Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/7nuPnZx6VzuZEM9JIb-MLUugy8s.roa
File:                     7nuPnZx6VzuZEM9JIb-MLUugy8s.roa (raw, json)
Hash identifier:          7aAy/dfH3M1E/uZYUPiR744vEOF3VVGBFgh1i4g426Y=
Subject key identifier:   EE:7B:8F:9D:9C:7A:57:3B:99:10:CF:49:21:BF:8C:2D:4B:A0:CB:CB
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       29
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7nuPnZx6VzuZEM9JIb-MLUugy8s.roa
Signing time:             Thu 27 Jul 2023 16:52:07 +0000
ROA not before:           Thu 27 Jul 2023 16:52:07 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        158.199.48.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Jul 27 16:52:07 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=EE7B8F9D9C7A573B9910CF4921BF8C2D4BA0CBCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:ef:cc:d1:6b:91:85:ac:89:26:a8:f6:16:30:
                    b0:5a:52:4e:8f:a3:78:1c:5e:c3:33:c0:85:5e:30:
                    28:09:9e:4b:d6:a1:47:a9:cb:a3:bf:09:64:10:cd:
                    b6:e3:2e:28:13:82:66:f7:30:d0:42:f6:13:8d:47:
                    16:62:5c:33:83:c2:ed:fd:a4:7f:e3:ce:5e:fc:53:
                    49:d0:60:a2:22:45:f9:5b:55:06:1e:6e:ae:b4:bc:
                    46:6d:4b:63:34:3b:51:b4:93:30:d9:91:64:f4:59:
                    fe:57:e1:86:e8:df:26:83:3e:1e:70:3c:4d:1d:39:
                    0b:27:35:d8:3f:2e:a3:da:ac:f7:ea:49:77:0b:e9:
                    db:d7:92:94:11:60:50:e8:de:5b:05:96:8d:6d:b5:
                    21:ac:aa:87:d8:11:79:78:ad:04:5a:96:fc:07:29:
                    a9:8f:a8:47:69:88:73:e4:55:fe:6d:41:a6:0c:9d:
                    5d:2b:78:8e:0f:39:88:cd:6a:29:f7:ce:65:5d:c2:
                    2b:ca:24:9c:08:73:73:bb:98:50:f3:77:cf:f8:e7:
                    e9:72:97:6d:2e:9e:ff:9e:cb:10:8a:0f:d2:42:76:
                    47:53:67:10:30:86:43:1e:b6:13:5e:ce:67:3f:17:
                    25:cb:d6:ca:e1:95:90:ed:0d:3b:97:7c:42:da:2e:
                    ea:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7B:8F:9D:9C:7A:57:3B:99:10:CF:49:21:BF:8C:2D:4B:A0:CB:CB
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/7nuPnZx6VzuZEM9JIb-MLUugy8s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.199.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:28:5c:7b:7b:a5:fc:a5:8d:30:cb:10:fc:d3:32:9d:af:60:
         4b:e2:fc:97:26:e3:a7:62:34:3f:a7:6c:ab:4f:e7:f8:e2:3b:
         63:54:0f:35:27:bf:c6:5e:d2:e4:6c:4b:86:f6:62:8e:9d:1e:
         cf:ba:16:61:15:e4:67:77:52:65:e1:64:cb:56:16:08:5a:71:
         7a:5f:e2:7a:52:63:f0:e0:9b:b9:d6:9b:d0:e6:30:14:9e:f5:
         86:df:d4:f3:5c:cd:49:aa:a9:17:74:28:ba:75:23:f8:e2:be:
         65:fc:01:17:f1:8d:14:11:a5:e0:dd:8e:7f:89:b7:a8:b1:93:
         5f:b1:fa:70:f5:29:91:23:26:83:e3:9c:23:57:61:62:e7:1e:
         4c:47:33:c7:3a:f2:5b:f0:29:f6:25:be:31:80:92:0b:39:2f:
         06:ce:a2:98:3a:36:bd:88:52:39:67:bb:14:77:5f:af:62:e9:
         90:72:a7:c2:46:ad:25:b6:9a:41:e2:3b:8e:cd:f4:ed:9d:8a:
         82:4d:7b:8b:86:dc:61:cb:65:18:91:4d:aa:9a:83:ba:b3:57:
         e9:f5:88:77:d8:1d:f9:9f:f7:ce:ed:dc:18:af:de:d4:4a:46:
         ac:68:1b:b0:0c:6d:f4:14:29:d8:64:0e:c3:b5:9f:83:c7:16:
         98:2e:39:43
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGODlF
MEYxNUMxRTIwRTE5MUFBRjE3Mjg4RjZFMzBGRjAxODY5QTZFMB4XDTIzMDcyNzE2
NTIwN1oXDTI0MDcxNDAxMzAwM1owMzExMC8GA1UEAxMoRUU3QjhGOUQ5QzdBNTcz
Qjk5MTBDRjQ5MjFCRjhDMkQ0QkEwQ0JDQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPDvzNFrkYWsiSao9hYwsFpSTo+jeBxewzPAhV4wKAmeS9ahR6nL
o78JZBDNtuMuKBOCZvcw0EL2E41HFmJcM4PC7f2kf+POXvxTSdBgoiJF+VtVBh5u
rrS8Rm1LYzQ7UbSTMNmRZPRZ/lfhhujfJoM+HnA8TR05Cyc12D8uo9qs9+pJdwvp
29eSlBFgUOjeWwWWjW21Iayqh9gReXitBFqW/AcpqY+oR2mIc+RV/m1BpgydXSt4
jg85iM1qKffOZV3CK8oknAhzc7uYUPN3z/jn6XKXbS6e/57LEIoP0kJ2R1NnEDCG
Qx62E17OZz8XJcvWyuGVkO0NO5d8Qtou6lkCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTue4+dnHpXO5kQz0khv4wtS6DLyzAfBgNVHSMEGDAWgBT4ng8VweIOGRqvFyiP
bjD/AYaabjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA5Ly1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dHR21tNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dH
R21tNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDkvN251UG5aeDZWenVaRU05SkliLU1MVXVneThzLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBJ7HMDANBgkqhkiG9w0BAQsFAAOCAQEAHChce3ul/KWNMMsQ/NMyna9gS+L8
lybjp2I0P6dsq0/n+OI7Y1QPNSe/xl7S5GxLhvZijp0ez7oWYRXkZ3dSZeFky1YW
CFpxel/ielJj8OCbudab0OYwFJ71ht/U81zNSaqpF3QounUj+OK+ZfwBF/GNFBGl
4N2Of4m3qLGTX7H6cPUpkSMmg+OcI1dhYuceTEczxzryW/Ap9iW+MYCSCzkvBs6i
mDo2vYhSOWe7FHdfr2LpkHKnwkatJbaaQeI7js307Z2Kgk17i4bcYctlGJFNqpqD
urNX6fWId9gd+Z/3zu3cGK/e1EpGrGgbsAxt9BQp2GQOw7Wfg8cWmC45Qw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:52 2025 by rpki-client