Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30091/rO9bD0m_T88qTjr-V1c9STEaPds.roa
File:                     rO9bD0m_T88qTjr-V1c9STEaPds.roa (raw, json)
Hash identifier:          tcu96zgEOIejR7iNEv9hbqblfq0foSsdVXtluODDc4c=
Subject key identifier:   AC:EF:5B:0F:49:BF:4F:CF:2A:4E:3A:FE:57:57:3D:49:31:1A:3D:DB
Certificate issuer:       /CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
Certificate serial:       3E
Authority key identifier: 89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/rO9bD0m_T88qTjr-V1c9STEaPds.roa
Signing time:             Tue 07 Nov 2023 04:49:46 +0000
ROA not before:           Tue 07 Nov 2023 04:49:46 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     18131
IP address blocks:        2402:c800:ff7b::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
        Validity
            Not Before: Nov  7 04:49:46 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=ACEF5B0F49BF4FCF2A4E3AFE57573D49311A3DDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:27:97:d9:26:81:ff:fd:e5:49:d5:65:0f:00:
                    e8:fa:c5:b9:c4:0c:1f:a6:2d:e3:54:c7:2d:bb:e9:
                    a6:9f:aa:cd:35:de:4f:42:3a:14:b6:3d:4a:0e:96:
                    47:92:83:39:95:75:80:b3:43:0d:53:1b:61:97:7c:
                    ec:e0:6d:41:0e:a7:aa:5f:de:b7:ee:2c:b7:a9:0e:
                    31:89:2c:63:11:b9:54:eb:43:2f:1a:c6:3c:72:76:
                    df:3d:7d:43:48:b0:bf:65:e5:c5:12:92:e1:69:c1:
                    b2:4b:15:e6:59:99:3d:ff:dc:bc:eb:c1:3c:bd:f4:
                    58:4c:56:55:16:1c:c3:0c:b4:d8:b4:62:e5:6f:43:
                    12:c7:38:70:82:50:fa:a6:f7:b6:3f:f9:f5:cd:90:
                    8b:a6:f4:d9:cb:8d:94:92:64:6a:bc:61:4b:14:b4:
                    50:42:2d:ec:a1:e3:5d:9f:c6:c1:55:7f:2b:54:91:
                    e1:7c:06:e3:09:2a:9a:e1:c0:df:59:04:8d:a8:72:
                    2e:a0:be:34:c1:1b:fd:1b:0d:3e:95:95:1b:68:33:
                    65:d0:c0:af:3f:24:78:0c:d0:50:52:a7:de:96:6d:
                    78:04:07:32:37:75:49:f6:ea:3c:64:74:10:f5:b4:
                    af:13:c5:ba:65:50:94:4d:fc:45:c4:09:63:db:5a:
                    a4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EF:5B:0F:49:BF:4F:CF:2A:4E:3A:FE:57:57:3D:49:31:1A:3D:DB
            X509v3 Authority Key Identifier:
                keyid:89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/rO9bD0m_T88qTjr-V1c9STEaPds.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c800:ff7b::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:ca:55:4c:b7:4b:ac:31:c0:62:58:a6:38:b4:db:a2:a6:71:
         1e:56:80:30:35:e5:ee:fe:a9:39:c8:5e:a8:41:0c:cb:92:ac:
         ae:f0:7a:18:62:48:39:29:e6:2b:8b:e2:8b:fe:69:e2:5c:1b:
         1e:66:1a:b2:e5:a2:dd:12:5a:91:c6:f7:2d:22:c4:2b:4a:a0:
         14:ac:1a:6a:57:22:da:e7:4c:b6:08:2b:ac:43:70:de:ba:0b:
         ac:f3:df:46:6e:5c:3f:f4:39:76:e6:14:40:d4:1e:d3:b7:a8:
         f5:95:87:a0:30:df:01:6e:87:4e:49:38:4b:80:31:8e:8d:57:
         82:6e:9d:62:61:9e:61:b8:a9:96:11:6e:c2:15:1f:1e:90:f9:
         9e:6b:f6:27:5a:14:64:14:6c:51:87:47:2c:00:e5:bd:74:4b:
         79:b5:c2:ed:d5:ae:5c:d4:75:6f:3d:71:6c:d3:48:d5:30:6a:
         6f:99:75:43:75:41:a1:57:e8:43:2a:8d:9a:e1:f2:ed:ac:cf:
         9b:eb:1f:8c:4b:a5:8a:69:4a:1f:09:a1:ba:50:27:4b:aa:43:
         95:61:a4:96:57:33:ea:f4:24:98:b4:f3:b2:36:f8:78:31:04:
         ef:53:c8:1b:5b:81:9b:62:2e:81:01:65:95:39:83:5e:0d:26:
         74:81:10:a4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIBPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OTgw
MURCREJFMTY4ODYzQUIwRTgwMkYwRUM5MEEzNTI1QzIzNDdDMB4XDTIzMTEwNzA0
NDk0NloXDTI0MTAxNDAxMzAwM1owMzExMC8GA1UEAxMoQUNFRjVCMEY0OUJGNEZD
RjJBNEUzQUZFNTc1NzNENDkzMTFBM0REQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALUnl9kmgf/95UnVZQ8A6PrFucQMH6Yt41THLbvppp+qzTXeT0I6
FLY9Sg6WR5KDOZV1gLNDDVMbYZd87OBtQQ6nql/et+4st6kOMYksYxG5VOtDLxrG
PHJ23z19Q0iwv2XlxRKS4WnBsksV5lmZPf/cvOvBPL30WExWVRYcwwy02LRi5W9D
Esc4cIJQ+qb3tj/59c2Qi6b02cuNlJJkarxhSxS0UEIt7KHjXZ/GwVV/K1SR4XwG
4wkqmuHA31kEjahyLqC+NMEb/RsNPpWVG2gzZdDArz8keAzQUFKn3pZteAQHMjd1
SfbqPGR0EPW0rxPFumVQlE38RcQJY9tapK0CAwEAAaOCAiswggInMB0GA1UdDgQW
BBSs71sPSb9PzypOOv5XVz1JMRo92zAfBgNVHSMEGDAWgBSJgB29vhaIY6sOgC8O
yQo1JcI0fDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwOTEvaVlBZHZiNFdpR09yRG9BdkRza0tOU1hDTkh3LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaVlBZHZiNFdpR09yRG9BdkRza0tO
U1hDTkh3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDkxL3JPOWJEMG1fVDg4cVRqci1WMWM5U1RFYVBkcy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAkAsgA/3swDQYJKoZIhvcNAQELBQADggEBAKPKVUy3S6wxwGJYpji0
26KmcR5WgDA15e7+qTnIXqhBDMuSrK7wehhiSDkp5iuL4ov+aeJcGx5mGrLlot0S
WpHG9y0ixCtKoBSsGmpXItrnTLYIK6xDcN66C6zz30ZuXD/0OXbmFEDUHtO3qPWV
h6Aw3wFuh05JOEuAMY6NV4JunWJhnmG4qZYRbsIVHx6Q+Z5r9idaFGQUbFGHRywA
5b10S3m1wu3VrlzUdW89cWzTSNUwam+ZdUN1QaFX6EMqjZrh8u2sz5vrH4xLpYpp
Sh8JobpQJ0uqQ5VhpJZXM+r0JJi087I2+HgxBO9TyBtbgZtiLoEBZZU5g14NJnSB
EKQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:16 2025 by rpki-client