Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/bqVRYi9xG8thaKDa2iC23SRXxU8.roa
File:                     bqVRYi9xG8thaKDa2iC23SRXxU8.roa (raw, json)
Hash identifier:          M9JVRjCsuOpDWrAguL2A3Kr5h6YEHDQMAQsTJzwtoFQ=
Subject key identifier:   6E:A5:51:62:2F:71:1B:CB:61:68:A0:DA:DA:20:B6:DD:24:57:C5:4F
Certificate issuer:       /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Certificate serial:       2A
Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/bqVRYi9xG8thaKDa2iC23SRXxU8.roa
Signing time:             Tue 25 May 2021 02:26:53 +0000
ROA not before:           Tue 25 May 2021 02:26:53 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     45680
IP address blocks:        103.235.40.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
        Validity
            Not Before: May 25 02:26:53 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=6EA551622F711BCB6168A0DADA20B6DD2457C54F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:1e:8b:f4:20:a8:d0:cb:2f:3b:e6:a4:ff:9b:
                    e4:1a:85:d6:b4:47:20:c0:df:e6:88:99:ff:45:31:
                    0a:de:e8:9d:db:e8:4c:2e:fb:9a:9f:74:cb:e9:8c:
                    61:7a:d0:03:4b:8c:fa:dd:05:1b:11:91:35:aa:ae:
                    df:95:8f:b8:a6:11:27:27:10:ed:49:25:c8:30:28:
                    7e:20:19:1b:fb:ff:37:79:9d:58:17:00:4a:fb:78:
                    6d:c3:ba:ef:35:80:3d:5e:c9:ab:3d:57:fe:a1:3f:
                    9f:d4:83:ca:e7:6d:51:d2:96:52:fd:62:ef:4d:6e:
                    dd:67:37:4a:75:fb:7f:8b:5c:d2:f8:39:04:e4:fe:
                    a7:d6:7c:e4:2a:59:21:10:6b:3c:29:32:1f:d6:b1:
                    77:41:62:cb:7a:40:a9:ff:9e:b9:44:b8:a0:6c:b8:
                    ea:ad:6a:7f:0a:10:de:f4:14:77:b9:c9:e5:c5:56:
                    63:bf:0b:d6:00:2c:ff:76:36:68:28:bc:cc:2a:84:
                    68:e9:9f:90:0c:2b:cf:58:b6:0d:14:81:d7:c9:af:
                    9c:e2:b4:12:3b:52:fb:05:ec:9b:97:54:b9:24:36:
                    49:4f:e8:55:c8:d3:8c:3e:56:2f:a7:12:9c:ee:90:
                    f4:aa:aa:40:fc:d2:d5:9e:83:b8:42:85:94:4a:24:
                    1d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A5:51:62:2F:71:1B:CB:61:68:A0:DA:DA:20:B6:DD:24:57:C5:4F
            X509v3 Authority Key Identifier:
                keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/bqVRYi9xG8thaKDa2iC23SRXxU8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.235.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:8b:40:86:ea:17:0a:3d:06:59:2e:fc:5c:b2:75:23:4d:3b:
         77:fc:09:40:0d:4e:b7:5e:38:b5:f2:7c:e8:34:04:ce:40:0e:
         e1:d1:84:ad:14:23:20:f6:27:28:51:1a:7b:59:df:5e:39:fe:
         16:50:2a:21:0d:a5:fe:62:f8:91:7b:35:52:f0:ff:0c:2b:d0:
         53:c7:c8:ef:eb:a9:93:c0:86:cd:d2:f9:c4:21:5f:d7:3c:65:
         37:13:7f:6c:32:e4:0f:cb:be:47:c5:65:e6:a6:23:0f:a1:bb:
         82:aa:5f:4e:8e:66:f3:8d:3b:d6:b4:ae:64:29:cc:6c:44:1e:
         2e:e7:07:c4:98:7d:5a:25:92:11:de:51:95:c2:4d:1a:a0:6b:
         bf:2e:32:b5:47:02:19:d5:75:a5:0e:c0:dd:42:0b:f1:08:05:
         e3:38:04:f5:3f:e8:91:ca:c5:b8:a9:93:f2:e1:c4:43:20:9c:
         98:79:65:4c:6c:b2:ee:13:a2:1d:3a:df:02:98:48:38:80:75:
         8a:38:bd:d9:13:6b:62:18:2f:2b:09:79:00:f5:29:1c:29:ba:
         70:5f:d2:ef:09:19:c4:e7:35:fc:e4:f6:c2:3e:e6:8c:32:96:
         08:41:7a:c4:e1:85:11:44:28:da:9b:9d:45:27:de:8f:2f:25:
         21:44:db:74
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDI2
RTBEMTdFMzBEOEJGNTcxNEY0QkE5MkVFRUIwRDIyREREQjFEMB4XDTIxMDUyNTAy
MjY1M1oXDTIyMDUxNTAxMzAwMlowMzExMC8GA1UEAxMoNkVBNTUxNjIyRjcxMUJD
QjYxNjhBMERBREEyMEI2REQyNDU3QzU0RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPIei/QgqNDLLzvmpP+b5BqF1rRHIMDf5oiZ/0UxCt7ondvoTC77
mp90y+mMYXrQA0uM+t0FGxGRNaqu35WPuKYRJycQ7UklyDAofiAZG/v/N3mdWBcA
Svt4bcO67zWAPV7Jqz1X/qE/n9SDyudtUdKWUv1i701u3Wc3SnX7f4tc0vg5BOT+
p9Z85CpZIRBrPCkyH9axd0Fiy3pAqf+euUS4oGy46q1qfwoQ3vQUd7nJ5cVWY78L
1gAs/3Y2aCi8zCqEaOmfkAwrz1i2DRSB18mvnOK0EjtS+wXsm5dUuSQ2SU/oVcjT
jD5WL6cSnO6Q9KqqQPzS1Z6DuEKFlEokHYMCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBRupVFiL3Eby2FooNraILbdJFfFTzAfBgNVHSMEGDAWgBSNJuDRfjDYv1cU9LqS
7usNIt3bHTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTg5L2pTYmcwWDR3Mkw5WEZQUzZrdTdyRFNMZDJ4MC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pTYmcwWDR3Mkw5WEZQUzZrdTdyRFNM
ZDJ4MC5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC85ODkvYnFWUllpOXhHOHRoYUtEYTJpQzIzU1JYeFU4LnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmfrKDANBgkqhkiG9w0BAQsFAAOCAQEA
N4tAhuoXCj0GWS78XLJ1I007d/wJQA1Ot144tfJ86DQEzkAO4dGErRQjIPYnKFEa
e1nfXjn+FlAqIQ2l/mL4kXs1UvD/DCvQU8fI7+upk8CGzdL5xCFf1zxlNxN/bDLk
D8u+R8Vl5qYjD6G7gqpfTo5m84071rSuZCnMbEQeLucHxJh9WiWSEd5RlcJNGqBr
vy4ytUcCGdV1pQ7A3UIL8QgF4zgE9T/okcrFuKmT8uHEQyCcmHllTGyy7hOiHTrf
AphIOIB1iji92RNrYhgvKwl5APUpHCm6cF/S7wkZxOc1/OT2wj7mjDKWCEF6xOGF
EUQo2pudRSfejy8lIUTbdA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:00 2025 by rpki-client