Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/xOzMSasWfkrBDEvbj9jIXaWJfS8.roa
File:                     xOzMSasWfkrBDEvbj9jIXaWJfS8.roa (raw, json)
Hash identifier:          CUBosU8NI7RbrRoTqKc0tS4C4F+BoVd6Munvt5haQ5Y=
Subject key identifier:   C4:EC:CC:49:AB:16:7E:4A:C1:0C:4B:DB:8F:D8:C8:5D:A5:89:7D:2F
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       3F
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/xOzMSasWfkrBDEvbj9jIXaWJfS8.roa
Signing time:             Thu 22 Jun 2023 00:34:06 +0000
ROA not before:           Thu 22 Jun 2023 00:34:06 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.168.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:34:06 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=C4ECCC49AB167E4AC10C4BDB8FD8C85DA5897D2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:76:30:18:9b:ee:82:88:ea:c6:dc:5b:d7:0d:
                    4a:77:33:b6:0f:61:48:a7:1e:d1:a0:65:bd:9c:24:
                    42:5a:5e:cd:01:ab:89:b9:b3:b6:41:d0:46:52:c9:
                    82:87:a8:b6:a9:cc:62:bd:b3:43:ee:12:8c:a1:40:
                    e2:41:1e:f6:9c:c6:49:05:e2:cc:49:b0:d7:6e:ef:
                    fd:00:10:2b:ed:af:ee:21:d8:b2:8b:31:c5:46:f9:
                    a3:9d:e2:2d:19:0a:d2:bb:aa:d7:9e:99:2d:f0:6f:
                    6d:8c:20:a8:9e:13:ff:8c:e8:a1:5e:aa:6e:c5:42:
                    27:7d:73:be:53:e5:95:9e:f0:a4:2e:db:be:dc:f1:
                    30:1c:2e:5e:d6:95:14:9f:b4:b8:53:e6:a5:8f:97:
                    69:4e:b8:c2:07:1f:0b:ec:3b:2d:32:b0:b3:15:49:
                    0e:50:81:94:f1:05:dd:d9:c0:4b:a0:5a:b4:59:a8:
                    62:fb:20:85:25:09:00:79:c5:13:0f:c2:ff:67:67:
                    54:a9:00:b6:3c:b3:eb:1f:4d:89:6c:45:eb:4f:6c:
                    55:99:e4:0a:6d:39:8c:1c:63:9a:f6:79:e4:01:d2:
                    2c:be:9e:35:9e:3e:13:5c:65:ea:04:2e:b4:2a:80:
                    41:1a:82:65:07:39:57:c4:c2:1e:86:26:87:6a:62:
                    1a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EC:CC:49:AB:16:7E:4A:C1:0C:4B:DB:8F:D8:C8:5D:A5:89:7D:2F
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/xOzMSasWfkrBDEvbj9jIXaWJfS8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:2e:fa:96:66:3c:b4:96:5d:3a:ed:40:bc:8b:df:55:88:96:
         2d:ef:5e:22:58:39:a9:48:42:54:49:2b:dd:f7:4d:69:34:43:
         86:f5:96:32:47:5e:25:dd:30:eb:81:42:bd:31:af:14:70:a1:
         1c:52:d8:83:36:75:6f:5c:f3:ff:12:70:3e:da:5f:4f:1c:c3:
         2e:66:f0:ee:e8:6b:58:56:30:9e:7d:b1:b8:22:f9:7c:e6:69:
         c3:c7:52:46:fa:5d:e0:e8:f0:59:3f:23:e5:6e:13:13:38:79:
         f7:8f:b8:7a:18:05:ca:8e:0f:28:14:ab:e6:30:9b:6f:7d:11:
         6b:9a:cc:b2:cb:23:33:ff:84:d4:6c:3c:e1:c1:be:42:e7:98:
         57:f9:6c:a9:c0:38:3f:86:4c:78:93:d8:2f:26:67:25:5e:dc:
         76:56:f1:0c:46:2d:e9:19:b1:d3:ca:3a:d3:01:8d:0a:e8:66:
         31:e5:f4:c6:c5:94:66:ac:ca:ed:9d:9f:b0:cc:91:11:1b:bf:
         bf:34:15:44:a3:5e:1d:f2:2b:80:83:41:3a:04:9d:af:e8:98:
         81:ee:5b:10:71:b0:25:4f:6b:7f:60:03:bc:b4:e9:c3:65:a2:
         5a:39:73:fd:4e:46:21:66:af:93:83:fc:07:6a:d2:48:9a:13:
         c9:f1:31:b0
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5REIw
NzY0QzZERkMxRTNERjZCRDU4MEVBNjk5NEExRTcwOThGNTJBMB4XDTIzMDYyMjAw
MzQwNloXDTI0MDYxNDAxMzAwMlowMzExMC8GA1UEAxMoQzRFQ0NDNDlBQjE2N0U0
QUMxMEM0QkRCOEZEOEM4NURBNTg5N0QyRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMJ2MBib7oKI6sbcW9cNSncztg9hSKce0aBlvZwkQlpezQGribmz
tkHQRlLJgoeotqnMYr2zQ+4SjKFA4kEe9pzGSQXizEmw127v/QAQK+2v7iHYsosx
xUb5o53iLRkK0ruq156ZLfBvbYwgqJ4T/4zooV6qbsVCJ31zvlPllZ7wpC7bvtzx
MBwuXtaVFJ+0uFPmpY+XaU64wgcfC+w7LTKwsxVJDlCBlPEF3dnAS6BatFmoYvsg
hSUJAHnFEw/C/2dnVKkAtjyz6x9NiWxF609sVZnkCm05jBxjmvZ55AHSLL6eNZ4+
E1xl6gQutCqAQRqCZQc5V8TCHoYmh2piGqECAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTE7MxJqxZ+SsEMS9uP2MhdpYl9LzAfBgNVHSMEGDAWgBSdsHZMbfwePfa9WA6m
mUoecJj1KjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNjMvbmJCMlRHMzhIajMydlZnT3BwbEtIbkNZOVNvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbmJCMlRHMzhIajMydlZnT3BwbEtI
bkNZOVNvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDYzL3hPek1TYXNXZmtyQkRFdmJqOWpJWGFXSmZTOC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABzpqgwDQYJKoZIhvcNAQELBQADggEBAFQu+pZmPLSWXTrtQLyL31WI
li3vXiJYOalIQlRJK933TWk0Q4b1ljJHXiXdMOuBQr0xrxRwoRxS2IM2dW9c8/8S
cD7aX08cwy5m8O7oa1hWMJ59sbgi+XzmacPHUkb6XeDo8Fk/I+VuExM4efePuHoY
BcqODygUq+Ywm299EWuazLLLIzP/hNRsPOHBvkLnmFf5bKnAOD+GTHiT2C8mZyVe
3HZW8QxGLekZsdPKOtMBjQroZjHl9MbFlGasyu2dn7DMkREbv780FUSjXh3yK4CD
QToEna/omIHuWxBxsCVPa39gA7y06cNlolo5c/1ORiFmr5OD/Adq0kiaE8nxMbA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:25 2025 by rpki-client