Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/unWVTgETlw3Rp2gSb77LTihqEb0.roa
File:                     unWVTgETlw3Rp2gSb77LTihqEb0.roa (raw, json)
Hash identifier:          GmglxBv7aKK4pk+SSz9o1xigD/HVVEWFgLmD7OjrtPI=
Subject key identifier:   BA:75:95:4E:01:13:97:0D:D1:A7:68:12:6F:BE:CB:4E:28:6A:11:BD
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01DA
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/unWVTgETlw3Rp2gSb77LTihqEb0.roa
Signing time:             Fri 07 Jul 2023 04:16:46 +0000
ROA not before:           Fri 07 Jul 2023 04:16:46 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        210.159.140.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:16:46 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=BA75954E0113970DD1A768126FBECB4E286A11BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f3:8b:d9:61:34:c6:59:2f:77:31:84:5c:89:
                    bf:dd:e8:93:f2:9e:a0:0a:d9:2b:19:6d:37:51:35:
                    d2:c2:d8:c0:43:f5:b8:24:c9:44:61:e5:22:6b:63:
                    7f:d9:89:ff:30:95:55:1e:90:1e:af:58:31:2a:7f:
                    cb:ca:bc:62:89:f2:ce:a9:b7:ab:ae:88:17:c8:a0:
                    a3:ed:d9:a0:5d:e6:ac:5f:3b:f5:6c:d1:40:c4:30:
                    51:01:f6:73:e2:e5:00:27:c2:bc:f1:b9:4a:93:70:
                    cd:0c:0f:e3:91:c9:e3:40:07:bc:75:9d:ee:05:bb:
                    2f:0d:53:ed:1d:66:95:2c:7a:6b:27:49:42:9b:19:
                    80:9e:63:66:0c:58:10:37:de:f1:f5:98:1c:26:14:
                    12:c2:8c:12:87:a3:29:ac:14:45:0c:90:16:7c:e4:
                    2a:a2:6e:48:34:98:67:ea:68:e0:05:d3:d9:fa:1c:
                    70:57:e1:f8:f8:20:ee:7c:b9:7d:80:50:78:51:69:
                    e5:7f:8e:c0:51:44:58:6e:26:7d:f2:12:7c:68:a8:
                    40:a2:16:a4:e9:2c:33:e5:e4:c7:ac:fc:cf:02:5b:
                    e7:1f:b5:17:04:91:e8:54:10:e0:ad:2d:54:b6:8f:
                    fd:53:43:4b:f8:f9:88:28:51:24:32:43:ac:77:27:
                    56:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:75:95:4E:01:13:97:0D:D1:A7:68:12:6F:BE:CB:4E:28:6A:11:BD
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/unWVTgETlw3Rp2gSb77LTihqEb0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.159.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:86:00:c8:f2:0e:f1:ca:29:5f:8c:8e:87:e4:f5:93:81:a3:
         3b:c4:20:d7:38:92:65:d3:93:49:81:e7:ad:15:55:ea:79:3f:
         29:51:9e:27:9a:f4:1a:a3:6f:25:cd:66:ed:bf:4d:4f:27:fc:
         01:92:ed:0a:95:4c:1e:ae:f3:b2:bf:54:f8:5c:a7:bb:e4:99:
         75:dc:7a:e9:33:50:30:84:41:4b:04:14:78:80:5a:c6:20:f1:
         30:e0:97:23:b8:3e:2d:93:cf:fc:2a:40:85:3e:11:f9:b3:73:
         31:e0:72:19:67:7d:de:9d:d7:21:3e:dc:4c:e6:25:5b:e9:4c:
         31:73:cf:ff:a7:22:f6:8e:09:2a:bd:71:15:30:a2:15:33:d6:
         7c:03:1d:06:05:b7:8c:73:0e:a6:64:cb:28:a8:5a:74:f4:f5:
         7e:40:7d:ab:2e:fa:73:2b:57:7d:b6:63:2b:3c:6d:b3:39:13:
         d6:11:87:66:90:c3:c4:a8:32:0f:5b:39:2d:b5:df:69:28:dd:
         f4:39:e7:ba:0b:f8:bb:c9:ed:7b:6a:79:80:ce:fa:b0:22:8e:
         eb:35:95:6d:5c:9a:38:0f:50:5f:04:c0:1d:f2:28:72:5b:50:
         b6:8a:3a:0f:a3:82:3f:b3:9c:a2:87:3f:9f:86:5e:b0:9d:c2:
         50:59:02:83
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAdowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDE2NDZaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEJBNzU5NTRFMDExMzk3
MEREMUE3NjgxMjZGQkVDQjRFMjg2QTExQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDL84vZYTTGWS93MYRcib/d6JPynqAK2SsZbTdRNdLC2MBD9bgk
yURh5SJrY3/Zif8wlVUekB6vWDEqf8vKvGKJ8s6pt6uuiBfIoKPt2aBd5qxfO/Vs
0UDEMFEB9nPi5QAnwrzxuUqTcM0MD+ORyeNAB7x1ne4Fuy8NU+0dZpUsemsnSUKb
GYCeY2YMWBA33vH1mBwmFBLCjBKHoymsFEUMkBZ85Cqibkg0mGfqaOAF09n6HHBX
4fj4IO58uX2AUHhRaeV/jsBRRFhuJn3yEnxoqECiFqTpLDPl5Mes/M8CW+cftRcE
kehUEOCtLVS2j/1TQ0v4+YgoUSQyQ6x3J1ZvAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUunWVTgETlw3Rp2gSb77LTihqEb0wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L3VuV1ZUZ0VUbHczUnAyZ1NiNzdMVGlocUViMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADSn4wwDQYJKoZIhvcNAQELBQADggEBAF6GAMjyDvHKKV+Mjofk9ZOBozvE
INc4kmXTk0mB560VVep5PylRniea9BqjbyXNZu2/TU8n/AGS7QqVTB6u87K/VPhc
p7vkmXXceukzUDCEQUsEFHiAWsYg8TDglyO4Pi2Tz/wqQIU+EfmzczHgchlnfd6d
1yE+3EzmJVvpTDFzz/+nIvaOCSq9cRUwohUz1nwDHQYFt4xzDqZkyyioWnT09X5A
fasu+nMrV322Yys8bbM5E9YRh2aQw8SoMg9bOS2132ko3fQ557oL+LvJ7XtqeYDO
+rAijus1lW1cmjgPUF8EwB3yKHJbULaKOg+jgj+znKKHP5+GXrCdwlBZAoM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:25 2025 by rpki-client