Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/TAPaMOKTF59LQ821F9N-SSqwj0w.roa
File:                     TAPaMOKTF59LQ821F9N-SSqwj0w.roa (raw, json)
Hash identifier:          HpDG7tWwSGRqguIr9aPuGCmo31wZrUPpFETsbTAUZRM=
Subject key identifier:   4C:03:DA:30:E2:93:17:9F:4B:43:CD:B5:17:D3:7E:49:2A:B0:8F:4C
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01A4
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/TAPaMOKTF59LQ821F9N-SSqwj0w.roa
Signing time:             Fri 07 Jul 2023 04:14:31 +0000
ROA not before:           Fri 07 Jul 2023 04:14:31 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        175.28.52.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:14:31 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=4C03DA30E293179F4B43CDB517D37E492AB08F4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:99:85:db:31:cc:9e:8b:f3:84:60:df:5a:28:
                    2e:0b:90:62:bd:29:d0:82:df:fe:35:e0:23:a4:bc:
                    43:17:f7:b6:78:ff:30:0c:99:5c:59:8d:ec:ae:7f:
                    df:36:dc:35:9b:c4:b2:a2:7e:af:06:ac:eb:b3:59:
                    f1:3d:c4:0c:37:a1:fa:de:34:f2:ef:e0:93:d9:1c:
                    2d:45:a3:85:f7:6e:07:1c:9d:3e:76:1b:cb:65:71:
                    af:f4:4b:ff:68:03:5a:92:40:89:53:e2:24:1b:ee:
                    5e:af:c9:30:1f:9d:20:2c:6e:a2:09:dd:1f:8a:40:
                    d1:a4:6e:e9:ea:f1:c7:49:68:03:fd:26:6e:1b:7a:
                    ca:e5:3b:6e:2b:2f:5d:01:2c:52:9b:4c:66:e1:38:
                    38:9d:01:1d:3b:1d:c3:be:50:94:1b:a2:aa:8d:24:
                    49:28:8f:7e:36:2f:66:33:16:47:71:da:e3:27:06:
                    6e:04:58:eb:21:89:bf:3d:1e:c2:44:71:5a:1d:cc:
                    73:4c:66:77:92:27:79:1f:c4:df:93:4e:c0:62:60:
                    14:cb:8d:92:1b:eb:16:81:e7:fc:d4:74:61:68:d6:
                    71:ac:66:31:f0:c5:93:87:90:a5:f8:5f:79:3d:96:
                    de:ce:61:96:b5:23:83:be:cb:91:71:0d:1f:f8:ce:
                    6a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:03:DA:30:E2:93:17:9F:4B:43:CD:B5:17:D3:7E:49:2A:B0:8F:4C
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/TAPaMOKTF59LQ821F9N-SSqwj0w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.28.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:de:49:e4:c1:c5:75:2b:64:f6:af:52:d1:e4:28:33:1d:08:
         a1:fa:d9:62:0f:01:fa:4f:9e:6a:44:1b:4a:b6:8e:76:03:16:
         2b:3e:5e:63:53:a9:b5:c4:6b:64:20:30:e8:33:bc:5b:ac:2d:
         e9:84:5d:0d:8c:23:58:a6:ff:50:78:91:d7:ca:bf:51:92:32:
         2b:6e:e9:27:41:78:b4:c9:6c:52:8f:5f:ee:9e:1e:63:b3:cb:
         63:e7:0c:7e:d8:15:e3:dc:d8:1b:85:d5:cd:e1:6d:a7:24:24:
         eb:75:e3:6e:8a:f1:ae:e5:84:28:19:f1:3d:9d:d9:08:78:3b:
         41:c2:ee:89:d3:c5:ba:23:4c:bf:4b:d0:27:87:48:40:26:2e:
         b7:e2:78:d5:31:6c:4a:88:ac:8e:2a:ae:ba:bd:8a:06:76:0d:
         cc:2d:f3:91:e8:6c:e4:a3:9e:05:eb:8b:98:d3:98:13:f6:c9:
         81:7c:e8:20:f6:b9:27:22:31:c3:af:17:f6:5b:f1:c7:e0:c8:
         1c:d2:b8:41:c3:65:a5:b3:d5:df:6c:0a:a8:0f:13:18:df:75:
         6c:94:6e:8c:fc:c9:56:00:1e:b8:26:6c:07:1a:b8:4a:bf:ae:
         f3:a8:99:50:ad:c3:bb:93:fa:59:3b:9d:63:11:63:11:05:3c:
         0c:ad:09:1d
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDE0MzFaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDRDMDNEQTMwRTI5MzE3
OUY0QjQzQ0RCNTE3RDM3RTQ5MkFCMDhGNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhmYXbMcyei/OEYN9aKC4LkGK9KdCC3/414COkvEMX97Z4/zAM
mVxZjeyuf9823DWbxLKifq8GrOuzWfE9xAw3ofreNPLv4JPZHC1Fo4X3bgccnT52
G8tlca/0S/9oA1qSQIlT4iQb7l6vyTAfnSAsbqIJ3R+KQNGkbunq8cdJaAP9Jm4b
esrlO24rL10BLFKbTGbhODidAR07HcO+UJQboqqNJEkoj342L2YzFkdx2uMnBm4E
WOshib89HsJEcVodzHNMZneSJ3kfxN+TTsBiYBTLjZIb6xaB5/zUdGFo1nGsZjHw
xZOHkKX4X3k9lt7OYZa1I4O+y5FxDR/4zmpdAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUTAPaMOKTF59LQ821F9N+SSqwj0wwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L1RBUGFNT0tURjU5TFE4MjFGOU4tU1Nxd2owdy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAKvHDQwDQYJKoZIhvcNAQELBQADggEBAJzeSeTBxXUrZPavUtHkKDMdCKH6
2WIPAfpPnmpEG0q2jnYDFis+XmNTqbXEa2QgMOgzvFusLemEXQ2MI1im/1B4kdfK
v1GSMitu6SdBeLTJbFKPX+6eHmOzy2PnDH7YFePc2BuF1c3hbackJOt1426K8a7l
hCgZ8T2d2Qh4O0HC7onTxbojTL9L0CeHSEAmLrfieNUxbEqIrI4qrrq9igZ2Dcwt
85HobOSjngXri5jTmBP2yYF86CD2uSciMcOvF/Zb8cfgyBzSuEHDZaWz1d9sCqgP
ExjfdWyUboz8yVYAHrgmbAcauEq/rvOomVCtw7uT+lk7nWMRYxEFPAytCR0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:14 2025 by rpki-client