Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/8x62YDAF8VNpHG80jTSvq-Mwl6E.roa
File:                     8x62YDAF8VNpHG80jTSvq-Mwl6E.roa (raw, json)
Hash identifier:          KuWa1Uw2E55718Did/cGDnLxKDmGdUUKgefpoJvt9sE=
Subject key identifier:   F3:1E:B6:60:30:05:F1:53:69:1C:6F:34:8D:34:AF:AB:E3:30:97:A1
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       22
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/8x62YDAF8VNpHG80jTSvq-Mwl6E.roa
Signing time:             Fri 29 Sep 2023 06:36:52 +0000
ROA not before:           Fri 29 Sep 2023 06:36:52 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     10000
IP address blocks:        61.114.96.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Sep 29 06:36:52 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=F31EB6603005F153691C6F348D34AFABE33097A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c9:ed:79:36:d7:b9:b1:38:3e:ea:89:3f:df:
                    66:c6:a2:c3:1a:78:2c:b9:30:18:62:55:ae:6f:1f:
                    7e:6c:ea:7c:27:7f:a9:b8:80:90:ff:5d:b1:85:1e:
                    32:14:da:4a:30:62:49:2b:5e:44:68:77:c5:28:00:
                    c0:8c:c6:27:74:5b:9a:60:32:5a:6a:99:b3:c6:2a:
                    9d:58:88:41:31:85:2b:a1:03:b3:45:8b:15:a1:8a:
                    82:5b:86:ab:ae:8b:da:96:b9:32:1f:33:a7:02:24:
                    e5:87:db:27:45:97:c2:ef:93:75:3f:48:c6:db:2e:
                    6e:57:42:73:0f:33:65:4d:32:5f:5e:bd:5d:81:d0:
                    a0:c9:ce:d2:37:82:bd:ad:54:bd:7e:a1:85:7d:ef:
                    46:aa:7d:a4:34:c7:58:10:40:0e:6f:80:4f:9f:b8:
                    99:f7:32:7f:80:94:a6:96:bb:f0:7a:92:45:a6:20:
                    09:f7:16:d5:e1:14:5f:8f:30:20:d9:b0:b6:f6:1b:
                    e5:59:75:b4:cd:8f:bf:ba:11:61:df:06:90:87:a0:
                    49:a3:5e:1f:99:76:fd:11:e3:90:5b:af:29:78:40:
                    cf:46:af:e1:87:8a:60:e4:29:c0:7d:4c:63:26:32:
                    85:3a:11:6c:20:21:a8:c1:80:17:72:f7:dd:0d:21:
                    e8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1E:B6:60:30:05:F1:53:69:1C:6F:34:8D:34:AF:AB:E3:30:97:A1
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/8x62YDAF8VNpHG80jTSvq-Mwl6E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.114.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:5b:9d:2f:6a:59:a0:59:4f:1b:60:2d:78:fc:47:22:99:ca:
         af:84:94:c8:f7:8a:99:79:e1:34:bc:4f:c3:36:70:57:14:33:
         ea:07:ae:d9:50:87:b1:ae:77:d2:24:89:58:aa:0c:31:f6:0f:
         60:d2:35:20:a6:a4:ef:30:ec:d3:31:d9:b2:0c:ac:1f:fa:3a:
         68:a5:56:e0:e0:d7:e0:9b:de:b3:ee:fb:3a:f0:5a:20:3c:8c:
         15:56:25:ae:0a:da:67:3c:9a:1e:7e:8c:a5:cc:d8:e5:31:66:
         35:82:48:05:8d:84:6e:90:f4:68:4b:dc:fb:19:5d:07:25:6f:
         16:e6:4c:e9:0c:91:38:96:59:d7:e6:94:d9:71:ae:7c:fe:5b:
         bd:ae:09:31:48:5f:ba:ab:c1:34:eb:ea:9c:17:db:ed:e4:ab:
         01:43:ff:c1:d0:16:0c:e2:6e:44:93:71:48:00:6f:c9:c7:40:
         62:0d:3f:8f:96:c2:9a:7b:6c:aa:99:e2:5d:3a:8d:4a:a4:c3:
         80:73:11:48:bc:9d:03:0e:24:72:80:29:8d:01:08:49:66:88:
         35:bb:af:99:06:5d:54:2a:ca:ad:43:b6:33:94:9e:55:1e:91:
         1a:e1:f0:ce:e3:65:c9:2b:2d:68:11:27:d7:a5:2d:6d:22:2c:
         5d:8a:8c:32
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRDQ3
NDFGMDM0OUZCQzE1QTcwOEUyOEEyQ0UzMDc5MDZDQUM1REUwMB4XDTIzMDkyOTA2
MzY1MloXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoRjMxRUI2NjAzMDA1RjE1
MzY5MUM2RjM0OEQzNEFGQUJFMzMwOTdBMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM/J7Xk217mxOD7qiT/fZsaiwxp4LLkwGGJVrm8ffmzqfCd/qbiA
kP9dsYUeMhTaSjBiSSteRGh3xSgAwIzGJ3RbmmAyWmqZs8YqnViIQTGFK6EDs0WL
FaGKgluGq66L2pa5Mh8zpwIk5YfbJ0WXwu+TdT9IxtsubldCcw8zZU0yX169XYHQ
oMnO0jeCva1UvX6hhX3vRqp9pDTHWBBADm+AT5+4mfcyf4CUppa78HqSRaYgCfcW
1eEUX48wINmwtvYb5Vl1tM2Pv7oRYd8GkIegSaNeH5l2/RHjkFuvKXhAz0av4YeK
YOQpwH1MYyYyhToRbCAhqMGAF3L33Q0h6FsCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTzHrZgMAXxU2kcbzSNNK+r4zCXoTAfBgNVHSMEGDAWgBStR0HwNJ+8FacI4oos
4weQbKxd4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDU0L3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5c1hlQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5
c1hlQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NTQvOHg2MllEQUY4Vk5wSEc4MGpUU3ZxLU13bDZFLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBD1yYDANBgkqhkiG9w0BAQsFAAOCAQEAZVudL2pZoFlPG2AtePxHIpnKr4SU
yPeKmXnhNLxPwzZwVxQz6geu2VCHsa530iSJWKoMMfYPYNI1IKak7zDs0zHZsgys
H/o6aKVW4ODX4Jves+77OvBaIDyMFVYlrgraZzyaHn6MpczY5TFmNYJIBY2EbpD0
aEvc+xldByVvFuZM6QyROJZZ1+aU2XGufP5bva4JMUhfuqvBNOvqnBfb7eSrAUP/
wdAWDOJuRJNxSABvycdAYg0/j5bCmntsqpniXTqNSqTDgHMRSLydAw4kcoApjQEI
SWaINbuvmQZdVCrKrUO2M5SeVR6RGuHwzuNlySstaBEn16UtbSIsXYqMMg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:11 2025 by rpki-client