Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/9Xd8xM5D39q27Ly1wSksQWGE10s.roa
File:                     9Xd8xM5D39q27Ly1wSksQWGE10s.roa (raw, json)
Hash identifier:          xwpOA3phuSYiEP5v152KfOVocNJnTAgwtbsRg8nZPSo=
Subject key identifier:   F5:77:7C:C4:CE:43:DF:DA:B6:EC:BC:B5:C1:29:2C:41:61:84:D7:4B
Certificate issuer:       /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Certificate serial:       05
Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/9Xd8xM5D39q27Ly1wSksQWGE10s.roa
Signing time:             Wed 02 Aug 2023 02:02:57 +0000
ROA not before:           Wed 02 Aug 2023 02:02:57 +0000
ROA not after:            Thu 01 Aug 2024 01:47:14 +0000
asID:                     24259
IP address blocks:        133.88.84.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
        Validity
            Not Before: Aug  2 02:02:57 2023 GMT
            Not After : Aug  1 01:47:14 2024 GMT
        Subject: CN=F5777CC4CE43DFDAB6ECBCB5C1292C416184D74B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:17:1d:b1:19:7e:4a:0d:fb:5c:0d:41:dd:6b:
                    f3:3a:51:8f:b7:2d:52:3e:89:01:8d:25:fd:44:28:
                    29:a4:7e:a3:f0:bd:da:78:4c:1c:b1:63:39:0d:c7:
                    b5:69:98:91:8a:27:f2:2b:01:1b:c0:8f:59:21:f9:
                    ae:7c:ca:5a:5c:e8:fe:ba:df:c4:d9:f0:2a:4a:6f:
                    5f:7e:38:73:12:92:6c:b8:1f:a1:d3:0e:32:c6:39:
                    ba:62:3f:e0:4e:04:8c:ce:b3:c0:5a:f8:2f:b3:fc:
                    ba:9b:c8:e3:57:b9:0f:70:46:ed:8b:81:28:37:b3:
                    f3:a4:e4:de:b8:d1:f1:c2:06:e3:bb:0e:39:e0:f6:
                    b1:a4:f2:7b:c8:df:12:06:22:1e:f6:0e:c1:7c:89:
                    de:7d:02:6a:70:a3:6f:af:e7:c1:7a:c5:b4:03:40:
                    74:b8:24:7e:95:9e:e7:4e:5f:86:f6:cf:b1:66:60:
                    fa:1a:d1:10:39:80:43:75:ad:2d:16:a1:18:48:45:
                    7d:2e:39:60:10:8a:fc:02:89:7c:5f:21:c6:bd:77:
                    58:f6:e3:7d:0d:a8:b2:24:5b:c4:26:ef:ed:79:b8:
                    87:ef:bf:09:31:e1:38:0b:b0:e6:e7:54:42:11:67:
                    40:f9:61:05:ce:55:f7:87:50:c2:53:16:6e:25:ae:
                    ca:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:77:7C:C4:CE:43:DF:DA:B6:EC:BC:B5:C1:29:2C:41:61:84:D7:4B
            X509v3 Authority Key Identifier:
                keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/9Xd8xM5D39q27Ly1wSksQWGE10s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.88.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:a3:86:47:af:38:89:3c:10:f7:17:db:50:67:42:01:7f:89:
         e7:a7:94:9d:c7:1c:4a:9a:24:1e:53:8d:4a:c9:b1:5f:df:b8:
         0f:4e:9d:3d:eb:d4:78:43:a7:16:7d:16:6d:a7:06:a1:07:60:
         34:b6:30:7f:f3:88:2c:5e:3a:e6:b6:8d:d9:5e:49:81:8b:8b:
         06:de:b9:ca:fe:8f:a1:b4:95:a3:cf:b4:f1:9c:a5:d1:02:ef:
         ae:98:1c:69:8e:99:ac:49:cc:8f:d1:3c:be:9d:c5:4f:53:9f:
         88:be:87:a9:ff:bd:ec:a1:11:ce:d1:92:d6:86:77:20:5c:35:
         ca:40:73:d7:3f:86:b9:fb:8a:6e:77:36:75:77:06:03:0d:1a:
         fd:f1:0c:25:ce:26:79:d5:f1:23:ee:8b:38:fe:05:aa:92:eb:
         2b:ef:99:10:41:22:fa:a9:ab:6f:fe:0c:81:67:59:fc:fa:82:
         11:15:4f:96:fd:e1:96:c2:10:4b:2e:50:fe:06:ef:2b:8c:c5:
         4f:e8:5d:ef:e1:5a:65:6a:4c:20:5e:85:ff:28:84:3d:db:91:
         26:22:7d:83:52:91:a1:4e:92:be:29:2e:af:2d:b0:42:2f:8a:
         90:68:52:9e:f7:53:52:9f:d4:b8:c7:6e:e9:f3:85:7b:ed:15:
         04:43:4b:b2
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MzlC
REYyRkUxOEZGMzg3RkQwMzg0MkM1MDgxQTE0NUVFRUIxQ0Y3MB4XDTIzMDgwMjAy
MDI1N1oXDTI0MDgwMTAxNDcxNFowMzExMC8GA1UEAxMoRjU3NzdDQzRDRTQzREZE
QUI2RUNCQ0I1QzEyOTJDNDE2MTg0RDc0QjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJkXHbEZfkoN+1wNQd1r8zpRj7ctUj6JAY0l/UQoKaR+o/C92nhM
HLFjOQ3HtWmYkYon8isBG8CPWSH5rnzKWlzo/rrfxNnwKkpvX344cxKSbLgfodMO
MsY5umI/4E4EjM6zwFr4L7P8upvI41e5D3BG7YuBKDez86Tk3rjR8cIG47sOOeD2
saTye8jfEgYiHvYOwXyJ3n0CanCjb6/nwXrFtANAdLgkfpWe505fhvbPsWZg+hrR
EDmAQ3WtLRahGEhFfS45YBCK/AKJfF8hxr13WPbjfQ2osiRbxCbv7Xm4h++/CTHh
OAuw5udUQhFnQPlhBc5V94dQwlMWbiWuyi0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBT1d3zEzkPf2rbsvLXBKSxBYYTXSzAfBgNVHSMEGDAWgBRTm98v4Y/zh/0DhCxQ
gaFF7usc9zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTA2L1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3ckhQYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3
ckhQYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85MDYvOVhkOHhNNUQzOXEyN0x5MXdTa3NRV0dFMTBzLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAYVYVDANBgkqhkiG9w0BAQsFAAOCAQEAiKOGR684iTwQ9xfbUGdCAX+J56eU
ncccSpokHlONSsmxX9+4D06dPevUeEOnFn0WbacGoQdgNLYwf/OILF465raN2V5J
gYuLBt65yv6PobSVo8+08Zyl0QLvrpgcaY6ZrEnMj9E8vp3FT1OfiL6Hqf+97KER
ztGS1oZ3IFw1ykBz1z+GufuKbnc2dXcGAw0a/fEMJc4medXxI+6LOP4FqpLrK++Z
EEEi+qmrb/4MgWdZ/PqCERVPlv3hlsIQSy5Q/gbvK4zFT+hd7+FaZWpMIF6F/yiE
PduRJiJ9g1KRoU6Svikury2wQi+KkGhSnvdTUp/UuMdu6fOFe+0VBENLsg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:45 2025 by rpki-client