Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/PIIqSe8s3Y4A09MBeLvtoFOQDF8.roa
File:                     PIIqSe8s3Y4A09MBeLvtoFOQDF8.roa (raw, json)
Hash identifier:          MWOnDJJFgqpvJBdu3fIPA4gyoQdrpcpTMbk6HL37Jec=
Subject key identifier:   3C:82:2A:49:EF:2C:DD:8E:00:D3:D3:01:78:BB:ED:A0:53:90:0C:5F
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       32
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/PIIqSe8s3Y4A09MBeLvtoFOQDF8.roa
Signing time:             Wed 18 Aug 2021 07:54:26 +0000
ROA not before:           Wed 18 Aug 2021 07:54:26 +0000
ROA not after:            Mon 15 Aug 2022 01:30:03 +0000
asID:                     2518
IP address blocks:        118.108.0.0/14 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Aug 18 07:54:26 2021 GMT
            Not After : Aug 15 01:30:03 2022 GMT
        Subject: CN=3C822A49EF2CDD8E00D3D30178BBEDA053900C5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d1:d1:df:e6:d0:fc:0b:2a:9e:4f:ae:2b:fc:
                    50:61:f9:b4:cb:99:bc:59:43:67:a2:48:c6:64:08:
                    af:49:3f:d3:32:32:68:5f:5e:0a:93:95:b6:f5:44:
                    7c:0e:a5:90:0a:e6:94:b0:17:aa:86:2e:e2:de:ec:
                    07:c2:aa:0b:31:41:f1:ce:04:16:c6:d7:6d:8d:5a:
                    ec:56:fd:5e:51:b8:5c:27:30:e8:ed:fd:0b:3e:b0:
                    f8:02:c5:03:e7:65:73:1c:a3:4e:0b:a8:26:f2:92:
                    48:40:d8:2d:dd:ef:8b:13:24:fb:e5:d2:59:73:d6:
                    a5:85:65:e6:ea:fd:37:07:9a:cb:4e:cf:de:06:b9:
                    22:d0:28:d6:1f:87:11:51:2c:b0:17:f9:ea:7a:c7:
                    c9:7e:ca:37:65:b8:6d:57:85:a6:99:5f:17:f4:7c:
                    28:f3:2a:12:19:fa:77:9b:7e:07:54:d6:e8:bd:86:
                    7f:c2:65:7e:65:58:9d:a8:ce:e2:f2:c8:de:b4:32:
                    d5:aa:ad:b0:f2:c1:fe:f0:30:0d:b7:63:be:ac:f9:
                    74:4e:08:4e:dc:88:ce:78:1e:7b:e9:f7:78:bd:77:
                    96:2a:74:9b:a5:87:8b:58:12:f6:6b:ff:27:e8:65:
                    38:28:6c:9b:e9:a9:82:f9:54:e2:3a:5b:15:bf:cf:
                    f1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:82:2A:49:EF:2C:DD:8E:00:D3:D3:01:78:BB:ED:A0:53:90:0C:5F
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/PIIqSe8s3Y4A09MBeLvtoFOQDF8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.108.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         29:5d:a7:de:2c:b9:6f:7f:a4:11:0a:26:6c:44:a0:95:24:6c:
         6c:d5:4e:aa:2a:3b:e2:6c:8c:56:72:3d:16:c1:ef:ef:a6:ab:
         02:25:b0:2a:1e:03:3d:f0:c1:25:66:c9:4f:9b:75:da:dd:b2:
         f5:32:6d:85:5a:69:14:a5:11:18:72:34:41:b9:e4:fb:b1:75:
         e6:57:4d:70:92:07:2d:56:d6:ca:25:a8:b4:32:11:71:df:79:
         66:e7:6c:2b:a8:81:bb:23:d6:4e:e8:0a:bb:0e:69:d3:af:96:
         3a:bf:d0:0e:b2:84:fb:6f:0e:84:61:3a:f7:8b:9a:cb:85:be:
         40:5d:b0:58:ee:1a:6f:d8:c1:9d:9b:5a:d1:e4:ef:aa:ee:a8:
         6e:ce:3e:5b:81:3a:97:fe:64:8b:e9:27:40:b0:72:15:33:1b:
         b7:b6:a2:83:72:2d:cb:bf:bc:d4:fc:45:48:29:6a:1b:26:f6:
         08:3d:d4:81:22:8c:29:90:33:9f:b9:23:14:55:81:a5:15:9b:
         29:44:6d:55:71:fd:87:18:c9:29:e8:f4:1e:73:49:6c:03:31:
         98:9e:6b:ec:81:cb:7d:2f:c1:09:37:7a:c5:0c:37:14:2c:6e:
         10:29:95:d0:bd:de:0e:b2:94:37:f8:6d:63:fc:03:02:c5:6b:
         a4:84:8c:20
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3QzYw
Mjk1Qzg1RkYzN0UyRENGNzVBRjAxNEQ0NEFEM0JGOEMzM0E0MB4XDTIxMDgxODA3
NTQyNloXDTIyMDgxNTAxMzAwM1owMzExMC8GA1UEAxMoM0M4MjJBNDlFRjJDREQ4
RTAwRDNEMzAxNzhCQkVEQTA1MzkwMEM1RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL/R0d/m0PwLKp5Priv8UGH5tMuZvFlDZ6JIxmQIr0k/0zIyaF9e
CpOVtvVEfA6lkArmlLAXqoYu4t7sB8KqCzFB8c4EFsbXbY1a7Fb9XlG4XCcw6O39
Cz6w+ALFA+dlcxyjTguoJvKSSEDYLd3vixMk++XSWXPWpYVl5ur9Nweay07P3ga5
ItAo1h+HEVEssBf56nrHyX7KN2W4bVeFpplfF/R8KPMqEhn6d5t+B1TW6L2Gf8Jl
fmVYnajO4vLI3rQy1aqtsPLB/vAwDbdjvqz5dE4ITtyIzngee+n3eL13lip0m6WH
i1gS9mv/J+hlOChsm+mpgvlU4jpbFb/P8RMCAwEAAaOCAdgwggHUMB0GA1UdDgQW
BBQ8gipJ7yzdjgDT0wF4u+2gU5AMXzAfBgNVHSMEGDAWgBR8YClchf834tz3WvAU
1ErTv4wzpDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTM5L2ZHQXBYSVhfTi1MYzkxcndGTlJLMDctTU02US5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2ZHQXBYSVhfTi1MYzkxcndGTlJLMDct
TU02US5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85MzkvUElJcVNlOHMzWTRBMDlNQmVMdnRvRk9RREY4LnJvYTAeBggr
BgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAnZsMA0GCSqGSIb3DQEBCwUAA4IBAQAp
XafeLLlvf6QRCiZsRKCVJGxs1U6qKjvibIxWcj0Wwe/vpqsCJbAqHgM98MElZslP
m3Xa3bL1Mm2FWmkUpREYcjRBueT7sXXmV01wkgctVtbKJai0MhFx33lm52wrqIG7
I9ZO6Aq7DmnTr5Y6v9AOsoT7bw6EYTr3i5rLhb5AXbBY7hpv2MGdm1rR5O+q7qhu
zj5bgTqX/mSL6SdAsHIVMxu3tqKDci3Lv7zU/EVIKWobJvYIPdSBIowpkDOfuSMU
VYGlFZspRG1Vcf2HGMkp6PQec0lsAzGYnmvsgct9L8EJN3rFDDcULG4QKZXQvd4O
spQ3+G1j/AMCxWukhIwg
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:52 2025 by rpki-client