Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/-6UZQx-mUgUZ1MuSZSc9e5aNCag.roa
File:                     -6UZQx-mUgUZ1MuSZSc9e5aNCag.roa (raw, json)
Hash identifier:          51qGSbMWF4rGN9qWW/vwKK3nFSUYTwTDcYDv2yYzG0k=
Subject key identifier:   FB:A5:19:43:1F:A6:52:05:19:D4:CB:92:65:27:3D:7B:96:8D:09:A8
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       74
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/-6UZQx-mUgUZ1MuSZSc9e5aNCag.roa
Signing time:             Thu 22 Jun 2023 00:36:59 +0000
ROA not before:           Thu 22 Jun 2023 00:36:59 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.179.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:36:59 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=FBA519431FA6520519D4CB9265273D7B968D09A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:66:b1:e9:33:21:73:8f:4c:55:68:b0:f3:4d:
                    df:91:7e:84:5b:0c:ee:52:a3:63:cf:a1:c5:ec:09:
                    75:2f:92:37:e3:c4:9e:fd:0d:ee:fd:a5:18:89:ac:
                    59:3d:c6:4f:06:1e:90:c1:39:1d:d7:09:b8:af:2c:
                    f0:3a:25:d8:10:56:ce:ab:f0:db:51:cd:a9:61:38:
                    79:71:b7:ec:0e:83:43:c4:6e:e4:03:ea:c8:e0:11:
                    24:46:89:cd:09:59:34:27:68:22:58:f2:be:da:98:
                    0a:2f:ed:70:cb:aa:fd:7a:72:ba:34:56:c2:9b:4c:
                    7b:c9:23:a4:ff:69:f7:3d:a6:4e:47:84:a5:16:a4:
                    e6:45:7c:71:4b:4d:b4:c6:8b:05:78:05:7c:e1:81:
                    29:61:00:9f:72:de:bb:f6:7e:52:ff:cd:88:4f:dc:
                    b2:f6:76:09:38:a3:59:80:ba:3e:d1:d2:e5:da:82:
                    cc:b0:a8:80:fc:f6:6d:ee:8c:e2:98:48:68:58:3d:
                    14:ec:2a:7f:08:21:dc:26:7b:6d:38:83:97:67:1a:
                    84:cd:79:eb:03:1d:c4:d9:5f:28:56:20:05:59:30:
                    67:c8:d2:22:7c:7d:b2:04:6c:0b:19:7a:b2:8f:37:
                    da:39:8c:36:ef:a7:ac:65:58:a9:bb:5d:89:b1:8c:
                    fd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A5:19:43:1F:A6:52:05:19:D4:CB:92:65:27:3D:7B:96:8D:09:A8
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/-6UZQx-mUgUZ1MuSZSc9e5aNCag.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:b6:53:ed:1b:69:65:e4:73:27:f4:78:64:05:bc:b2:25:3d:
         81:d3:15:1e:15:62:e8:a9:67:e7:c4:bb:6b:e7:fe:a5:ea:c7:
         8f:02:55:e9:9a:53:55:4c:ff:38:1c:c0:63:7e:a3:17:47:24:
         90:08:9f:19:13:1d:31:6c:30:83:35:0c:f7:4b:74:de:9c:43:
         ad:e8:b9:82:67:cd:d8:78:f4:b3:2f:9c:91:c0:50:df:99:0f:
         46:3e:96:81:98:22:21:f9:95:6d:42:75:79:57:d3:ca:6a:f4:
         82:f1:8d:4c:b6:0e:51:af:be:02:3f:ff:e1:b8:9c:8c:66:09:
         05:5d:93:0d:ea:ec:9f:4d:ab:f5:b8:78:66:c6:58:38:bf:a4:
         5a:27:4c:8b:7e:4c:77:05:a7:ab:d5:27:32:05:03:38:cf:dd:
         3e:7d:da:e6:f0:3f:37:f4:d0:1b:aa:51:18:47:c5:82:36:f5:
         77:dd:d0:e2:49:4e:ab:42:90:c4:b6:45:60:3c:1b:ac:bc:e9:
         0a:a4:38:fc:95:50:8e:2b:73:e6:27:ee:93:63:87:17:56:ae:
         1b:39:45:ae:46:95:01:d0:4a:52:36:8e:a9:19:43:19:a0:c0:
         c0:e8:ea:32:2f:f3:cd:a7:79:20:fc:73:c9:5b:78:50:e3:ff:
         f6:75:6b:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:17:24 2025 by rpki-client