Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/WRMu9KtvEiIPIEoVriN4d9iZApY.roa
File:                     WRMu9KtvEiIPIEoVriN4d9iZApY.roa (raw, json)
Hash identifier:          zkVf/7QdbeL0NVIl3j58zBJJ+myMg6XDlxGIFxotWa0=
Subject key identifier:   59:13:2E:F4:AB:6F:12:22:0F:20:4A:15:AE:23:78:77:D8:99:02:96
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       55
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/WRMu9KtvEiIPIEoVriN4d9iZApY.roa
Signing time:             Tue 23 Feb 2021 08:57:38 +0000
ROA not before:           Tue 23 Feb 2021 08:57:38 +0000
ROA not after:            Tue 15 Feb 2022 01:30:02 +0000
asID:                     2527
IP address blocks:        182.168.0.0/14 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Feb 23 08:57:38 2021 GMT
            Not After : Feb 15 01:30:02 2022 GMT
        Subject: CN=59132EF4AB6F12220F204A15AE237877D8990296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:78:09:27:c4:cf:af:7f:e3:6c:ae:2a:c8:9b:
                    2c:70:0d:96:ae:ad:d1:10:be:07:63:69:69:85:3b:
                    52:56:09:17:59:6a:b0:23:7d:66:27:33:22:06:d8:
                    9e:92:5c:ba:cc:4c:3a:38:9f:32:27:45:72:4b:5d:
                    f8:5b:3c:e6:a2:c6:36:21:e9:91:4e:9e:86:df:28:
                    3a:33:a3:f4:2d:51:dc:47:7c:a3:ed:53:92:39:9a:
                    f6:26:68:82:20:63:94:a6:0d:b5:a8:c2:9b:8d:01:
                    4e:0d:d8:ab:c6:dc:a2:e7:ba:08:db:b6:a2:43:d7:
                    0d:88:54:91:c6:d4:fc:e3:14:32:3b:7a:98:26:da:
                    93:45:d8:e6:43:02:9b:17:8f:f2:ec:cc:1c:03:68:
                    3a:ce:71:be:04:29:22:53:9a:6b:c9:17:82:2e:c7:
                    a4:8c:3a:45:f7:37:46:7c:5c:82:66:9d:42:0b:87:
                    1f:2b:ae:64:36:73:3c:dd:d4:ac:83:74:30:87:53:
                    e1:b0:3b:6f:13:6c:08:b9:4a:4b:df:2b:04:b7:06:
                    95:42:07:b8:6b:a6:28:5b:dc:81:28:f2:2a:6e:44:
                    67:d8:e8:c1:f8:15:0f:a5:16:e8:56:f8:b1:97:35:
                    bd:0c:93:8e:3f:2d:6d:d6:93:64:1c:d0:78:eb:fb:
                    12:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:13:2E:F4:AB:6F:12:22:0F:20:4A:15:AE:23:78:77:D8:99:02:96
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/WRMu9KtvEiIPIEoVriN4d9iZApY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.168.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         9d:65:7a:42:5c:e1:92:f3:6f:a5:62:a2:31:02:7e:a0:6f:5a:
         60:63:e1:1e:30:90:6f:84:0e:25:15:13:0d:a1:1d:d6:8b:19:
         c9:56:f7:a6:35:b6:4f:92:9d:6c:92:65:a9:f1:78:74:99:01:
         f9:4e:e4:70:ca:4c:46:fc:24:13:8b:28:8a:e4:27:37:41:4c:
         a4:7e:82:aa:ec:e2:d3:5d:88:93:8b:7f:0b:6f:ad:05:2d:25:
         59:df:c5:7b:1e:10:91:8a:87:02:7b:70:32:e0:3e:9f:aa:83:
         a8:38:64:73:79:e1:4f:0c:4f:b6:10:05:56:35:10:0c:2c:44:
         4e:2a:f5:3f:66:32:2a:20:b1:32:0d:6b:5b:e7:4e:1d:b2:b4:
         28:64:92:bf:02:67:e2:ae:8c:3e:78:72:27:53:f1:6a:91:ee:
         ef:77:06:0d:8e:9b:32:e6:dd:10:e8:b3:89:8a:db:e4:20:5e:
         63:bd:1b:b9:a5:ce:44:7c:54:39:1d:41:ac:f8:0b:76:cd:3a:
         5a:26:41:fc:19:54:20:03:ea:18:49:25:20:c4:2b:44:ba:9b:
         4b:12:7d:50:98:aa:61:f7:b3:f5:4e:fd:dc:93:52:a9:c0:f9:
         1f:dc:25:21:21:67:e5:98:4c:7a:e6:3c:bf:d2:98:15:39:f3:
         fe:fe:b4:da
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIBVTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwOTVB
MTgyRkExOEQ0NTgyMzMyODRBQThEQzg4QkQwNzVFNUQ3MDJEMB4XDTIxMDIyMzA4
NTczOFoXDTIyMDIxNTAxMzAwMlowMzExMC8GA1UEAxMoNTkxMzJFRjRBQjZGMTIy
MjBGMjA0QTE1QUUyMzc4NzdEODk5MDI5NjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMB4CSfEz69/42yuKsibLHANlq6t0RC+B2NpaYU7UlYJF1lqsCN9
ZiczIgbYnpJcusxMOjifMidFcktd+Fs85qLGNiHpkU6eht8oOjOj9C1R3Ed8o+1T
kjma9iZogiBjlKYNtajCm40BTg3Yq8bcoue6CNu2okPXDYhUkcbU/OMUMjt6mCba
k0XY5kMCmxeP8uzMHANoOs5xvgQpIlOaa8kXgi7HpIw6Rfc3RnxcgmadQguHHyuu
ZDZzPN3UrIN0MIdT4bA7bxNsCLlKS98rBLcGlUIHuGumKFvcgSjyKm5EZ9jowfgV
D6UW6Fb4sZc1vQyTjj8tbdaTZBzQeOv7EhECAwEAAaOCAdYwggHSMB0GA1UdDgQW
BBRZEy70q28SIg8gShWuI3h32JkCljAfBgNVHSMEGDAWgBQJWhgvoY1FgjMoSqjc
iL0HXl1wLTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDMvQ1ZvWUw2R05SWUl6S0VxbzNJaTlCMTVkY0MwLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQ1ZvWUw2R05SWUl6S0VxbzNJaTlCMTVk
Y0MwLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUF
BzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL1dSTXU5S3R2RWlJUElFb1ZyaU40ZDlpWkFwWS5yb2EwHgYIKwYB
BQUHAQcBAf8EDzANMAsEAgABMAUDAwK2qDANBgkqhkiG9w0BAQsFAAOCAQEAnWV6
QlzhkvNvpWKiMQJ+oG9aYGPhHjCQb4QOJRUTDaEd1osZyVb3pjW2T5KdbJJlqfF4
dJkB+U7kcMpMRvwkE4soiuQnN0FMpH6Cquzi012Ik4t/C2+tBS0lWd/Fex4QkYqH
AntwMuA+n6qDqDhkc3nhTwxPthAFVjUQDCxETir1P2YyKiCxMg1rW+dOHbK0KGSS
vwJn4q6MPnhyJ1PxapHu73cGDY6bMubdEOiziYrb5CBeY70buaXORHxUOR1BrPgL
ds06WiZB/BlUIAPqGEklIMQrRLqbSxJ9UJiqYfez9U793JNSqcD5H9wlISFn5ZhM
euY8v9KYFTnz/v602g==
-----END CERTIFICATE-----
Generated at Thu Mar 13 01:46:16 2025 by rpki-client