Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/RBbQaufIWEfOKgMx4zTsx719AY0.roa
File:                     RBbQaufIWEfOKgMx4zTsx719AY0.roa (raw, json)
Hash identifier:          1VjBhRK7Dkd/b73MBudtTPSMXsHOvR8zdvRMTe5WCZc=
Subject key identifier:   44:16:D0:6A:E7:C8:58:47:CE:2A:03:31:E3:34:EC:C7:BD:7D:01:8D
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0180
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/RBbQaufIWEfOKgMx4zTsx719AY0.roa
Signing time:             Fri 07 Jul 2023 04:12:30 +0000
ROA not before:           Fri 07 Jul 2023 04:12:30 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        61.44.68.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:12:30 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=4416D06AE7C85847CE2A0331E334ECC7BD7D018D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4b:69:79:db:73:2d:9f:96:c9:3c:49:1c:b9:
                    83:5a:60:a5:dd:53:23:c5:28:c1:74:c3:64:be:50:
                    4c:bb:aa:10:bc:57:ed:34:16:9c:9c:46:d5:00:e6:
                    ff:1f:7f:67:4a:a1:47:e5:62:6d:fb:63:96:cb:e5:
                    49:c7:8b:54:66:30:b1:fd:47:c7:20:23:d8:31:13:
                    fe:0d:b4:8c:a6:2e:98:33:d9:b9:49:00:b3:03:37:
                    c6:c6:65:7d:11:91:6d:39:e4:bb:f2:84:02:70:37:
                    e9:e8:76:b2:87:3f:4a:d1:bd:b6:7e:03:17:fd:ef:
                    ef:95:dd:6a:1f:a6:0a:f9:b0:8d:b9:0b:c3:26:0a:
                    19:32:ed:46:7b:5e:9e:3e:e9:b7:0c:84:69:12:89:
                    ec:69:65:86:92:c5:92:24:0e:0a:38:48:40:55:39:
                    51:aa:84:ea:23:56:b3:2d:7d:9f:29:a6:98:e9:4e:
                    a9:3a:ac:e1:36:91:bb:7e:1c:fe:74:05:1c:c4:18:
                    83:08:89:84:84:93:e6:4d:c0:28:89:1d:21:b0:68:
                    0a:af:30:1c:8e:97:a2:98:0e:48:2f:5d:95:44:08:
                    70:b5:bb:63:4d:f4:6e:44:a5:73:ab:ca:e8:23:15:
                    45:28:e3:4c:67:6b:fe:78:d5:7f:24:0c:81:24:9f:
                    e3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:16:D0:6A:E7:C8:58:47:CE:2A:03:31:E3:34:EC:C7:BD:7D:01:8D
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/RBbQaufIWEfOKgMx4zTsx719AY0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.44.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:72:d8:2f:b8:b1:32:b8:26:3a:f8:7f:6d:96:76:be:62:8d:
         4b:5c:fd:5b:ee:b2:74:c5:4c:fe:cf:45:de:ed:63:03:ee:6f:
         67:72:7d:a6:a9:5e:ab:fb:b0:71:0b:e4:8f:63:92:50:0d:5e:
         a6:da:86:44:95:e3:a1:9f:0b:a7:e7:a9:db:2d:27:05:2e:d6:
         62:5f:7c:c8:e9:52:b4:54:28:45:0a:1d:ee:86:7e:84:e2:f5:
         53:12:1b:9d:d0:5a:f3:a1:58:54:3c:40:b2:94:87:67:6a:a8:
         a0:dc:38:47:2e:f1:6c:5e:1c:b7:d5:0d:4b:ec:5a:b2:3a:13:
         a1:ad:4e:b6:a4:1b:ba:1e:54:09:ea:f7:23:80:b7:49:a5:99:
         93:1c:9c:b6:21:90:27:28:e9:04:83:51:e1:a9:2b:59:2e:c2:
         e2:61:08:09:99:77:21:37:a5:de:ee:2c:c2:06:28:0b:bd:fc:
         96:c5:11:0e:ca:e9:21:af:68:59:74:07:1c:9a:fb:53:c9:17:
         6e:a6:f3:76:1f:2e:e9:fd:93:02:59:13:0d:f9:d4:e0:84:39:
         89:c9:ab:fa:72:1b:0d:68:0d:c1:25:84:24:70:97:15:c9:29:
         0b:5e:07:f1:23:fb:63:60:81:bd:07:cd:5b:c6:2d:5a:4c:aa:
         df:84:47:0f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDEyMzBaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDQ0MTZEMDZBRTdDODU4
NDdDRTJBMDMzMUUzMzRFQ0M3QkQ3RDAxOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7S2l523Mtn5bJPEkcuYNaYKXdUyPFKMF0w2S+UEy7qhC8V+00
FpycRtUA5v8ff2dKoUflYm37Y5bL5UnHi1RmMLH9R8cgI9gxE/4NtIymLpgz2blJ
ALMDN8bGZX0RkW055LvyhAJwN+nodrKHP0rRvbZ+Axf97++V3Wofpgr5sI25C8Mm
Chky7UZ7Xp4+6bcMhGkSiexpZYaSxZIkDgo4SEBVOVGqhOojVrMtfZ8pppjpTqk6
rOE2kbt+HP50BRzEGIMIiYSEk+ZNwCiJHSGwaAqvMByOl6KYDkgvXZVECHC1u2NN
9G5EpXOryugjFUUo40xna/541X8kDIEkn+NlAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQURBbQaufIWEfOKgMx4zTsx719AY0wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L1JCYlFhdWZJV0VmT0tnTXg0elRzeDcxOUFZMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAI9LEQwDQYJKoZIhvcNAQELBQADggEBAHhy2C+4sTK4Jjr4f22Wdr5ijUtc
/VvusnTFTP7PRd7tYwPub2dyfaapXqv7sHEL5I9jklANXqbahkSV46GfC6fnqdst
JwUu1mJffMjpUrRUKEUKHe6GfoTi9VMSG53QWvOhWFQ8QLKUh2dqqKDcOEcu8Wxe
HLfVDUvsWrI6E6GtTrakG7oeVAnq9yOAt0mlmZMcnLYhkCco6QSDUeGpK1kuwuJh
CAmZdyE3pd7uLMIGKAu9/JbFEQ7K6SGvaFl0Bxya+1PJF26m83YfLun9kwJZEw35
1OCEOYnJq/pyGw1oDcElhCRwlxXJKQteB/Ej+2Nggb0HzVvGLVpMqt+ERw8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:47 2025 by rpki-client