:8b:b9:
         e5:c9:6c:9c:fd:f5:ec:81:9f:dc:b0:ac:6a:31:cf:5b:5d:ca:
         1d:b7:65:66:59:e0:62:67:f3:8d:88:01:5e:c1:c8:70:0d:b2:
         f8:f0:ac:76:90:02:58:c2:47:df:19:f7:1c:5c:90:40:90:60:
         c0:fc:2c:8a:78:0a:c3:42:25:ba:24:ad:c5:2f:63:31:d0:4c:
         db:54:d6:ab:07:e7:40:c7:2f:98:f2:aa:eb:52:a7:f2:be:84:
         b7:bc:f4:ab
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NURF
NTJFNjRCRTQzRTMyOEFBNjlGM0FCMkQzNDdGODgzM0VDNjM3MB4XDTIzMTAwNjA2
MDU0NFoXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoNkUzREEyQTdGQjlDRDFC
NjE3QzBGNTc0QUMwRkJBNDM0Qjg5MTA5RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANuAtTcf/wKvCBzDAKbKMMmcblBPHJr35wm9pDMWU9SrBnKqJx8i
udwowv+og7VTzUBQKPu0VPmpN6Wv4zi/btPd+FXLBzul00vNrqrR1vFQ9+Z0b1n+
6likBJTwBcgdWzFS1A+9y7M+CksMPYQ+V9Tk4f1z6n206Y8p2uRXG1RHvLOkNQdr
StYRIzSOzWEddc559NqsCD8t6Z6+j0b/ee2wGhOlAdsmt1yk0B5dWKTGn9SpylW4
3sGncjzVWUNWu6ZN7kjK32B6nOwv5GDGkGJBh2Pfcem1M5NfxdG8b/rJ9OybTIW+
v+vDu44pF7W/rrWcNCLJuwWhDx47jxDfgMcCAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBRuPaKn+5zRthfA9XSsD7pDS4kQnzAfBgNVHSMEGDAWgBRl3lLmS+Q+Moqmnzqy
00f4gz7GNzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjgvWmQ1UzVrdmtQaktLcHA4NnN0TkgtSU0teGpjLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWmQ1UzVrdmtQaktLcHA4NnN0TkgtSU0t
eGpjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzY4L2JqMmlwX3VjMGJZWHdQVjByQS02UTB1SkVKOC5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAXK4EAwDQYJKoZIhvcNAQELBQADggEBAAWtS/j7N75BBS/IfjOxQrc5wvLY3tzW
4W5a3rMFCHbBu7ngfjamkkRtZTlFC2zEU5q685g0nvMnNuP6xgqhbYJYw7+b5HIq
etyvu88oEiKsohIqGOoVAJY9VvPWiT7nwKyFfRwN7JtUWCzBmQ2PVEQ06rM5bk59
kRPm8tNeAK02VXWCLO1TPBU50CKr1LKipSMfgxlrQ382OhHZkXUyiuuLueXJbJz9
9eyBn9ywrGoxz1tdyh23ZWZZ4GJn842IAV7ByHANsvjwrHaQAljCR98Z9xxckECQ
YMD8LIp4CsNCJbokrcUvYzHQTNtU1qsH50DHL5jyqutSp/K+hLe89Ks=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:00 2025 by rpki-client