Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/JRwhyCoEKB1O6u7_cljg37oQi4Q.roa
File:                     JRwhyCoEKB1O6u7_cljg37oQi4Q.roa (raw, json)
Hash identifier:          Ra8/1Z4xkcObgidw+o0wbX4P7fyqtQJOZ8jdYJfhZuM=
Subject key identifier:   25:1C:21:C8:2A:04:28:1D:4E:EA:EE:FF:72:58:E0:DF:BA:10:8B:84
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       AE
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JRwhyCoEKB1O6u7_cljg37oQi4Q.roa
Signing time:             Wed 29 Mar 2023 16:05:51 +0000
ROA not before:           Wed 29 Mar 2023 16:05:51 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.25.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 29 16:05:51 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=251C21C82A04281D4EEAEEFF7258E0DFBA108B84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6f:69:7a:b6:8f:a1:74:4d:08:54:d0:1e:54:
                    2b:4e:34:07:78:5f:ff:49:1b:e5:9f:d6:09:8f:be:
                    13:1e:8c:8f:94:e4:f8:13:e4:d6:48:33:8d:81:b8:
                    32:30:f3:17:74:d1:99:a0:e8:32:b2:2d:81:df:ed:
                    7f:3c:25:88:6f:11:42:80:53:86:cf:bc:02:c7:bd:
                    67:38:9a:82:7d:f8:af:f9:4b:99:1e:8c:9e:e6:09:
                    0e:8b:1b:68:90:81:11:ee:cc:22:66:80:c8:97:23:
                    91:20:fe:3b:01:2e:b4:c6:d1:a6:ad:62:46:75:dd:
                    bb:bd:69:61:5c:44:40:ab:60:30:5a:30:82:d9:61:
                    dd:26:c8:b0:dd:cf:37:d2:4c:2d:3e:2a:55:c2:8c:
                    ac:eb:9d:96:b8:32:3e:13:b1:1b:7a:3c:74:92:d3:
                    71:0d:97:4c:50:67:bf:8b:af:a3:71:5b:4c:28:31:
                    ce:b7:86:bd:91:9c:54:88:8a:5f:d3:a2:24:59:36:
                    e1:f0:98:1e:59:65:74:9e:b7:bf:06:82:7c:fe:a0:
                    1e:c0:c7:d9:48:80:22:62:7f:72:a5:cc:b0:c8:c5:
                    00:36:2b:ea:d3:46:0b:85:bf:d9:d3:38:65:ec:ba:
                    f6:51:6b:a2:4c:5a:c0:b2:8e:bd:28:8f:e8:8b:2a:
                    99:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1C:21:C8:2A:04:28:1D:4E:EA:EE:FF:72:58:E0:DF:BA:10:8B:84
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/JRwhyCoEKB1O6u7_cljg37oQi4Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:27:db:2c:66:5c:eb:ca:5a:a8:ff:6f:0c:d5:48:e3:76:0e:
         4b:5f:00:d2:90:11:c7:68:ed:87:e4:d6:86:65:d8:61:f3:02:
         96:1a:49:29:bf:55:c9:bd:16:81:3a:bc:16:a6:29:de:da:79:
         17:00:c1:3d:1a:76:14:f5:98:27:2f:f3:f4:ca:29:7b:09:09:
         9b:35:c1:16:26:ec:c2:85:6e:64:56:c5:a4:52:3a:b8:ae:1d:
         aa:4d:c1:33:57:c2:fb:b8:62:97:83:bd:b9:b3:9a:60:de:37:
         42:5b:b8:5c:e3:26:fb:89:e0:b2:22:72:ba:84:e0:4b:a6:a9:
         25:ec:12:cc:df:d6:e6:9a:60:66:02:4a:09:cc:08:c9:10:fc:
         f5:c3:51:05:e6:e9:de:c3:7d:99:d2:f1:26:f7:4e:58:f0:11:
         4d:9d:a4:c4:53:04:c8:d5:ae:d3:40:3f:fc:6b:d3:9d:ca:f6:
         ac:1a:29:60:cd:57:f4:99:0d:82:b6:98:9b:f6:cb:24:85:fc:
         2d:a1:b4:11:e4:1f:bb:63:e2:46:9c:d4:af:d8:f3:a8:13:8c:
         a9:8f:17:1f:15:2b:36:36:34:22:76:c5:75:4c:26:4d:3a:48:
         b0:57:e4:da:e2:88:36:a8:4b:f4:05:a4:db:7a:15:99:00:2c:
         85:e3:ce:f2
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzAzMjkx
NjA1NTFaFw0yNDAzMTQwMTMwMDJaMDMxMTAvBgNVBAMTKDI1MUMyMUM4MkEwNDI4
MUQ0RUVBRUVGRjcyNThFMERGQkExMDhCODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrb2l6to+hdE0IVNAeVCtONAd4X/9JG+Wf1gmPvhMejI+U5PgT
5NZIM42BuDIw8xd00Zmg6DKyLYHf7X88JYhvEUKAU4bPvALHvWc4moJ9+K/5S5ke
jJ7mCQ6LG2iQgRHuzCJmgMiXI5Eg/jsBLrTG0aatYkZ13bu9aWFcRECrYDBaMILZ
Yd0myLDdzzfSTC0+KlXCjKzrnZa4Mj4TsRt6PHSS03ENl0xQZ7+Lr6NxW0woMc63
hr2RnFSIil/ToiRZNuHwmB5ZZXSet78Ggnz+oB7Ax9lIgCJif3KlzLDIxQA2K+rT
RguFv9nTOGXsuvZRa6JMWsCyjr0oj+iLKpnnAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUJRwhyCoEKB1O6u7/cljg37oQi4QwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L0pSd2h5Q29FS0IxTzZ1N19jbGpnMzdvUWk0US5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAxYhkwDQYJKoZIhvcNAQELBQADggEBAAon2yxmXOvKWqj/bwzVSON2Dktf
ANKQEcdo7Yfk1oZl2GHzApYaSSm/Vcm9FoE6vBamKd7aeRcAwT0adhT1mCcv8/TK
KXsJCZs1wRYm7MKFbmRWxaRSOriuHapNwTNXwvu4YpeDvbmzmmDeN0JbuFzjJvuJ
4LIicrqE4EumqSXsEszf1uaaYGYCSgnMCMkQ/PXDUQXm6d7DfZnS8Sb3TljwEU2d
pMRTBMjVrtNAP/xr053K9qwaKWDNV/SZDYK2mJv2yySF/C2htBHkH7tj4kac1K/Y
86gTjKmPFx8VKzY2NCJ2xXVMJk06SLBX5NriiDaoS/QFpNt6FZkALIXjzvI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:39 2025 by rpki-client