Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/vmX8yjhxlA3yfwOPNEbhic4nbwU.roa
File:                     vmX8yjhxlA3yfwOPNEbhic4nbwU.roa (raw, json)
Hash identifier:          8TwBZyIQ6/tSEdUecb9jD9Ml0tMOlmJ0zFAdiafqs3Q=
Subject key identifier:   BE:65:FC:CA:38:71:94:0D:F2:7F:03:8F:34:46:E1:89:CE:27:6F:05
Certificate issuer:       /CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
Certificate serial:       42
Authority key identifier: 72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/vmX8yjhxlA3yfwOPNEbhic4nbwU.roa
Signing time:             Tue 01 Aug 2023 01:29:03 +0000
ROA not before:           Tue 01 Aug 2023 01:29:03 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     24296
IP address blocks:        210.229.224.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
        Validity
            Not Before: Aug  1 01:29:03 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=BE65FCCA3871940DF27F038F3446E189CE276F05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b2:cd:7a:d6:a3:f0:13:5e:49:cf:14:3f:7e:
                    68:89:65:fa:b7:db:12:09:f1:24:1c:4c:57:a7:9e:
                    15:19:7a:86:c3:53:56:a8:e5:ee:3d:e5:f5:eb:e5:
                    96:81:77:50:e3:60:6b:60:19:5b:07:ae:59:8d:2e:
                    b6:b3:6d:1b:a5:8d:2d:92:e0:00:42:43:f4:6e:0f:
                    68:60:c8:a2:a8:f6:6e:ae:5e:56:e6:82:8e:90:29:
                    9d:93:74:d2:b9:e9:bf:01:83:17:28:83:a4:0b:c5:
                    20:00:d7:a3:78:a6:b7:92:53:e4:00:82:d6:dd:52:
                    13:ad:cc:34:2e:61:ce:e4:d2:7e:d5:8b:67:e5:16:
                    c0:30:f6:4c:4e:b7:92:45:d7:cc:cd:29:1b:b1:20:
                    53:0a:3b:da:d1:a3:f8:bd:6c:28:9b:8e:2a:37:e1:
                    ba:de:70:4a:6b:d9:17:31:a0:a5:ba:f5:87:61:63:
                    f7:de:16:ca:87:bd:30:de:57:97:f9:e9:87:8b:f7:
                    75:d0:72:f2:7b:4c:82:7b:bd:dd:62:5d:f3:ca:71:
                    5e:fa:49:7b:66:44:65:c9:e7:75:1e:75:e2:4f:a1:
                    1f:18:61:14:92:e1:29:66:79:35:bf:58:d7:d6:8a:
                    b8:f5:8d:0b:06:a2:7a:63:35:bc:0f:5d:f0:95:c9:
                    73:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:65:FC:CA:38:71:94:0D:F2:7F:03:8F:34:46:E1:89:CE:27:6F:05
            X509v3 Authority Key Identifier:
                keyid:72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/vmX8yjhxlA3yfwOPNEbhic4nbwU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.229.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5d:d9:e6:4f:e7:38:0e:1a:54:d4:7c:f6:10:bc:14:cf:2b:c4:
         5d:47:ed:f8:dd:b7:40:fa:18:4b:7d:52:ad:0a:53:f1:15:ac:
         1d:ae:26:e9:90:22:44:df:8f:36:5b:68:80:77:e2:9c:b2:28:
         f2:4b:fc:2f:5b:d3:3a:f8:e5:b5:42:16:19:89:b2:70:99:75:
         22:33:fd:1d:91:34:54:69:7f:e7:bc:6b:5b:af:91:9a:71:0d:
         2f:b1:da:a6:f2:ab:98:8a:39:14:3f:99:67:b8:68:df:55:4f:
         65:28:cf:ba:25:a8:46:95:ac:bc:65:d5:f8:d5:d8:d2:5f:f8:
         5e:3c:07:1e:40:26:f1:eb:35:e9:f4:d8:a9:56:25:a0:c6:6e:
         96:b7:07:ed:0d:9e:c3:22:72:3e:be:dc:d0:e2:fc:64:25:29:
         dc:60:e3:d4:42:8f:2a:9d:86:b2:1a:1a:ca:63:78:12:a8:2b:
         a8:42:8b:fe:2d:2f:74:07:01:c1:4d:ac:5b:2d:a0:01:d2:ae:
         fd:67:41:7c:e1:cf:79:c2:4c:e7:e1:df:db:cb:3c:6c:ac:19:
         02:f6:fe:fc:6e:51:e2:24:f0:ea:8c:30:0e:56:4e:52:e8:81:
         60:11:77:ce:08:43:d6:2d:cd:5f:6e:4d:94:85:e4:30:37:91:
         cc:71:e9:30
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MkY4
QUJCQTRBQjRGNjUwQjJDNjlCQThDNkNBNUVEMjJERkUzNTRGMB4XDTIzMDgwMTAx
MjkwM1oXDTI0MDcxNDAxMzAwM1owMzExMC8GA1UEAxMoQkU2NUZDQ0EzODcxOTQw
REYyN0YwMzhGMzQ0NkUxODlDRTI3NkYwNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJSyzXrWo/ATXknPFD9+aIll+rfbEgnxJBxMV6eeFRl6hsNTVqjl
7j3l9evlloF3UONga2AZWweuWY0utrNtG6WNLZLgAEJD9G4PaGDIoqj2bq5eVuaC
jpApnZN00rnpvwGDFyiDpAvFIADXo3imt5JT5ACC1t1SE63MNC5hzuTSftWLZ+UW
wDD2TE63kkXXzM0pG7EgUwo72tGj+L1sKJuOKjfhut5wSmvZFzGgpbr1h2Fj994W
yoe9MN5Xl/nph4v3ddBy8ntMgnu93WJd88pxXvpJe2ZEZcnndR514k+hHxhhFJLh
KWZ5Nb9Y19aKuPWNCwaiemM1vA9d8JXJcz0CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBS+ZfzKOHGUDfJ/A480RuGJzidvBTAfBgNVHSMEGDAWgBRy+Ku6SrT2ULLGm6jG
yl7SLf41TzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjExMTYvY3ZpcnVrcTA5bEN5eHB1b3hzcGUwaTMtTlU4LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvY3ZpcnVrcTA5bEN5eHB1b3hzcGUw
aTMtTlU4LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIxMTE2L3ZtWDh5amh4bEEzeWZ3T1BORWJoaWM0bmJ3VS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAXS5eAwDQYJKoZIhvcNAQELBQADggEBAF3Z5k/nOA4aVNR89hC8FM8r
xF1H7fjdt0D6GEt9Uq0KU/EVrB2uJumQIkTfjzZbaIB34pyyKPJL/C9b0zr45bVC
FhmJsnCZdSIz/R2RNFRpf+e8a1uvkZpxDS+x2qbyq5iKORQ/mWe4aN9VT2Uoz7ol
qEaVrLxl1fjV2NJf+F48Bx5AJvHrNen02KlWJaDGbpa3B+0NnsMicj6+3NDi/GQl
Kdxg49RCjyqdhrIaGspjeBKoK6hCi/4tL3QHAcFNrFstoAHSrv1nQXzhz3nCTOfh
39vLPGysGQL2/vxuUeIk8OqMMA5WTlLogWARd84IQ9YtzV9uTZSF5DA3kcxx6TA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:42 2025 by rpki-client