Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/cZcxoeF-zL1iXxVrYvvZqmVSkJk.roa
File:                     cZcxoeF-zL1iXxVrYvvZqmVSkJk.roa (raw, json)
Hash identifier:          /TpQRwQo8RPu1PeM74XrYBHD65V74d6QLC08wImTzKs=
Subject key identifier:   71:97:31:A1:E1:7E:CC:BD:62:5F:15:6B:62:FB:D9:AA:65:52:90:99
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       19
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/cZcxoeF-zL1iXxVrYvvZqmVSkJk.roa
Signing time:             Wed 01 Jun 2022 01:29:03 +0000
ROA not before:           Wed 01 Jun 2022 01:29:03 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     24277
IP address blocks:        203.160.16.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun  1 01:29:03 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=719731A1E17ECCBD625F156B62FBD9AA65529099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:33:83:5a:ab:bd:79:36:cf:36:45:83:db:73:
                    25:c7:ee:c5:10:e0:99:5d:1c:05:3c:10:9f:01:d1:
                    05:4b:bd:6d:83:4f:bd:cd:20:b9:55:21:06:9c:f3:
                    81:15:08:c3:d8:a6:94:4e:c2:6a:88:ee:fc:bc:6d:
                    62:00:e2:05:37:13:82:5f:f6:b8:f0:21:ed:4f:8c:
                    3f:bc:88:49:e0:8a:82:57:87:4f:67:7f:b9:e7:48:
                    64:45:cd:26:9d:26:4d:02:a7:94:bb:aa:82:c8:18:
                    59:76:7d:20:f1:48:53:7e:7f:a0:b1:b1:18:86:db:
                    dc:0e:45:b9:bf:77:c8:f0:a8:d8:99:4a:3c:6b:bc:
                    a2:f2:4f:14:71:ac:ab:17:36:fc:b7:66:37:08:a5:
                    52:65:16:df:2f:2c:e1:5d:59:48:c7:00:4b:4a:91:
                    56:8a:17:e3:e4:5c:6c:a8:a1:b4:99:52:58:57:a4:
                    3f:6f:6e:e7:2f:c6:04:a6:72:8a:c2:9a:b6:4f:a9:
                    9f:7e:77:b9:f2:a2:f2:27:25:42:e4:11:e4:90:84:
                    11:a2:e0:44:57:1a:4f:95:35:14:6c:fe:9c:f9:71:
                    a5:c2:d4:16:3c:21:b6:8d:6a:e8:a3:42:82:98:ed:
                    79:d4:3f:54:d1:16:32:cd:83:fe:28:f5:fb:0e:b4:
                    73:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:97:31:A1:E1:7E:CC:BD:62:5F:15:6B:62:FB:D9:AA:65:52:90:99
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/cZcxoeF-zL1iXxVrYvvZqmVSkJk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.160.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         79:3a:84:3b:24:ba:9c:a1:52:68:1a:35:73:29:d3:bd:45:c4:
         62:48:15:4d:bb:d5:de:3f:52:99:96:fc:c6:2e:6a:4d:cf:f5:
         0c:a8:93:7f:64:74:30:6e:76:a3:9e:a3:21:65:89:d6:0b:b7:
         fc:d3:fd:e3:26:9c:c0:66:45:c4:f1:d9:90:b4:e5:d0:38:0a:
         68:1c:b1:c0:d7:2e:27:41:61:96:25:fe:50:f2:10:a7:d9:f1:
         57:34:ec:fd:7d:f4:d6:5f:e5:9d:14:80:db:41:ad:69:ef:a0:
         ac:e9:8e:54:3e:20:d3:8a:ba:26:ec:66:80:f6:25:5c:a9:7f:
         54:04:0f:21:21:0b:e0:cb:0c:3b:8d:d2:21:28:42:90:4d:55:
         8f:92:de:f8:53:d3:c8:c2:e9:1a:77:99:5f:14:72:8b:bc:89:
         6d:f3:77:8a:52:4d:d4:e9:c7:88:69:6e:b4:0c:9d:ac:81:80:
         b1:6a:41:97:f6:a3:3d:cd:87:f8:37:af:92:0a:47:d3:c9:5b:
         0a:41:40:e3:d1:8c:9f:a7:b2:a1:05:5d:c6:f5:73:fc:b1:90:
         99:a9:4c:fa:1d:86:da:3b:2f:a0:09:c6:f2:92:d6:29:29:43:
         41:1d:fc:b4:d9:b7:26:61:01:5b:23:23:68:0a:83:2a:ed:9f:
         a5:61:31:47
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5REIw
NzY0QzZERkMxRTNERjZCRDU4MEVBNjk5NEExRTcwOThGNTJBMB4XDTIyMDYwMTAx
MjkwM1oXDTIzMDUxNTAxMzAwNFowMzExMC8GA1UEAxMoNzE5NzMxQTFFMTdFQ0NC
RDYyNUYxNTZCNjJGQkQ5QUE2NTUyOTA5OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK0zg1qrvXk2zzZFg9tzJcfuxRDgmV0cBTwQnwHRBUu9bYNPvc0g
uVUhBpzzgRUIw9imlE7Caoju/LxtYgDiBTcTgl/2uPAh7U+MP7yISeCKgleHT2d/
uedIZEXNJp0mTQKnlLuqgsgYWXZ9IPFIU35/oLGxGIbb3A5Fub93yPCo2JlKPGu8
ovJPFHGsqxc2/LdmNwilUmUW3y8s4V1ZSMcAS0qRVooX4+RcbKihtJlSWFekP29u
5y/GBKZyisKatk+pn353ufKi8iclQuQR5JCEEaLgRFcaT5U1FGz+nPlxpcLUFjwh
to1q6KNCgpjtedQ/VNEWMs2D/ij1+w60c0kCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBRxlzGh4X7MvWJfFWti+9mqZVKQmTAfBgNVHSMEGDAWgBSdsHZMbfwePfa9WA6m
mUoecJj1KjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNjMvbmJCMlRHMzhIajMydlZnT3BwbEtIbkNZOVNvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbmJCMlRHMzhIajMydlZnT3BwbEtI
bkNZOVNvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDYzL2NaY3hvZUYtekwxaVh4VnJZdnZacW1WU2tKay5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBATLoBAwDQYJKoZIhvcNAQELBQADggEBAHk6hDskupyhUmgaNXMp071F
xGJIFU271d4/UpmW/MYuak3P9Qyok39kdDBudqOeoyFlidYLt/zT/eMmnMBmRcTx
2ZC05dA4CmgcscDXLidBYZYl/lDyEKfZ8Vc07P199NZf5Z0UgNtBrWnvoKzpjlQ+
INOKuibsZoD2JVypf1QEDyEhC+DLDDuN0iEoQpBNVY+S3vhT08jC6Rp3mV8Ucou8
iW3zd4pSTdTpx4hpbrQMnayBgLFqQZf2oz3Nh/g3r5IKR9PJWwpBQOPRjJ+nsqEF
Xcb1c/yxkJmpTPodhto7L6AJxvKS1ikpQ0Ed/LTZtyZhAVsjI2gKgyrtn6VhMUc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:16 2025 by rpki-client