Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/79D6kKL0kvX6y7MkyVtCv4MW72w.roa
File:                     79D6kKL0kvX6y7MkyVtCv4MW72w.roa (raw, json)
Hash identifier:          OLSARzqjGkdDpZgVHLYvIzTrbG/TwtscJgBkiM/zqXs=
Subject key identifier:   EF:D0:FA:90:A2:F4:92:F5:FA:CB:B3:24:C9:5B:42:BF:83:16:EF:6C
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       016F
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/79D6kKL0kvX6y7MkyVtCv4MW72w.roa
Signing time:             Sat 01 Jul 2023 01:30:39 +0000
ROA not before:           Sat 01 Jul 2023 01:30:39 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        153.248.0.0/14 maxlen: 14
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jul  1 01:30:39 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=EFD0FA90A2F492F5FACBB324C95B42BF8316EF6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:21:9c:ad:41:72:54:5c:2c:71:3c:e0:b4:f4:
                    da:86:24:95:c1:d5:17:cb:87:da:89:6e:44:cb:2f:
                    f3:e5:29:03:5f:9d:92:8b:63:bc:96:58:b0:59:93:
                    2f:89:15:5f:1b:a4:19:99:61:3d:44:c5:1d:07:13:
                    cc:24:5c:1c:4a:b4:27:e6:e8:d2:43:50:78:d7:99:
                    27:c6:a9:94:e8:68:28:23:75:09:d8:99:be:60:e2:
                    e6:41:ac:e9:c1:a8:06:7f:50:d8:e2:03:c1:2a:ed:
                    34:3e:1d:97:c9:3f:89:51:50:8b:06:b6:26:1e:8d:
                    d9:0d:5c:44:1a:54:6b:30:d4:77:07:1c:39:b1:a7:
                    18:6d:e2:41:a2:10:93:cf:86:cc:e7:76:19:f3:6b:
                    21:6a:2e:ef:59:62:6a:75:22:9b:c2:a3:f1:ef:38:
                    47:26:24:53:12:30:e4:b1:49:44:58:67:47:fc:e6:
                    23:b3:6b:f8:48:72:43:88:ca:db:b4:51:b9:3e:bb:
                    59:29:5a:c4:0d:1c:cd:b8:15:00:d0:cc:8e:65:93:
                    5c:2e:bd:cb:a4:e0:32:16:62:da:3b:14:9f:bc:bd:
                    03:5c:fc:71:35:60:64:b4:e7:ba:06:0c:08:f7:be:
                    79:d9:7a:83:e1:d0:4e:59:a3:fb:4f:50:c7:70:e7:
                    68:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D0:FA:90:A2:F4:92:F5:FA:CB:B3:24:C9:5B:42:BF:83:16:EF:6C
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/79D6kKL0kvX6y7MkyVtCv4MW72w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.248.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         03:53:3c:f9:3e:8e:b1:af:92:27:be:2f:30:26:d1:05:89:b8:
         36:c4:8b:16:86:d3:4a:29:40:e0:d6:be:b6:45:a2:fb:6c:8b:
         b4:bc:46:ec:e8:b8:6e:9d:58:ed:f8:30:e3:ae:f9:50:78:67:
         a3:81:a3:8d:ae:75:73:b9:f0:df:c1:4c:c9:c3:74:4b:27:a7:
         77:d2:d0:43:e4:e5:79:57:85:f1:06:54:61:fc:36:a5:15:ba:
         21:73:51:c8:4f:80:4b:29:65:1b:81:3e:54:2c:d4:27:51:08:
         db:eb:ae:6b:a4:b7:9f:7e:a5:94:12:8c:fc:1f:aa:8e:c2:89:
         e3:1c:0a:1a:0a:45:f1:74:95:cb:f9:b9:65:4e:5f:0d:97:3f:
         99:0c:34:8f:b9:c5:80:33:19:42:21:9a:1d:50:f7:8a:6c:1a:
         69:f9:1b:b8:7d:43:a4:41:80:ef:b2:89:d3:c2:2a:cf:b2:d2:
         6f:52:c5:a9:ea:15:d7:ac:94:02:40:ff:91:05:af:dc:44:1d:
         61:51:00:b8:dd:d6:0d:5b:a5:ec:72:6c:28:2c:69:b4:80:e7:
         b7:6d:4e:9a:f1:45:ac:4c:06:c9:d2:71:e6:a9:dd:49:99:db:
         04:10:df:c5:5b:d0:b6:ac:6e:c7:b4:4f:6d:3f:56:82:20:0c:
         27:c9:9a:c3
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yMzA3MDEw
MTMwMzlaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEVGRDBGQTkwQTJGNDky
RjVGQUNCQjMyNEM5NUI0MkJGODMxNkVGNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZIZytQXJUXCxxPOC09NqGJJXB1RfLh9qJbkTLL/PlKQNfnZKL
Y7yWWLBZky+JFV8bpBmZYT1ExR0HE8wkXBxKtCfm6NJDUHjXmSfGqZToaCgjdQnY
mb5g4uZBrOnBqAZ/UNjiA8Eq7TQ+HZfJP4lRUIsGtiYejdkNXEQaVGsw1HcHHDmx
pxht4kGiEJPPhszndhnzayFqLu9ZYmp1IpvCo/HvOEcmJFMSMOSxSURYZ0f85iOz
a/hIckOIytu0Ubk+u1kpWsQNHM24FQDQzI5lk1wuvcuk4DIWYto7FJ+8vQNc/HE1
YGS057oGDAj3vnnZeoPh0E5Zo/tPUMdw52g5AgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQU79D6kKL0kvX6y7MkyVtCv4MW72wwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxLzc5RDZrS0wwa3ZYNnk3TWt5VnRDdjRNVzcydy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwKZ+DANBgkqhkiG9w0BAQsFAAOCAQEAA1M8+T6Osa+SJ74vMCbRBYm4NsSL
FobTSilA4Na+tkWi+2yLtLxG7Oi4bp1Y7fgw4675UHhno4Gjja51c7nw38FMycN0
Syend9LQQ+TleVeF8QZUYfw2pRW6IXNRyE+ASyllG4E+VCzUJ1EI2+uua6S3n36l
lBKM/B+qjsKJ4xwKGgpF8XSVy/m5ZU5fDZc/mQw0j7nFgDMZQiGaHVD3imwaafkb
uH1DpEGA77KJ08Iqz7LSb1LFqeoV16yUAkD/kQWv3EQdYVEAuN3WDVul7HJsKCxp
tIDnt21OmvFFrEwGydJx5qndSZnbBBDfxVvQtqxux7RPbT9WgiAMJ8maww==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:07 2025 by rpki-client