Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12207/NlE8g5x0DibCC4AxE7-vk4Dz8sI.roa
File:                     NlE8g5x0DibCC4AxE7-vk4Dz8sI.roa (raw, json)
Hash identifier:          I/W9kx+fH39K9LnugC06OTFexi5TKmORm74apnoUCIo=
Subject key identifier:   36:51:3C:83:9C:74:0E:26:C2:0B:80:31:13:BF:AF:93:80:F3:F2:C2
Certificate issuer:       /CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E
Certificate serial:       25
Authority key identifier: 19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/NlE8g5x0DibCC4AxE7-vk4Dz8sI.roa
Signing time:             Sun 01 May 2022 01:29:57 +0000
ROA not before:           Sun 01 May 2022 01:29:57 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     55392
IP address blocks:        130.62.0.0/16 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E
        Validity
            Not Before: May  1 01:29:57 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=36513C839C740E26C20B803113BFAF9380F3F2C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:61:15:50:5e:f9:78:2b:c6:03:45:a5:18:
                    5e:3d:a9:8e:29:f0:ba:54:45:80:57:af:39:4d:9d:
                    4c:e2:37:99:4f:1c:46:6b:5d:69:c7:1a:4f:33:25:
                    92:29:21:93:4b:c3:b2:72:22:15:48:04:03:fc:1b:
                    21:52:f2:1a:d8:ed:75:13:35:f3:9b:64:4d:1d:7d:
                    0c:da:49:c6:7a:be:13:9e:b7:17:d5:79:cc:f6:23:
                    30:c9:e9:45:cf:6f:44:67:ba:e2:70:41:06:b7:41:
                    87:2e:7a:57:bb:4f:ff:a1:88:1f:a0:cb:65:e3:42:
                    e7:79:56:fe:f3:85:e4:ba:82:73:b7:58:f2:e1:35:
                    7a:a1:de:a9:ac:54:25:07:71:03:92:94:56:ac:49:
                    1d:5b:67:82:f8:f3:16:f2:38:0b:23:a3:72:cd:08:
                    de:5a:31:a8:95:de:53:c9:f8:71:7d:22:59:5d:89:
                    b6:7a:82:bf:56:7c:68:b5:7d:38:96:76:13:cd:76:
                    e3:20:47:55:a6:1a:e6:41:4f:90:05:d7:03:b2:93:
                    fb:27:57:fb:ca:9a:3d:6a:50:2c:d5:7e:f3:08:8f:
                    e4:50:41:c9:a5:c8:d6:f7:4b:17:27:ff:d4:dc:59:
                    aa:62:18:c6:54:43:e9:ef:6e:44:c9:c5:2a:8d:fd:
                    61:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:51:3C:83:9C:74:0E:26:C2:0B:80:31:13:BF:AF:93:80:F3:F2:C2
            X509v3 Authority Key Identifier:
                keyid:19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/NlE8g5x0DibCC4AxE7-vk4Dz8sI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.62.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         47:61:9e:d9:f9:62:4a:65:b7:c4:af:02:8c:f2:62:f7:03:34:
         52:a3:7d:95:8c:7b:c6:5d:f8:63:bb:c4:c6:55:a0:f6:37:7c:
         77:24:1c:13:46:12:3b:b0:78:52:f1:f5:6c:d2:77:98:c4:17:
         68:c4:b9:3a:92:4f:bf:72:97:ca:3d:00:9a:2d:a5:c4:b6:9b:
         ee:aa:60:bc:3f:8d:a0:cd:f0:38:5f:da:55:eb:02:ef:c7:a7:
         0c:0a:fd:75:35:34:ae:c4:4a:a3:9e:01:fd:d3:ce:bb:1e:b2:
         5d:6b:ac:80:0c:d6:e8:3d:65:1f:e3:2f:fd:4b:a5:51:0a:a3:
         eb:19:12:34:c1:3c:cd:b5:60:55:d1:84:b5:73:aa:75:42:8c:
         b3:23:79:3a:ed:fb:98:0e:83:5f:c7:b5:bd:6f:9c:bb:0f:a7:
         95:70:d6:88:96:d7:70:92:8a:d1:23:12:44:1b:ce:7a:03:97:
         d6:13:43:be:cf:5f:70:61:86:f9:0c:fa:df:e8:74:40:74:27:
         d6:36:2e:bf:db:24:2d:3d:07:a7:a4:e5:19:97:d9:95:81:72:
         df:a0:04:db:70:b7:ff:54:87:52:5d:e9:3d:c8:b8:c3:be:8c:
         54:cc:90:7c:bc:60:b7:73:24:0b:6a:71:63:15:e6:54:49:5b:
         9f:b0:f5:8a
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIBJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxOUI0
RkRBRTk2MkY0OTYwNTg4QjFEMkJFNkExRUQ0MkYxMzcwOThFMB4XDTIyMDUwMTAx
Mjk1N1oXDTIzMDQyNzA5NTIzNFowMzExMC8GA1UEAxMoMzY1MTNDODM5Qzc0MEUy
NkMyMEI4MDMxMTNCRkFGOTM4MEYzRjJDMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALi6YRVQXvl4K8YDRaUYXj2pjinwulRFgFevOU2dTOI3mU8cRmtd
accaTzMlkikhk0vDsnIiFUgEA/wbIVLyGtjtdRM185tkTR19DNpJxnq+E563F9V5
zPYjMMnpRc9vRGe64nBBBrdBhy56V7tP/6GIH6DLZeNC53lW/vOF5LqCc7dY8uE1
eqHeqaxUJQdxA5KUVqxJHVtngvjzFvI4CyOjcs0I3loxqJXeU8n4cX0iWV2JtnqC
v1Z8aLV9OJZ2E8124yBHVaYa5kFPkAXXA7KT+ydX+8qaPWpQLNV+8wiP5FBByaXI
1vdLFyf/1NxZqmIYxlRD6e9uRMnFKo39YUECAwEAAaOCAicwggIjMB0GA1UdDgQW
BBQ2UTyDnHQOJsILgDETv6+TgPPywjAfBgNVHSMEGDAWgBQZtP2uli9JYFiLHSvm
oe1C8TcJjjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTIyMDcvR2JUOXJwWXZTV0JZaXgwcjVxSHRRdkUzQ1k0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvR2JUOXJwWXZTV0JZaXgwcjVxSHRR
dkUzQ1k0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEyMjA3L05sRThnNXgwRGliQ0M0QXhFNy12azREejhzSS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsE
AgABMAUDAwCCPjANBgkqhkiG9w0BAQsFAAOCAQEAR2Ge2fliSmW3xK8CjPJi9wM0
UqN9lYx7xl34Y7vExlWg9jd8dyQcE0YSO7B4UvH1bNJ3mMQXaMS5OpJPv3KXyj0A
mi2lxLab7qpgvD+NoM3wOF/aVesC78enDAr9dTU0rsRKo54B/dPOux6yXWusgAzW
6D1lH+Mv/UulUQqj6xkSNME8zbVgVdGEtXOqdUKMsyN5Ou37mA6DX8e1vW+cuw+n
lXDWiJbXcJKK0SMSRBvOegOX1hNDvs9fcGGG+Qz63+h0QHQn1jYuv9skLT0Hp6Tl
GZfZlYFy36AE23C3/1SHUl3pPci4w76MVMyQfLxgt3MkC2pxYxXmVElbn7D1ig==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:45 2025 by rpki-client