Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/CJVvcEr1saueYs7wNmn47llvbQM.roa
File:                     CJVvcEr1saueYs7wNmn47llvbQM.roa (raw, json)
Hash identifier:          w1M28syuG7Lib4OMwQRtPkKyj0tmjohkLFpLCVHVYFk=
Subject key identifier:   08:95:6F:70:4A:F5:B1:AB:9E:62:CE:F0:36:69:F8:EE:59:6F:6D:03
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       85
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/CJVvcEr1saueYs7wNmn47llvbQM.roa
Signing time:             Fri 22 Jul 2022 06:21:21 +0000
ROA not before:           Fri 22 Jul 2022 06:21:21 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        61.5.245.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 06:21:21 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=08956F704AF5B1AB9E62CEF03669F8EE596F6D03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:8a:9d:21:ff:96:d4:26:76:b2:17:29:23:
                    4a:48:34:55:ce:80:07:e3:48:f0:f3:d6:28:67:f6:
                    92:29:7a:33:e8:e4:44:90:81:fa:f2:dc:f8:a6:0f:
                    59:a3:34:73:69:1c:28:d4:d0:66:aa:3d:b6:46:cc:
                    31:6e:97:82:5f:1c:75:da:5c:ca:01:31:80:de:69:
                    0d:27:b6:85:31:44:53:98:3d:a7:9b:e4:db:76:40:
                    9e:c3:9e:e6:7a:99:85:d8:fa:a1:57:cd:e6:15:9d:
                    3e:7b:bf:65:5b:34:ca:4e:d9:bf:8c:dc:36:3e:43:
                    67:af:8f:1a:30:4b:a0:49:08:4e:8d:9a:75:29:67:
                    21:c4:39:f6:d3:25:af:4b:62:17:fe:b2:d0:4d:8e:
                    02:e8:07:28:e0:02:64:da:af:ec:28:cc:7b:aa:39:
                    b2:95:f0:f9:d8:30:51:29:e2:f2:f2:41:21:be:e6:
                    2c:bc:b4:cd:6f:15:06:fc:a0:a4:f4:7c:ad:fb:1d:
                    21:43:66:5d:17:d5:de:4f:72:b2:4d:e5:d5:98:8a:
                    4c:70:b0:8d:ee:4f:51:7d:b1:db:38:0e:dd:ec:56:
                    e4:56:9c:51:17:db:36:0f:e4:5f:c1:c8:d1:cd:21:
                    66:f2:6c:fb:e8:a3:af:d5:63:45:b8:08:fa:d4:42:
                    20:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:95:6F:70:4A:F5:B1:AB:9E:62:CE:F0:36:69:F8:EE:59:6F:6D:03
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/CJVvcEr1saueYs7wNmn47llvbQM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.5.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:c6:0b:fc:b1:a5:f3:7e:2f:51:64:f3:49:60:30:7a:1b:ee:
         d0:a3:0b:17:55:c5:ad:11:0b:b8:a1:42:35:51:d6:78:fe:d9:
         62:17:af:e9:70:ee:b6:16:59:99:40:78:fe:25:e1:0a:88:99:
         df:81:02:94:6d:d5:13:4a:e2:88:26:7a:08:a9:47:cc:80:90:
         ab:95:1b:87:d6:b4:b9:4d:ad:43:ff:ea:5c:0a:b5:b3:1f:6b:
         a0:e3:bc:bd:0c:97:53:4e:ca:cc:26:5f:01:98:da:b2:ba:ff:
         42:e8:6f:7d:61:dd:9f:9d:62:5a:70:42:70:38:3a:16:bb:47:
         9f:43:f2:7e:ab:ff:05:4d:e6:cf:af:8e:f1:7e:13:90:c8:1b:
         89:7c:4b:31:d5:cc:52:c5:99:49:89:16:cd:4b:e0:f2:ac:4b:
         1f:bb:96:96:61:79:6f:77:16:ac:b2:40:25:ef:5c:94:d1:02:
         20:e1:70:6f:f0:c7:ea:31:9d:ea:5f:e3:c0:80:84:1f:17:7c:
         98:79:92:ae:bb:47:e1:9d:aa:1d:37:75:40:26:3f:77:4d:a9:
         63:92:12:fa:a6:89:2e:4d:36:a4:a3:1a:09:eb:7b:d6:45:a9:
         e5:ca:17:9c:1f:eb:7d:5a:6d:42:93:04:1e:7c:12:58:44:dc:
         cd:8a:b4:7f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMjA3MjIw
NjIxMjFaFw0yMzA3MjEwNDA3MTNaMDMxMTAvBgNVBAMTKDA4OTU2RjcwNEFGNUIx
QUI5RTYyQ0VGMDM2NjlGOEVFNTk2RjZEMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/l4qdIf+W1CZ2shcpI0pINFXOgAfjSPDz1ihn9pIpejPo5ESQ
gfry3PimD1mjNHNpHCjU0GaqPbZGzDFul4JfHHXaXMoBMYDeaQ0ntoUxRFOYPaeb
5Nt2QJ7DnuZ6mYXY+qFXzeYVnT57v2VbNMpO2b+M3DY+Q2evjxowS6BJCE6NmnUp
ZyHEOfbTJa9LYhf+stBNjgLoByjgAmTar+wozHuqObKV8PnYMFEp4vLyQSG+5iy8
tM1vFQb8oKT0fK37HSFDZl0X1d5PcrJN5dWYikxwsI3uT1F9sds4Dt3sVuRWnFEX
2zYP5F/ByNHNIWbybPvoo6/VY0W4CPrUQiBtAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUCJVvcEr1saueYs7wNmn47llvbQMwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L0NKVnZjRXIxc2F1ZVlzN3dObW40N2xsdmJRTS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA9BfUwDQYJKoZIhvcNAQELBQADggEBAA7GC/yxpfN+L1Fk80lgMHob7tCj
CxdVxa0RC7ihQjVR1nj+2WIXr+lw7rYWWZlAeP4l4QqImd+BApRt1RNK4ogmegip
R8yAkKuVG4fWtLlNrUP/6lwKtbMfa6DjvL0Ml1NOyswmXwGY2rK6/0Lob31h3Z+d
YlpwQnA4Oha7R59D8n6r/wVN5s+vjvF+E5DIG4l8SzHVzFLFmUmJFs1L4PKsSx+7
lpZheW93FqyyQCXvXJTRAiDhcG/wx+oxnepf48CAhB8XfJh5kq67R+Gdqh03dUAm
P3dNqWOSEvqmiS5NNqSjGgnre9ZFqeXKF5wf631abUKTBB58ElhE3M2KtH8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:36 2025 by rpki-client