Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/95GD_TtLY0pOhj_ridDkuQHsFCQ.roa
File:                     95GD_TtLY0pOhj_ridDkuQHsFCQ.roa (raw, json)
Hash identifier:          cCgQhO8Apmvn0YtB6drpPWrMEejKtMH9Ou2q/gTT5dY=
Subject key identifier:   F7:91:83:FD:3B:4B:63:4A:4E:86:3F:EB:89:D0:E4:B9:01:EC:14:24
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       010A
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/95GD_TtLY0pOhj_ridDkuQHsFCQ.roa
Signing time:             Sat 01 Jan 2022 01:31:18 +0000
ROA not before:           Sat 01 Jan 2022 01:31:18 +0000
ROA not after:            Thu 15 Dec 2022 01:30:02 +0000
asID:                     7684
IP address blocks:        49.212.70.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Jan  1 01:31:18 2022 GMT
            Not After : Dec 15 01:30:02 2022 GMT
        Subject: CN=F79183FD3B4B634A4E863FEB89D0E4B901EC1424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:58:b6:e0:74:a1:79:72:24:b0:f5:31:57:32:
                    e2:14:55:ef:9f:dd:f5:d0:16:62:db:d9:2d:45:12:
                    15:a5:b0:0e:94:25:ca:ec:2f:a7:2e:bf:42:0b:43:
                    a5:fd:d1:62:c5:55:f9:fd:97:b7:1e:59:67:bc:6e:
                    4d:ab:60:be:91:10:30:8e:ec:ef:0c:b1:2a:76:de:
                    05:79:95:2e:b4:24:44:16:61:71:57:7a:cc:fc:e3:
                    fa:e3:f0:be:5e:de:7b:dc:aa:a6:55:00:7f:da:17:
                    00:f5:fa:76:fe:b1:9a:f4:bb:d0:f3:80:d6:42:e4:
                    0e:90:59:5b:bd:d8:75:6b:54:2d:cc:c5:94:63:32:
                    7a:62:c4:e4:ac:33:aa:90:5a:e1:c1:c7:03:85:f1:
                    64:a1:e1:c4:89:6d:06:bc:aa:ca:d8:d4:c6:db:4f:
                    f3:b1:9c:62:15:71:ca:82:2b:c3:aa:16:23:e5:e0:
                    c0:d7:24:1a:2b:93:4f:06:42:28:8f:b6:b4:48:2c:
                    7d:57:3a:41:b4:53:d9:93:cd:cf:94:ee:5e:67:0c:
                    3e:db:55:da:14:b2:db:02:37:a5:32:27:27:4b:03:
                    20:94:d5:de:7e:e7:f8:ae:d3:40:06:63:00:36:b5:
                    a0:76:0e:23:99:5b:77:57:ba:cf:f7:b6:e3:75:62:
                    f9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:91:83:FD:3B:4B:63:4A:4E:86:3F:EB:89:D0:E4:B9:01:EC:14:24
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/95GD_TtLY0pOhj_ridDkuQHsFCQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:82:cf:79:83:18:7d:30:6b:ca:cf:db:a5:90:ef:8a:bd:4a:
         b6:b6:b9:16:ed:18:63:69:13:eb:27:20:27:fa:c9:4f:aa:35:
         cb:6a:0b:05:ac:7b:58:96:00:f5:12:72:49:9e:46:aa:ac:c4:
         fb:ec:1a:04:de:25:e0:22:b4:0e:bf:3b:7b:1f:d9:b5:91:00:
         ef:e7:e4:67:a2:1e:b4:8f:33:d2:48:f1:96:c0:6e:b4:d5:16:
         13:52:a0:bf:50:57:7d:91:85:9c:07:dd:b7:96:22:a8:88:94:
         3a:00:8e:20:27:84:f9:85:84:b2:b2:93:9a:0a:0f:86:d8:48:
         8b:eb:b6:a7:88:bf:8c:ab:f5:1b:57:68:3b:2e:bc:a2:54:22:
         c7:a8:70:67:66:6a:75:54:e3:f4:92:79:fa:f5:4d:43:f6:5c:
         62:1b:c6:2b:6c:0f:ca:38:c9:c7:50:9b:ee:60:cc:2c:81:06:
         b2:65:e7:9f:92:f7:5b:8b:c8:7a:2e:92:c3:cd:ea:52:1f:05:
         51:d0:4e:a0:f2:2c:78:6b:5c:7c:b2:c6:95:68:42:a4:f8:46:
         d0:5d:f9:e3:ce:74:39:08:d5:47:85:42:6b:2c:d4:dd:82:d9:
         ac:a3:d3:d3:c6:ac:13:7f:31:5e:1c:de:2f:d0:b1:da:21:4a:
         0d:a6:6d:a2
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAQowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMjAxMDEw
MTMxMThaFw0yMjEyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY3OTE4M0ZEM0I0QjYz
NEE0RTg2M0ZFQjg5RDBFNEI5MDFFQzE0MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyWLbgdKF5ciSw9TFXMuIUVe+f3fXQFmLb2S1FEhWlsA6UJcrs
L6cuv0ILQ6X90WLFVfn9l7ceWWe8bk2rYL6REDCO7O8MsSp23gV5lS60JEQWYXFX
esz84/rj8L5e3nvcqqZVAH/aFwD1+nb+sZr0u9DzgNZC5A6QWVu92HVrVC3MxZRj
MnpixOSsM6qQWuHBxwOF8WSh4cSJbQa8qsrY1MbbT/OxnGIVccqCK8OqFiPl4MDX
JBork08GQiiPtrRILH1XOkG0U9mTzc+U7l5nDD7bVdoUstsCN6UyJydLAyCU1d5+
5/iu00AGYwA2taB2DiOZW3dXus/3tuN1YvmlAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQU95GD/TtLY0pOhj/ridDkuQHsFCQwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8xMDI0Ny85NUdEX1R0TFkwcE9oal9yaWREa3VRSHNGQ1Eucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMdRGMA0GCSqGSIb3DQEBCwUA
A4IBAQB5gs95gxh9MGvKz9ulkO+KvUq2trkW7RhjaRPrJyAn+slPqjXLagsFrHtY
lgD1EnJJnkaqrMT77BoE3iXgIrQOvzt7H9m1kQDv5+Rnoh60jzPSSPGWwG601RYT
UqC/UFd9kYWcB923liKoiJQ6AI4gJ4T5hYSyspOaCg+G2EiL67aniL+Mq/UbV2g7
LryiVCLHqHBnZmp1VOP0knn69U1D9lxiG8YrbA/KOMnHUJvuYMwsgQayZeefkvdb
i8h6LpLDzepSHwVR0E6g8ix4a1x8ssaVaEKk+EbQXfnjznQ5CNVHhUJrLNTdgtms
o9PTxqwTfzFeHN4v0LHaIUoNpm2i
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:19 2025 by rpki-client