Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/KnVQ4Q79-WpHv7pIbKarl7RImy8.roa
File:                     KnVQ4Q79-WpHv7pIbKarl7RImy8.roa (raw, json)
Hash identifier:          WijOffUJfJSPrLOv6ThvSwVvVKseY5opsljml54cvvY=
Subject key identifier:   2A:75:50:E1:0E:FD:F9:6A:47:BF:BA:48:6C:A6:AB:97:B4:48:9B:2F
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       D8
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/KnVQ4Q79-WpHv7pIbKarl7RImy8.roa
Signing time:             Thu 28 Jul 2022 05:37:49 +0000
ROA not before:           Thu 28 Jul 2022 05:37:49 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        182.163.32.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 28 05:37:49 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=2A7550E10EFDF96A47BFBA486CA6AB97B4489B2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:87:51:c6:0b:51:48:97:7a:e2:42:ce:0f:bc:
                    f3:78:7a:ac:58:09:ef:88:bb:0f:85:c5:7a:5e:65:
                    53:21:49:8b:1a:6b:b4:7d:8b:cc:a6:f0:ff:33:8b:
                    45:d5:d5:d3:37:f9:59:52:57:76:4d:92:f3:19:c6:
                    c1:20:cf:fe:98:d5:24:0b:36:c4:d3:51:00:0e:77:
                    5a:d4:87:bb:96:36:ec:be:b5:31:e6:dd:3a:74:e4:
                    af:da:ae:33:a8:fc:fd:b0:ac:dc:a8:5b:96:a9:39:
                    fa:e7:c3:2f:99:02:c8:6b:04:0a:e0:c9:c0:cb:e1:
                    e7:33:38:2f:64:29:d0:59:2f:f8:30:1f:0f:6d:38:
                    25:81:63:99:6c:a3:67:ff:56:91:24:0e:3f:ca:f6:
                    f9:b6:36:cb:da:bb:bb:d1:ae:7c:30:01:d2:fe:79:
                    db:d3:3a:28:96:d9:e3:7d:b9:16:eb:38:2d:fd:6d:
                    65:e7:6a:5d:1b:8d:4f:ce:8b:5d:ad:2b:d7:92:05:
                    c2:32:3c:6e:24:d8:03:6c:10:2d:56:22:6c:c5:2c:
                    fc:55:e7:7e:e6:41:c6:3b:a0:ba:bc:df:b7:62:b5:
                    57:f1:91:70:77:0b:d0:98:bb:f5:2a:d5:a8:1d:cc:
                    b8:d8:00:e3:88:c8:a7:ce:4f:0c:da:30:3b:3a:cf:
                    9c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:75:50:E1:0E:FD:F9:6A:47:BF:BA:48:6C:A6:AB:97:B4:48:9B:2F
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/KnVQ4Q79-WpHv7pIbKarl7RImy8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.163.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6e:f5:1e:4c:bc:c3:a7:b6:e9:d3:10:cf:6c:43:ed:d7:15:3b:
         2f:4d:9c:d8:12:f7:c0:a1:99:bf:40:7f:6f:8a:40:e6:c4:12:
         67:c8:43:5d:0f:eb:6f:af:d5:8b:5c:66:95:35:a9:29:f3:93:
         38:1b:9e:a5:f0:da:c5:6b:06:6a:09:e5:82:59:26:de:8e:92:
         74:36:f2:51:ed:eb:8e:0e:c8:08:fe:f9:bd:85:a0:7c:05:61:
         6b:a8:f4:8c:d8:ba:04:a5:aa:eb:ac:f3:0c:4c:c4:1e:06:e7:
         4f:d4:e1:49:d3:cf:8c:41:2d:79:a3:f3:83:44:db:f3:f9:2f:
         99:9b:fd:d2:ce:03:2e:e7:ad:a8:06:20:28:92:ab:58:43:4e:
         2f:6c:3f:65:f0:32:75:d6:29:3f:94:6c:f3:9b:0e:d0:da:d9:
         d0:42:25:06:eb:d3:07:d6:ed:3d:80:71:eb:4c:f0:68:86:73:
         7c:ae:99:b2:66:01:94:5f:88:25:5f:6d:42:54:84:68:02:dc:
         53:d5:2f:bc:ca:e9:be:59:02:52:03:c4:d3:10:24:4e:97:d7:
         a8:06:89:60:a6:e6:b2:12:e2:15:c5:e1:a1:45:a5:dd:30:29:
         2f:72:2d:41:45:19:8e:1c:b8:eb:11:a1:fe:f8:f5:db:7c:7f:
         86:f2:42:df
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICANgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMjA3Mjgw
NTM3NDlaFw0yMzA3MjEwNDA3MTNaMDMxMTAvBgNVBAMTKDJBNzU1MEUxMEVGREY5
NkE0N0JGQkE0ODZDQTZBQjk3QjQ0ODlCMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGh1HGC1FIl3riQs4PvPN4eqxYCe+Iuw+FxXpeZVMhSYsaa7R9
i8ym8P8zi0XV1dM3+VlSV3ZNkvMZxsEgz/6Y1SQLNsTTUQAOd1rUh7uWNuy+tTHm
3Tp05K/arjOo/P2wrNyoW5apOfrnwy+ZAshrBArgycDL4eczOC9kKdBZL/gwHw9t
OCWBY5lso2f/VpEkDj/K9vm2Nsvau7vRrnwwAdL+edvTOiiW2eN9uRbrOC39bWXn
al0bjU/Oi12tK9eSBcIyPG4k2ANsEC1WImzFLPxV537mQcY7oLq837ditVfxkXB3
C9CYu/Uq1agdzLjYAOOIyKfOTwzaMDs6z5wtAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUKnVQ4Q79+WpHv7pIbKarl7RImy8wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L0tuVlE0UTc5LVdwSHY3cEliS2FybDdSSW15OC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAW2oyAwDQYJKoZIhvcNAQELBQADggEBAG71Hky8w6e26dMQz2xD7dcVOy9N
nNgS98Chmb9Af2+KQObEEmfIQ10P62+v1YtcZpU1qSnzkzgbnqXw2sVrBmoJ5YJZ
Jt6OknQ28lHt644OyAj++b2FoHwFYWuo9IzYugSlquus8wxMxB4G50/U4UnTz4xB
LXmj84NE2/P5L5mb/dLOAy7nragGICiSq1hDTi9sP2XwMnXWKT+UbPObDtDa2dBC
JQbr0wfW7T2AcetM8GiGc3yumbJmAZRfiCVfbUJUhGgC3FPVL7zK6b5ZAlIDxNMQ
JE6X16gGiWCm5rIS4hXF4aFFpd0wKS9yLUFFGY4cuOsRof749dt8f4byQt8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:52 2025 by rpki-client