Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/qW7EnqfG-gIvGOD0UQ7mJsDNWL0.roa
File:                     qW7EnqfG-gIvGOD0UQ7mJsDNWL0.roa (raw, json)
Hash identifier:          LjWJS3F2M4cnLF+y4UdBJp8zrPJCnjUgRn7urDi0vAw=
Subject key identifier:   A9:6E:C4:9E:A7:C6:FA:02:2F:18:E0:F4:51:0E:E6:26:C0:CD:58:BD
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01A7
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/qW7EnqfG-gIvGOD0UQ7mJsDNWL0.roa
Signing time:             Sun 31 Mar 2024 01:29:03 +0000
ROA not before:           Sun 31 Mar 2024 01:29:03 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     4713
IP address blocks:        61.112.0.0/15 maxlen: 15
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar 31 01:29:03 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=A96EC49EA7C6FA022F18E0F4510EE626C0CD58BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e6:ea:4b:7c:b0:2c:e4:f0:ab:3c:13:e0:53:
                    c5:17:0e:ab:8c:92:01:1c:1f:0a:29:82:20:87:9b:
                    68:35:50:1c:65:01:d7:eb:be:0c:7f:63:b5:1a:3f:
                    de:9e:29:f4:82:e8:e2:8e:bd:6e:7e:59:43:eb:4b:
                    3b:35:d4:8e:21:14:9d:96:b1:4f:4e:7e:ed:90:08:
                    01:bc:b7:1c:53:e7:14:0a:92:bd:f8:89:5e:c8:90:
                    ea:86:02:c2:ef:b1:59:1d:10:21:ee:10:5a:26:63:
                    04:54:26:53:10:fb:0c:9f:2d:24:6f:2f:36:ea:89:
                    bd:2e:6c:65:93:55:66:57:f2:b4:31:01:f3:8d:a4:
                    c5:09:8f:fd:fe:8b:a0:55:85:d2:8f:99:e0:d8:6b:
                    8e:d4:07:2e:88:14:e1:e8:ca:40:5a:73:5d:49:7c:
                    04:6c:56:57:08:14:6c:3e:b9:dd:eb:4e:50:9a:2d:
                    e1:22:77:27:a6:df:c0:03:1c:43:7f:b0:d0:fe:72:
                    e7:26:d5:6a:04:05:c0:1b:69:99:cc:b0:fb:df:ca:
                    83:1a:a1:54:c6:4f:8e:9e:89:a1:95:db:22:b1:ed:
                    83:0b:47:66:9e:9d:f2:3e:b8:18:e8:18:b5:8e:ea:
                    4d:69:19:59:f0:a3:34:f6:e3:0e:c9:97:b9:0e:77:
                    81:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6E:C4:9E:A7:C6:FA:02:2F:18:E0:F4:51:0E:E6:26:C0:CD:58:BD
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/qW7EnqfG-gIvGOD0UQ7mJsDNWL0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.112.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         6b:f9:62:a3:12:7c:0f:50:66:94:ab:5b:82:2d:a0:d2:88:45:
         c3:62:52:a4:16:4d:b3:28:d9:80:25:10:9b:31:6d:ce:f5:d8:
         9d:1e:4d:33:88:5d:06:dc:56:97:bb:b6:d8:d2:d6:2c:7e:a2:
         d2:1d:30:c6:53:10:e6:39:2a:e0:90:ff:2b:2c:8a:dd:12:dc:
         20:ac:73:01:7a:b5:ba:4b:98:b2:c3:e1:94:8e:6b:e5:a3:7f:
         3b:b0:71:e7:d7:46:9b:92:2f:80:ff:33:e9:94:87:98:db:af:
         56:2b:16:ca:b7:fc:84:c5:7b:42:ad:b3:d3:52:54:b5:2b:32:
         43:53:e9:fb:ab:6e:3a:92:60:a9:e2:96:95:64:8b:f1:22:43:
         6d:ee:1a:08:11:47:8a:3e:a2:e8:ab:46:3e:bb:1c:8e:66:7c:
         ac:58:f8:63:3f:7f:2d:42:89:09:5d:20:ca:40:02:f9:b6:18:
         36:12:28:22:f4:60:8c:69:76:4b:c7:c0:c0:b5:25:16:51:c7:
         92:1d:c9:05:e9:e5:b4:a2:ff:47:9f:9f:c8:3a:05:a6:95:f2:
         f0:5e:76:de:0a:2a:85:b5:81:c7:d5:af:1b:d9:49:cb:81:82:
         3c:be:c9:e4:af:fc:a6:dd:2b:df:a3:ab:e3:94:a7:fe:5b:be:
         04:23:e3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:34 2025 by rpki-client