Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/0mylOGDs8_Ta-jKbPIe8OS-y1EU.roa
File:                     0mylOGDs8_Ta-jKbPIe8OS-y1EU.roa (raw, json)
Hash identifier:          6gQkX/6SIV1+MkIguLawpCzsFPAgo62lTMEKzyzftTA=
Subject key identifier:   D2:6C:A5:38:60:EC:F3:F4:DA:FA:32:9B:3C:87:BC:39:2F:B2:D4:45
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       F7
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/0mylOGDs8_Ta-jKbPIe8OS-y1EU.roa
Signing time:             Thu 08 Jun 2023 09:39:23 +0000
ROA not before:           Thu 08 Jun 2023 09:39:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     2527
IP address blocks:        116.91.160.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Jun  8 09:39:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=D26CA53860ECF3F4DAFA329B3C87BC392FB2D445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:40:9e:e2:a0:0f:ef:cd:f8:f5:7d:a8:21:ca:
                    2a:43:df:08:92:31:94:67:06:a1:11:98:cd:6f:ba:
                    6e:1e:9e:bf:7a:e8:d9:66:36:e1:fc:0b:62:8e:ed:
                    fc:fa:1a:cc:95:d5:c4:db:c7:ea:bf:b1:96:00:bf:
                    11:37:d9:22:39:99:e3:3a:39:01:bc:d8:c9:39:14:
                    4f:b5:54:26:3d:46:b6:58:b5:14:49:bc:b0:bc:ae:
                    10:1f:65:82:4e:e1:c1:26:18:fc:8d:fb:28:7c:0f:
                    54:bd:41:4e:dd:4a:2e:ec:4d:72:a2:6a:3d:0c:fc:
                    15:34:a5:de:02:12:de:41:67:d1:67:c9:11:09:7f:
                    e5:dd:3e:d7:79:d8:93:b3:10:ae:f0:3a:36:b4:9e:
                    2c:76:d4:69:b0:4c:6d:20:df:87:59:e8:2f:99:ef:
                    bb:b3:fc:da:35:2a:d8:f3:14:7b:4f:a2:41:06:03:
                    91:5f:aa:7f:1c:d2:49:6b:0b:45:21:04:a2:4d:8e:
                    12:cf:c7:99:18:ef:2b:53:c7:6d:a1:2f:20:da:51:
                    04:ce:36:a2:18:65:ce:fe:d4:f7:f1:2f:6c:ed:c8:
                    fa:45:05:a6:76:bd:0b:63:b9:77:88:51:d7:4a:c4:
                    d2:95:d3:78:17:c9:e5:54:5b:22:7a:25:72:71:dd:
                    80:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6C:A5:38:60:EC:F3:F4:DA:FA:32:9B:3C:87:BC:39:2F:B2:D4:45
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/0mylOGDs8_Ta-jKbPIe8OS-y1EU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.91.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         31:97:3d:27:cd:75:2f:14:ae:e5:36:66:eb:c7:b7:ac:32:ee:
         2c:c7:5b:df:19:56:24:bc:b6:a7:46:cc:5f:2f:e0:37:18:a8:
         99:98:f7:6b:9a:1f:51:50:83:a3:68:6a:58:97:54:9c:76:bd:
         64:e0:53:2b:9f:26:df:30:43:9e:57:ff:ed:14:0e:76:55:ad:
         4b:ba:89:38:3f:85:dc:c9:39:6b:e5:c1:7e:b0:ef:85:22:a7:
         85:ee:1a:d6:cd:31:af:d3:f1:01:85:2c:56:ed:5a:62:aa:15:
         e5:bd:4e:67:ce:8e:aa:ed:88:10:ab:aa:f2:42:c2:f4:ce:98:
         1d:b3:82:5d:31:f7:ed:15:35:29:21:89:4e:92:f7:5d:88:4c:
         33:9c:71:92:98:b2:23:ff:91:b2:f4:61:1a:7b:23:f5:91:f9:
         d0:07:ed:aa:1a:f1:78:bb:eb:73:28:aa:55:75:72:3c:9d:8b:
         32:95:53:2c:93:cc:ee:0c:59:2f:67:4f:21:52:85:6d:73:f6:
         24:92:10:30:22:d0:9c:03:f1:31:cb:77:04:b8:71:6b:8f:6d:
         41:e8:7d:e2:dd:ae:76:8c:a3:57:75:67:ff:39:3f:78:de:3a:
         22:c2:fc:7b:d3:df:78:79:25:b6:f0:21:ec:3b:53:3e:f0:3d:
         0f:61:49:ab
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yMzA2MDgw
OTM5MjNaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEQyNkNBNTM4NjBFQ0Yz
RjREQUZBMzI5QjNDODdCQzM5MkZCMkQ0NDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5QJ7ioA/vzfj1faghyipD3wiSMZRnBqERmM1vum4enr966Nlm
NuH8C2KO7fz6GsyV1cTbx+q/sZYAvxE32SI5meM6OQG82Mk5FE+1VCY9RrZYtRRJ
vLC8rhAfZYJO4cEmGPyN+yh8D1S9QU7dSi7sTXKiaj0M/BU0pd4CEt5BZ9FnyREJ
f+XdPtd52JOzEK7wOja0nix21GmwTG0g34dZ6C+Z77uz/No1KtjzFHtPokEGA5Ff
qn8c0klrC0UhBKJNjhLPx5kY7ytTx22hLyDaUQTONqIYZc7+1PfxL2ztyPpFBaZ2
vQtjuXeIUddKxNKV03gXyeVUWyJ6JXJx3YD5AgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQU0mylOGDs8/Ta+jKbPIe8OS+y1EUwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80My8wbXlsT0dEczhfVGEtaktiUEllOE9TLXkxRVUucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQFdFugMA0GCSqGSIb3DQEBCwUAA4IBAQAxlz0nzXUvFK7lNmbrx7esMu4sx1vf
GVYkvLanRsxfL+A3GKiZmPdrmh9RUIOjaGpYl1Scdr1k4FMrnybfMEOeV//tFA52
Va1Luok4P4XcyTlr5cF+sO+FIqeF7hrWzTGv0/EBhSxW7VpiqhXlvU5nzo6q7YgQ
q6ryQsL0zpgds4JdMfftFTUpIYlOkvddiEwznHGSmLIj/5Gy9GEaeyP1kfnQB+2q
GvF4u+tzKKpVdXI8nYsylVMsk8zuDFkvZ08hUoVtc/YkkhAwItCcA/Exy3cEuHFr
j21B6H3i3a52jKNXdWf/OT943joiwvx70994eSW28CHsO1M+8D0PYUmr
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:45 2025 by rpki-client