Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/tmyRardVvca0kZMoeNfIItivDkQ.roa
File:                     tmyRardVvca0kZMoeNfIItivDkQ.roa (raw, json)
Hash identifier:          BTGc6EbAplSJWeEPehrnEBLGBnuqLseMUST6bVhy17o=
Subject key identifier:   B6:6C:91:6A:B7:55:BD:C6:B4:91:93:28:78:D7:C8:22:D8:AF:0E:44
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       69
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/tmyRardVvca0kZMoeNfIItivDkQ.roa
Signing time:             Tue 23 Feb 2021 08:57:56 +0000
ROA not before:           Tue 23 Feb 2021 08:57:56 +0000
ROA not after:            Tue 15 Feb 2022 01:30:02 +0000
asID:                     2527
IP address blocks:        61.211.0.0/18 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Feb 23 08:57:56 2021 GMT
            Not After : Feb 15 01:30:02 2022 GMT
        Subject: CN=B66C916AB755BDC6B491932878D7C822D8AF0E44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ef:78:ea:53:d8:7f:36:c3:de:57:29:5f:27:
                    03:d6:2c:e6:c3:8d:25:d8:e1:f4:7c:41:a4:7c:1a:
                    57:86:8c:1d:17:2c:9d:a7:f2:b6:d9:c8:9f:04:75:
                    e8:cf:54:5f:bd:95:12:f1:a2:b2:c2:2a:af:30:bd:
                    43:0e:ae:27:77:9b:b8:80:05:83:d7:66:e2:f3:cc:
                    24:35:67:ac:12:91:6d:f5:9c:87:06:ec:65:15:76:
                    20:76:5a:89:2f:81:2f:19:a3:a6:61:fa:3a:29:73:
                    d5:d1:11:3a:6d:32:a0:56:1f:85:3f:02:fe:fa:8c:
                    e2:53:40:20:46:3e:a1:b4:49:f7:11:fe:be:47:ef:
                    61:5b:7f:a5:5c:51:1d:91:9d:bc:fb:29:e8:ff:f7:
                    ce:7c:27:af:03:26:37:3d:2a:6d:3c:7f:46:61:27:
                    30:64:95:0f:d9:6c:5f:23:6d:c5:10:9c:be:af:df:
                    37:06:06:5b:62:88:31:67:a1:69:1a:cd:cd:4d:75:
                    73:6d:cd:ec:87:17:e1:4e:68:6c:50:d6:fb:66:33:
                    69:35:52:fc:ae:49:cd:38:7e:cb:d2:4a:de:6a:e5:
                    63:bc:bf:b1:4a:be:0e:2f:bc:c5:d7:8a:b3:d4:11:
                    a2:9f:d5:8f:31:19:f8:e6:9a:f5:70:ee:c3:c5:77:
                    7b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6C:91:6A:B7:55:BD:C6:B4:91:93:28:78:D7:C8:22:D8:AF:0E:44
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/tmyRardVvca0kZMoeNfIItivDkQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         20:27:6b:61:ff:ae:24:69:88:d3:73:76:fa:68:4e:6c:7a:48:
         fc:89:f4:ba:84:d6:56:94:20:41:78:c4:ef:dd:da:5f:f9:f0:
         57:78:db:a8:bb:bd:73:d3:d6:cb:1d:1d:97:b0:3c:4e:c4:2a:
         95:64:01:b1:af:70:b6:92:06:42:27:38:9d:b3:ce:ef:03:82:
         eb:9b:95:66:36:1b:9a:9d:a7:b2:94:6e:c2:ba:55:08:c8:0a:
         89:0f:0b:09:e1:6a:aa:40:4a:8e:40:67:1e:d5:31:f3:17:10:
         cf:a9:79:64:b2:ac:99:a8:5f:18:e9:05:5a:6c:30:94:67:3d:
         26:75:08:f8:11:03:ab:c7:88:9a:bf:2c:11:0a:4d:35:79:52:
         e4:ef:a4:6b:28:ef:65:51:4c:c7:1d:b9:a2:93:c4:82:01:59:
         47:ac:fd:2d:52:8b:3b:40:bd:9f:79:08:79:25:07:21:97:f8:
         ff:e1:c6:7e:ee:b9:e5:e8:2d:b6:9f:4f:64:ee:64:4b:4a:c1:
         d2:7a:48:93:8f:e9:01:86:25:c2:3b:7d:53:81:53:ee:82:36:
         7d:28:38:97:41:db:5c:94:ef:da:36:4e:a2:8c:6c:a1:5a:1b:
         e2:30:ff:34:e4:d9:30:41:19:c1:0b:50:5b:5a:bc:02:f7:f8:
         f8:a1:c8:53
-----BEGIN CERTIFICATE-----
MIIEujCCA6KgAwIBAgIBaTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwOTVB
MTgyRkExOEQ0NTgyMzMyODRBQThEQzg4QkQwNzVFNUQ3MDJEMB4XDTIxMDIyMzA4
NTc1NloXDTIyMDIxNTAxMzAwMlowMzExMC8GA1UEAxMoQjY2QzkxNkFCNzU1QkRD
NkI0OTE5MzI4NzhEN0M4MjJEOEFGMEU0NDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALnveOpT2H82w95XKV8nA9Ys5sONJdjh9HxBpHwaV4aMHRcsnafy
ttnInwR16M9UX72VEvGissIqrzC9Qw6uJ3ebuIAFg9dm4vPMJDVnrBKRbfWchwbs
ZRV2IHZaiS+BLxmjpmH6Oilz1dEROm0yoFYfhT8C/vqM4lNAIEY+obRJ9xH+vkfv
YVt/pVxRHZGdvPsp6P/3znwnrwMmNz0qbTx/RmEnMGSVD9lsXyNtxRCcvq/fNwYG
W2KIMWehaRrNzU11c23N7IcX4U5obFDW+2YzaTVS/K5JzTh+y9JK3mrlY7y/sUq+
Di+8xdeKs9QRop/VjzEZ+Oaa9XDuw8V3e+UCAwEAAaOCAdcwggHTMB0GA1UdDgQW
BBS2bJFqt1W9xrSRkyh418gi2K8ORDAfBgNVHSMEGDAWgBQJWhgvoY1FgjMoSqjc
iL0HXl1wLTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDMvQ1ZvWUw2R05SWUl6S0VxbzNJaTlCMTVkY0MwLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQ1ZvWUw2R05SWUl6S0VxbzNJaTlCMTVk
Y0MwLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUF
BzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL3RteVJhcmRWdmNhMGtaTW9lTmZJSXRpdkRrUS5yb2EwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBAY90wAwDQYJKoZIhvcNAQELBQADggEBACAn
a2H/riRpiNNzdvpoTmx6SPyJ9LqE1laUIEF4xO/d2l/58Fd426i7vXPT1ssdHZew
PE7EKpVkAbGvcLaSBkInOJ2zzu8DguublWY2G5qdp7KUbsK6VQjICokPCwnhaqpA
So5AZx7VMfMXEM+peWSyrJmoXxjpBVpsMJRnPSZ1CPgRA6vHiJq/LBEKTTV5UuTv
pGso72VRTMcduaKTxIIBWUes/S1SiztAvZ95CHklByGX+P/hxn7uueXoLbafT2Tu
ZEtKwdJ6SJOP6QGGJcI7fVOBU+6CNn0oOJdB21yU79o2TqKMbKFaG+Iw/zTk2TBB
GcELUFtavAL3+PihyFM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:24 2025 by rpki-client