Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/yjdaZBB376E_Db4E3t7xO19Eb7g.roa
File:                     yjdaZBB376E_Db4E3t7xO19Eb7g.roa (raw, json)
Hash identifier:          JE5HAMbpambJdkk0QEuFwWJRI+gRr30t8yy45DOMEWs=
Subject key identifier:   CA:37:5A:64:10:77:EF:A1:3F:0D:BE:04:DE:DE:F1:3B:5F:44:6F:B8
Certificate issuer:       /CN=A9415FE9377F3F4B8EA838C662C4BCD8DCFCF1BA
Certificate serial:       1E
Authority key identifier: A9:41:5F:E9:37:7F:3F:4B:8E:A8:38:C6:62:C4:BC:D8:DC:FC:F1:BA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qUFf6Td_P0uOqDjGYsS82Nz88bo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/yjdaZBB376E_Db4E3t7xO19Eb7g.roa
Signing time:             Mon 01 May 2023 01:29:40 +0000
ROA not before:           Mon 01 May 2023 01:29:40 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4694
IP address blocks:        206.3.0.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9415FE9377F3F4B8EA838C662C4BCD8DCFCF1BA
        Validity
            Not Before: May  1 01:29:40 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=CA375A641077EFA13F0DBE04DEDEF13B5F446FB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:76:20:ed:67:fa:e6:fd:ed:24:0a:92:74:f4:
                    a7:b9:f9:0e:eb:dc:47:d2:a8:2d:c4:96:15:18:be:
                    70:d2:b1:50:03:21:cd:6e:3f:60:b0:60:2a:c0:35:
                    30:57:75:94:80:10:3c:4a:1d:15:58:41:5f:0a:22:
                    36:5a:33:2a:96:3f:de:5b:ff:09:95:aa:0e:28:0d:
                    93:98:0e:a9:86:14:f8:df:78:85:d2:68:93:58:70:
                    0d:f4:f0:e4:69:e6:e1:cb:be:24:3b:bd:eb:30:34:
                    66:1e:e0:70:0c:b9:44:63:2d:c7:25:a8:76:3e:79:
                    c7:1f:79:6d:38:01:d4:60:b4:24:e5:c7:58:23:fd:
                    6f:b3:e1:4c:45:3d:4a:59:06:93:cf:2d:bf:68:9f:
                    64:25:a1:c2:54:41:7a:3a:d1:59:fb:cd:41:4c:8c:
                    be:86:a9:ae:75:d9:9a:13:fa:20:86:8d:b9:de:cb:
                    c2:43:cd:9b:74:84:1f:6f:3c:99:cf:74:3c:f0:fe:
                    45:ad:8a:53:e3:e1:97:25:32:84:57:9e:25:a1:92:
                    ae:97:5d:d2:21:c7:6f:f4:b7:23:a5:fc:44:ef:3e:
                    a1:6d:69:bf:00:1e:6b:b0:72:76:16:75:c8:e5:69:
                    7c:d0:7f:e0:a0:70:9c:ba:97:56:6b:02:1a:af:4a:
                    93:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:37:5A:64:10:77:EF:A1:3F:0D:BE:04:DE:DE:F1:3B:5F:44:6F:B8
            X509v3 Authority Key Identifier:
                keyid:A9:41:5F:E9:37:7F:3F:4B:8E:A8:38:C6:62:C4:BC:D8:DC:FC:F1:BA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qUFf6Td_P0uOqDjGYsS82Nz88bo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qUFf6Td_P0uOqDjGYsS82Nz88bo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/yjdaZBB376E_Db4E3t7xO19Eb7g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.3.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         57:49:c1:dc:88:e6:9c:6b:97:ff:4b:01:75:81:af:ed:77:f3:
         0f:61:1a:1a:c0:d8:29:16:8f:43:9a:a8:95:a3:d4:89:4e:ae:
         e5:02:c0:42:63:dd:42:87:49:f1:2b:38:14:0e:47:ca:89:64:
         9b:22:5d:b1:f6:65:99:3c:2c:aa:3a:24:85:d8:71:07:13:0b:
         2c:94:13:da:65:02:2a:99:3a:44:11:14:31:43:df:cd:15:a4:
         d5:fa:d1:96:b1:c6:9c:c4:4b:74:fa:64:65:50:05:f9:d8:44:
         03:52:72:f8:69:ad:a1:2f:2a:37:2f:f6:d8:1b:76:cb:f4:c0:
         ac:26:e3:f1:24:2f:90:d0:30:25:84:b9:a9:1d:3c:f9:71:e4:
         1b:4d:24:78:dd:08:8b:8c:00:30:bc:79:42:3b:81:c0:88:34:
         0c:c6:4c:d1:d3:69:09:7f:0e:ff:88:7f:ab:03:10:e4:5f:c6:
         e0:74:e5:79:ca:82:f5:02:9b:f5:22:b8:4b:eb:df:84:bd:19:
         39:35:4c:de:ba:af:72:0b:60:1d:1b:6a:97:a1:6c:3e:5a:aa:
         8c:45:d1:a9:01:1e:fd:37:40:ca:e0:a1:64:18:e5:bd:f8:78:
         52:c9:61:6e:d4:5b:97:9b:f3:06:0a:1e:64:9f:8f:9f:34:22:
         c4:6f:de:3e
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBOTQx
NUZFOTM3N0YzRjRCOEVBODM4QzY2MkM0QkNEOERDRkNGMUJBMB4XDTIzMDUwMTAx
Mjk0MFoXDTI0MDQxNDAxMzAwMlowMzExMC8GA1UEAxMoQ0EzNzVBNjQxMDc3RUZB
MTNGMERCRTA0REVERUYxM0I1RjQ0NkZCODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKF2IO1n+ub97SQKknT0p7n5DuvcR9KoLcSWFRi+cNKxUAMhzW4/
YLBgKsA1MFd1lIAQPEodFVhBXwoiNlozKpY/3lv/CZWqDigNk5gOqYYU+N94hdJo
k1hwDfTw5Gnm4cu+JDu96zA0Zh7gcAy5RGMtxyWodj55xx95bTgB1GC0JOXHWCP9
b7PhTEU9SlkGk88tv2ifZCWhwlRBejrRWfvNQUyMvoaprnXZmhP6IIaNud7LwkPN
m3SEH288mc90PPD+Ra2KU+PhlyUyhFeeJaGSrpdd0iHHb/S3I6X8RO8+oW1pvwAe
a7BydhZ1yOVpfNB/4KBwnLqXVmsCGq9Kk7sCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTKN1pkEHfvoT8NvgTe3vE7X0RvuDAfBgNVHSMEGDAWgBSpQV/pN38/S46oOMZi
xLzY3PzxujAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwODMvcVVGZjZUZF9QMHVPcURqR1lzUzgyTno4OGJvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvcVVGZjZUZF9QMHVPcURqR1lzUzgy
Tno4OGJvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDgzL3lqZGFaQkIzNzZFX0RiNEUzdDd4TzE5RWI3Zy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAXOAwAwDQYJKoZIhvcNAQELBQADggEBAFdJwdyI5pxrl/9LAXWBr+13
8w9hGhrA2CkWj0OaqJWj1IlOruUCwEJj3UKHSfErOBQOR8qJZJsiXbH2ZZk8LKo6
JIXYcQcTCyyUE9plAiqZOkQRFDFD380VpNX60ZaxxpzES3T6ZGVQBfnYRANScvhp
raEvKjcv9tgbdsv0wKwm4/EkL5DQMCWEuakdPPlx5BtNJHjdCIuMADC8eUI7gcCI
NAzGTNHTaQl/Dv+If6sDEORfxuB05XnKgvUCm/UiuEvr34S9GTk1TN66r3ILYB0b
apehbD5aqoxF0akBHv03QMrgoWQY5b34eFLJYW7UW5eb8wYKHmSfj580IsRv3j4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:39 2025 by rpki-client