Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20074/sEPSnZ87xLpt_UFw8E5jrW9WY8g.roa
File:                     sEPSnZ87xLpt_UFw8E5jrW9WY8g.roa (raw, json)
Hash identifier:          CALJR8pVSdb38Zr4D63bjZfthrBl2LVVEQmpb2AGaJk=
Subject key identifier:   B0:43:D2:9D:9F:3B:C4:BA:6D:FD:41:70:F0:4E:63:AD:6F:56:63:C8
Certificate issuer:       /CN=9E5004D44AF29AD1209AB85A95F160E83D24E588
Certificate serial:       16
Authority key identifier: 9E:50:04:D4:4A:F2:9A:D1:20:9A:B8:5A:95:F1:60:E8:3D:24:E5:88
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/sEPSnZ87xLpt_UFw8E5jrW9WY8g.roa
Signing time:             Sun 01 Oct 2023 01:31:09 +0000
ROA not before:           Sun 01 Oct 2023 01:31:09 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     63782
IP address blocks:        133.186.52.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E5004D44AF29AD1209AB85A95F160E83D24E588
        Validity
            Not Before: Oct  1 01:31:09 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=B043D29D9F3BC4BA6DFD4170F04E63AD6F5663C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:af:58:63:b0:c1:8a:25:c1:45:e3:3b:08:23:
                    f5:ed:e7:07:44:ce:3e:34:80:5b:de:12:7b:eb:d8:
                    11:ab:58:50:38:0c:80:1f:dd:7d:97:ae:e1:16:9e:
                    87:8c:b6:ea:ba:d4:25:ea:1c:2a:6a:32:11:b8:b7:
                    2f:40:5e:5c:19:61:e0:f3:24:75:ed:84:f7:2d:33:
                    e5:57:58:e2:14:19:6a:fa:89:c0:e2:48:b3:02:8c:
                    cd:7c:50:19:58:99:be:51:57:26:44:f9:6f:b8:69:
                    27:bc:4d:cf:63:e5:25:44:c7:db:fc:8f:bc:01:fa:
                    a5:9c:c0:d0:e4:c4:f2:9d:50:6a:9d:f8:5d:15:29:
                    88:67:dc:a0:ee:92:97:67:cf:26:93:61:c3:83:da:
                    2d:fd:48:9b:75:96:50:32:99:38:29:73:19:a8:20:
                    f1:5e:9c:00:a2:a8:dd:38:33:21:87:5d:4e:b1:bd:
                    30:43:86:5a:38:80:23:1c:0a:ad:9e:cb:49:0c:de:
                    db:7d:66:75:36:7c:19:7b:e0:d6:96:7b:e0:f0:16:
                    39:36:52:1b:f4:89:c1:e1:e1:ec:74:00:a4:43:04:
                    86:80:10:01:ce:56:45:3f:a6:58:45:24:bf:9a:42:
                    c2:df:4b:12:1d:be:68:01:ef:be:6a:e1:01:7d:ee:
                    1f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:43:D2:9D:9F:3B:C4:BA:6D:FD:41:70:F0:4E:63:AD:6F:56:63:C8
            X509v3 Authority Key Identifier:
                keyid:9E:50:04:D4:4A:F2:9A:D1:20:9A:B8:5A:95:F1:60:E8:3D:24:E5:88

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/sEPSnZ87xLpt_UFw8E5jrW9WY8g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.186.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:d6:3a:af:28:d4:6b:ef:29:26:05:fe:41:90:32:1f:03:d8:
         1d:22:c6:e7:3c:bf:6b:63:49:54:9d:98:6a:9f:ad:b4:f6:98:
         ca:b4:72:06:ee:0f:85:47:99:d9:dd:19:4d:12:17:75:c7:95:
         62:f7:27:7f:e7:83:20:19:19:79:d9:5c:a1:28:de:10:13:33:
         2c:31:30:2d:c4:45:14:a9:16:4e:71:b1:63:4d:aa:b1:a4:66:
         46:34:53:4f:01:60:e5:d0:83:60:d9:51:fe:f6:70:e9:03:05:
         a0:21:f5:5d:df:31:5e:d5:1d:2a:dd:74:73:92:4c:ed:b9:71:
         bc:e7:1c:9e:f9:b2:a0:c4:10:12:4c:81:1c:23:34:82:ea:07:
         13:04:ef:e0:7f:d6:73:fb:b5:43:86:d7:d0:38:da:a3:36:07:
         fc:9d:83:53:26:f4:d5:1d:15:f6:7a:ea:fb:3a:7e:a7:16:6b:
         ce:88:6b:8d:5a:5f:6d:cd:d7:73:23:4d:c3:48:44:7a:99:9b:
         45:d9:6d:64:8f:98:0e:31:e0:b4:bc:99:80:36:a4:e8:a4:d1:
         45:69:48:33:71:7b:4c:c9:16:4e:96:27:34:87:39:28:24:08:
         91:6d:00:8b:df:a0:a3:c3:32:d7:93:e7:2e:70:a5:24:71:5a:
         53:66:19:27
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RTUw
MDRENDRBRjI5QUQxMjA5QUI4NUE5NUYxNjBFODNEMjRFNTg4MB4XDTIzMTAwMTAx
MzEwOVoXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoQjA0M0QyOUQ5RjNCQzRC
QTZERkQ0MTcwRjA0RTYzQUQ2RjU2NjNDODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANavWGOwwYolwUXjOwgj9e3nB0TOPjSAW94Se+vYEatYUDgMgB/d
fZeu4Raeh4y26rrUJeocKmoyEbi3L0BeXBlh4PMkde2E9y0z5VdY4hQZavqJwOJI
swKMzXxQGViZvlFXJkT5b7hpJ7xNz2PlJUTH2/yPvAH6pZzA0OTE8p1Qap34XRUp
iGfcoO6Sl2fPJpNhw4PaLf1Im3WWUDKZOClzGagg8V6cAKKo3TgzIYddTrG9MEOG
WjiAIxwKrZ7LSQze231mdTZ8GXvg1pZ74PAWOTZSG/SJweHh7HQApEMEhoAQAc5W
RT+mWEUkv5pCwt9LEh2+aAHvvmrhAX3uH/kCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSwQ9KdnzvEum39QXDwTmOtb1ZjyDAfBgNVHSMEGDAWgBSeUATUSvKa0SCauFqV
8WDoPSTliDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNzQvbmxBRTFFcnltdEVnbXJoYWxmRmc2RDBrNVlnLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbmxBRTFFcnltdEVnbXJoYWxmRmc2
RDBrNVlnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDc0L3NFUFNuWjg3eExwdF9VRnc4RTVqclc5V1k4Zy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAKFujQwDQYJKoZIhvcNAQELBQADggEBAJvWOq8o1GvvKSYF/kGQMh8D
2B0ixuc8v2tjSVSdmGqfrbT2mMq0cgbuD4VHmdndGU0SF3XHlWL3J3/ngyAZGXnZ
XKEo3hATMywxMC3ERRSpFk5xsWNNqrGkZkY0U08BYOXQg2DZUf72cOkDBaAh9V3f
MV7VHSrddHOSTO25cbznHJ75sqDEEBJMgRwjNILqBxME7+B/1nP7tUOG19A42qM2
B/ydg1Mm9NUdFfZ66vs6fqcWa86Ia41aX23N13MjTcNIRHqZm0XZbWSPmA4x4LS8
mYA2pOik0UVpSDNxe0zJFk6WJzSHOSgkCJFtAIvfoKPDMteT5y5wpSRxWlNmGSc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:26 2025 by rpki-client