Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/yDeTxJBqONMpmr46BGfU8N8K0u4.roa
File:                     yDeTxJBqONMpmr46BGfU8N8K0u4.roa (raw, json)
Hash identifier:          y3CRcUAQJLBVMB6CcQaqgY7lcbBC+RSWUmT6l51itPs=
Subject key identifier:   C8:37:93:C4:90:6A:38:D3:29:9A:BE:3A:04:67:D4:F0:DF:0A:D2:EE
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0144
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yDeTxJBqONMpmr46BGfU8N8K0u4.roa
Signing time:             Wed 24 May 2023 16:31:13 +0000
ROA not before:           Wed 24 May 2023 16:31:13 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.81.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: May 24 16:31:13 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=C83793C4906A38D3299ABE3A0467D4F0DF0AD2EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:14:ca:94:39:83:3f:53:1e:20:4b:87:3d:e0:
                    1b:cc:4b:e9:8e:2c:2f:92:94:67:f4:b0:98:15:6c:
                    9c:66:03:95:45:01:8a:dc:d1:7e:cd:8e:fe:b8:96:
                    d2:ef:4b:39:19:3b:23:2b:71:25:e1:c0:a8:81:38:
                    64:3a:d5:0a:f9:05:fd:35:8c:89:62:6b:33:48:fa:
                    f9:07:cc:a9:75:b8:ff:40:d6:7a:6d:c2:c4:ba:a4:
                    01:1b:02:22:3e:a4:04:40:42:37:9e:a3:35:79:60:
                    a8:26:20:4f:1e:da:dd:68:3b:c3:70:3f:c8:ba:c7:
                    4f:4a:28:3b:dc:0d:ba:bf:9d:85:4c:05:0c:76:8b:
                    ec:f4:58:f9:7c:e2:2a:28:f2:e9:f7:d5:16:38:13:
                    ff:5b:33:bf:6e:5b:67:ce:5c:65:4f:d2:cd:a9:52:
                    da:5e:18:83:ac:ec:e2:34:b4:26:d8:85:44:63:56:
                    d1:ad:4e:cc:bf:04:d5:91:20:49:40:17:d3:c7:7c:
                    f3:7e:15:c4:f5:8b:14:69:4f:7e:97:92:48:3f:26:
                    0e:81:ad:3f:41:28:eb:02:a8:b2:d3:a3:ee:3c:e1:
                    9a:50:10:14:ed:a0:3c:d1:d9:7b:90:28:5c:42:9e:
                    80:79:62:bd:ef:3b:88:96:44:f0:58:5d:97:ef:be:
                    c0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:37:93:C4:90:6A:38:D3:29:9A:BE:3A:04:67:D4:F0:DF:0A:D2:EE
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/yDeTxJBqONMpmr46BGfU8N8K0u4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:a7:c3:d2:07:a1:c3:c0:a3:43:45:f1:6d:68:a0:21:49:df:
         a1:bd:68:1f:a7:dd:4e:d4:43:4f:79:3e:c7:f5:b2:55:6d:23:
         67:50:09:23:9c:25:83:22:64:18:0f:9d:a7:93:cf:b0:71:eb:
         ed:09:d9:b5:ee:50:4a:45:91:04:ae:f2:9f:ed:50:3e:07:b2:
         e5:a0:ef:c7:f4:ae:82:38:c5:57:db:32:97:fc:bc:8a:9d:79:
         65:e0:5b:60:b3:00:ab:ab:61:f2:ab:4a:d1:19:f5:ad:bb:df:
         23:2b:27:a8:60:8d:95:6c:96:ba:ac:35:2f:65:ba:f3:64:a7:
         db:e3:ba:fe:3e:7e:a5:26:9e:6c:26:12:3b:72:c8:f0:fc:87:
         45:ab:3f:39:0c:81:b1:cc:dc:ef:4b:c1:61:83:a0:01:ad:6b:
         8d:07:e4:fb:e3:82:6e:04:72:58:7f:8d:f5:ae:53:db:7c:bc:
         4a:eb:c1:f6:65:5a:3f:a2:78:4c:ee:f5:bf:10:94:26:a8:ff:
         ff:14:bd:1c:df:3d:cd:ba:44:fb:cd:2f:1b:b3:31:b1:11:e9:
         5b:cd:e2:4e:fe:16:4b:34:32:ea:b8:19:d4:07:5a:af:31:a5:
         b5:7f:86:97:3e:ed:67:01:42:0d:48:6d:97:f7:32:77:c1:62:
         74:6f:a7:5a
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yMzA1MjQx
NjMxMTNaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEM4Mzc5M0M0OTA2QTM4
RDMyOTlBQkUzQTA0NjdENEYwREYwQUQyRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZFMqUOYM/Ux4gS4c94BvMS+mOLC+SlGf0sJgVbJxmA5VFAYrc
0X7Njv64ltLvSzkZOyMrcSXhwKiBOGQ61Qr5Bf01jIliazNI+vkHzKl1uP9A1npt
wsS6pAEbAiI+pARAQjeeozV5YKgmIE8e2t1oO8NwP8i6x09KKDvcDbq/nYVMBQx2
i+z0WPl84ioo8un31RY4E/9bM79uW2fOXGVP0s2pUtpeGIOs7OI0tCbYhURjVtGt
Tsy/BNWRIElAF9PHfPN+FcT1ixRpT36Xkkg/Jg6BrT9BKOsCqLLTo+484ZpQEBTt
oDzR2XuQKFxCnoB5Yr3vO4iWRPBYXZfvvsA7AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUyDeTxJBqONMpmr46BGfU8N8K0u4wHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L3lEZVR4SkJxT05NcG1yNDZCR2ZVOE44SzB1NC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAABT1EwDQYJKoZIhvcNAQELBQADggEBANOnw9IHocPAo0NF8W1ooCFJ36G9
aB+n3U7UQ095Psf1slVtI2dQCSOcJYMiZBgPnaeTz7Bx6+0J2bXuUEpFkQSu8p/t
UD4HsuWg78f0roI4xVfbMpf8vIqdeWXgW2CzAKurYfKrStEZ9a273yMrJ6hgjZVs
lrqsNS9luvNkp9vjuv4+fqUmnmwmEjtyyPD8h0WrPzkMgbHM3O9LwWGDoAGta40H
5Pvjgm4Eclh/jfWuU9t8vErrwfZlWj+ieEzu9b8QlCao//8UvRzfPc26RPvNLxuz
MbER6VvN4k7+Fks0Muq4GdQHWq8xpbV/hpc+7WcBQg1IbZf3MnfBYnRvp1o=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:44 2025 by rpki-client