Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2251/6qvj6_1gcgsex1DHIcFk9T09igo.roa
File:                     6qvj6_1gcgsex1DHIcFk9T09igo.roa (raw, json)
Hash identifier:          l2H06aliv3HKKhbzSWEOaB7bVlYYsENcc1VWq7oix6w=
Subject key identifier:   EA:AB:E3:EB:FD:60:72:0B:1E:C7:50:C7:21:C1:64:F5:3D:3D:8A:0A
Certificate issuer:       /CN=9E1460D2688F6D1068B97C1F914040434B8F0324
Certificate serial:       1F
Authority key identifier: 9E:14:60:D2:68:8F:6D:10:68:B9:7C:1F:91:40:40:43:4B:8F:03:24
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nhRg0miPbRBouXwfkUBAQ0uPAyQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/6qvj6_1gcgsex1DHIcFk9T09igo.roa
Signing time:             Mon 01 Aug 2022 01:29:12 +0000
ROA not before:           Mon 01 Aug 2022 01:29:12 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     2518
IP address blocks:        192.47.117.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E1460D2688F6D1068B97C1F914040434B8F0324
        Validity
            Not Before: Aug  1 01:29:12 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=EAABE3EBFD60720B1EC750C721C164F53D3D8A0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fe:3e:33:4b:13:2b:e4:f0:2a:9e:f0:a1:f0:
                    95:12:a4:0c:01:0b:27:c9:3a:d0:c9:ec:4d:bc:20:
                    cd:7d:47:5f:79:12:10:fe:b0:11:7e:14:47:53:35:
                    b0:c5:6d:50:22:a6:9c:91:82:36:47:65:26:26:b9:
                    e5:a9:6b:9e:29:76:37:a3:ab:f7:1f:b6:56:e0:cb:
                    c6:cc:d2:8c:c2:b7:a9:2a:cb:a0:41:3c:16:8a:e2:
                    3b:9c:2d:40:36:4e:cb:e6:f2:33:a1:bb:83:e2:7a:
                    cc:1d:0a:fe:9a:36:e3:db:96:7f:21:99:68:71:01:
                    ba:58:c1:cc:0f:76:44:ba:27:5d:d5:3e:e0:8a:ae:
                    ac:db:3e:16:a5:98:8d:5c:c7:2f:30:bc:18:be:73:
                    02:f7:24:5e:9d:d3:da:4a:26:4c:9a:00:3b:bd:32:
                    23:87:98:6c:26:53:33:7c:84:7f:e0:05:ce:d7:7b:
                    9e:c0:2d:cb:cd:be:00:96:c2:ec:b5:4e:bf:63:89:
                    57:02:24:8d:09:d5:95:e3:ca:2c:30:b6:20:0d:1e:
                    f4:e1:0c:f3:68:8f:d8:19:de:bd:e2:c8:1f:75:c4:
                    54:7b:03:6f:ad:4f:88:be:f1:82:16:aa:88:f7:36:
                    b9:12:f8:99:09:b9:1c:ad:d3:be:89:36:dd:6e:8b:
                    3d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AB:E3:EB:FD:60:72:0B:1E:C7:50:C7:21:C1:64:F5:3D:3D:8A:0A
            X509v3 Authority Key Identifier:
                keyid:9E:14:60:D2:68:8F:6D:10:68:B9:7C:1F:91:40:40:43:4B:8F:03:24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/nhRg0miPbRBouXwfkUBAQ0uPAyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nhRg0miPbRBouXwfkUBAQ0uPAyQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/6qvj6_1gcgsex1DHIcFk9T09igo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.47.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:d5:8d:93:97:ef:5e:e4:12:ef:f2:be:a2:88:aa:bf:2e:36:
         37:f3:2b:a6:20:4e:9a:f7:36:79:94:a4:c0:14:1f:6b:f4:ff:
         7a:28:63:ca:b1:41:26:22:54:15:c8:df:c5:f5:29:78:db:1d:
         12:55:c0:f0:b1:4f:63:46:2b:5d:5f:73:be:cf:cf:81:8f:4f:
         6c:17:6a:83:2f:ce:c5:b8:6e:a8:f8:90:cc:f8:3b:b3:6b:d2:
         6f:fe:b8:c3:1d:e5:7b:2e:bf:35:a9:10:7d:a9:35:fe:22:ad:
         aa:ac:e0:d4:a7:5d:a3:91:94:f7:e1:d1:cd:ce:61:a9:96:92:
         71:7b:03:9e:f0:2b:25:e1:3a:3d:d2:ff:7c:41:ba:3f:e9:2e:
         50:df:d1:40:6d:81:54:bd:09:5b:b7:4b:6b:4b:76:6d:c8:87:
         f2:c4:67:51:64:d9:76:41:fd:87:4b:4e:c1:4a:57:fb:6a:03:
         bb:2a:0b:da:d2:61:12:f1:e2:c1:94:e8:95:1d:86:14:d3:af:
         8f:bc:85:93:c9:f6:b4:14:a7:00:cd:cf:9f:3d:30:c6:dc:63:
         05:36:41:82:a4:51:de:cf:b2:0a:72:49:03:2c:fa:f5:e5:a8:
         29:8c:a3:a1:0b:5d:d1:e1:e0:2c:27:ee:a9:fe:da:ad:2e:d6:
         36:e4:2e:76
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RTE0
NjBEMjY4OEY2RDEwNjhCOTdDMUY5MTQwNDA0MzRCOEYwMzI0MB4XDTIyMDgwMTAx
MjkxMloXDTIzMDcxNTAxMzAwM1owMzExMC8GA1UEAxMoRUFBQkUzRUJGRDYwNzIw
QjFFQzc1MEM3MjFDMTY0RjUzRDNEOEEwQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK3+PjNLEyvk8Cqe8KHwlRKkDAELJ8k60MnsTbwgzX1HX3kSEP6w
EX4UR1M1sMVtUCKmnJGCNkdlJia55alrnil2N6Or9x+2VuDLxszSjMK3qSrLoEE8
ForiO5wtQDZOy+byM6G7g+J6zB0K/po249uWfyGZaHEBuljBzA92RLonXdU+4Iqu
rNs+FqWYjVzHLzC8GL5zAvckXp3T2komTJoAO70yI4eYbCZTM3yEf+AFztd7nsAt
y82+AJbC7LVOv2OJVwIkjQnVlePKLDC2IA0e9OEM82iP2BneveLIH3XEVHsDb61P
iL7xghaqiPc2uRL4mQm5HK3Tvok23W6LPf8CAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBTqq+Pr/WByCx7HUMchwWT1PT2KCjAfBgNVHSMEGDAWgBSeFGDSaI9tEGi5fB+R
QEBDS48DJDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjI1MS9uaFJnMG1pUGJSQm91WHdma1VCQVEwdVBBeVEuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9uaFJnMG1pUGJSQm91WHdma1VCQVEw
dVBBeVEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjI1MS82cXZqNl8xZ2Nnc2V4MURISWNGazlUMDlpZ28ucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAwC91MA0GCSqGSIb3DQEBCwUAA4IBAQA11Y2Tl+9e5BLv8r6iiKq/LjY3
8yumIE6a9zZ5lKTAFB9r9P96KGPKsUEmIlQVyN/F9Sl42x0SVcDwsU9jRitdX3O+
z8+Bj09sF2qDL87FuG6o+JDM+Duza9Jv/rjDHeV7Lr81qRB9qTX+Iq2qrODUp12j
kZT34dHNzmGplpJxewOe8Csl4To90v98Qbo/6S5Q39FAbYFUvQlbt0trS3ZtyIfy
xGdRZNl2Qf2HS07BSlf7agO7Kgva0mES8eLBlOiVHYYU06+PvIWTyfa0FKcAzc+f
PTDG3GMFNkGCpFHez7IKckkDLPr15agpjKOhC13R4eAsJ+6p/tqtLtY25C52
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:15 2025 by rpki-client