Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/GjXVnsuhzLnJw_7e0VMPNnlG4zg.roa
File:                     GjXVnsuhzLnJw_7e0VMPNnlG4zg.roa (raw, json)
Hash identifier:          R8wpSzTb8ZFOiPQCpbzvztXECzRX0Tj8dA/6PAi0QNI=
Subject key identifier:   1A:35:D5:9E:CB:A1:CC:B9:C9:C3:FE:DE:D1:53:0F:36:79:46:E3:38
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       BF
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/GjXVnsuhzLnJw_7e0VMPNnlG4zg.roa
Signing time:             Wed 27 Jul 2022 09:06:42 +0000
ROA not before:           Wed 27 Jul 2022 09:06:42 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        61.205.57.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 27 09:06:42 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=1A35D59ECBA1CCB9C9C3FEDED1530F367946E338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:78:dd:1a:23:77:b3:1c:db:07:4b:8d:bf:
                    bc:21:9e:ae:23:23:6a:7e:03:c8:4a:c1:fb:2b:9e:
                    0f:8c:4e:a5:ec:48:f6:b5:f7:d5:b1:a3:4b:e9:9f:
                    ed:ae:29:41:a9:01:90:45:58:e0:9c:08:ec:78:39:
                    01:10:2b:79:6c:c9:e0:da:f4:4b:57:78:6f:f4:f5:
                    b0:87:44:bf:ef:99:5f:31:2d:3f:32:b7:34:ba:8d:
                    56:4b:69:26:8c:50:62:0d:93:81:41:c1:8e:e5:6b:
                    46:a4:2b:f3:05:3b:b3:43:a4:f2:63:b4:a0:55:a7:
                    cc:8e:a2:83:82:eb:37:c6:65:93:2b:31:b2:fa:d9:
                    9c:b0:4a:23:72:4e:b8:7d:55:68:ce:00:03:fb:18:
                    bc:ca:1c:8e:f4:32:29:40:66:da:d5:62:8c:01:dc:
                    64:ad:77:17:82:7d:72:35:50:39:fd:78:6b:ec:26:
                    47:c8:8a:c1:13:af:f9:1d:db:4b:c0:89:78:84:2e:
                    8b:8b:7a:aa:68:f9:06:55:f1:72:5b:95:15:f8:b7:
                    37:be:1a:4f:37:fa:b7:8a:c5:f4:5f:0f:3c:b8:d3:
                    86:cf:14:44:73:26:ed:9f:e5:76:07:19:4f:ae:ee:
                    16:2f:9f:50:a5:dd:b7:b1:14:72:33:5b:47:0b:c7:
                    9f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:35:D5:9E:CB:A1:CC:B9:C9:C3:FE:DE:D1:53:0F:36:79:46:E3:38
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/GjXVnsuhzLnJw_7e0VMPNnlG4zg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.205.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:8e:27:65:f5:ce:8e:66:ba:3d:86:2b:c5:5e:f9:8c:0f:ed:
         dc:8a:10:0b:33:7f:62:29:72:91:71:f8:8b:ab:de:08:6e:b0:
         8a:8f:6a:2a:ce:b4:8b:f7:79:d5:e1:99:94:2e:ce:8d:01:cb:
         62:6d:59:ff:46:d3:5e:e9:bc:38:d3:02:97:83:b7:eb:03:98:
         3f:7d:c8:7b:4b:fc:43:54:1d:59:87:e5:06:4a:9e:67:46:55:
         f8:71:14:6c:9e:ee:8c:0e:48:33:e4:ad:91:62:64:95:44:15:
         c2:71:a0:2a:21:4e:6c:0b:0f:a6:db:a1:d7:9e:bb:6b:e5:a4:
         94:21:4b:33:f5:5d:35:43:3b:e6:d5:58:68:62:d4:e7:8f:59:
         cf:2a:91:39:9b:50:9a:89:c7:0a:ec:ba:a5:61:a7:46:74:ba:
         85:be:31:0a:e7:d3:48:38:78:63:2c:f8:01:5a:69:75:51:14:
         3a:f0:94:7a:ca:f3:e7:51:92:25:a0:9a:47:0f:42:84:2c:58:
         4f:d4:f1:c8:be:0f:80:a8:60:3f:01:69:18:be:eb:8b:52:ab:
         f3:2d:67:b1:d0:6a:24:9e:7a:8f:0c:ca:4a:c1:36:ad:7d:6d:
         22:74:bd:05:62:c9:4d:ef:63:b1:7f:43:41:9b:54:95:47:9e:
         4d:9c:da:cd
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMjA3Mjcw
OTA2NDJaFw0yMzA3MjEwNDA3MTNaMDMxMTAvBgNVBAMTKDFBMzVENTlFQ0JBMUND
QjlDOUMzRkVERUQxNTMwRjM2Nzk0NkUzMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBUnjdGiN3sxzbB0uNv7whnq4jI2p+A8hKwfsrng+MTqXsSPa1
99Wxo0vpn+2uKUGpAZBFWOCcCOx4OQEQK3lsyeDa9EtXeG/09bCHRL/vmV8xLT8y
tzS6jVZLaSaMUGINk4FBwY7la0akK/MFO7NDpPJjtKBVp8yOooOC6zfGZZMrMbL6
2ZywSiNyTrh9VWjOAAP7GLzKHI70MilAZtrVYowB3GStdxeCfXI1UDn9eGvsJkfI
isETr/kd20vAiXiELouLeqpo+QZV8XJblRX4tze+Gk83+reKxfRfDzy404bPFERz
Ju2f5XYHGU+u7hYvn1Cl3bexFHIzW0cLx5/1AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUGjXVnsuhzLnJw/7e0VMPNnlG4zgwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L0dqWFZuc3VoekxuSndfN2UwVk1QTm5sRzR6Zy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA9zTkwDQYJKoZIhvcNAQELBQADggEBAI2OJ2X1zo5muj2GK8Ve+YwP7dyK
EAszf2IpcpFx+Iur3ghusIqPairOtIv3edXhmZQuzo0By2JtWf9G017pvDjTApeD
t+sDmD99yHtL/ENUHVmH5QZKnmdGVfhxFGye7owOSDPkrZFiZJVEFcJxoCohTmwL
D6bbodeeu2vlpJQhSzP1XTVDO+bVWGhi1OePWc8qkTmbUJqJxwrsuqVhp0Z0uoW+
MQrn00g4eGMs+AFaaXVRFDrwlHrK8+dRkiWgmkcPQoQsWE/U8ci+D4CoYD8BaRi+
64tSq/MtZ7HQaiSeeo8MykrBNq19bSJ0vQViyU3vY7F/Q0GbVJVHnk2c2s0=
-----END CERTIFICATE-----
Generated at Thu Mar 13 01:47:09 2025 by rpki-client