Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/WODrYSgJPvWjnhiNnfxCmeMvKvI.roa
File:                     WODrYSgJPvWjnhiNnfxCmeMvKvI.roa (raw, json)
Hash identifier:          9+abL5SeJmTYYl582HyszNMSlmYBMlFbeAKtEfPNcZ8=
Subject key identifier:   58:E0:EB:61:28:09:3E:F5:A3:9E:18:8D:9D:FC:42:99:E3:2F:2A:F2
Certificate issuer:       /CN=D79B3890C2DA3795148976B954C2024056797554
Certificate serial:       07
Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/WODrYSgJPvWjnhiNnfxCmeMvKvI.roa
Signing time:             Wed 11 May 2022 02:31:20 +0000
ROA not before:           Wed 11 May 2022 02:31:20 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     131934
IP address blocks:        27.147.112.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79B3890C2DA3795148976B954C2024056797554
        Validity
            Not Before: May 11 02:31:20 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=58E0EB6128093EF5A39E188D9DFC4299E32F2AF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:14:0a:bc:12:c4:57:31:dd:e2:5c:c8:8e:b1:
                    fe:3f:f5:0e:2d:f5:48:f7:b0:a3:af:45:dc:02:70:
                    e4:c9:c6:89:e1:dd:93:25:b3:8e:10:b5:78:5e:83:
                    3d:76:b3:19:f7:ca:f8:b7:de:b5:d3:8d:2b:75:69:
                    ae:b8:b5:24:03:c6:69:75:a2:03:2c:ab:5e:e5:e1:
                    94:20:ae:2b:f5:29:1b:73:1c:97:8a:d8:78:91:b7:
                    5c:0a:07:ae:e6:7e:ce:26:5c:2f:cc:04:38:11:da:
                    c2:60:eb:f4:e7:cc:41:3d:3b:db:e7:89:ab:8c:22:
                    ee:c8:6b:1f:5c:c9:f8:1e:a7:c0:c3:64:6b:e3:d7:
                    10:db:2a:1e:c2:b5:58:50:8f:41:bf:f7:a8:2a:da:
                    c7:11:d5:f8:98:86:fd:20:db:c5:19:85:4a:3f:f6:
                    3c:f3:f7:01:db:5c:da:00:81:ce:a0:10:35:fe:ed:
                    88:93:ce:16:6d:7b:87:69:c3:fa:ff:51:d1:4e:9a:
                    0d:b6:21:7f:5e:e5:d7:87:16:5d:64:df:57:29:44:
                    96:ea:45:fe:3a:1a:9e:bf:d8:4b:62:bf:d2:d3:88:
                    c3:00:91:8b:38:8e:1d:46:3a:c5:32:82:ba:23:5a:
                    03:8f:2c:e9:fb:8d:19:c7:25:0e:e1:3f:22:25:77:
                    6c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E0:EB:61:28:09:3E:F5:A3:9E:18:8D:9D:FC:42:99:E3:2F:2A:F2
            X509v3 Authority Key Identifier:
                keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/WODrYSgJPvWjnhiNnfxCmeMvKvI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.147.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4c:a0:d4:5f:36:a1:17:5a:d3:f0:5c:55:32:d3:87:ea:ee:7a:
         1d:1d:3e:55:a4:05:f3:72:b0:64:dc:7c:06:e1:b5:7b:ea:4c:
         a2:0f:be:43:e0:4d:d4:3b:2a:87:b6:0e:fd:ac:bc:fe:23:98:
         c4:ce:3a:52:ac:6b:11:e6:12:c5:ba:fe:76:98:64:2b:eb:54:
         35:15:8d:a9:1b:a3:98:e6:eb:64:1c:c7:c6:b7:29:64:6c:ef:
         14:65:7c:9a:ec:22:0b:9e:86:95:67:e9:f6:0e:9f:26:dd:ba:
         0f:f8:a8:09:d6:bd:88:4d:d5:e6:55:42:c6:b6:83:68:e8:c2:
         58:2e:61:00:0a:c4:06:95:cd:cf:15:54:69:70:70:ea:d4:18:
         85:85:0c:29:2d:f5:69:5b:fb:80:c5:54:70:15:18:01:0c:9b:
         87:c5:ab:d2:a7:cd:b3:97:ac:56:9e:d2:42:8b:21:56:7f:4c:
         ab:6e:19:4e:6a:5a:d8:66:fa:55:60:3a:bb:6c:db:f3:53:b3:
         73:46:43:93:4d:67:25:b8:96:2d:3c:dd:03:f0:ef:13:7d:ff:
         56:ba:2f:ad:91:37:36:0e:68:7a:9e:dc:2a:ac:5e:bd:7f:e9:
         40:ea:8e:b2:34:38:df:c6:44:d6:31:8a:90:05:82:e4:19:ff:
         92:85:cf:1a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENzlC
Mzg5MEMyREEzNzk1MTQ4OTc2Qjk1NEMyMDI0MDU2Nzk3NTU0MB4XDTIyMDUxMTAy
MzEyMFoXDTIzMDQyNzA5NTIzNFowMzExMC8GA1UEAxMoNThFMEVCNjEyODA5M0VG
NUEzOUUxODhEOURGQzQyOTlFMzJGMkFGMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALoUCrwSxFcx3eJcyI6x/j/1Di31SPewo69F3AJw5MnGieHdkyWz
jhC1eF6DPXazGffK+LfetdONK3Vprri1JAPGaXWiAyyrXuXhlCCuK/UpG3Mcl4rY
eJG3XAoHruZ+ziZcL8wEOBHawmDr9OfMQT072+eJq4wi7shrH1zJ+B6nwMNka+PX
ENsqHsK1WFCPQb/3qCraxxHV+JiG/SDbxRmFSj/2PPP3Adtc2gCBzqAQNf7tiJPO
Fm17h2nD+v9R0U6aDbYhf17l14cWXWTfVylElupF/joanr/YS2K/0tOIwwCRiziO
HUY6xTKCuiNaA48s6fuNGcclDuE/IiV3bJECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRY4OthKAk+9aOeGI2d/EKZ4y8q8jAfBgNVHSMEGDAWgBTXmziQwto3lRSJdrlU
wgJAVnl1VDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODQwLzE1czRrTUxhTjVVVWlYYTVWTUlDUUZaNWRWUS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzE1czRrTUxhTjVVVWlYYTVWTUlDUUZa
NWRWUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NDAvV09EcllTZ0pQdldqbmhpTm5meENtZU12S3ZJLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBBuTcDANBgkqhkiG9w0BAQsFAAOCAQEATKDUXzahF1rT8FxVMtOH6u56HR0+
VaQF83KwZNx8BuG1e+pMog++Q+BN1Dsqh7YO/ay8/iOYxM46UqxrEeYSxbr+dphk
K+tUNRWNqRujmObrZBzHxrcpZGzvFGV8muwiC56GlWfp9g6fJt26D/ioCda9iE3V
5lVCxraDaOjCWC5hAArEBpXNzxVUaXBw6tQYhYUMKS31aVv7gMVUcBUYAQybh8Wr
0qfNs5esVp7SQoshVn9Mq24ZTmpa2Gb6VWA6u2zb81Ozc0ZDk01nJbiWLTzdA/Dv
E33/VrovrZE3Ng5oep7cKqxevX/pQOqOsjQ438ZE1jGKkAWC5Bn/koXPGg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:01 2025 by rpki-client