Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/eRm116zwLW2rkAaUqCXoOtHNpjU.roa
File:                     eRm116zwLW2rkAaUqCXoOtHNpjU.roa (raw, json)
Hash identifier:          1pr+R6Ntr0UMdasH9ROqsT9iZopWCeF34IHIOQm5BTA=
Subject key identifier:   79:19:B5:D7:AC:F0:2D:6D:AB:90:06:94:A8:25:E8:3A:D1:CD:A6:35
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0156
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/eRm116zwLW2rkAaUqCXoOtHNpjU.roa
Signing time:             Thu 01 Dec 2022 01:28:21 +0000
ROA not before:           Thu 01 Dec 2022 01:28:21 +0000
ROA not after:            Wed 15 Nov 2023 01:30:02 +0000
asID:                     9371
IP address blocks:        103.15.0.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Dec  1 01:28:21 2022 GMT
            Not After : Nov 15 01:30:02 2023 GMT
        Subject: CN=7919B5D7ACF02D6DAB900694A825E83AD1CDA635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:97:10:ad:d4:4f:f4:7b:5c:db:f9:3b:64:f1:
                    7d:93:d4:7e:22:a8:36:4a:8b:0f:79:cf:42:a9:f6:
                    1e:89:d5:55:dd:42:5a:08:69:ef:c4:67:69:7d:52:
                    3e:bf:f7:c1:46:9e:a6:f3:c7:e9:19:3f:cd:69:cd:
                    1b:ea:c0:9c:53:92:7c:79:d3:4c:c4:84:b6:07:da:
                    2f:2e:a2:dc:d9:6c:18:41:66:4d:05:eb:62:e5:ab:
                    33:9d:f1:99:2e:78:4b:f1:51:55:50:9d:0e:d7:10:
                    6f:af:89:1c:f4:31:3a:e2:54:52:9a:8b:23:b5:af:
                    f0:9a:c2:a8:f9:db:c2:2f:27:7e:40:44:8e:51:40:
                    3e:51:2f:b9:64:02:5a:4b:34:b9:38:63:1b:e8:14:
                    45:70:cc:8f:73:d3:76:0d:c5:39:c4:66:db:f0:c0:
                    53:e8:96:67:df:12:cc:c6:f8:b4:2a:72:2c:cf:6b:
                    2d:5f:dc:ac:ac:fc:ca:35:29:a5:95:3c:2a:22:22:
                    f8:c6:a9:bf:1c:62:ce:08:76:98:2d:17:7f:74:c2:
                    93:36:eb:ef:50:c3:d5:86:a3:3a:38:4c:14:00:fa:
                    70:1d:72:23:f8:ea:c1:ea:04:bd:00:9b:81:78:4b:
                    6c:ea:f8:a5:c4:30:04:f6:14:78:6d:1c:19:fb:97:
                    0f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:19:B5:D7:AC:F0:2D:6D:AB:90:06:94:A8:25:E8:3A:D1:CD:A6:35
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/eRm116zwLW2rkAaUqCXoOtHNpjU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:06:dc:5e:76:d6:d8:de:eb:5d:94:74:8a:d0:0b:56:cb:19:
         ec:71:95:77:99:54:e5:e2:b3:00:f5:24:45:f8:42:be:09:05:
         4d:c4:55:51:56:1c:d2:eb:cf:cb:fd:6c:4e:21:59:bc:7e:c6:
         b4:09:43:be:93:12:1c:04:e6:8d:34:87:7d:74:2b:d7:0a:a8:
         5e:0b:39:61:43:3e:80:a6:de:d2:e3:a3:0c:4e:ee:db:89:29:
         c9:c6:ee:af:48:a7:4a:43:f9:11:96:62:52:13:4e:87:0d:7f:
         01:a1:1f:dc:7d:79:9c:19:89:bf:33:54:ec:0e:0d:53:bf:2e:
         f5:a2:05:94:b6:a1:1d:40:c6:c0:4a:0f:44:b5:dc:ed:a6:d6:
         bb:e5:75:5e:b7:ad:62:84:bb:eb:bf:86:47:63:6c:27:fb:e3:
         fe:4c:ef:b3:fd:75:7c:34:98:79:55:00:5e:23:3f:54:1c:95:
         a2:0a:41:65:9d:e2:09:99:68:7c:85:9d:d8:1f:a4:17:cd:f8:
         89:37:4c:c7:df:ff:2a:dc:61:ef:a7:08:33:32:0e:d9:61:b2:
         4d:2c:55:10:ff:af:1a:f3:63:4c:68:96:62:2d:f6:fa:02:94:
         35:74:a8:c7:9f:d3:b6:5a:7b:0b:3b:cd:4c:f7:02:a7:82:c0:
         6a:fd:7d:00
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMjEyMDEw
MTI4MjFaFw0yMzExMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc5MTlCNUQ3QUNGMDJE
NkRBQjkwMDY5NEE4MjVFODNBRDFDREE2MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1lxCt1E/0e1zb+Ttk8X2T1H4iqDZKiw95z0Kp9h6J1VXdQloI
ae/EZ2l9Uj6/98FGnqbzx+kZP81pzRvqwJxTknx500zEhLYH2i8uotzZbBhBZk0F
62LlqzOd8ZkueEvxUVVQnQ7XEG+viRz0MTriVFKaiyO1r/Cawqj528IvJ35ARI5R
QD5RL7lkAlpLNLk4YxvoFEVwzI9z03YNxTnEZtvwwFPolmffEszG+LQqcizPay1f
3Kys/Mo1KaWVPCoiIvjGqb8cYs4IdpgtF390wpM26+9Qw9WGozo4TBQA+nAdciP4
6sHqBL0Am4F4S2zq+KXEMAT2FHhtHBn7lw/1AgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUeRm116zwLW2rkAaUqCXoOtHNpjUwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny9lUm0xMTZ6d0xXMnJrQWFVcUNYb090SE5walUu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZw8AMA0GCSqGSIb3DQEBCwUAA4IBAQBQBtxedtbY3utdlHSK0AtW
yxnscZV3mVTl4rMA9SRF+EK+CQVNxFVRVhzS68/L/WxOIVm8fsa0CUO+kxIcBOaN
NId9dCvXCqheCzlhQz6Apt7S46MMTu7biSnJxu6vSKdKQ/kRlmJSE06HDX8BoR/c
fXmcGYm/M1TsDg1Tvy71ogWUtqEdQMbASg9Etdztpta75XVet61ihLvrv4ZHY2wn
++P+TO+z/XV8NJh5VQBeIz9UHJWiCkFlneIJmWh8hZ3YH6QXzfiJN0zH3/8q3GHv
pwgzMg7ZYbJNLFUQ/68a82NMaJZiLfb6ApQ1dKjHn9O2WnsLO81M9wKngsBq/X0A
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:40 2025 by rpki-client