Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/T6HT5x_DhtBdwOU1c48A7nW8Na8.roa
File:                     T6HT5x_DhtBdwOU1c48A7nW8Na8.roa (raw, json)
Hash identifier:          49gSJxsU4tONtTUQqZ472LuJPRpvfA1478aCpnXKOEU=
Subject key identifier:   4F:A1:D3:E7:1F:C3:86:D0:5D:C0:E5:35:73:8F:00:EE:75:BC:35:AF
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       013E
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/T6HT5x_DhtBdwOU1c48A7nW8Na8.roa
Signing time:             Thu 01 Sep 2022 01:28:27 +0000
ROA not before:           Thu 01 Sep 2022 01:28:27 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     131965
IP address blocks:        219.94.201.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep  1 01:28:27 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=4FA1D3E71FC386D05DC0E535738F00EE75BC35AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:1e:d0:71:53:d4:35:3c:f6:14:53:c3:3e:6b:
                    2b:4a:7d:41:94:04:b2:97:50:d2:cd:57:44:fe:d8:
                    78:ea:00:8b:94:2d:da:75:35:54:4e:49:78:47:3e:
                    63:48:3f:cd:62:30:7c:3d:b6:9e:7a:ec:92:a2:38:
                    e7:2f:04:19:d8:0e:ec:2f:19:c2:14:af:81:48:c8:
                    08:4a:4f:c9:07:b0:0b:ac:63:41:a6:3d:5d:da:6f:
                    0d:20:5c:30:d7:d1:ee:45:8b:38:73:f2:a7:f4:2b:
                    e8:0f:54:7c:cc:76:28:2f:24:c0:67:3c:ef:bf:48:
                    a6:26:72:17:9d:e0:56:9f:88:87:c1:e8:24:39:91:
                    bd:23:ed:e4:ea:67:73:82:79:1a:2b:d3:5f:b3:2d:
                    ca:d9:cb:1b:f4:c4:34:62:05:ff:6d:8e:a6:86:00:
                    da:b7:c5:64:9a:3d:a3:c6:5f:d8:02:03:7a:f3:25:
                    2c:8a:ca:99:a4:d4:d3:36:be:e7:17:06:5d:00:50:
                    01:76:61:62:80:45:17:ef:99:07:70:ce:c8:8d:0b:
                    db:43:f1:c7:e5:12:b5:90:9c:d7:49:24:5a:2f:a2:
                    49:ef:15:01:b0:3f:4c:8a:6b:89:28:62:fa:31:3d:
                    9b:24:93:43:eb:31:4a:89:c9:a9:25:cf:8a:2d:18:
                    6c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A1:D3:E7:1F:C3:86:D0:5D:C0:E5:35:73:8F:00:EE:75:BC:35:AF
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/T6HT5x_DhtBdwOU1c48A7nW8Na8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.94.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:f2:4e:21:72:92:20:f3:24:9b:89:73:fc:30:83:f3:9c:42:
         86:2c:2c:89:fb:0a:80:fb:bc:88:0e:c7:e5:d1:6c:3c:d3:00:
         49:5b:75:20:84:0b:22:ac:21:85:14:69:f9:44:87:6a:62:3a:
         e8:cb:b5:c6:aa:ba:96:7e:ec:25:e7:e1:29:60:25:13:f5:92:
         2c:61:c8:b8:2a:1c:d8:29:8d:63:33:3d:c3:17:b4:e2:8d:4d:
         6f:04:b6:ef:a6:02:33:d5:1c:e5:9a:77:d4:7c:f6:f1:ed:bd:
         f3:e6:6c:c0:9a:d4:96:e3:27:f7:38:32:b6:02:47:b0:00:3f:
         91:89:31:4c:5d:5e:7f:c6:74:1a:bb:18:f9:89:78:c6:e7:79:
         1b:6c:e1:f3:50:38:1f:8b:20:b6:ba:31:d8:e0:70:d8:c0:d6:
         cb:4a:5d:ed:e3:1a:a3:e0:5d:b7:45:bf:94:9d:dc:2d:87:dc:
         d9:35:c0:97:69:64:23:61:8c:39:35:56:08:d2:72:c1:c2:d8:
         f7:62:14:a0:75:9f:ca:0b:6d:b0:77:02:8a:0b:f7:60:fe:72:
         05:b0:5b:f4:c6:21:34:13:ac:15:f9:ec:52:e3:a6:59:f5:32:
         b5:2d:cf:b6:14:7a:9b:b2:bc:71:e0:84:e3:1a:53:18:3d:2c:
         a5:2d:70:13
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMjA5MDEw
MTI4MjdaFw0yMzA4MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDRGQTFEM0U3MUZDMzg2
RDA1REMwRTUzNTczOEYwMEVFNzVCQzM1QUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDwHtBxU9Q1PPYUU8M+aytKfUGUBLKXUNLNV0T+2HjqAIuULdp1
NVROSXhHPmNIP81iMHw9tp567JKiOOcvBBnYDuwvGcIUr4FIyAhKT8kHsAusY0Gm
PV3abw0gXDDX0e5Fizhz8qf0K+gPVHzMdigvJMBnPO+/SKYmched4FafiIfB6CQ5
kb0j7eTqZ3OCeRor01+zLcrZyxv0xDRiBf9tjqaGANq3xWSaPaPGX9gCA3rzJSyK
ypmk1NM2vucXBl0AUAF2YWKARRfvmQdwzsiNC9tD8cflErWQnNdJJFovoknvFQGw
P0yKa4koYvoxPZskk0PrMUqJyaklz4otGGy1AgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUT6HT5x/DhtBdwOU1c48A7nW8Na8wHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny9UNkhUNXhfRGh0QmR3T1UxYzQ4QTduVzhOYTgu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQA217JMA0GCSqGSIb3DQEBCwUAA4IBAQDM8k4hcpIg8ySbiXP8MIPz
nEKGLCyJ+wqA+7yIDsfl0Ww80wBJW3UghAsirCGFFGn5RIdqYjroy7XGqrqWfuwl
5+EpYCUT9ZIsYci4KhzYKY1jMz3DF7TijU1vBLbvpgIz1RzlmnfUfPbx7b3z5mzA
mtSW4yf3ODK2AkewAD+RiTFMXV5/xnQauxj5iXjG53kbbOHzUDgfiyC2ujHY4HDY
wNbLSl3t4xqj4F23Rb+Undwth9zZNcCXaWQjYYw5NVYI0nLBwtj3YhSgdZ/KC22w
dwKKC/dg/nIFsFv0xiE0E6wV+exS46ZZ9TK1Lc+2FHqbsrxx4ITjGlMYPSylLXAT
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:24 2025 by rpki-client