Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/UuPjWn9YduYWTqs6Vzljys0dXiU.roa
File:                     UuPjWn9YduYWTqs6Vzljys0dXiU.roa (raw, json)
Hash identifier:          UG49biLIUiK8EJGw2NgnXgNJw/tznhTE00aJr6BziFg=
Subject key identifier:   52:E3:E3:5A:7F:58:76:E6:16:4E:AB:3A:57:39:63:CA:CD:1D:5E:25
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01AB
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/UuPjWn9YduYWTqs6Vzljys0dXiU.roa
Signing time:             Fri 07 Jul 2023 04:14:33 +0000
ROA not before:           Fri 07 Jul 2023 04:14:33 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        220.150.24.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:14:33 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=52E3E35A7F5876E6164EAB3A573963CACD1D5E25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d1:64:6c:a9:d4:94:50:5b:4a:07:be:a9:4b:
                    9f:db:4f:41:7a:80:d0:d3:50:d7:99:6c:c9:ca:72:
                    12:16:c6:68:ff:ea:f2:c1:63:bc:a4:09:7a:90:c2:
                    3a:c5:c1:0d:0d:cc:dd:85:f2:25:c7:a1:0f:f0:23:
                    da:8e:9b:2d:fd:cc:97:64:5d:dc:e9:3d:e2:90:39:
                    b6:dc:3b:ac:29:ed:7d:fb:0f:cc:02:f4:ed:12:03:
                    6a:8b:47:0b:37:df:7b:4f:4f:1b:74:a9:ce:6d:5b:
                    4a:30:07:f6:e8:2e:24:a1:b7:6d:cd:ae:cd:d4:7b:
                    62:49:2e:3f:63:ee:36:35:a8:10:3d:5e:34:6e:7e:
                    1f:1a:b2:60:ba:79:6b:4a:28:7d:61:f5:b2:7b:c0:
                    75:c6:25:75:58:8b:98:df:22:e3:49:17:79:9b:63:
                    66:2b:97:38:a0:8e:ed:4d:4d:4c:7c:96:18:74:6f:
                    85:3c:f1:cb:7d:be:c1:d6:25:c8:e1:5e:81:5a:42:
                    25:bd:53:fe:80:78:ca:0f:c0:fd:50:ea:56:64:aa:
                    cf:cb:a0:9f:a0:5c:64:8e:fe:15:cd:a1:54:78:d8:
                    3f:95:3b:8d:5b:75:ba:8a:fd:24:7d:6d:12:9e:40:
                    b0:91:7f:70:c4:79:a4:35:ba:0d:d5:8b:17:ae:f2:
                    92:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E3:E3:5A:7F:58:76:E6:16:4E:AB:3A:57:39:63:CA:CD:1D:5E:25
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/UuPjWn9YduYWTqs6Vzljys0dXiU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         87:69:22:35:0f:b4:47:5e:ee:88:bc:bd:07:01:9a:37:a6:84:
         96:9f:15:c9:25:5a:3c:70:ad:4b:10:00:e1:55:3e:ae:af:2e:
         0a:81:7e:79:16:c3:a0:a1:51:fc:4d:ee:a6:89:06:d0:6e:7d:
         6c:6c:96:9b:62:de:42:9d:e8:38:70:07:1b:28:09:38:31:6d:
         b2:b6:d4:f4:90:fc:4c:e0:62:0a:97:7d:f3:7c:29:22:e2:79:
         36:86:18:bc:f4:8f:10:58:71:64:0b:5d:c1:c5:82:95:3d:be:
         16:ad:90:74:a4:f6:04:af:26:a4:28:3d:02:21:9c:d3:00:22:
         97:1a:66:a6:01:56:31:be:24:b5:f1:2d:a2:f3:30:0b:e0:24:
         cc:5e:8e:53:ac:56:6e:6a:7d:e7:53:a8:d4:84:36:9a:27:8f:
         2f:66:c6:89:47:ae:16:54:56:31:36:cb:0f:65:82:81:3d:97:
         d2:f2:74:56:20:19:8a:3c:44:49:16:47:e5:95:c8:34:77:c1:
         5a:c9:4f:64:94:63:a7:8e:3b:a5:56:a6:c5:6d:33:dc:9f:97:
         44:43:4f:6f:cb:fa:82:c4:ab:b0:d4:45:fd:f6:46:57:63:2f:
         0f:c5:29:67:69:85:f1:0e:66:1c:08:c6:d7:3c:e0:59:47:19:
         83:0b:87:3f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAaswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDE0MzNaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDUyRTNFMzVBN0Y1ODc2
RTYxNjRFQUIzQTU3Mzk2M0NBQ0QxRDVFMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC00WRsqdSUUFtKB76pS5/bT0F6gNDTUNeZbMnKchIWxmj/6vLB
Y7ykCXqQwjrFwQ0NzN2F8iXHoQ/wI9qOmy39zJdkXdzpPeKQObbcO6wp7X37D8wC
9O0SA2qLRws333tPTxt0qc5tW0owB/boLiSht23Nrs3Ue2JJLj9j7jY1qBA9XjRu
fh8asmC6eWtKKH1h9bJ7wHXGJXVYi5jfIuNJF3mbY2Yrlzigju1NTUx8lhh0b4U8
8ct9vsHWJcjhXoFaQiW9U/6AeMoPwP1Q6lZkqs/LoJ+gXGSO/hXNoVR42D+VO41b
dbqK/SR9bRKeQLCRf3DEeaQ1ug3Vixeu8pJfAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUUuPjWn9YduYWTqs6Vzljys0dXiUwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L1V1UGpXbjlZZHVZV1RxczZWemxqeXMwZFhpVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAPclhgwDQYJKoZIhvcNAQELBQADggEBAIdpIjUPtEde7oi8vQcBmjemhJaf
FcklWjxwrUsQAOFVPq6vLgqBfnkWw6ChUfxN7qaJBtBufWxslpti3kKd6DhwBxso
CTgxbbK21PSQ/EzgYgqXffN8KSLieTaGGLz0jxBYcWQLXcHFgpU9vhatkHSk9gSv
JqQoPQIhnNMAIpcaZqYBVjG+JLXxLaLzMAvgJMxejlOsVm5qfedTqNSENponjy9m
xolHrhZUVjE2yw9lgoE9l9LydFYgGYo8REkWR+WVyDR3wVrJT2SUY6eOO6VWpsVt
M9yfl0RDT2/L+oLEq7DURf32RldjLw/FKWdphfEOZhwIxtc84FlHGYMLhz8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:41 2025 by rpki-client