Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/wH_u6VaY31n_kytfkjPIbwVV4a8.roa
File:                     wH_u6VaY31n_kytfkjPIbwVV4a8.roa (raw, json)
Hash identifier:          FovKUi2PQzjVDG3iBz8yWFcwxCjoeHm5WrUmRirA/44=
Subject key identifier:   C0:7F:EE:E9:56:98:DF:59:FF:93:2B:5F:92:33:C8:6F:05:55:E1:AF
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01A7
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/wH_u6VaY31n_kytfkjPIbwVV4a8.roa
Signing time:             Fri 07 Jul 2023 04:14:32 +0000
ROA not before:           Fri 07 Jul 2023 04:14:32 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        111.234.224.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:14:32 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=C07FEEE95698DF59FF932B5F9233C86F0555E1AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:27:3f:d1:f4:ea:43:90:28:69:c3:ce:8f:d1:
                    3b:7e:f2:52:2b:6e:b9:66:2c:42:e0:77:b2:97:a8:
                    6b:f5:51:69:20:b5:93:be:0c:11:98:ad:16:3f:39:
                    5a:b4:ee:70:40:bf:b8:d6:40:e8:b2:b2:b6:9d:33:
                    2a:3a:9b:04:30:e8:27:cf:96:f3:11:04:41:5f:8d:
                    2e:0b:36:e6:a1:64:04:21:25:d8:9b:4f:bc:6a:e7:
                    88:d8:cc:8c:98:b6:88:92:89:fc:6b:bf:2d:17:6b:
                    25:69:0b:69:9b:3a:86:c6:c4:59:0b:b7:bc:19:6f:
                    6a:ee:3e:16:88:f7:fb:69:af:10:3b:8f:b3:0b:d9:
                    05:e5:22:8c:23:02:b2:26:71:9e:3b:80:5a:5a:da:
                    37:31:5e:e3:b8:bd:d5:44:31:79:41:be:52:f3:93:
                    ea:53:fa:2d:3e:c5:82:ed:3c:77:82:cf:a4:8b:53:
                    d0:c5:7a:e7:3b:7e:69:19:bb:bf:c9:9e:6c:11:36:
                    3b:e8:a8:49:c9:ef:f9:25:37:e6:11:df:88:55:98:
                    7e:60:da:c8:39:3f:57:ee:f0:d0:dd:79:b4:ce:f3:
                    ea:8f:09:c1:42:66:8c:56:f6:2a:e3:76:2a:d3:15:
                    0a:91:90:d8:2b:f2:50:6c:f0:ca:38:40:3a:84:c9:
                    93:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:7F:EE:E9:56:98:DF:59:FF:93:2B:5F:92:33:C8:6F:05:55:E1:AF
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/wH_u6VaY31n_kytfkjPIbwVV4a8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.234.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:25:f7:ce:e0:ef:33:5f:5e:09:13:3a:a6:84:d4:f1:01:c7:
         1d:d5:e0:64:98:60:8f:9b:b8:1e:21:92:b6:79:44:97:24:96:
         17:79:1a:e5:f8:7a:d5:f0:8e:80:ec:97:22:46:9b:7d:af:40:
         0d:c5:38:84:e6:ef:bd:25:78:29:6f:a6:18:49:8e:29:75:24:
         e1:bf:65:fa:56:38:bf:2c:f1:bb:44:1b:c4:09:70:b3:ab:32:
         05:08:4f:92:e6:bf:f8:de:d1:9f:38:3d:22:9e:e0:1b:06:eb:
         77:1b:db:3c:3c:fb:02:5c:b0:ad:45:9c:39:57:ab:a0:77:a4:
         bf:a9:d4:ac:fa:c7:11:9e:79:13:ea:da:0a:64:bb:d3:d7:07:
         5d:22:6e:aa:c4:dc:ad:c4:79:43:08:e6:fe:ef:40:7e:8c:a1:
         56:32:ec:c9:18:eb:18:3c:79:5d:53:22:3a:0f:ff:27:f6:d7:
         4c:2b:cc:d9:0f:eb:ba:59:32:a0:59:a6:53:1a:9a:ae:64:0b:
         fa:91:9a:62:01:01:91:a3:cf:6d:5b:75:fd:32:b2:9b:aa:97:
         2d:f7:27:33:41:b1:42:62:6d:2f:9b:a0:61:34:d0:07:e3:96:
         06:13:2d:48:5a:a9:c5:73:29:7e:c2:db:48:10:82:42:b4:83:
         92:6a:ee:e3
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAacwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yMzA3MDcw
NDE0MzJaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEMwN0ZFRUU5NTY5OERG
NTlGRjkzMkI1RjkyMzNDODZGMDU1NUUxQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClJz/R9OpDkChpw86P0Tt+8lIrbrlmLELgd7KXqGv1UWkgtZO+
DBGYrRY/OVq07nBAv7jWQOiysradMyo6mwQw6CfPlvMRBEFfjS4LNuahZAQhJdib
T7xq54jYzIyYtoiSifxrvy0XayVpC2mbOobGxFkLt7wZb2ruPhaI9/tprxA7j7ML
2QXlIowjArImcZ47gFpa2jcxXuO4vdVEMXlBvlLzk+pT+i0+xYLtPHeCz6SLU9DF
euc7fmkZu7/JnmwRNjvoqEnJ7/klN+YR34hVmH5g2sg5P1fu8NDdebTO8+qPCcFC
ZoxW9irjdirTFQqRkNgr8lBs8Mo4QDqEyZNVAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUwH/u6VaY31n/kytfkjPIbwVV4a8wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L3dIX3U2VmFZMzFuX2t5dGZralBJYndWVjRhOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARv6uAwDQYJKoZIhvcNAQELBQADggEBADAl987g7zNfXgkTOqaE1PEBxx3V
4GSYYI+buB4hkrZ5RJcklhd5GuX4etXwjoDslyJGm32vQA3FOITm770leClvphhJ
jil1JOG/ZfpWOL8s8btEG8QJcLOrMgUIT5Lmv/je0Z84PSKe4BsG63cb2zw8+wJc
sK1FnDlXq6B3pL+p1Kz6xxGeeRPq2gpku9PXB10ibqrE3K3EeUMI5v7vQH6MoVYy
7MkY6xg8eV1TIjoP/yf210wrzNkP67pZMqBZplMamq5kC/qRmmIBAZGjz21bdf0y
spuqly33JzNBsUJibS+boGE00AfjlgYTLUhaqcVzKX7C20gQgkK0g5Jq7uM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:07 2025 by rpki-client