Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZwUPjzxWshvfuDrPBIEJnPwEeSQ.roa
File:                     ZwUPjzxWshvfuDrPBIEJnPwEeSQ.roa (raw, json)
Hash identifier:          Xg3MU8LEVcflLvr0gfr0LzLL8TYRCCgEZpTSU2UX4zQ=
Subject key identifier:   67:05:0F:8F:3C:56:B2:1B:DF:B8:3A:CF:04:81:09:9C:FC:04:79:24
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0151
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZwUPjzxWshvfuDrPBIEJnPwEeSQ.roa
Signing time:             Fri 07 Jul 2023 04:08:27 +0000
ROA not before:           Fri 07 Jul 2023 04:08:27 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        110.3.192.0/18 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:08:27 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=67050F8F3C56B21BDFB83ACF0481099CFC047924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0a:30:89:69:b5:42:f2:48:b3:85:e1:2a:eb:
                    97:b0:f2:31:d6:4e:03:fb:13:f4:fc:73:f9:ff:03:
                    bb:ac:58:58:77:c3:2c:a7:e0:99:93:1a:f0:91:b7:
                    af:93:34:df:d7:3f:3f:c7:62:6f:4d:e5:d2:7a:25:
                    84:17:b0:e3:ad:dd:7b:be:43:90:50:ba:ac:b4:13:
                    ed:54:c9:5e:a5:63:33:06:f5:17:35:d6:f6:c5:df:
                    b4:8d:b1:91:1c:ca:39:9b:24:54:48:a0:bc:0b:2f:
                    0a:c8:00:9a:7b:b2:42:29:7a:f9:20:e7:83:0a:d0:
                    b7:2e:39:3b:05:42:7b:02:ee:17:bc:17:49:49:46:
                    ad:26:bd:81:f9:0e:02:2c:cf:53:b1:d1:f7:b0:48:
                    c6:e1:9c:7f:53:1a:c8:93:c7:be:fe:98:24:2d:25:
                    81:a0:63:d5:e9:f4:08:89:b7:2b:ff:f2:8e:1f:b0:
                    c4:0e:8f:0b:80:13:20:a7:6b:82:2a:ce:09:2e:11:
                    55:cf:6b:32:68:57:c1:86:cd:98:b3:12:95:21:f3:
                    8e:ea:81:97:bb:cf:8d:54:93:ad:a4:65:8b:2c:76:
                    69:9e:1c:fc:ee:7e:74:9f:4b:75:66:f2:36:d2:d3:
                    0e:ce:d6:f6:26:83:7b:b2:31:23:63:64:d9:d1:24:
                    88:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:05:0F:8F:3C:56:B2:1B:DF:B8:3A:CF:04:81:09:9C:FC:04:79:24
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ZwUPjzxWshvfuDrPBIEJnPwEeSQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.3.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4c:b8:17:2c:83:21:f7:22:4b:ce:f6:24:f6:fb:ef:78:86:d2:
         25:20:f2:c4:06:b7:1d:1e:26:b9:39:59:6d:e9:48:53:e4:c2:
         ee:49:6a:78:47:4d:b4:36:cb:4f:81:1d:fd:3c:60:b8:37:b0:
         34:14:3a:a1:49:d6:d9:62:db:8e:0f:45:27:e3:c3:0a:55:2e:
         60:40:7c:de:55:c9:1d:de:b4:5a:b1:ee:74:6a:15:24:93:04:
         ea:79:50:3e:3a:08:44:4b:61:d8:a4:b0:f4:63:56:48:bc:3b:
         7f:3e:3f:b5:f8:c0:f5:23:c7:23:b7:21:b3:20:95:53:29:bd:
         b8:c0:95:91:8c:4d:62:d0:ea:d9:5e:18:72:b4:23:39:68:90:
         59:76:fb:9c:0b:33:f8:c5:c5:ff:f2:f3:70:53:d4:d6:0a:eb:
         13:ff:e0:d8:f1:92:55:85:fc:e5:6d:c3:ae:e6:eb:21:7e:01:
         9c:b9:20:51:7d:e9:f1:f0:8e:6b:b4:fa:15:2c:7f:a6:8c:74:
         b5:83:e8:a9:d7:20:97:0a:77:f7:55:b6:b8:c3:a9:7c:64:44:
         1b:b5:73:3d:3f:ac:7e:0f:f5:6a:ac:0b:db:9a:18:64:f4:81:
         1a:6c:72:2f:c3:c1:df:dc:0b:7a:a2:21:dc:dc:ef:dc:55:7f:
         f0:01:cb:19
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDA4MjdaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDY3MDUwRjhGM0M1NkIy
MUJERkI4M0FDRjA0ODEwOTlDRkMwNDc5MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDCjCJabVC8kizheEq65ew8jHWTgP7E/T8c/n/A7usWFh3wyyn
4JmTGvCRt6+TNN/XPz/HYm9N5dJ6JYQXsOOt3Xu+Q5BQuqy0E+1UyV6lYzMG9Rc1
1vbF37SNsZEcyjmbJFRIoLwLLwrIAJp7skIpevkg54MK0LcuOTsFQnsC7he8F0lJ
Rq0mvYH5DgIsz1Ox0fewSMbhnH9TGsiTx77+mCQtJYGgY9Xp9AiJtyv/8o4fsMQO
jwuAEyCna4IqzgkuEVXPazJoV8GGzZizEpUh847qgZe7z41Uk62kZYssdmmeHPzu
fnSfS3Vm8jbS0w7O1vYmg3uyMSNjZNnRJIhXAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUZwUPjzxWshvfuDrPBIEJnPwEeSQwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L1p3VVBqenhXc2h2ZnVEclBCSUVKblB3RWVTUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZuA8AwDQYJKoZIhvcNAQELBQADggEBAEy4FyyDIfciS872JPb773iG0iUg
8sQGtx0eJrk5WW3pSFPkwu5JanhHTbQ2y0+BHf08YLg3sDQUOqFJ1tli244PRSfj
wwpVLmBAfN5VyR3etFqx7nRqFSSTBOp5UD46CERLYdiksPRjVki8O38+P7X4wPUj
xyO3IbMglVMpvbjAlZGMTWLQ6tleGHK0IzlokFl2+5wLM/jFxf/y83BT1NYK6xP/
4NjxklWF/OVtw67m6yF+AZy5IFF96fHwjmu0+hUsf6aMdLWD6KnXIJcKd/dVtrjD
qXxkRBu1cz0/rH4P9WqsC9uaGGT0gRpsci/Dwd/cC3qiIdzc79xVf/AByxk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:41 2025 by rpki-client