Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30208/MdEWTIGG2UzRleVseXCrIDFxE8I.roa
File:                     MdEWTIGG2UzRleVseXCrIDFxE8I.roa (raw, json)
Hash identifier:          662KacWTH0ZMm0sf1+iW5LXigWS3GtVeHP4DdhGml1w=
Subject key identifier:   31:D1:16:4C:81:86:D9:4C:D1:95:E5:6C:79:70:AB:20:31:71:13:C2
Certificate issuer:       /CN=DFF122974C1A7D89D168BBB5345BFF1BBF341626
Certificate serial:       0F
Authority key identifier: DF:F1:22:97:4C:1A:7D:89:D1:68:BB:B5:34:5B:FF:1B:BF:34:16:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3_Eil0wafYnRaLu1NFv_G780FiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30208/MdEWTIGG2UzRleVseXCrIDFxE8I.roa
Signing time:             Thu 21 Oct 2021 07:29:21 +0000
ROA not before:           Thu 21 Oct 2021 07:29:21 +0000
ROA not after:            Sat 15 Oct 2022 01:30:02 +0000
asID:                     38651
IP address blocks:        2401:f100::/32 maxlen: 64
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFF122974C1A7D89D168BBB5345BFF1BBF341626
        Validity
            Not Before: Oct 21 07:29:21 2021 GMT
            Not After : Oct 15 01:30:02 2022 GMT
        Subject: CN=31D1164C8186D94CD195E56C7970AB20317113C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a9:74:b8:e3:10:e7:79:bf:05:3e:96:13:74:
                    fe:ae:e0:68:57:12:3d:84:ed:20:9f:3c:29:4a:8e:
                    71:48:c0:e1:b8:80:43:a1:7a:0c:26:b5:f1:c5:b2:
                    0d:28:0a:f9:6c:4d:a8:27:c5:3a:4d:24:15:60:1b:
                    59:bd:f8:a0:a3:e7:50:81:a6:d0:c2:21:d3:0d:d3:
                    d1:3e:31:1e:92:00:09:9b:4e:33:9e:ce:21:53:53:
                    be:16:b5:b3:d6:a2:b1:45:59:58:96:1e:90:10:b5:
                    6e:e1:11:5d:65:9a:da:c3:0b:68:62:2d:1f:64:3b:
                    fb:f7:af:97:14:6d:37:91:8a:c2:fb:1c:1f:ab:14:
                    b5:a6:af:cc:69:92:18:3c:3f:57:61:d0:75:b7:b3:
                    34:1e:f6:4e:16:1a:e8:51:72:f6:9c:a8:b0:a2:49:
                    1a:23:ef:23:ef:c3:77:5d:46:e3:ec:3a:c4:12:65:
                    78:2a:65:a8:ab:21:22:14:51:64:90:32:96:4e:f6:
                    6f:a7:28:4c:92:5f:0c:20:07:f7:d8:b3:4e:30:8d:
                    b5:91:7d:42:b7:0f:9c:86:24:32:15:5a:95:85:a9:
                    48:52:e7:0b:2f:e8:0a:2c:52:37:ba:eb:14:ee:bc:
                    b8:a9:81:5a:26:8b:99:b4:d8:b1:f0:86:0f:74:46:
                    de:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D1:16:4C:81:86:D9:4C:D1:95:E5:6C:79:70:AB:20:31:71:13:C2
            X509v3 Authority Key Identifier:
                keyid:DF:F1:22:97:4C:1A:7D:89:D1:68:BB:B5:34:5B:FF:1B:BF:34:16:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30208/3_Eil0wafYnRaLu1NFv_G780FiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3_Eil0wafYnRaLu1NFv_G780FiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30208/MdEWTIGG2UzRleVseXCrIDFxE8I.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:f100::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:2b:a8:8a:60:85:e8:bc:bd:a6:2e:0d:f0:d4:c1:c4:93:06:
         ca:af:cf:d4:3a:56:f1:a9:11:58:bd:cf:08:88:3a:1b:2b:7c:
         a6:55:33:21:52:58:4b:67:df:0b:a4:99:10:98:95:c7:9f:7d:
         9a:45:5f:41:e8:2a:2e:1c:04:1b:31:14:e0:64:01:ae:8f:a2:
         fa:93:42:bb:08:a3:b0:13:63:79:f2:40:4b:bc:ec:97:c5:d5:
         64:5c:09:56:24:82:90:bb:c0:cc:2c:4d:f9:3d:e7:e9:30:78:
         6f:b1:e0:00:8e:7f:03:60:30:bb:df:21:0c:46:b2:4d:a5:ea:
         90:8b:f0:34:05:dd:76:1c:6b:55:67:11:58:8f:c3:7e:92:aa:
         06:6e:6b:3c:58:7b:e7:88:a6:de:06:06:a3:17:a5:bd:36:9a:
         4b:03:de:59:47:88:52:76:77:3e:e0:fc:07:c1:38:6f:ec:10:
         f4:c6:3b:58:1c:d8:8a:78:62:63:f6:8c:96:53:ef:6f:fe:bf:
         33:82:c6:e2:e8:8b:2a:45:e8:e4:33:40:6a:39:0d:f0:1b:c9:
         26:ac:a1:d2:e8:d2:6a:0d:b3:2b:4f:3b:5d:eb:96:fb:32:24:
         f8:8b:6c:0c:92:e2:12:36:6c:81:79:2e:fd:57:be:f4:c5:11:
         f4:95:20:b1
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBDzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhERkYx
MjI5NzRDMUE3RDg5RDE2OEJCQjUzNDVCRkYxQkJGMzQxNjI2MB4XDTIxMTAyMTA3
MjkyMVoXDTIyMTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMzFEMTE2NEM4MTg2RDk0
Q0QxOTVFNTZDNzk3MEFCMjAzMTcxMTNDMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPOpdLjjEOd5vwU+lhN0/q7gaFcSPYTtIJ88KUqOcUjA4biAQ6F6
DCa18cWyDSgK+WxNqCfFOk0kFWAbWb34oKPnUIGm0MIh0w3T0T4xHpIACZtOM57O
IVNTvha1s9aisUVZWJYekBC1buERXWWa2sMLaGItH2Q7+/evlxRtN5GKwvscH6sU
taavzGmSGDw/V2HQdbezNB72ThYa6FFy9pyosKJJGiPvI+/Dd11G4+w6xBJleCpl
qKshIhRRZJAylk72b6coTJJfDCAH99izTjCNtZF9QrcPnIYkMhValYWpSFLnCy/o
CixSN7rrFO68uKmBWiaLmbTYsfCGD3RG3tkCAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBQx0RZMgYbZTNGV5Wx5cKsgMXETwjAfBgNVHSMEGDAWgBTf8SKXTBp9idFou7U0
W/8bvzQWJjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAyMDgvM19FaWwwd2FmWW5SYUx1MU5Gdl9HNzgwRmlZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvM19FaWwwd2FmWW5SYUx1MU5Gdl9H
NzgwRmlZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMjA4L01kRVdUSUdHMlV6UmxlVnNlWENySURGeEU4SS5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAfEAMA0GCSqGSIb3DQEBCwUA
A4IBAQAbK6iKYIXovL2mLg3w1MHEkwbKr8/UOlbxqRFYvc8IiDobK3ymVTMhUlhL
Z98LpJkQmJXHn32aRV9B6CouHAQbMRTgZAGuj6L6k0K7CKOwE2N58kBLvOyXxdVk
XAlWJIKQu8DMLE35PefpMHhvseAAjn8DYDC73yEMRrJNpeqQi/A0Bd12HGtVZxFY
j8N+kqoGbms8WHvniKbeBgajF6W9NppLA95ZR4hSdnc+4PwHwThv7BD0xjtYHNiK
eGJj9oyWU+9v/r8zgsbi6IsqRejkM0BqOQ3wG8kmrKHS6NJqDbMrTztd65b7MiT4
i2wMkuISNmyBeS79V770xRH0lSCx
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:25 2025 by rpki-client