Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/EwRoBUO-BHE-HbMooRzXSSuZdKQ.roa
File:                     EwRoBUO-BHE-HbMooRzXSSuZdKQ.roa (raw, json)
Hash identifier:          XoUw/jDJXFUdcqE+mZIOu5CLsX+OmB7hRGOqONvghg4=
Subject key identifier:   13:04:68:05:43:BE:04:71:3E:1D:B3:28:A1:1C:D7:49:2B:99:74:A4
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0154
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/EwRoBUO-BHE-HbMooRzXSSuZdKQ.roa
Signing time:             Fri 07 Jul 2023 04:08:28 +0000
ROA not before:           Fri 07 Jul 2023 04:08:28 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        36.52.64.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:08:28 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=1304680543BE04713E1DB328A11CD7492B9974A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:32:3f:f5:9a:88:d5:b5:0c:d0:68:6f:e4:b0:
                    00:34:ed:23:87:64:ad:7c:27:91:45:97:f1:e6:d0:
                    4d:bb:d5:4d:c3:6e:25:27:68:c3:80:e2:aa:0c:14:
                    c3:f6:69:c9:df:f5:26:47:40:17:ae:5c:4d:e8:35:
                    85:1b:5b:ac:b7:31:85:81:38:15:3f:20:10:64:83:
                    73:6e:5b:5a:a9:7d:b3:8b:36:06:3b:16:e8:b2:b5:
                    ac:65:d1:c6:e2:b9:56:48:2d:06:09:38:89:97:ed:
                    5c:b2:07:c2:58:d1:4e:09:cd:99:06:7c:1a:06:80:
                    f1:4a:d7:ef:2a:73:db:7f:c8:15:7e:99:74:28:bd:
                    b3:ff:f3:9c:29:c2:48:45:86:83:93:2f:7e:f7:80:
                    f2:4d:9c:30:e4:3b:bc:e0:9e:38:f6:a9:9b:36:ce:
                    41:aa:1b:aa:b8:96:92:0d:2a:09:37:a6:ae:69:b3:
                    16:6e:b5:56:42:ff:27:3b:65:ce:54:04:b1:53:a4:
                    71:cc:49:93:65:36:79:c6:65:1d:bd:43:ab:9c:c2:
                    cc:a9:af:18:4d:4e:fb:2c:43:e9:c2:2b:c6:c5:c3:
                    b0:d0:32:e8:3d:2f:8f:71:88:f3:06:04:9f:07:fa:
                    85:26:7b:d9:da:8c:49:1e:0c:e5:62:34:44:c1:e6:
                    6a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:04:68:05:43:BE:04:71:3E:1D:B3:28:A1:1C:D7:49:2B:99:74:A4
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/EwRoBUO-BHE-HbMooRzXSSuZdKQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.52.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         90:8f:b4:26:4c:80:b7:94:91:c4:66:e8:c8:46:fd:fa:6b:94:
         bc:ae:cc:30:92:02:15:7e:ff:f8:f6:23:84:ab:b4:cd:fc:2c:
         f9:6a:66:ee:dc:53:6f:24:54:98:6b:ca:3d:f7:21:ca:4d:4e:
         36:e6:a7:96:3d:05:18:6d:13:66:9e:dd:5e:d2:6d:d9:68:44:
         e1:ae:91:67:be:f1:bf:57:d9:de:37:7b:06:39:b3:68:27:14:
         3b:0a:d7:33:85:88:b0:74:28:e6:28:10:76:5f:74:cd:a1:f5:
         b1:16:bb:b8:6b:24:a6:4a:b9:97:41:71:83:9f:7b:09:43:47:
         3a:8c:a0:a2:f4:33:4e:e5:dc:8a:f5:af:7d:c8:5d:b9:9e:20:
         61:e7:16:c8:e0:5d:5e:b3:02:70:4d:39:f4:aa:8f:42:c5:a4:
         e8:7c:c9:46:b5:ae:ff:59:76:a3:14:af:59:85:5e:8e:50:0a:
         ae:75:ea:9b:82:7b:b4:45:9e:25:a1:5e:33:6b:b4:e4:7b:fc:
         7d:a8:4d:06:e3:9f:d0:05:d5:4c:6d:51:32:59:df:8b:3a:78:
         17:18:af:f5:bc:b5:3b:61:dd:9d:a6:1a:5e:4a:14:a6:d8:ed:
         5f:2a:bf:91:51:95:53:a4:0c:7c:0d:2c:db:ea:5d:bf:c5:58:
         37:58:df:fd
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDA4MjhaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDEzMDQ2ODA1NDNCRTA0
NzEzRTFEQjMyOEExMUNENzQ5MkI5OTc0QTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIMj/1mojVtQzQaG/ksAA07SOHZK18J5FFl/Hm0E271U3DbiUn
aMOA4qoMFMP2acnf9SZHQBeuXE3oNYUbW6y3MYWBOBU/IBBkg3NuW1qpfbOLNgY7
Fuiytaxl0cbiuVZILQYJOImX7VyyB8JY0U4JzZkGfBoGgPFK1+8qc9t/yBV+mXQo
vbP/85wpwkhFhoOTL373gPJNnDDkO7zgnjj2qZs2zkGqG6q4lpINKgk3pq5psxZu
tVZC/yc7Zc5UBLFTpHHMSZNlNnnGZR29Q6ucwsyprxhNTvssQ+nCK8bFw7DQMug9
L49xiPMGBJ8H+oUme9najEkeDOViNETB5mqpAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUEwRoBUO+BHE+HbMooRzXSSuZdKQwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L0V3Um9CVU8tQkhFLUhiTW9vUnpYU1N1WmRLUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUkNEAwDQYJKoZIhvcNAQELBQADggEBAJCPtCZMgLeUkcRm6MhG/fprlLyu
zDCSAhV+//j2I4SrtM38LPlqZu7cU28kVJhryj33IcpNTjbmp5Y9BRhtE2ae3V7S
bdloROGukWe+8b9X2d43ewY5s2gnFDsK1zOFiLB0KOYoEHZfdM2h9bEWu7hrJKZK
uZdBcYOfewlDRzqMoKL0M07l3Ir1r33IXbmeIGHnFsjgXV6zAnBNOfSqj0LFpOh8
yUa1rv9ZdqMUr1mFXo5QCq516puCe7RFniWhXjNrtOR7/H2oTQbjn9AF1UxtUTJZ
34s6eBcYr/W8tTth3Z2mGl5KFKbY7V8qv5FRlVOkDHwNLNvqXb/FWDdY3/0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:05 2025 by rpki-client