Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/2DB4Uqle9isNL34ntshu6QSAFa4.roa
File:                     2DB4Uqle9isNL34ntshu6QSAFa4.roa (raw, json)
Hash identifier:          zwHrKVLRt/3jZuwdBwXl30mv0gQCkOpMnCAU60G7F3s=
Subject key identifier:   D8:30:78:52:A9:5E:F6:2B:0D:2F:7E:27:B6:C8:6E:E9:04:80:15:AE
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       B5
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/2DB4Uqle9isNL34ntshu6QSAFa4.roa
Signing time:             Sat 01 Jul 2023 01:31:14 +0000
ROA not before:           Sat 01 Jul 2023 01:31:14 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     9370
IP address blocks:        59.106.192.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Jul  1 01:31:14 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=D8307852A95EF62B0D2F7E27B6C86EE9048015AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3e:8d:b0:ab:65:43:fd:c2:65:22:a5:53:32:
                    4a:bf:48:6f:cd:b3:1f:b2:9c:c4:6c:09:87:99:2f:
                    c4:13:fb:2d:6a:c9:13:1d:3a:59:c6:33:3b:d3:cf:
                    71:8b:a5:67:58:cc:68:1a:2c:30:f8:40:cf:cc:b2:
                    a2:31:ea:3d:88:87:2b:f4:5c:25:16:a6:68:9e:c7:
                    e5:3d:82:98:f0:60:12:bf:ae:b6:fb:e4:03:f1:29:
                    a1:af:04:1f:82:29:fc:4e:23:8d:ac:9b:78:46:83:
                    2c:5a:25:05:7e:17:ff:f2:87:43:b1:f6:58:ee:3d:
                    3b:9d:64:47:45:1a:f2:4b:8c:af:ed:2d:f6:9a:69:
                    b9:72:8f:49:c5:65:7d:2c:2c:11:6e:8b:d8:fd:8b:
                    07:45:84:32:fd:ab:16:15:b6:bc:92:af:0f:a9:b2:
                    ee:02:16:a8:1e:1a:2e:db:7f:6d:18:aa:a5:20:76:
                    9c:21:3b:45:34:8a:3f:bb:3c:5e:2c:5b:63:17:8a:
                    4c:e4:6f:44:4b:91:a3:1a:00:59:9d:ac:21:5e:16:
                    a5:92:4e:ef:e9:8d:e5:8b:6c:cf:42:2b:61:a5:be:
                    16:90:8d:20:26:d1:77:20:36:aa:ce:81:de:5c:24:
                    35:a9:4c:86:c2:b7:6b:58:37:5c:a0:dd:b4:3b:10:
                    59:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:30:78:52:A9:5E:F6:2B:0D:2F:7E:27:B6:C8:6E:E9:04:80:15:AE
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/2DB4Uqle9isNL34ntshu6QSAFa4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.106.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         32:05:c1:2a:08:a5:3a:01:7b:c5:1d:99:58:be:0e:1f:0d:01:
         2f:ca:92:35:9f:cc:47:bc:96:4e:2e:85:f2:26:6b:af:71:57:
         d8:12:24:78:be:be:fd:53:0e:a8:94:2d:9f:0a:26:76:16:de:
         4c:a9:5a:93:d9:1c:bf:f5:61:94:d2:f3:05:7f:44:66:40:57:
         bf:bd:5d:54:9f:de:0b:f8:fa:f2:bd:62:8f:75:07:c0:48:54:
         bd:e3:ac:0d:d0:02:24:9b:21:6b:d7:e2:c6:06:43:6c:40:59:
         9f:ba:ae:6e:e4:5d:4f:8c:b2:a1:b7:82:9e:2e:42:cf:ef:99:
         d4:fb:be:36:35:9c:2f:39:e9:e7:7b:f6:a4:c2:f5:cd:06:d6:
         05:f2:4d:98:62:1d:cf:18:c5:08:a5:23:b6:97:2c:bf:51:88:
         9a:19:a2:55:6b:2f:85:0d:37:5e:7a:a4:7c:0a:c0:6c:15:97:
         c8:64:d9:38:67:a3:f7:a5:ae:ba:2d:ae:23:f0:51:6f:09:35:
         f6:51:ed:1e:d6:64:4d:33:f5:7c:b2:4d:e9:e5:44:91:e2:54:
         38:0c:44:f8:1c:86:08:b8:68:f7:a6:67:05:34:67:34:21:01:
         9a:24:1f:11:05:64:82:81:43:bd:af:88:c3:bc:ff:71:02:b1:
         24:29:12:a1
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICALUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy
MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yMzA3MDEw
MTMxMTRaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEQ4MzA3ODUyQTk1RUY2
MkIwRDJGN0UyN0I2Qzg2RUU5MDQ4MDE1QUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBPo2wq2VD/cJlIqVTMkq/SG/Nsx+ynMRsCYeZL8QT+y1qyRMd
OlnGMzvTz3GLpWdYzGgaLDD4QM/MsqIx6j2Ihyv0XCUWpmiex+U9gpjwYBK/rrb7
5APxKaGvBB+CKfxOI42sm3hGgyxaJQV+F//yh0Ox9ljuPTudZEdFGvJLjK/tLfaa
ablyj0nFZX0sLBFui9j9iwdFhDL9qxYVtrySrw+psu4CFqgeGi7bf20YqqUgdpwh
O0U0ij+7PF4sW2MXikzkb0RLkaMaAFmdrCFeFqWSTu/pjeWLbM9CK2GlvhaQjSAm
0XcgNqrOgd5cJDWpTIbCt2tYN1yg3bQ7EFnjAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU2DB4Uqle9isNL34ntshu6QSAFa4wHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W
wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo
bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjQ3LzJEQjRVcWxlOWlzTkwzNG50c2h1NlFTQUZhNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAU7asAwDQYJKoZIhvcNAQELBQADggEBADIFwSoIpToBe8UdmVi+Dh8NAS/K
kjWfzEe8lk4uhfIma69xV9gSJHi+vv1TDqiULZ8KJnYW3kypWpPZHL/1YZTS8wV/
RGZAV7+9XVSf3gv4+vK9Yo91B8BIVL3jrA3QAiSbIWvX4sYGQ2xAWZ+6rm7kXU+M
sqG3gp4uQs/vmdT7vjY1nC856ed79qTC9c0G1gXyTZhiHc8YxQilI7aXLL9RiJoZ
olVrL4UNN156pHwKwGwVl8hk2Thno/elrrotriPwUW8JNfZR7R7WZE0z9XyyTenl
RJHiVDgMRPgchgi4aPemZwU0ZzQhAZokHxEFZIKBQ72viMO8/3ECsSQpEqE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:21 2025 by rpki-client