Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/233/HsMds982VcPn08eKYH87nJ4ieSc.roa
File:                     HsMds982VcPn08eKYH87nJ4ieSc.roa (raw, json)
Hash identifier:          TDiO7WhaLkyRMeNLvlq+0KdxkXpKZP6bgCkLeS/PBBE=
Subject key identifier:   1E:C3:1D:B3:DF:36:55:C3:E7:D3:C7:8A:60:7F:3B:9C:9E:22:79:27
Certificate issuer:       /CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
Certificate serial:       2D
Authority key identifier: D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/HsMds982VcPn08eKYH87nJ4ieSc.roa
Signing time:             Fri 15 Sep 2023 07:18:40 +0000
ROA not before:           Fri 15 Sep 2023 07:18:40 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     7670
IP address blocks:        210.253.32.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
        Validity
            Not Before: Sep 15 07:18:40 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=1EC31DB3DF3655C3E7D3C78A607F3B9C9E227927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:dd:3a:01:b3:64:5f:cf:69:45:26:b0:9a:98:
                    71:56:ef:e5:cf:87:00:f3:cb:07:7f:b8:8d:ca:81:
                    d2:5d:87:47:fe:ec:b9:40:e9:23:c5:5d:b8:4c:c0:
                    82:75:71:35:10:8e:26:b2:56:3f:be:4b:60:f0:2e:
                    55:f2:ea:71:c8:ab:d8:d5:89:f2:11:86:a2:16:25:
                    aa:2d:b6:1c:bd:0a:65:9d:67:4d:59:54:58:35:3e:
                    42:13:0c:3b:5e:8c:ec:cf:cf:2b:9c:fa:52:7b:4e:
                    eb:76:52:29:9c:07:d2:20:60:ed:27:b5:ca:27:69:
                    b7:81:bf:92:bc:94:58:63:f8:d9:63:22:d5:8c:23:
                    61:7d:76:e2:b3:7c:aa:da:c8:5e:89:10:de:9b:2b:
                    6d:01:99:09:fa:57:1e:96:b8:a9:b0:45:1d:ff:95:
                    e4:59:7c:8e:21:25:1a:13:d7:6c:ef:18:f3:33:ae:
                    5a:58:d0:22:ab:5a:86:62:f1:c1:77:0e:3a:30:06:
                    4d:98:28:33:d0:c0:cc:c3:38:8d:8a:54:19:f6:f2:
                    15:21:59:c4:a9:03:f3:24:2f:9f:fb:d9:e9:c2:84:
                    df:ed:c2:9a:35:a5:c9:24:e1:57:19:07:6c:0d:1e:
                    eb:71:66:d8:86:82:90:6f:90:f6:a7:56:4c:2f:c4:
                    f0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C3:1D:B3:DF:36:55:C3:E7:D3:C7:8A:60:7F:3B:9C:9E:22:79:27
            X509v3 Authority Key Identifier:
                keyid:D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/HsMds982VcPn08eKYH87nJ4ieSc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.253.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         65:d8:23:98:f1:fa:fd:8e:00:1a:28:32:a6:0e:55:7b:40:62:
         5e:80:10:17:ec:b8:c1:99:f7:fa:d6:b2:2b:c6:17:5f:f8:c0:
         11:af:34:18:5e:c8:9b:8e:2f:8a:8c:68:fc:8e:4c:9e:23:d3:
         9c:7c:f6:ee:a1:34:de:d2:90:72:17:15:8d:b0:fb:07:da:f3:
         1b:4e:8d:4d:c4:f5:aa:c5:96:69:ee:0d:20:10:c2:a6:6c:99:
         4c:a2:32:a7:b8:5c:70:44:b8:3d:e2:2a:6a:89:db:96:2b:10:
         0f:b0:40:c8:93:2f:93:e2:7a:29:08:ce:14:9a:d1:6a:b1:e2:
         98:d5:16:1e:01:8e:52:3f:97:3d:1a:2b:1b:7a:ce:1c:20:b7:
         da:35:d1:fe:cd:fd:bc:4a:a5:12:c4:29:6a:de:ca:67:0d:38:
         80:d2:41:9b:7c:6c:51:ab:82:fa:1e:2e:50:0b:32:ce:a4:88:
         86:e1:d5:97:2c:52:c3:5f:e9:f8:81:da:a5:1a:de:64:54:e4:
         14:c3:cd:1c:36:2d:ee:13:d7:68:91:6c:e8:f0:51:a7:1a:fe:
         9b:c2:cf:01:a8:84:e6:33:5d:c9:87:6a:85:77:f2:91:50:6f:
         e1:c3:e7:c0:2e:d4:84:e6:d6:11:16:ac:4e:de:27:4a:fc:70:
         d8:7b:a9:4a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENzg4
Njc4RTY0RDI5MTg0QzIzREFBQURCNTk0QkZEOUJBRTI0MDVDMB4XDTIzMDkxNTA3
MTg0MFoXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoMUVDMzFEQjNERjM2NTVD
M0U3RDNDNzhBNjA3RjNCOUM5RTIyNzkyNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANLdOgGzZF/PaUUmsJqYcVbv5c+HAPPLB3+4jcqB0l2HR/7suUDp
I8VduEzAgnVxNRCOJrJWP75LYPAuVfLqccir2NWJ8hGGohYlqi22HL0KZZ1nTVlU
WDU+QhMMO16M7M/PK5z6UntO63ZSKZwH0iBg7Se1yidpt4G/kryUWGP42WMi1Ywj
YX124rN8qtrIXokQ3psrbQGZCfpXHpa4qbBFHf+V5Fl8jiElGhPXbO8Y8zOuWljQ
IqtahmLxwXcOOjAGTZgoM9DAzMM4jYpUGfbyFSFZxKkD8yQvn/vZ6cKE3+3CmjWl
ySThVxkHbA0e63Fm2IaCkG+Q9qdWTC/E8MMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQewx2z3zZVw+fTx4pgfzucniJ5JzAfBgNVHSMEGDAWgBTXiGeOZNKRhMI9qq21
lL/ZuuJAXDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjMzLzE0aG5qbVRTa1lUQ1BhcXR0WlNfMmJyaVFGdy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzE0aG5qbVRTa1lUQ1BhcXR0WlNfMmJy
aVFGdy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMzMvSHNNZHM5ODJWY1BuMDhlS1lIODduSjRpZVNjLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBdL9IDANBgkqhkiG9w0BAQsFAAOCAQEAZdgjmPH6/Y4AGigypg5Ve0BiXoAQ
F+y4wZn3+tayK8YXX/jAEa80GF7Im44vioxo/I5MniPTnHz27qE03tKQchcVjbD7
B9rzG06NTcT1qsWWae4NIBDCpmyZTKIyp7hccES4PeIqaonblisQD7BAyJMvk+J6
KQjOFJrRarHimNUWHgGOUj+XPRorG3rOHCC32jXR/s39vEqlEsQpat7KZw04gNJB
m3xsUauC+h4uUAsyzqSIhuHVlyxSw1/p+IHapRreZFTkFMPNHDYt7hPXaJFs6PBR
pxr+m8LPAaiE5jNdyYdqhXfykVBv4cPnwC7UhObWERasTt4nSvxw2HupSg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:09 2025 by rpki-client