Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ebZUIpNCTwRrJD74jWj3UwIuZpg.roa
File:                     ebZUIpNCTwRrJD74jWj3UwIuZpg.roa (raw, json)
Hash identifier:          Ds42JWR4fgtV2TKo+mLN6RDvHSS9Jv+FjtyNRdTN3IM=
Subject key identifier:   79:B6:54:22:93:42:4F:04:6B:24:3E:F8:8D:68:F7:53:02:2E:66:98
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0168
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ebZUIpNCTwRrJD74jWj3UwIuZpg.roa
Signing time:             Fri 07 Jul 2023 04:10:36 +0000
ROA not before:           Fri 07 Jul 2023 04:10:36 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        59.156.160.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:10:36 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=79B6542293424F046B243EF88D68F753022E6698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b9:d7:b2:5f:94:4c:3c:ef:c4:8c:8c:07:51:
                    65:c6:db:4c:05:98:0d:80:70:bd:69:97:cf:d3:68:
                    71:5c:0e:4f:20:40:0c:1e:5e:1f:4d:26:3f:7f:65:
                    ff:7a:5c:ca:2f:7e:c2:f2:4c:92:ed:86:d8:ec:27:
                    1e:21:6a:f0:d0:86:83:94:9a:8e:e6:94:3e:70:f5:
                    6c:07:b7:d9:e8:23:e4:d8:0c:b6:f6:9b:6e:d0:71:
                    82:c1:50:50:85:52:e4:1a:55:d5:9c:3f:de:48:e5:
                    6b:fe:76:d2:2b:6c:b7:1e:20:de:8d:24:80:2f:00:
                    b6:85:b6:ad:2a:57:44:02:dc:61:dc:a1:0b:87:55:
                    01:6e:a7:b7:7e:67:63:40:cd:f1:44:81:4b:c5:63:
                    22:9c:56:12:58:e0:e2:11:6e:9a:23:27:a0:57:fb:
                    d6:03:81:e6:ec:be:88:a6:fa:40:8f:69:4f:33:9b:
                    8e:fe:47:1b:26:3f:01:49:49:78:3c:5f:4f:33:e3:
                    bc:19:35:3e:1d:cb:4b:90:5f:75:45:8e:26:ae:a2:
                    da:45:77:f2:6c:95:c9:53:b4:11:8c:42:ce:84:e0:
                    ee:8f:5a:4f:56:7e:a2:eb:4d:dc:76:79:18:d2:b3:
                    35:da:85:dc:16:49:3a:a1:42:44:73:aa:e9:0e:db:
                    ad:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B6:54:22:93:42:4F:04:6B:24:3E:F8:8D:68:F7:53:02:2E:66:98
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ebZUIpNCTwRrJD74jWj3UwIuZpg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.156.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1a:a0:d3:ea:6a:7c:1f:fc:7a:de:ab:f7:d3:82:94:8e:df:e5:
         20:5a:c1:1d:27:df:68:96:34:60:94:27:75:f7:25:42:ec:47:
         ee:bf:67:b1:5b:29:67:d5:3b:b6:9d:b3:01:e1:e6:b4:0f:51:
         98:d3:1f:43:4a:d3:cb:95:21:1d:98:ac:f4:ea:d5:8b:2a:98:
         e0:7c:84:0b:c6:27:af:6b:ee:d9:68:43:47:52:f0:24:81:91:
         80:e8:6b:a3:fe:7b:a7:8d:44:ca:4f:f2:b8:89:02:f1:b3:09:
         e9:24:8b:0d:e5:a0:bf:95:38:14:0e:7c:65:83:33:0f:93:ea:
         45:85:85:1f:2e:67:18:75:eb:4b:f0:00:df:81:80:b1:73:36:
         d7:fa:ab:4a:a2:87:d3:f3:f9:22:31:e4:13:fd:78:3a:78:62:
         e6:1e:82:a1:4f:a9:d3:ee:54:e1:63:aa:d0:7c:b8:1b:78:dd:
         04:51:e1:39:78:a4:f9:57:7e:09:a8:10:0a:47:3e:1d:96:65:
         c0:50:bf:27:a5:c3:bb:eb:18:c9:b7:9d:11:11:15:49:72:66:
         23:35:6e:bf:e6:a0:ce:45:fb:9a:60:d4:73:e1:43:53:49:6d:
         a6:03:59:57:1d:da:a4:74:04:f1:fd:f6:b2:3d:ef:0e:29:a8:
         70:ba:b2:79
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDEwMzZaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDc5QjY1NDIyOTM0MjRG
MDQ2QjI0M0VGODhENjhGNzUzMDIyRTY2OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyudeyX5RMPO/EjIwHUWXG20wFmA2AcL1pl8/TaHFcDk8gQAwe
Xh9NJj9/Zf96XMovfsLyTJLthtjsJx4havDQhoOUmo7mlD5w9WwHt9noI+TYDLb2
m27QcYLBUFCFUuQaVdWcP95I5Wv+dtIrbLceIN6NJIAvALaFtq0qV0QC3GHcoQuH
VQFup7d+Z2NAzfFEgUvFYyKcVhJY4OIRbpojJ6BX+9YDgebsvoim+kCPaU8zm47+
RxsmPwFJSXg8X08z47wZNT4dy0uQX3VFjiauotpFd/JslclTtBGMQs6E4O6PWk9W
fqLrTdx2eRjSszXahdwWSTqhQkRzqukO263nAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUebZUIpNCTwRrJD74jWj3UwIuZpgwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L2ViWlVJcE5DVHdSckpENzRqV2ozVXdJdVpwZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAU7nKAwDQYJKoZIhvcNAQELBQADggEBABqg0+pqfB/8et6r99OClI7f5SBa
wR0n32iWNGCUJ3X3JULsR+6/Z7FbKWfVO7adswHh5rQPUZjTH0NK08uVIR2YrPTq
1YsqmOB8hAvGJ69r7tloQ0dS8CSBkYDoa6P+e6eNRMpP8riJAvGzCekkiw3loL+V
OBQOfGWDMw+T6kWFhR8uZxh160vwAN+BgLFzNtf6q0qih9Pz+SIx5BP9eDp4YuYe
gqFPqdPuVOFjqtB8uBt43QRR4Tl4pPlXfgmoEApHPh2WZcBQvyelw7vrGMm3nRER
FUlyZiM1br/moM5F+5pg1HPhQ1NJbaYDWVcd2qR0BPH99rI97w4pqHC6snk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:22 2025 by rpki-client