Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/EThAhmr-cfVtoMyY-mQ-tBcD1Ls.roa
File:                     EThAhmr-cfVtoMyY-mQ-tBcD1Ls.roa (raw, json)
Hash identifier:          yGEFzNA8joT1q9EibjwvHRq5UUr+POoR6eOq7hVefX0=
Subject key identifier:   11:38:40:86:6A:FE:71:F5:6D:A0:CC:98:FA:64:3E:B4:17:03:D4:BB
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       FA
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/EThAhmr-cfVtoMyY-mQ-tBcD1Ls.roa
Signing time:             Wed 24 Aug 2022 07:58:25 +0000
ROA not before:           Wed 24 Aug 2022 07:58:25 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     10013
IP address blocks:        180.131.122.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Aug 24 07:58:25 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=113840866AFE71F56DA0CC98FA643EB41703D4BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1f:4f:8b:41:12:ff:88:31:c6:8e:21:a3:9a:
                    9a:aa:a9:6f:b9:ed:10:2a:23:07:4a:f2:69:25:2b:
                    73:18:e4:6d:c2:4f:07:59:78:d4:48:48:d9:4d:b8:
                    f9:47:dc:d3:a0:2b:43:e6:4e:d0:0a:e4:b8:44:c9:
                    cf:72:d7:56:fe:0f:e3:0f:e2:80:e5:31:d4:c8:5e:
                    59:d2:a2:b7:cf:c9:9f:0b:a2:e3:f0:3c:4b:45:1d:
                    ba:10:52:20:00:1e:0d:19:d8:29:d7:5e:a2:c4:11:
                    41:14:15:cf:46:2e:ea:7d:bc:d3:e5:ed:bb:70:80:
                    71:57:7c:d2:76:29:21:fc:b8:3f:e8:51:ec:4d:7b:
                    9c:13:55:14:9e:e0:5a:d5:6b:8b:77:7a:87:44:3a:
                    57:4a:f0:7d:e5:2e:35:d4:60:6b:3f:02:dc:e5:04:
                    09:51:37:32:89:30:fc:41:f9:c1:bd:27:5c:a4:22:
                    94:06:fb:c1:75:4f:8c:ba:e6:05:61:99:8b:7f:0a:
                    61:89:6c:80:fa:78:9a:94:a7:12:d0:65:1c:9a:66:
                    c5:08:78:68:5c:0e:d6:93:b1:ca:30:f0:8b:52:f8:
                    b7:6d:b1:76:7b:9b:06:db:34:6f:8d:b6:ea:36:97:
                    6f:10:ef:0c:62:eb:11:70:6b:e0:74:aa:fd:90:b6:
                    cc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:38:40:86:6A:FE:71:F5:6D:A0:CC:98:FA:64:3E:B4:17:03:D4:BB
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/EThAhmr-cfVtoMyY-mQ-tBcD1Ls.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:b9:8a:71:85:12:80:bd:74:e9:62:f9:90:46:43:24:fe:4f:
         9c:b6:14:2a:3e:9d:37:37:e1:0c:f2:da:6d:cb:ad:31:66:dc:
         fb:57:b9:cf:7e:31:9f:fd:e3:43:3d:65:19:08:8b:3e:75:05:
         55:4f:47:af:82:bc:dd:02:ed:8b:a9:19:13:0e:5f:fe:22:7a:
         cb:fc:ed:49:96:8e:ca:a9:cc:7f:84:95:71:f1:9a:da:49:96:
         e0:00:83:52:f7:0c:c4:b0:c4:30:b6:a9:09:b3:2a:15:e6:3f:
         fb:8e:94:01:87:39:36:f2:46:13:de:e3:a1:40:62:a1:1e:d7:
         16:43:8f:96:15:ad:47:98:b3:34:a9:59:5d:70:37:fc:29:99:
         41:78:16:57:0c:97:b0:fb:31:49:77:71:a1:e6:79:40:b7:0d:
         59:11:36:20:09:72:f7:6b:f4:53:48:c5:63:3e:fb:bc:45:aa:
         4c:c5:fa:73:c6:66:48:1b:2e:6a:40:c7:9f:0a:36:db:76:78:
         2f:6b:d5:c7:9b:6d:9d:a9:71:3d:4d:14:64:00:2a:87:a6:f5:
         88:35:9e:4e:23:9c:f6:cd:cf:fa:39:03:03:ea:22:d3:1c:a0:
         82:5a:8d:aa:f3:87:bc:52:fe:ba:fb:02:1e:be:bf:06:c6:3e:
         c5:23:c3:7a
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAPowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMjA4MjQw
NzU4MjVaFw0yMzA4MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDExMzg0MDg2NkFGRTcx
RjU2REEwQ0M5OEZBNjQzRUI0MTcwM0Q0QkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3H0+LQRL/iDHGjiGjmpqqqW+57RAqIwdK8mklK3MY5G3CTwdZ
eNRISNlNuPlH3NOgK0PmTtAK5LhEyc9y11b+D+MP4oDlMdTIXlnSorfPyZ8LouPw
PEtFHboQUiAAHg0Z2CnXXqLEEUEUFc9GLup9vNPl7btwgHFXfNJ2KSH8uD/oUexN
e5wTVRSe4FrVa4t3eodEOldK8H3lLjXUYGs/AtzlBAlRNzKJMPxB+cG9J1ykIpQG
+8F1T4y65gVhmYt/CmGJbID6eJqUpxLQZRyaZsUIeGhcDtaTscow8ItS+LdtsXZ7
mwbbNG+Ntuo2l28Q7wxi6xFwa+B0qv2QtswDAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUEThAhmr+cfVtoMyY+mQ+tBcD1LswHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L0VUaEFobXItY2ZWdG9NeVktbVEtdEJjRDFMcy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAC0g3owDQYJKoZIhvcNAQELBQADggEBAJG5inGFEoC9dOli+ZBGQyT+T5y2
FCo+nTc34Qzy2m3LrTFm3PtXuc9+MZ/940M9ZRkIiz51BVVPR6+CvN0C7YupGRMO
X/4iesv87UmWjsqpzH+ElXHxmtpJluAAg1L3DMSwxDC2qQmzKhXmP/uOlAGHOTby
RhPe46FAYqEe1xZDj5YVrUeYszSpWV1wN/wpmUF4FlcMl7D7MUl3caHmeUC3DVkR
NiAJcvdr9FNIxWM++7xFqkzF+nPGZkgbLmpAx58KNtt2eC9r1cebbZ2pcT1NFGQA
Koem9Yg1nk4jnPbNz/o5AwPqItMcoIJajarzh7xS/rr7Ah6+vwbGPsUjw3o=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:46 2025 by rpki-client