Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/TuMwMb3gpiNI5VeH8xyz-JDdk04.roa
File:                     TuMwMb3gpiNI5VeH8xyz-JDdk04.roa (raw, json)
Hash identifier:          pxj2xGQAorm5bV/uyVjAY1fPhQT++M5hpthIT2kRZpo=
Subject key identifier:   4E:E3:30:31:BD:E0:A6:23:48:E5:57:87:F3:1C:B3:F8:90:DD:93:4E
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01B2
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/TuMwMb3gpiNI5VeH8xyz-JDdk04.roa
Signing time:             Fri 07 Jul 2023 04:14:36 +0000
ROA not before:           Fri 07 Jul 2023 04:14:36 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        219.99.96.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:14:36 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=4EE33031BDE0A62348E55787F31CB3F890DD934E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9f:56:1e:11:2a:ff:2a:1a:92:d6:b6:6f:5c:
                    a7:02:e8:67:c9:05:50:20:88:7b:ba:c9:66:bf:b3:
                    c4:52:1f:d8:32:0a:8b:c5:49:93:3f:c5:f9:12:d1:
                    5d:2d:29:ce:60:b3:45:31:09:12:b9:c9:2f:85:81:
                    96:8e:30:c9:3d:c3:a9:44:b9:98:8e:60:ca:cf:d9:
                    89:f2:08:30:c6:13:cd:27:c8:eb:22:0e:9b:fe:87:
                    91:40:f2:a0:8d:01:d6:32:ff:d7:46:dc:fb:c2:28:
                    c0:08:5a:9b:c2:cc:8f:c8:00:44:fc:a2:43:02:ee:
                    1c:2b:35:ca:8c:39:42:6c:58:22:df:4e:19:35:9a:
                    d8:c8:50:ad:3f:07:9a:16:26:81:5e:c0:d7:66:fc:
                    9a:70:ba:03:b7:eb:f4:2f:ae:b1:b4:30:b7:37:63:
                    6b:31:e6:2f:e5:9e:fa:91:62:02:bc:cc:8e:10:0e:
                    c4:0d:17:06:72:cb:f2:96:db:47:b5:a8:3e:11:2e:
                    47:78:bc:e3:9e:48:0a:db:0e:a2:25:79:ac:e1:a7:
                    30:ab:39:95:9a:f5:d4:66:64:6f:38:cb:e5:60:e5:
                    dc:f1:1f:ae:d7:63:b8:94:f7:c5:d5:1a:3b:59:47:
                    1a:ee:7b:38:2e:84:54:da:c0:c6:a7:b4:12:c1:66:
                    51:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E3:30:31:BD:E0:A6:23:48:E5:57:87:F3:1C:B3:F8:90:DD:93:4E
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/TuMwMb3gpiNI5VeH8xyz-JDdk04.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.99.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         23:ff:9c:ca:f5:d1:2c:b0:af:48:ca:a3:1c:26:e4:d8:59:4b:
         4e:f9:3c:5a:60:b2:ef:ca:fd:93:09:f7:ca:77:24:d2:33:03:
         fb:2e:56:e2:ea:3c:e0:6d:56:43:d4:56:3c:cb:9c:eb:b9:ed:
         5f:10:e2:95:49:f1:bf:c8:ac:b5:c5:c7:9f:ce:99:58:cd:0d:
         e2:83:c7:05:5f:a6:92:1c:4e:44:9b:75:3b:96:d1:01:ee:6a:
         92:d2:62:7d:d4:75:49:23:83:bc:fe:48:95:1f:dd:73:a0:88:
         0c:ba:e8:05:e3:b6:33:a6:00:de:84:3b:4b:c4:e6:19:ac:37:
         05:81:e2:9f:7d:29:df:d2:b3:88:e7:8d:aa:66:33:7d:cb:21:
         27:98:a2:e1:23:54:1b:5f:bf:48:aa:4b:8d:c3:66:bd:28:34:
         45:9d:16:88:a5:07:c9:e7:39:63:ce:a6:01:f8:6c:eb:eb:fb:
         56:05:5c:85:5f:19:80:6b:2c:42:8b:9d:26:ea:f8:eb:18:c2:
         4e:73:5e:4b:fe:0e:40:fd:f0:25:f7:03:66:32:ea:bb:e9:2b:
         c1:31:7f:2f:bb:b4:97:9c:d4:6b:5f:23:a2:a0:e9:04:e8:b2:
         54:64:10:39:b8:78:ab:00:4d:3f:7f:49:73:e6:ce:cb:16:7c:
         0f:03:3e:8f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDE0MzZaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDRFRTMzMDMxQkRFMEE2
MjM0OEU1NTc4N0YzMUNCM0Y4OTBERDkzNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCen1YeESr/KhqS1rZvXKcC6GfJBVAgiHu6yWa/s8RSH9gyCovF
SZM/xfkS0V0tKc5gs0UxCRK5yS+FgZaOMMk9w6lEuZiOYMrP2YnyCDDGE80nyOsi
Dpv+h5FA8qCNAdYy/9dG3PvCKMAIWpvCzI/IAET8okMC7hwrNcqMOUJsWCLfThk1
mtjIUK0/B5oWJoFewNdm/JpwugO36/QvrrG0MLc3Y2sx5i/lnvqRYgK8zI4QDsQN
FwZyy/KW20e1qD4RLkd4vOOeSArbDqIleazhpzCrOZWa9dRmZG84y+Vg5dzxH67X
Y7iU98XVGjtZRxruezguhFTawMantBLBZlHvAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUTuMwMb3gpiNI5VeH8xyz+JDdk04wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L1R1TXdNYjNncGlOSTVWZUg4eHl6LUpEZGswNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXbY2AwDQYJKoZIhvcNAQELBQADggEBACP/nMr10Sywr0jKoxwm5NhZS075
PFpgsu/K/ZMJ98p3JNIzA/suVuLqPOBtVkPUVjzLnOu57V8Q4pVJ8b/IrLXFx5/O
mVjNDeKDxwVfppIcTkSbdTuW0QHuapLSYn3UdUkjg7z+SJUf3XOgiAy66AXjtjOm
AN6EO0vE5hmsNwWB4p99Kd/Ss4jnjapmM33LISeYouEjVBtfv0iqS43DZr0oNEWd
FoilB8nnOWPOpgH4bOvr+1YFXIVfGYBrLEKLnSbq+OsYwk5zXkv+DkD98CX3A2Yy
6rvpK8Exfy+7tJec1GtfI6Kg6QToslRkEDm4eKsATT9/SXPmzssWfA8DPo8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:17 2025 by rpki-client