Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/iPW6dYSIH90fAl1DTqzQ8VtLGS8.roa
File:                     iPW6dYSIH90fAl1DTqzQ8VtLGS8.roa (raw, json)
Hash identifier:          0PNrnzFdGKtbhkx8Ytb2vbk6ePuBmPfJokvbOdJ2aBg=
Subject key identifier:   88:F5:BA:75:84:88:1F:DD:1F:02:5D:43:4E:AC:D0:F1:5B:4B:19:2F
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       90
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/iPW6dYSIH90fAl1DTqzQ8VtLGS8.roa
Signing time:             Mon 01 Aug 2022 01:28:47 +0000
ROA not before:           Mon 01 Aug 2022 01:28:47 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     9370
IP address blocks:        59.106.192.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Aug  1 01:28:47 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=88F5BA7584881FDD1F025D434EACD0F15B4B192F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:03:0a:70:77:a1:e3:e3:c0:28:f6:59:0f:
                    e2:5c:93:15:12:2b:4b:f2:b2:4f:95:f8:fc:7c:ef:
                    aa:1f:81:ad:4f:87:80:0a:7a:d7:c8:a4:56:ad:68:
                    87:36:4c:69:c3:9d:bd:57:41:0e:ae:ce:98:df:4b:
                    50:ce:7e:3c:db:21:b4:a1:89:14:af:41:55:ce:14:
                    08:0f:3b:79:db:d3:7c:ce:b9:ba:a0:36:18:f9:4d:
                    26:e7:12:e8:2c:61:26:0e:46:52:5e:dd:7b:6b:fe:
                    4e:6b:9b:d5:45:21:fe:b0:9c:75:89:46:f7:b8:c8:
                    bb:cd:cb:85:cf:07:b3:07:a6:6d:8d:7d:ac:06:fb:
                    a0:ea:1c:31:3a:c4:ad:b7:79:fb:5a:d6:e8:31:fe:
                    de:f4:1b:f2:ae:7f:5e:d0:0f:62:c1:1d:b8:54:a0:
                    a6:3f:db:61:df:38:98:1c:9c:36:a0:e6:1b:db:61:
                    aa:68:db:da:c9:91:80:e1:fb:0f:4b:26:f5:87:2e:
                    76:f0:71:79:ab:79:4a:69:bf:23:86:7a:85:4b:a8:
                    c3:bd:05:00:d9:66:5c:c4:96:5b:90:3c:52:58:e7:
                    b1:83:f5:46:41:cb:07:bf:72:0d:d1:a0:d8:fa:54:
                    21:be:f5:d1:a8:4b:ca:b7:0d:4a:04:4a:69:eb:3c:
                    6c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F5:BA:75:84:88:1F:DD:1F:02:5D:43:4E:AC:D0:F1:5B:4B:19:2F
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/iPW6dYSIH90fAl1DTqzQ8VtLGS8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.106.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a4:71:bf:3a:23:65:52:f8:1f:b0:b0:40:6a:47:88:a0:45:03:
         f8:bf:98:d6:e1:dc:a1:73:c4:0a:44:8a:5c:4b:7c:84:9d:0b:
         26:44:e7:6f:fa:df:3d:2d:ba:c3:de:a9:71:4a:60:75:91:d8:
         89:c3:b1:69:60:79:db:13:15:7e:b9:48:23:d6:02:5d:7b:32:
         6a:37:c1:ac:fa:50:84:e7:90:a2:a6:a1:a8:0f:66:18:65:92:
         7d:c1:de:c6:22:04:ea:9e:59:c2:8c:a3:6e:89:7d:cb:cf:71:
         c9:30:a9:bc:70:83:1b:02:39:34:35:a5:c1:7c:a1:1f:b2:58:
         b1:27:42:8c:a2:99:dd:e9:50:23:f7:d9:f7:44:bc:a8:e8:c3:
         9b:3e:79:e4:cf:fc:95:15:23:78:2c:2b:b3:45:73:ed:50:6f:
         3a:0a:fd:0f:3d:16:69:ca:a7:ac:92:99:8e:e7:cc:5a:6a:0c:
         26:f2:e7:25:63:44:8c:fe:e7:0f:7e:db:a0:0e:6d:5d:46:7b:
         4e:ee:70:04:51:54:72:9a:e2:46:ac:6a:37:c5:af:d0:35:1b:
         25:1a:b7:b8:52:4e:b4:9d:87:63:e5:34:78:3f:b4:5b:f0:63:
         db:70:41:ee:9c:fb:95:51:ae:9d:33:c2:2e:24:af:7f:f6:3b:
         f2:68:f6:07
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy
MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yMjA4MDEw
MTI4NDdaFw0yMzA3MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDg4RjVCQTc1ODQ4ODFG
REQxRjAyNUQ0MzRFQUNEMEYxNUI0QjE5MkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCySAMKcHeh4+PAKPZZD+JckxUSK0vysk+V+Px876ofga1Ph4AK
etfIpFataIc2TGnDnb1XQQ6uzpjfS1DOfjzbIbShiRSvQVXOFAgPO3nb03zOubqg
Nhj5TSbnEugsYSYORlJe3Xtr/k5rm9VFIf6wnHWJRve4yLvNy4XPB7MHpm2NfawG
+6DqHDE6xK23efta1ugx/t70G/Kuf17QD2LBHbhUoKY/22HfOJgcnDag5hvbYapo
29rJkYDh+w9LJvWHLnbwcXmreUppvyOGeoVLqMO9BQDZZlzElluQPFJY57GD9UZB
ywe/cg3RoNj6VCG+9dGoS8q3DUoESmnrPGzPAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUiPW6dYSIH90fAl1DTqzQ8VtLGS8wHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W
wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo
bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjQ3L2lQVzZkWVNJSDkwZkFsMURUcXpROFZ0TEdTOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAU7asAwDQYJKoZIhvcNAQELBQADggEBAKRxvzojZVL4H7CwQGpHiKBFA/i/
mNbh3KFzxApEilxLfISdCyZE52/63z0tusPeqXFKYHWR2InDsWlgedsTFX65SCPW
Al17Mmo3waz6UITnkKKmoagPZhhlkn3B3sYiBOqeWcKMo26JfcvPcckwqbxwgxsC
OTQ1pcF8oR+yWLEnQoyimd3pUCP32fdEvKjow5s+eeTP/JUVI3gsK7NFc+1QbzoK
/Q89FmnKp6ySmY7nzFpqDCby5yVjRIz+5w9+26AObV1Ge07ucARRVHKa4kasajfF
r9A1GyUat7hSTrSdh2PlNHg/tFvwY9twQe6c+5VRrp0zwi4kr3/2O/Jo9gc=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:07 2025 by rpki-client