Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/URvDFO46Jg2oKlJsSINHhqB63Ro.roa
File:                     URvDFO46Jg2oKlJsSINHhqB63Ro.roa (raw, json)
Hash identifier:          y/fn28fY3CsoMHYcKwPplUVAR0jN6ibu/bJ83IC5Qik=
Subject key identifier:   51:1B:C3:14:EE:3A:26:0D:A8:2A:52:6C:48:83:47:86:A0:7A:DD:1A
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0383
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/URvDFO46Jg2oKlJsSINHhqB63Ro.roa
Signing time:             Thu 01 Jun 2023 17:57:36 +0000
ROA not before:           Thu 01 Jun 2023 17:57:36 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.210.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 899 (0x383)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun  1 17:57:36 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=511BC314EE3A260DA82A526C48834786A07ADD1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f4:fa:51:b0:d0:45:83:8f:86:f4:db:2d:70:
                    12:1e:f9:d2:d0:fe:6c:fa:a5:b4:b9:8a:ff:e9:2a:
                    5e:50:32:0e:da:d1:8c:9d:fe:46:59:b9:b7:f1:08:
                    f2:8a:f3:c5:c5:6e:2d:93:f3:5c:b2:1a:ed:d4:a1:
                    53:f1:b7:59:89:26:24:64:5b:e7:4b:2b:35:d6:a0:
                    33:b5:28:8a:ea:7a:79:a4:58:52:15:5d:54:54:7c:
                    bf:06:cd:6d:dd:2c:f4:86:7f:a7:11:ca:db:83:3a:
                    82:2b:29:99:e5:48:8f:f6:76:27:87:3f:4d:41:d0:
                    76:5f:4b:35:e0:cd:3d:d1:93:1f:79:bf:59:ca:81:
                    be:12:5c:19:8a:86:85:91:0b:3a:45:4f:21:d5:1f:
                    92:a9:04:0e:e0:b8:8b:b2:51:e9:19:af:1d:6e:bb:
                    dd:a1:bd:71:70:6e:6a:34:a5:5c:9d:63:6c:6a:07:
                    09:39:9d:fb:b8:af:88:b9:47:63:31:51:d2:43:dc:
                    d1:06:a1:c4:95:21:db:73:b0:d8:18:c7:da:c0:05:
                    85:68:bc:ec:22:4a:ee:2d:24:92:a4:17:05:6f:df:
                    cf:68:d0:4b:fa:df:df:4c:67:8d:3b:2a:bf:0f:ac:
                    96:e6:51:e7:ec:53:5a:a2:1e:bc:c3:23:12:2d:99:
                    9c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1B:C3:14:EE:3A:26:0D:A8:2A:52:6C:48:83:47:86:A0:7A:DD:1A
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/URvDFO46Jg2oKlJsSINHhqB63Ro.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:6e:39:76:b3:83:7f:07:f0:e0:ab:68:93:da:ec:14:65:8f:
         83:6b:02:0f:d3:20:4f:2c:54:48:0b:f7:b3:52:e6:67:f9:b2:
         e4:e3:a8:8e:48:ec:fd:ab:66:4f:44:63:db:c6:1e:82:76:be:
         ad:7c:2d:72:0b:64:04:c6:a4:56:ec:b9:2b:da:24:0f:53:61:
         21:9a:dd:20:cf:35:77:f9:67:0f:fa:d1:5e:b5:04:c9:0e:dc:
         08:80:bb:2d:51:59:e4:3a:0d:01:c8:f6:98:5d:b4:80:65:ae:
         92:34:71:e1:02:c6:02:7b:46:5b:89:f8:8e:d9:ec:37:10:1f:
         1d:c1:86:73:88:cd:28:b9:cc:20:95:66:31:a2:46:0c:d8:ba:
         13:7a:59:b9:49:97:29:12:17:60:30:db:24:eb:6d:33:f5:87:
         bc:40:9d:97:dc:e6:42:f9:fc:3c:96:8d:81:f3:6b:22:63:40:
         4b:50:53:59:b0:a5:26:52:d7:79:41:3f:c8:32:f6:72:ab:08:
         bd:8a:76:29:d0:e8:e3:aa:38:47:39:47:e6:33:4b:ff:f1:29:
         09:d5:e0:a0:12:10:b7:11:e5:08:ec:25:d4:42:8f:0b:7f:dc:
         2c:b3:b9:02:a9:52:46:63:50:f1:9b:ee:fe:55:83:56:09:f5:
         c1:2e:6d:2d
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICA4MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA2MDEx
NzU3MzZaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDUxMUJDMzE0RUUzQTI2
MERBODJBNTI2QzQ4ODM0Nzg2QTA3QUREMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDP9PpRsNBFg4+G9NstcBIe+dLQ/mz6pbS5iv/pKl5QMg7a0Yyd
/kZZubfxCPKK88XFbi2T81yyGu3UoVPxt1mJJiRkW+dLKzXWoDO1KIrqenmkWFIV
XVRUfL8GzW3dLPSGf6cRytuDOoIrKZnlSI/2dieHP01B0HZfSzXgzT3Rkx95v1nK
gb4SXBmKhoWRCzpFTyHVH5KpBA7guIuyUekZrx1uu92hvXFwbmo0pVydY2xqBwk5
nfu4r4i5R2MxUdJD3NEGocSVIdtzsNgYx9rABYVovOwiSu4tJJKkFwVv389o0Ev6
399MZ407Kr8PrJbmUefsU1qiHrzDIxItmZx1AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUURvDFO46Jg2oKlJsSINHhqB63RowHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L1VSdkRGTzQ2Smcyb0tsSnNTSU5IaHFCNjNSby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAxatIwDQYJKoZIhvcNAQELBQADggEBAEFuOXazg38H8OCraJPa7BRlj4Nr
Ag/TIE8sVEgL97NS5mf5suTjqI5I7P2rZk9EY9vGHoJ2vq18LXILZATGpFbsuSva
JA9TYSGa3SDPNXf5Zw/60V61BMkO3AiAuy1RWeQ6DQHI9phdtIBlrpI0ceECxgJ7
RluJ+I7Z7DcQHx3BhnOIzSi5zCCVZjGiRgzYuhN6WblJlykSF2Aw2yTrbTP1h7xA
nZfc5kL5/DyWjYHzayJjQEtQU1mwpSZS13lBP8gy9nKrCL2KdinQ6OOqOEc5R+Yz
S//xKQnV4KASELcR5QjsJdRCjwt/3CyzuQKpUkZjUPGb7v5Vg1YJ9cEubS0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:21 2025 by rpki-client