Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/nfhNLns0V5Xbw7ZJMWJCWiunGV0.roa
File:                     nfhNLns0V5Xbw7ZJMWJCWiunGV0.roa (raw, json)
Hash identifier:          64If0KcOgQkECKwjLUFfwBebfEbl180G/QBGZGw7rXA=
Subject key identifier:   9D:F8:4D:2E:7B:34:57:95:DB:C3:B6:49:31:62:42:5A:2B:A7:19:5D
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       26
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/nfhNLns0V5Xbw7ZJMWJCWiunGV0.roa
Signing time:             Tue 24 May 2022 04:58:24 +0000
ROA not before:           Tue 24 May 2022 04:58:24 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     10019
IP address blocks:        219.105.176.0/20 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: May 24 04:58:24 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=9DF84D2E7B345795DBC3B6493162425A2BA7195D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1a:03:30:b4:ba:26:cb:9a:b8:49:a4:b7:2c:
                    c7:4e:a1:6f:3a:7a:62:2b:61:91:30:a0:c1:db:f4:
                    f2:52:75:d0:e7:53:fe:22:b1:2f:d7:46:ab:f0:b5:
                    41:40:b4:7a:43:6c:26:00:07:8a:d5:c6:e7:83:38:
                    a5:a4:9e:e6:59:87:22:11:55:b9:5a:6f:4c:b9:64:
                    23:37:4e:5e:7a:f1:66:d2:f7:62:fa:12:b4:bf:93:
                    6e:44:12:b0:42:dd:20:c3:8a:bc:58:86:25:ab:73:
                    f3:39:e8:93:bd:e6:23:c4:b2:a7:61:a0:62:53:bc:
                    65:1b:12:8e:46:86:28:68:c2:e4:c4:dd:9a:06:6c:
                    c3:7b:4e:59:4e:15:0e:08:75:3c:97:28:60:9d:1d:
                    e9:4d:ec:94:d3:bc:ca:fa:bc:32:e5:53:6d:28:93:
                    bf:4e:87:31:c4:f1:7c:bb:28:78:22:2e:e6:df:1a:
                    b6:02:e8:bb:03:7b:cf:81:2b:1e:23:73:83:d1:73:
                    cd:5c:ad:8e:a3:c1:c4:05:1c:c5:d1:e7:d1:c1:5e:
                    1d:ad:26:e4:50:ba:30:d8:a9:2c:b1:88:38:21:8e:
                    d8:02:8a:42:e4:66:ff:b7:63:10:72:84:fd:9d:3c:
                    03:7e:2c:f9:b9:8a:1f:10:97:72:f3:f7:c7:2f:8f:
                    d6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F8:4D:2E:7B:34:57:95:DB:C3:B6:49:31:62:42:5A:2B:A7:19:5D
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/nfhNLns0V5Xbw7ZJMWJCWiunGV0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.105.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:1f:24:09:e0:4f:35:0d:42:e8:dd:2d:b5:77:e9:af:58:cc:
         6f:96:f2:da:9a:82:c3:38:70:a0:2c:b8:e2:b9:23:20:38:d7:
         cc:9b:20:9d:53:ea:bd:64:d0:09:f9:d7:55:01:85:d9:50:7f:
         11:26:aa:03:65:be:63:c1:02:3c:7f:8e:8b:02:df:b6:50:0f:
         7a:92:1f:db:60:bb:64:15:3a:78:53:32:58:ce:03:e4:3f:80:
         29:0e:86:da:09:be:59:47:90:36:6f:ea:6a:6c:87:a0:e5:a7:
         f6:ce:d5:06:60:47:99:4d:6e:f0:e0:0b:90:1e:52:56:b9:98:
         25:e3:82:ad:7f:29:3d:59:ae:3c:c4:a1:83:4f:2f:87:3f:a3:
         7a:e9:63:d0:cf:fa:d4:7b:8b:a6:95:ab:02:93:40:36:0d:2b:
         ee:6c:52:68:17:8f:8b:5f:9f:70:14:44:7e:ea:f5:61:6d:15:
         c6:8c:1e:1e:64:db:4f:3a:0b:32:b6:10:ad:a3:e9:0e:8a:a2:
         fc:91:ed:ef:3f:24:e5:5e:5f:1a:09:b4:eb:31:7f:da:b4:d8:
         37:ff:d9:e1:7c:71:93:5c:5e:24:69:0d:b1:b7:0e:cc:3f:92:
         f9:da:70:4c:be:f7:54:94:07:90:c0:fd:1f:cf:06:da:03:ba:
         15:85:9b:41
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBJjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0Mzkx
N0IyMzA3NDUyNEU5RTZFQThFNDBGQTRBMDY3MkM5NjIwMzE4MB4XDTIyMDUyNDA0
NTgyNFoXDTIzMDUxNTAxMzAwNFowMzExMC8GA1UEAxMoOURGODREMkU3QjM0NTc5
NURCQzNCNjQ5MzE2MjQyNUEyQkE3MTk1RDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALIaAzC0uibLmrhJpLcsx06hbzp6YithkTCgwdv08lJ10OdT/iKx
L9dGq/C1QUC0ekNsJgAHitXG54M4paSe5lmHIhFVuVpvTLlkIzdOXnrxZtL3YvoS
tL+TbkQSsELdIMOKvFiGJatz8znok73mI8Syp2GgYlO8ZRsSjkaGKGjC5MTdmgZs
w3tOWU4VDgh1PJcoYJ0d6U3slNO8yvq8MuVTbSiTv06HMcTxfLsoeCIu5t8atgLo
uwN7z4ErHiNzg9FzzVytjqPBxAUcxdHn0cFeHa0m5FC6MNipLLGIOCGO2AKKQuRm
/7djEHKE/Z08A34s+bmKHxCXcvP3xy+P1m0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSd+E0uezRXldvDtkkxYkJaK6cZXTAfBgNVHSMEGDAWgBRDkXsjB0Uk6ebqjkD6
SgZyyWIDGDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDYyL1E1RjdJd2RGSk9ubTZvNUEta29HY3NsaUF4Zy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1E1RjdJd2RGSk9ubTZvNUEta29HY3Ns
aUF4Zy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NjIvbmZoTkxuczBWNVhidzdaSk1XSkNXaXVuR1YwLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBNtpsDANBgkqhkiG9w0BAQsFAAOCAQEALR8kCeBPNQ1C6N0ttXfpr1jMb5by
2pqCwzhwoCy44rkjIDjXzJsgnVPqvWTQCfnXVQGF2VB/ESaqA2W+Y8ECPH+OiwLf
tlAPepIf22C7ZBU6eFMyWM4D5D+AKQ6G2gm+WUeQNm/qamyHoOWn9s7VBmBHmU1u
8OALkB5SVrmYJeOCrX8pPVmuPMShg08vhz+jeulj0M/61HuLppWrApNANg0r7mxS
aBePi1+fcBREfur1YW0VxoweHmTbTzoLMrYQraPpDoqi/JHt7z8k5V5fGgm06zF/
2rTYN//Z4Xxxk1xeJGkNsbcOzD+S+dpwTL73VJQHkMD9H88G2gO6FYWbQQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:28 2025 by rpki-client