Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/4bGB1bngCPqzRQmjkgKkZL2dqKY.roa
File:                     4bGB1bngCPqzRQmjkgKkZL2dqKY.roa (raw, json)
Hash identifier:          CdD/ifmjKr4Xdj5nmH5Ri5KUsP4d+kweYulUP6l6emM=
Subject key identifier:   E1:B1:81:D5:B9:E0:08:FA:B3:45:09:A3:92:02:A4:64:BD:9D:A8:A6
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       F8
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/4bGB1bngCPqzRQmjkgKkZL2dqKY.roa
Signing time:             Wed 24 Aug 2022 07:48:27 +0000
ROA not before:           Wed 24 Aug 2022 07:48:27 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     10013
IP address blocks:        180.131.120.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Aug 24 07:48:27 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=E1B181D5B9E008FAB34509A39202A464BD9DA8A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:69:d8:41:ed:4f:68:5e:9b:b7:c2:b0:af:a8:
                    26:1c:2e:ed:c9:e1:49:01:1c:eb:f5:6a:4f:b1:73:
                    2a:31:5e:3c:11:05:44:40:1f:56:8a:57:c8:4c:3b:
                    b4:2d:04:61:49:be:c4:bf:25:99:65:16:5a:22:3f:
                    1e:fe:77:cf:df:d2:38:93:43:dc:0b:f4:3d:63:b7:
                    1a:68:08:34:fa:14:28:6f:b3:a3:b1:00:16:5c:a2:
                    fe:99:9e:24:78:3b:d9:9e:10:ce:a5:35:f3:01:ab:
                    80:4c:78:80:3a:61:41:f3:3c:96:0f:94:dd:ae:4d:
                    d7:be:3a:5e:a1:ac:69:86:68:c4:c2:b2:44:75:a5:
                    04:4b:b2:82:95:68:ab:8f:7d:12:3e:36:25:2a:59:
                    4b:33:9f:56:6b:e9:50:39:c7:da:fc:2f:aa:79:30:
                    3e:83:93:fc:54:79:61:ec:14:e4:9c:8c:b7:a1:51:
                    51:57:98:0c:ce:3b:46:e0:d5:ab:6f:a2:ba:ef:2b:
                    e2:0a:5e:6b:6f:55:17:6b:29:3c:fc:df:40:cc:c4:
                    db:30:70:f4:1d:8f:bc:6c:53:37:1c:0d:30:5c:c6:
                    80:5b:3f:62:bb:45:0f:4c:1b:2a:60:a8:7b:b1:87:
                    ea:58:c6:2e:43:33:73:46:b1:a4:52:2e:35:f1:41:
                    e9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B1:81:D5:B9:E0:08:FA:B3:45:09:A3:92:02:A4:64:BD:9D:A8:A6
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/4bGB1bngCPqzRQmjkgKkZL2dqKY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:c9:13:79:c7:07:4d:d4:30:15:de:df:a8:94:b8:1d:e2:dc:
         7c:a1:f1:ce:60:3b:0c:ef:0b:e8:f7:af:21:c5:0b:20:b1:83:
         08:9d:2d:77:d7:23:74:9e:6f:d6:7a:6c:f3:ea:a3:a2:a9:bc:
         2a:a4:7c:92:7f:0d:e7:e2:96:a1:07:9e:10:6f:fa:5e:d3:a8:
         b9:b5:e0:6c:ae:f8:66:6e:9b:0d:49:0c:98:cf:0f:9e:df:cc:
         43:56:48:b6:89:6e:d9:64:94:b7:8a:2f:10:10:44:e8:76:ea:
         93:e5:1e:82:e1:e3:39:48:09:e5:88:08:bf:da:4c:6b:e2:d6:
         3f:29:61:5a:b4:23:2a:7f:b3:3d:59:c2:4c:46:15:1e:3a:88:
         b9:99:4e:67:dd:61:04:51:d7:1c:77:73:02:96:1d:8b:b0:9f:
         47:61:1d:b1:8e:85:3a:c4:45:0e:af:0f:4f:2a:6b:a7:d5:6f:
         d5:3c:87:17:2f:51:00:11:20:e5:e5:7a:a8:d5:2b:a8:89:09:
         63:b0:d2:60:26:bf:46:8a:27:d0:71:7a:6c:f9:22:09:ba:77:
         38:17:7b:05:a3:05:f6:09:14:bc:e2:b2:d2:12:ee:b6:65:d3:
         17:98:ce:7c:f6:be:e1:c6:7e:1a:26:58:99:ea:e7:55:16:10:
         39:cb:71:e5
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMjA4MjQw
NzQ4MjdaFw0yMzA4MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEUxQjE4MUQ1QjlFMDA4
RkFCMzQ1MDlBMzkyMDJBNDY0QkQ5REE4QTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUadhB7U9oXpu3wrCvqCYcLu3J4UkBHOv1ak+xcyoxXjwRBURA
H1aKV8hMO7QtBGFJvsS/JZllFloiPx7+d8/f0jiTQ9wL9D1jtxpoCDT6FChvs6Ox
ABZcov6ZniR4O9meEM6lNfMBq4BMeIA6YUHzPJYPlN2uTde+Ol6hrGmGaMTCskR1
pQRLsoKVaKuPfRI+NiUqWUszn1Zr6VA5x9r8L6p5MD6Dk/xUeWHsFOScjLehUVFX
mAzOO0bg1atvorrvK+IKXmtvVRdrKTz830DMxNswcPQdj7xsUzccDTBcxoBbP2K7
RQ9MGypgqHuxh+pYxi5DM3NGsaRSLjXxQek7AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU4bGB1bngCPqzRQmjkgKkZL2dqKYwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0LzRiR0IxYm5nQ1BxelJRbWprZ0trWkwyZHFLWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAC0g3gwDQYJKoZIhvcNAQELBQADggEBAGHJE3nHB03UMBXe36iUuB3i3Hyh
8c5gOwzvC+j3ryHFCyCxgwidLXfXI3Seb9Z6bPPqo6KpvCqkfJJ/DefilqEHnhBv
+l7TqLm14Gyu+GZumw1JDJjPD57fzENWSLaJbtlklLeKLxAQROh26pPlHoLh4zlI
CeWICL/aTGvi1j8pYVq0Iyp/sz1ZwkxGFR46iLmZTmfdYQRR1xx3cwKWHYuwn0dh
HbGOhTrERQ6vD08qa6fVb9U8hxcvUQARIOXleqjVK6iJCWOw0mAmv0aKJ9Bxemz5
Igm6dzgXewWjBfYJFLzistIS7rZl0xeYznz2vuHGfhomWJnq51UWEDnLceU=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:27 2025 by rpki-client