Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/1HOnhgmIW_XHemItKgDHxk4MWIA.roa
File:                     1HOnhgmIW_XHemItKgDHxk4MWIA.roa (raw, json)
Hash identifier:          pjgNE1jauVIJgAMGfDeaSnOC3cWIrncOnXkr4yGB4T0=
Subject key identifier:   D4:73:A7:86:09:88:5B:F5:C7:7A:62:2D:2A:00:C7:C6:4E:0C:58:80
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0171
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/1HOnhgmIW_XHemItKgDHxk4MWIA.roa
Signing time:             Thu 01 Dec 2022 01:28:30 +0000
ROA not before:           Thu 01 Dec 2022 01:28:30 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     9371
IP address blocks:        210.188.208.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Dec  1 01:28:30 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=D473A78609885BF5C77A622D2A00C7C64E0C5880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c8:22:bc:a3:1c:2d:69:cd:9e:03:2d:e2:c6:
                    19:d6:ac:ed:7d:0b:e7:ba:65:06:ae:e6:43:af:57:
                    5f:f3:03:e1:78:35:a0:47:64:d4:6e:6c:d9:bc:15:
                    de:f0:b7:b3:a9:df:1e:0b:e9:0f:20:d5:f6:4f:07:
                    35:51:89:f5:bc:23:20:30:2f:e3:d3:cf:df:f4:38:
                    f7:f9:0f:1e:a1:d7:61:5d:55:8f:e1:7d:42:0d:82:
                    1a:8a:20:70:94:23:af:6d:42:fa:44:79:e1:b8:c5:
                    5a:7f:3b:9b:85:94:a9:06:43:4f:50:1d:2e:a2:0e:
                    b4:c6:93:4d:9a:64:64:26:f5:f1:8e:27:3b:5b:9a:
                    2d:53:68:54:e4:20:b2:ab:b6:62:5c:29:59:44:30:
                    06:6e:59:b6:57:b1:b7:0f:75:1c:6c:f2:17:ef:9b:
                    79:be:dd:c7:3f:e0:e8:b3:09:6b:c4:ea:77:32:05:
                    b7:b0:40:cb:b7:99:5d:5f:85:4e:7e:8c:d4:13:37:
                    7f:4d:c4:b3:44:2b:8b:68:0c:30:ff:6b:06:9f:d3:
                    a7:18:3c:78:98:0f:c8:b4:3a:21:b1:a9:8c:1b:ed:
                    29:6c:af:ef:52:2f:bf:21:49:33:ad:f8:bf:e8:27:
                    15:4d:fe:89:e0:8c:9e:29:eb:dd:78:f9:b9:3d:a2:
                    2e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:73:A7:86:09:88:5B:F5:C7:7A:62:2D:2A:00:C7:C6:4E:0C:58:80
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/1HOnhgmIW_XHemItKgDHxk4MWIA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:d9:dd:4c:4d:e4:85:02:86:14:48:1f:77:b6:2e:5f:57:42:
         10:06:03:b0:47:3a:f7:05:19:4f:f2:f3:de:5e:85:cb:90:da:
         e2:98:32:5a:70:ea:d6:a3:cf:fc:fc:09:f9:3b:8a:62:5c:11:
         82:c5:e1:9a:37:96:0c:0c:60:23:56:c9:13:6e:f6:54:da:20:
         49:5d:04:d6:0c:03:e7:5c:06:4f:76:56:20:97:b8:4b:44:d0:
         c4:57:3e:b3:39:f8:e1:61:53:ad:e7:ea:05:22:10:5c:72:ac:
         e9:05:01:61:b8:c1:dc:4b:9c:58:05:19:44:ff:c7:a6:47:62:
         c0:f6:7c:40:83:27:88:6c:21:c7:98:1e:89:bb:0c:e0:e6:46:
         14:58:1c:f2:85:40:b9:89:43:9a:40:47:d8:9b:4e:db:d2:ca:
         36:2c:b5:87:ef:7f:07:41:9c:79:e6:13:6f:f8:28:2e:fe:ce:
         49:cc:64:e5:59:7f:57:90:77:a9:05:eb:ca:90:f3:38:0f:21:
         81:c6:d8:12:ac:dc:1d:36:01:03:55:b2:ea:e3:53:f0:e8:b4:
         67:a2:83:ef:b5:36:c0:d4:cb:e6:dd:a3:b5:46:70:f6:2a:c2:
         91:a2:5f:14:ac:80:6d:50:ac:f5:00:0c:60:11:01:35:1c:e7:
         a6:f6:e1:6b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMjEyMDEw
MTI4MzBaFw0yMzExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ0NzNBNzg2MDk4ODVC
RjVDNzdBNjIyRDJBMDBDN0M2NEUwQzU4ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7yCK8oxwtac2eAy3ixhnWrO19C+e6ZQau5kOvV1/zA+F4NaBH
ZNRubNm8Fd7wt7Op3x4L6Q8g1fZPBzVRifW8IyAwL+PTz9/0OPf5Dx6h12FdVY/h
fUINghqKIHCUI69tQvpEeeG4xVp/O5uFlKkGQ09QHS6iDrTGk02aZGQm9fGOJztb
mi1TaFTkILKrtmJcKVlEMAZuWbZXsbcPdRxs8hfvm3m+3cc/4OizCWvE6ncyBbew
QMu3mV1fhU5+jNQTN39NxLNEK4toDDD/awaf06cYPHiYD8i0OiGxqYwb7Slsr+9S
L78hSTOt+L/oJxVN/ongjJ4p6914+bk9oi7XAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQU1HOnhgmIW/XHemItKgDHxk4MWIAwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny8xSE9uaGdtSVdfWEhlbUl0S2dESHhrNE1XSUEu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQB0rzQMA0GCSqGSIb3DQEBCwUAA4IBAQBl2d1MTeSFAoYUSB93ti5f
V0IQBgOwRzr3BRlP8vPeXoXLkNrimDJacOrWo8/8/An5O4piXBGCxeGaN5YMDGAj
VskTbvZU2iBJXQTWDAPnXAZPdlYgl7hLRNDEVz6zOfjhYVOt5+oFIhBccqzpBQFh
uMHcS5xYBRlE/8emR2LA9nxAgyeIbCHHmB6Juwzg5kYUWBzyhUC5iUOaQEfYm07b
0so2LLWH738HQZx55hNv+Cgu/s5JzGTlWX9XkHepBevKkPM4DyGBxtgSrNwdNgED
VbLq41Pw6LRnooPvtTbA1Mvm3aO1RnD2KsKRol8UrIBtUKz1AAxgEQE1HOem9uFr
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:28 2025 by rpki-client