Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/jIQxB-WChTTgo4r8KvnqjY5nCGo.roa
File:                     jIQxB-WChTTgo4r8KvnqjY5nCGo.roa (raw, json)
Hash identifier:          g5bMJksWnvAsAOMa7XsiboRdyHoyIzXXeL7jwWSL55k=
Subject key identifier:   8C:84:31:07:E5:82:85:34:E0:A3:8A:FC:2A:F9:EA:8D:8E:67:08:6A
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       32
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/jIQxB-WChTTgo4r8KvnqjY5nCGo.roa
Signing time:             Fri 22 Jul 2022 00:23:51 +0000
ROA not before:           Fri 22 Jul 2022 00:23:51 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        36.54.32.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 00:23:51 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=8C843107E5828534E0A38AFC2AF9EA8D8E67086A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:28:17:3b:78:f4:61:5f:59:b2:8f:58:34:9a:
                    43:cd:3b:e7:5e:e2:8f:e7:86:93:f8:d2:fe:bf:33:
                    45:ea:49:96:5a:10:a4:86:2b:e8:55:18:fb:8a:fa:
                    bc:a8:bc:ce:62:2b:04:ab:27:9e:4b:56:7e:6c:09:
                    3f:8b:26:ff:5c:7c:24:22:67:d3:25:3e:2d:7d:ce:
                    3c:6c:7b:ca:65:1b:b3:1e:fb:11:a0:f2:ed:6a:43:
                    48:f7:34:59:90:a5:8b:f4:c0:b6:84:8e:a3:95:7f:
                    fa:91:66:ae:62:19:cc:3d:6c:f4:90:f4:37:15:b2:
                    4e:b6:94:c9:62:19:91:33:9e:1c:df:a9:5b:50:9c:
                    d6:7f:6d:f1:13:f7:5a:25:35:e9:ca:be:c7:4c:37:
                    2d:1f:45:75:5f:7e:b9:ee:ab:65:7f:47:d7:57:d7:
                    36:b2:0d:dd:54:ec:e1:ce:17:d4:a8:2c:ff:c1:f5:
                    c4:fb:e4:1c:55:42:0e:1d:af:d3:c9:20:e8:1e:3f:
                    dc:a5:89:4c:de:ce:4e:41:85:51:d7:81:e6:93:84:
                    77:d8:76:81:f5:95:31:54:e4:e4:52:fc:29:fb:47:
                    03:ac:3c:47:d6:15:f3:18:9e:a6:1d:38:ea:5f:92:
                    b7:0b:20:83:82:54:84:e4:27:c3:d9:45:13:bc:ee:
                    aa:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:84:31:07:E5:82:85:34:E0:A3:8A:FC:2A:F9:EA:8D:8E:67:08:6A
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/jIQxB-WChTTgo4r8KvnqjY5nCGo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.54.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3b:99:94:f1:81:c7:0e:95:d9:27:a0:d6:ac:4e:01:bc:87:63:
         d3:7f:19:98:e2:18:2f:d2:af:16:71:87:24:66:61:c3:e3:4b:
         cb:60:35:1e:dd:30:43:8c:8d:9f:1c:d8:3a:eb:58:aa:11:75:
         50:a9:a5:7c:f6:47:28:37:16:d5:89:e7:80:6a:79:25:5b:1e:
         fe:73:7d:35:25:6e:8a:95:cf:c9:0b:db:fd:f0:b4:93:69:bd:
         e1:bd:4f:4e:f2:32:95:84:5a:2b:64:f5:8f:9d:99:84:a4:45:
         15:33:96:19:27:35:4e:55:4c:ae:b8:f7:b4:c8:79:4d:33:7e:
         08:5e:ad:8b:21:52:7b:a5:5e:86:11:f6:ed:56:20:97:03:14:
         d1:03:79:18:c9:f0:7c:c1:11:0b:f1:04:a0:c8:b4:bc:ee:be:
         84:df:7d:36:ea:ef:de:c4:60:42:b6:e4:b4:a6:96:90:e1:d8:
         b0:87:ce:5a:7a:f0:31:a6:03:12:dc:fa:6a:d4:13:0a:90:60:
         26:c9:78:80:19:89:d6:a7:ff:4f:a0:5a:9d:3e:84:83:ff:84:
         24:45:22:c6:07:5a:0c:b3:76:48:63:7a:cf:3d:56:8d:42:ec:
         fd:7a:89:55:b5:6c:4e:11:88:ad:91:1f:5f:6a:67:db:8f:29:
         e8:62:01:36
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRDcx
MjVBRTRDRUFFMTMzNUZFNUQ0MjlBQTAzMENFOTA3MERGMTlDMB4XDTIyMDcyMjAw
MjM1MVoXDTIzMDcyMTA0MDcxM1owMzExMC8GA1UEAxMoOEM4NDMxMDdFNTgyODUz
NEUwQTM4QUZDMkFGOUVBOEQ4RTY3MDg2QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKsoFzt49GFfWbKPWDSaQ807517ij+eGk/jS/r8zRepJlloQpIYr
6FUY+4r6vKi8zmIrBKsnnktWfmwJP4sm/1x8JCJn0yU+LX3OPGx7ymUbsx77EaDy
7WpDSPc0WZCli/TAtoSOo5V/+pFmrmIZzD1s9JD0NxWyTraUyWIZkTOeHN+pW1Cc
1n9t8RP3WiU16cq+x0w3LR9FdV9+ue6rZX9H11fXNrIN3VTs4c4X1Kgs/8H1xPvk
HFVCDh2v08kg6B4/3KWJTN7OTkGFUdeB5pOEd9h2gfWVMVTk5FL8KftHA6w8R9YV
8xieph046l+Stwsgg4JUhOQnw9lFE7zuqpECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSMhDEH5YKFNOCjivwq+eqNjmcIajAfBgNVHSMEGDAWgBQNcSWuTOrhM1/l1Cmq
AwzpBw3xnDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzk0L0RYRWxya3pxNFROZjVkUXBxZ01NNlFjTjhady5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0RYRWxya3pxNFROZjVkUXBxZ01NNlFj
Tjhady5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zOTQvaklReEItV0NoVFRnbzRyOEt2bnFqWTVuQ0dvLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBSQ2IDANBgkqhkiG9w0BAQsFAAOCAQEAO5mU8YHHDpXZJ6DWrE4BvIdj038Z
mOIYL9KvFnGHJGZhw+NLy2A1Ht0wQ4yNnxzYOutYqhF1UKmlfPZHKDcW1YnngGp5
JVse/nN9NSVuipXPyQvb/fC0k2m94b1PTvIylYRaK2T1j52ZhKRFFTOWGSc1TlVM
rrj3tMh5TTN+CF6tiyFSe6VehhH27VYglwMU0QN5GMnwfMERC/EEoMi0vO6+hN99
Nurv3sRgQrbktKaWkOHYsIfOWnrwMaYDEtz6atQTCpBgJsl4gBmJ1qf/T6BanT6E
g/+EJEUixgdaDLN2SGN6zz1WjULs/XqJVbVsThGIrZEfX2pn248p6GIBNg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:13 2025 by rpki-client