Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/71BSBvwEO_TpkW94YiRInLHHgXM.roa
File:                     71BSBvwEO_TpkW94YiRInLHHgXM.roa (raw, json)
Hash identifier:          xdMo3pE9z5Mh27GMt32vmqP6X/feIp30qlSoszl2L7Q=
Subject key identifier:   EF:50:52:06:FC:04:3B:F4:E9:91:6F:78:62:24:48:9C:B1:C7:81:73
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       46
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/71BSBvwEO_TpkW94YiRInLHHgXM.roa
Signing time:             Thu 01 Feb 2024 01:30:06 +0000
ROA not before:           Thu 01 Feb 2024 01:30:06 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     4694
IP address blocks:        203.145.224.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Feb  1 01:30:06 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=EF505206FC043BF4E9916F786224489CB1C78173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0a:cf:ba:4d:c0:ac:37:a7:16:3c:7f:02:b3:
                    8a:0b:01:5f:df:6c:8a:b1:a6:ed:7f:b0:36:59:a3:
                    08:5f:e1:d2:64:0a:eb:8b:30:4b:4c:40:09:b7:f8:
                    db:91:db:fe:92:e7:11:8d:f7:c2:8d:74:f2:72:39:
                    46:5c:80:31:ea:62:b7:38:b7:3e:6d:82:31:41:c4:
                    fe:16:23:46:ae:6b:ba:61:c6:b9:35:88:44:71:a4:
                    77:80:95:33:ce:93:8f:33:90:62:63:2a:df:18:e1:
                    ac:1b:c8:e5:65:31:bc:33:24:54:2e:8d:2f:3f:28:
                    aa:f9:b0:ae:1f:36:c8:ee:b3:b0:42:04:0a:6c:79:
                    2a:09:b8:0c:2f:9d:b1:0a:8b:0d:87:9b:a5:ba:65:
                    c7:69:77:5c:ff:d3:70:74:20:b0:57:66:d6:cb:8e:
                    33:86:56:50:b3:05:b5:c4:2c:4e:16:cf:95:0c:2e:
                    fb:77:e2:2e:cb:f9:13:5f:42:6d:31:da:a3:8c:6c:
                    ab:f6:07:44:2e:c7:34:88:48:9b:0b:84:01:98:cc:
                    a4:94:d3:ed:c8:05:5a:e5:cd:b8:63:db:e2:6b:98:
                    d8:5f:08:f8:b4:8b:e3:8c:62:19:ba:95:fe:ff:08:
                    80:57:69:c8:1e:fc:57:88:22:6a:31:f2:8b:6f:77:
                    21:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:50:52:06:FC:04:3B:F4:E9:91:6F:78:62:24:48:9C:B1:C7:81:73
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/71BSBvwEO_TpkW94YiRInLHHgXM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.145.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bc:97:37:f3:52:f5:ab:ff:ad:4e:da:e7:c6:ff:b1:14:17:9e:
         2f:b0:d4:57:14:56:67:02:79:98:6e:46:bc:45:f5:1a:7d:9f:
         0b:aa:54:9e:e7:80:1d:40:fe:04:09:cc:6a:00:73:f4:c2:74:
         d0:aa:fe:1e:fd:68:66:61:2e:51:0c:c4:bd:ec:91:e1:40:f6:
         09:d0:28:f4:0b:8d:d2:9d:ee:13:ca:63:a4:28:39:e0:af:b5:
         8a:87:d7:30:c3:de:02:8a:73:3b:59:ed:fb:d6:85:d0:59:b5:
         05:aa:28:3e:46:2a:46:30:99:d0:b7:bf:83:0b:d8:95:b4:86:
         24:27:95:8b:5e:a8:7b:f1:41:c4:ee:20:7b:71:de:2c:02:24:
         e4:18:55:3c:80:c5:c5:58:ff:f9:65:68:09:81:84:45:02:1e:
         85:b5:46:1c:f5:10:b7:0b:52:39:99:c1:5b:15:4e:b1:c4:53:
         49:77:d8:f3:56:ea:e7:c1:e2:22:ae:97:cb:b1:73:8d:95:33:
         45:e5:4c:f2:7e:79:84:7f:9d:d5:17:cc:38:06:d8:6b:e2:30:
         ab:ad:8f:cc:c5:cb:fd:87:de:87:56:c2:12:e4:f0:7f:d7:ed:
         70:a5:00:b0:2c:a5:20:47:e6:04:f3:81:fb:27:54:08:47:8a:
         9b:e6:74:cc
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OTBB
ODIyODhEMkUyM0RCRkE4NzYzOEYzRUI4Qjk5NUUxODk3RTk1MB4XDTI0MDIwMTAx
MzAwNloXDTI1MDExNDAxMzAwMlowMzExMC8GA1UEAxMoRUY1MDUyMDZGQzA0M0JG
NEU5OTE2Rjc4NjIyNDQ4OUNCMUM3ODE3MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMIKz7pNwKw3pxY8fwKzigsBX99sirGm7X+wNlmjCF/h0mQK64sw
S0xACbf425Hb/pLnEY33wo108nI5RlyAMepitzi3Pm2CMUHE/hYjRq5rumHGuTWI
RHGkd4CVM86TjzOQYmMq3xjhrBvI5WUxvDMkVC6NLz8oqvmwrh82yO6zsEIECmx5
Kgm4DC+dsQqLDYebpbplx2l3XP/TcHQgsFdm1suOM4ZWULMFtcQsThbPlQwu+3fi
Lsv5E19CbTHao4xsq/YHRC7HNIhImwuEAZjMpJTT7cgFWuXNuGPb4muY2F8I+LSL
44xiGbqV/v8IgFdpyB78V4giajHyi293IbMCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTvUFIG/AQ79OmRb3hiJEicsceBczAfBgNVHSMEGDAWgBRZCoIojS4j2/qHY48+
uLmV4Yl+lTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwODMvV1FxQ0tJMHVJOXY2aDJPUFByaTVsZUdKZnBVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV1FxQ0tJMHVJOXY2aDJPUFByaTVs
ZUdKZnBVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDgzLzcxQlNCdndFT19UcGtXOTRZaVJJbkxISGdYTS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAXLkeAwDQYJKoZIhvcNAQELBQADggEBALyXN/NS9av/rU7a58b/sRQX
ni+w1FcUVmcCeZhuRrxF9Rp9nwuqVJ7ngB1A/gQJzGoAc/TCdNCq/h79aGZhLlEM
xL3skeFA9gnQKPQLjdKd7hPKY6QoOeCvtYqH1zDD3gKKcztZ7fvWhdBZtQWqKD5G
KkYwmdC3v4ML2JW0hiQnlYteqHvxQcTuIHtx3iwCJOQYVTyAxcVY//llaAmBhEUC
HoW1Rhz1ELcLUjmZwVsVTrHEU0l32PNW6ufB4iKul8uxc42VM0XlTPJ+eYR/ndUX
zDgG2GviMKutj8zFy/2H3odWwhLk8H/X7XClALAspSBH5gTzgfsnVAhHipvmdMw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:00 2025 by rpki-client