Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/eUhaS5NXE1TAKRttW9Ojcvwfay0.roa
File:                     eUhaS5NXE1TAKRttW9Ojcvwfay0.roa (raw, json)
Hash identifier:          RMp0fG1MTev0VbjMaRP0VL+qRk7GMsR/Fl3uFdhLEME=
Subject key identifier:   79:48:5A:4B:93:57:13:54:C0:29:1B:6D:5B:D3:A3:72:FC:1F:6B:2D
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       1A
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/eUhaS5NXE1TAKRttW9Ojcvwfay0.roa
Signing time:             Tue 23 Feb 2021 08:57:30 +0000
ROA not before:           Tue 23 Feb 2021 08:57:30 +0000
ROA not after:            Tue 15 Feb 2022 01:30:02 +0000
asID:                     2527
IP address blocks:        160.86.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Feb 23 08:57:30 2021 GMT
            Not After : Feb 15 01:30:02 2022 GMT
        Subject: CN=79485A4B93571354C0291B6D5BD3A372FC1F6B2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:30:a3:33:1c:da:7e:af:5c:3f:f7:dc:7d:b0:
                    47:43:55:e1:b4:c5:64:f9:6b:45:c1:a9:0f:f8:01:
                    48:ea:bc:e6:33:4e:a3:b0:f3:fb:92:81:43:a1:84:
                    fd:f8:43:98:fd:79:7f:0c:d6:3c:36:ce:c9:1f:af:
                    dd:d3:e6:bc:cc:a3:54:47:d9:d8:53:2a:6f:fa:fb:
                    d9:42:3e:67:60:a0:d2:b2:97:cc:2d:2a:e7:1d:09:
                    49:c2:a6:98:d0:5f:44:fc:d6:04:9a:e5:f1:5d:49:
                    4b:c6:34:a0:dc:24:5b:35:ae:2a:15:e4:66:cd:05:
                    37:44:7a:24:31:a5:29:3a:21:18:b8:bd:f7:3a:a6:
                    5a:63:90:7a:57:bc:db:16:41:47:57:97:07:37:84:
                    48:8d:93:18:85:d0:b2:e9:9f:20:dc:29:04:a0:7a:
                    ba:49:02:e6:13:4f:a4:50:df:1c:3a:e9:3c:a5:1e:
                    1a:12:27:65:48:f9:de:a5:3d:6c:c1:b3:a7:a1:2b:
                    0e:7e:17:1e:16:5a:3c:13:ae:ef:ca:c8:64:94:1f:
                    d4:e8:4f:9c:ff:9f:e7:4e:5f:ec:87:c8:51:16:cb:
                    6d:7f:1b:4f:5c:09:24:a9:d7:31:f4:68:f3:af:de:
                    e6:19:6b:f3:55:b3:29:ed:25:16:91:a4:eb:f9:a7:
                    dc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:48:5A:4B:93:57:13:54:C0:29:1B:6D:5B:D3:A3:72:FC:1F:6B:2D
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/eUhaS5NXE1TAKRttW9Ojcvwfay0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.86.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c5:32:cc:1e:8e:75:45:7f:b2:d4:e4:1d:79:95:81:96:82:a3:
         c8:fb:da:33:a5:b3:d3:f2:59:24:c0:a5:00:29:72:a4:c0:b8:
         bc:0e:b8:d9:e4:f2:a8:e4:c5:59:bc:de:c7:d7:74:d9:31:3f:
         fe:2a:bf:2e:b7:c7:b6:a1:40:02:07:1e:7a:4b:93:81:70:34:
         47:4c:7a:1f:5f:2c:f5:ff:65:5f:79:ae:52:04:1e:c6:cb:ba:
         b4:1c:9a:dd:1a:53:ff:ad:bd:dc:36:b9:c6:9e:c1:89:34:92:
         5e:31:69:b5:72:49:99:d7:86:a0:e5:1e:e5:56:80:60:4b:08:
         f5:1c:20:58:12:72:63:e7:cc:95:4b:0f:91:89:a1:9a:6a:54:
         7c:8d:5d:04:bd:8b:67:49:81:c3:8d:ea:14:44:29:68:d2:30:
         4c:a6:ad:48:c5:e6:3b:70:18:55:ab:f1:87:ce:74:d4:00:d9:
         47:4f:5f:36:04:5f:a6:1b:0e:4f:50:6b:c3:33:dc:c6:39:33:
         22:8f:01:9b:de:a4:4f:93:1b:61:10:37:9a:0f:41:65:91:9d:
         6a:e6:aa:0b:c4:79:72:75:07:41:ec:69:4a:5b:0d:5f:8d:34:
         30:e6:15:b3:2f:7c:f8:29:7e:81:57:a8:ce:69:ac:d9:df:5c:
         1e:a3:b6:ac
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIBGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNENB
N0YzNUFGMUE4RjUyNTc1QTlGRUZGRjIxQzRBNDcwODBEREZBMB4XDTIxMDIyMzA4
NTczMFoXDTIyMDIxNTAxMzAwMlowMzExMC8GA1UEAxMoNzk0ODVBNEI5MzU3MTM1
NEMwMjkxQjZENUJEM0EzNzJGQzFGNkIyRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALcwozMc2n6vXD/33H2wR0NV4bTFZPlrRcGpD/gBSOq85jNOo7Dz
+5KBQ6GE/fhDmP15fwzWPDbOyR+v3dPmvMyjVEfZ2FMqb/r72UI+Z2Cg0rKXzC0q
5x0JScKmmNBfRPzWBJrl8V1JS8Y0oNwkWzWuKhXkZs0FN0R6JDGlKTohGLi99zqm
WmOQele82xZBR1eXBzeESI2TGIXQsumfINwpBKB6ukkC5hNPpFDfHDrpPKUeGhIn
ZUj53qU9bMGzp6ErDn4XHhZaPBOu78rIZJQf1OhPnP+f505f7IfIURbLbX8bT1wJ
JKnXMfRo86/e5hlr81WzKe0lFpGk6/mn3BECAwEAAaOCAdYwggHSMB0GA1UdDgQW
BBR5SFpLk1cTVMApG21b06Ny/B9rLTAfBgNVHSMEGDAWgBQEyn81rxqPUldan+//
IcSkcIDd+jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDMvQk1wX05hOGFqMUpYV3Bfdl95SEVwSENBM2ZvLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQk1wX05hOGFqMUpYV3Bfdl95SEVwSENB
M2ZvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUF
BzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL2VVaGFTNU5YRTFUQUtSdHRXOU9qY3Z3ZmF5MC5yb2EwHgYIKwYB
BQUHAQcBAf8EDzANMAsEAgABMAUDAwCgVjANBgkqhkiG9w0BAQsFAAOCAQEAxTLM
Ho51RX+y1OQdeZWBloKjyPvaM6Wz0/JZJMClAClypMC4vA642eTyqOTFWbzex9d0
2TE//iq/LrfHtqFAAgceekuTgXA0R0x6H18s9f9lX3muUgQexsu6tBya3RpT/629
3Da5xp7BiTSSXjFptXJJmdeGoOUe5VaAYEsI9RwgWBJyY+fMlUsPkYmhmmpUfI1d
BL2LZ0mBw43qFEQpaNIwTKatSMXmO3AYVavxh8501ADZR09fNgRfphsOT1BrwzPc
xjkzIo8Bm96kT5MbYRA3mg9BZZGdauaqC8R5cnUHQexpSlsNX400MOYVsy98+Cl+
gVeozmms2d9cHqO2rA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:15 2025 by rpki-client