Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/aaIDTIrDSlwjNGGGv8Jbp2ODq2c.roa
File:                     aaIDTIrDSlwjNGGGv8Jbp2ODq2c.roa (raw, json)
Hash identifier:          FEGqxfyQmVGnNtLuRCJK7fu2JdqXkhNOFwh7y8LaEA8=
Subject key identifier:   69:A2:03:4C:8A:C3:4A:5C:23:34:61:86:BF:C2:5B:A7:63:83:AB:67
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       57
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/aaIDTIrDSlwjNGGGv8Jbp2ODq2c.roa
Signing time:             Fri 22 Jul 2022 02:24:22 +0000
ROA not before:           Fri 22 Jul 2022 02:24:22 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        61.87.0.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 02:24:22 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=69A2034C8AC34A5C23346186BFC25BA76383AB67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:36:d0:6b:8f:52:ea:b1:0c:de:1f:90:e7:45:
                    7c:84:6f:5e:10:4e:2d:76:a9:d6:94:52:52:6a:9b:
                    a0:23:40:5a:9a:84:cc:74:04:1d:78:d5:93:e9:a9:
                    1a:4b:a8:1e:3f:96:5d:3b:ad:c0:b8:27:87:b1:1a:
                    b8:5d:13:42:d0:87:d1:90:87:60:22:a6:d9:fb:d4:
                    b6:2e:51:ab:00:8d:c1:47:46:a1:bf:e6:e5:df:19:
                    39:78:8d:9a:56:39:4d:9b:42:91:86:67:c9:cb:16:
                    c7:d0:cc:ca:b8:6b:48:4a:ab:62:a6:3f:3c:83:d7:
                    2b:cf:2b:97:e3:ea:85:50:05:e5:e5:93:f9:39:25:
                    10:f6:d6:92:23:48:27:5f:17:f2:95:0a:51:b4:9c:
                    93:62:0e:46:66:c9:1d:fb:03:45:e9:59:ab:22:52:
                    fe:d7:d4:b7:39:76:cc:32:76:d1:d9:ae:2f:ba:f4:
                    38:62:ef:b6:d6:2b:79:43:4d:db:b7:cc:07:3b:01:
                    15:9a:ea:56:56:cb:4f:25:05:38:19:0a:c6:b5:e5:
                    65:27:41:5b:58:48:6e:68:5b:22:e3:6b:27:8d:9c:
                    09:e3:a6:96:93:de:06:01:79:9b:af:e0:a0:e5:1b:
                    33:f2:ee:61:a3:47:42:e1:53:b4:19:67:a1:43:6e:
                    16:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A2:03:4C:8A:C3:4A:5C:23:34:61:86:BF:C2:5B:A7:63:83:AB:67
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/aaIDTIrDSlwjNGGGv8Jbp2ODq2c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.87.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         45:16:e7:e8:f9:81:2b:ab:8d:80:b4:d3:81:74:7f:a1:df:c2:
         02:73:7f:95:fa:fc:1c:fd:29:20:27:23:a4:11:fa:72:b3:b2:
         97:c7:4e:6f:9e:1c:0f:17:95:54:ff:be:fe:89:44:0e:5d:61:
         1c:3c:54:12:58:f9:8c:c3:82:36:a5:87:a1:fc:16:0a:8e:ef:
         b6:30:42:25:01:54:cb:9d:73:a9:36:86:c8:29:80:03:19:87:
         d2:a5:7f:16:c9:2e:58:4e:4e:9b:63:7d:17:af:47:4c:f3:fd:
         a5:72:e2:23:f3:21:7c:b2:37:3f:dd:17:1c:d1:26:6f:eb:b6:
         33:44:43:6c:67:ff:ee:22:c0:7e:62:21:4f:b8:b4:98:2f:99:
         27:0e:6b:c2:ed:63:76:c5:be:35:cc:7a:2e:35:f6:48:75:6e:
         6b:49:09:ca:14:db:ce:56:b5:b7:50:48:9c:8d:91:6e:f9:01:
         41:80:e2:23:3a:30:8d:37:a6:a7:35:f8:3a:ed:57:c6:5f:1f:
         ff:f3:31:c4:c4:bb:7d:c2:ab:1b:f1:1b:7b:59:fd:19:5c:c0:
         fe:8b:52:62:8a:b7:d2:88:76:47:de:ec:93:71:5b:16:c1:b3:
         77:f9:13:b7:42:d0:c7:f1:66:9b:62:9c:24:6c:9e:02:2b:82:
         79:77:aa:3f
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBVzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRDcx
MjVBRTRDRUFFMTMzNUZFNUQ0MjlBQTAzMENFOTA3MERGMTlDMB4XDTIyMDcyMjAy
MjQyMloXDTIzMDcyMTA0MDcxM1owMzExMC8GA1UEAxMoNjlBMjAzNEM4QUMzNEE1
QzIzMzQ2MTg2QkZDMjVCQTc2MzgzQUI2NzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOw20GuPUuqxDN4fkOdFfIRvXhBOLXap1pRSUmqboCNAWpqEzHQE
HXjVk+mpGkuoHj+WXTutwLgnh7EauF0TQtCH0ZCHYCKm2fvUti5RqwCNwUdGob/m
5d8ZOXiNmlY5TZtCkYZnycsWx9DMyrhrSEqrYqY/PIPXK88rl+PqhVAF5eWT+Tkl
EPbWkiNIJ18X8pUKUbSck2IORmbJHfsDRelZqyJS/tfUtzl2zDJ20dmuL7r0OGLv
ttYreUNN27fMBzsBFZrqVlbLTyUFOBkKxrXlZSdBW1hIbmhbIuNrJ42cCeOmlpPe
BgF5m6/goOUbM/LuYaNHQuFTtBlnoUNuFgsCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRpogNMisNKXCM0YYa/wlunY4OrZzAfBgNVHSMEGDAWgBQNcSWuTOrhM1/l1Cmq
AwzpBw3xnDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzk0L0RYRWxya3pxNFROZjVkUXBxZ01NNlFjTjhady5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0RYRWxya3pxNFROZjVkUXBxZ01NNlFj
Tjhady5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zOTQvYWFJRFRJckRTbHdqTkdHR3Y4SmJwMk9EcTJjLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAz1XADANBgkqhkiG9w0BAQsFAAOCAQEARRbn6PmBK6uNgLTTgXR/od/CAnN/
lfr8HP0pICcjpBH6crOyl8dOb54cDxeVVP++/olEDl1hHDxUElj5jMOCNqWHofwW
Co7vtjBCJQFUy51zqTaGyCmAAxmH0qV/FskuWE5Om2N9F69HTPP9pXLiI/MhfLI3
P90XHNEmb+u2M0RDbGf/7iLAfmIhT7i0mC+ZJw5rwu1jdsW+Ncx6LjX2SHVua0kJ
yhTbzla1t1BInI2RbvkBQYDiIzowjTempzX4Ou1Xxl8f//MxxMS7fcKrG/Ebe1n9
GVzA/otSYoq30oh2R97sk3FbFsGzd/kTt0LQx/Fmm2KcJGyeAiuCeXeqPw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:37 2025 by rpki-client