Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/6w9Xy_If3jGy4JNwOcsjbBE9Fjk.roa
File:                     6w9Xy_If3jGy4JNwOcsjbBE9Fjk.roa (raw, json)
Hash identifier:          tffl5t0Zv5YAyhF4EVEdMd0vf3mZoI1SVYBMZsTc0/0=
Subject key identifier:   EB:0F:57:CB:F2:1F:DE:31:B2:E0:93:70:39:CB:23:6C:11:3D:16:39
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       79
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/6w9Xy_If3jGy4JNwOcsjbBE9Fjk.roa
Signing time:             Fri 22 Jul 2022 06:03:36 +0000
ROA not before:           Fri 22 Jul 2022 06:03:36 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        61.120.214.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 06:03:36 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=EB0F57CBF21FDE31B2E0937039CB236C113D1639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:da:e2:d6:77:15:8c:5c:14:2c:4c:be:48:db:
                    28:83:b8:39:b4:c1:ba:75:4d:64:94:84:ca:b4:a2:
                    7a:45:51:27:c3:9a:8d:a5:72:47:c1:ad:48:bf:15:
                    26:27:1c:6d:ce:04:50:6a:f7:94:82:a6:43:ec:bd:
                    ea:29:de:ef:27:03:fc:28:af:96:98:58:72:2c:75:
                    b9:78:9f:01:1f:f6:41:22:9a:bd:08:7e:6c:82:81:
                    59:5e:69:7d:a3:5c:e0:3b:33:df:72:74:bb:7f:86:
                    3d:88:8d:58:58:e6:4b:72:cf:02:c5:01:1f:a6:61:
                    ac:ae:d5:42:fb:27:56:56:55:2f:ee:26:52:a4:ee:
                    aa:6c:ea:eb:1a:5b:01:25:6b:1f:ba:4a:10:7c:aa:
                    71:ff:95:90:3d:9d:ec:e2:37:fa:24:14:3e:31:5f:
                    a0:a9:f1:b6:fd:2e:cf:39:7e:04:5d:a7:f4:8f:83:
                    70:76:79:71:2a:b4:a9:39:dc:e6:69:e9:0a:13:4d:
                    ff:ac:3f:36:28:0c:b1:25:6c:6c:8b:a5:3c:ac:ac:
                    d8:5c:9c:2d:18:75:66:0f:a5:10:b3:96:02:3b:57:
                    a2:97:6b:b1:87:3a:eb:55:ac:54:1e:a3:24:75:03:
                    74:f4:99:40:f0:16:7b:23:43:b5:23:06:22:99:f3:
                    cd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0F:57:CB:F2:1F:DE:31:B2:E0:93:70:39:CB:23:6C:11:3D:16:39
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/6w9Xy_If3jGy4JNwOcsjbBE9Fjk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:e0:b5:33:ec:5e:c3:ec:de:2e:98:59:55:d1:25:53:c3:6b:
         95:a9:2c:1a:94:33:b8:f3:35:99:5b:92:a4:d0:e6:9e:59:d7:
         87:7d:cb:9f:93:d5:20:26:5f:88:b1:0e:51:04:8e:29:80:aa:
         ba:55:13:8e:25:e2:e8:8c:cd:d7:29:c2:bb:3a:9f:b1:1b:03:
         8a:74:7f:55:97:ba:d2:74:cf:2b:9a:eb:4c:a1:dc:74:cb:93:
         b9:ae:86:fc:f6:b3:be:08:d7:27:b9:aa:6b:20:2b:23:26:51:
         29:3c:43:ab:40:57:03:77:69:24:68:a4:44:a7:22:66:bf:b9:
         aa:a9:f4:88:a5:b4:01:4b:dc:ea:14:98:ae:f1:83:20:96:20:
         43:d6:7c:8a:96:a8:de:b0:ab:af:49:28:3d:20:81:d5:42:6e:
         5f:4c:44:0a:25:5e:5a:b0:0f:30:0e:51:80:a2:f9:17:f7:be:
         f5:7a:c3:44:f2:fc:f2:22:f6:96:43:ee:98:cd:8d:aa:89:b2:
         d8:f6:43:c7:b9:f9:05:c3:3b:55:5f:f8:00:83:e2:c8:d0:9a:
         7d:ac:b5:62:4e:0d:e7:3b:4d:be:2b:36:ec:ba:e1:b4:00:6d:
         46:f9:40:9a:30:a2:b9:3e:a2:86:bd:46:a2:9c:ac:94:71:c5:
         5a:bf:21:06
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBeTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRDcx
MjVBRTRDRUFFMTMzNUZFNUQ0MjlBQTAzMENFOTA3MERGMTlDMB4XDTIyMDcyMjA2
MDMzNloXDTIzMDcyMTA0MDcxM1owMzExMC8GA1UEAxMoRUIwRjU3Q0JGMjFGREUz
MUIyRTA5MzcwMzlDQjIzNkMxMTNEMTYzOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALja4tZ3FYxcFCxMvkjbKIO4ObTBunVNZJSEyrSiekVRJ8OajaVy
R8GtSL8VJiccbc4EUGr3lIKmQ+y96ine7ycD/CivlphYcix1uXifAR/2QSKavQh+
bIKBWV5pfaNc4Dsz33J0u3+GPYiNWFjmS3LPAsUBH6ZhrK7VQvsnVlZVL+4mUqTu
qmzq6xpbASVrH7pKEHyqcf+VkD2d7OI3+iQUPjFfoKnxtv0uzzl+BF2n9I+DcHZ5
cSq0qTnc5mnpChNN/6w/NigMsSVsbIulPKys2FycLRh1Zg+lELOWAjtXopdrsYc6
61WsVB6jJHUDdPSZQPAWeyNDtSMGIpnzzaECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTrD1fL8h/eMbLgk3A5yyNsET0WOTAfBgNVHSMEGDAWgBQNcSWuTOrhM1/l1Cmq
AwzpBw3xnDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzk0L0RYRWxya3pxNFROZjVkUXBxZ01NNlFjTjhady5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0RYRWxya3pxNFROZjVkUXBxZ01NNlFj
Tjhady5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zOTQvNnc5WHlfSWYzakd5NEpOd09jc2piQkU5RmprLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAT141jANBgkqhkiG9w0BAQsFAAOCAQEAGOC1M+xew+zeLphZVdElU8Nrlaks
GpQzuPM1mVuSpNDmnlnXh33Ln5PVICZfiLEOUQSOKYCqulUTjiXi6IzN1ynCuzqf
sRsDinR/VZe60nTPK5rrTKHcdMuTua6G/PazvgjXJ7mqayArIyZRKTxDq0BXA3dp
JGikRKciZr+5qqn0iKW0AUvc6hSYrvGDIJYgQ9Z8ipao3rCrr0koPSCB1UJuX0xE
CiVeWrAPMA5RgKL5F/e+9XrDRPL88iL2lkPumM2Nqomy2PZDx7n5BcM7VV/4AIPi
yNCafay1Yk4N5ztNvis27LrhtABtRvlAmjCiuT6ihr1GopyslHHFWr8hBg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:34 2025 by rpki-client