Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/9VBRTdDDMnnSFllGbm884ThsaGU.roa
File:                     9VBRTdDDMnnSFllGbm884ThsaGU.roa (raw, json)
Hash identifier:          Ejyoh3/pyEljUPMl5qOirV83bNN7uo35KpjbIHkfeHQ=
Subject key identifier:   F5:50:51:4D:D0:C3:32:79:D2:16:59:46:6E:6F:3C:E1:38:6C:68:65
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       6C
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/9VBRTdDDMnnSFllGbm884ThsaGU.roa
Signing time:             Thu 22 Jun 2023 00:36:56 +0000
ROA not before:           Thu 22 Jun 2023 00:36:56 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.198.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:36:56 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=F550514DD0C33279D21659466E6F3CE1386C6865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:97:60:c1:45:50:ed:39:ed:32:2f:6f:c2:d9:
                    4c:dd:40:c1:24:cc:0a:f2:51:5d:59:f4:ab:a6:09:
                    89:6b:6e:74:4e:36:b7:5d:d0:15:1e:df:d0:d4:bb:
                    f4:19:d0:57:9e:f4:77:45:3c:9d:39:da:74:f7:86:
                    cb:85:4e:dc:a3:81:44:48:55:6e:ea:ad:dc:e5:ff:
                    46:de:1b:62:6e:c0:cf:ec:74:f5:46:36:88:f0:5c:
                    5a:e7:a7:47:c0:44:25:a2:19:5e:f0:47:b6:b8:8e:
                    37:ab:7b:1e:08:41:bc:67:3d:3f:66:ed:12:ef:1f:
                    ff:27:a5:75:07:15:69:5f:30:33:66:c2:4f:f6:79:
                    2f:ac:28:79:68:e6:96:07:3f:5a:e2:7b:20:43:56:
                    3a:b8:b3:bb:fa:6e:83:eb:d3:a2:50:ab:8f:7e:d9:
                    c6:c3:ef:b9:9a:95:02:2b:58:ae:5c:e9:25:f3:72:
                    b8:32:d2:b3:c8:49:fd:de:de:52:f9:4b:a1:50:20:
                    3b:9e:4b:3a:7d:bd:17:a2:1a:cb:64:22:62:50:d3:
                    29:f5:ca:46:c1:21:ed:73:e7:f9:b0:21:04:13:55:
                    da:4d:a5:ce:d6:f6:65:4e:a4:af:da:5a:19:be:66:
                    b2:3b:2a:08:3a:3e:c0:9c:b3:50:7a:d0:a7:c1:73:
                    59:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:50:51:4D:D0:C3:32:79:D2:16:59:46:6E:6F:3C:E1:38:6C:68:65
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/9VBRTdDDMnnSFllGbm884ThsaGU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:04:1d:59:b3:c8:3d:0d:8c:67:97:61:52:5e:2f:a4:cc:22:
         4c:d2:35:23:fd:49:8f:53:1e:36:eb:7b:e5:a8:50:4b:21:30:
         80:e1:b9:e7:f1:5d:61:49:fa:3f:bd:68:ac:0b:d4:72:66:ef:
         9c:75:54:3b:b6:44:ea:5b:3f:cc:00:1d:66:89:d0:73:c2:a2:
         68:d3:d7:21:fc:2f:55:e1:1b:93:81:25:be:bf:ee:fb:5f:5c:
         39:1f:8b:09:95:09:ab:2f:c3:56:97:a7:50:9e:a2:4b:e2:bb:
         d8:ca:5a:99:b1:f8:ff:78:3c:d1:b7:a6:cf:d1:91:72:63:33:
         c8:1d:dd:a7:0e:e9:2b:28:40:c4:dd:88:12:6b:29:00:9d:36:
         e6:b9:eb:9c:45:37:c9:9a:ba:50:5c:f3:74:c5:9d:79:6b:9f:
         a3:1d:fa:5f:39:24:00:b1:e5:84:fc:13:c6:6d:2d:57:f0:71:
         3b:8a:85:d9:72:00:94:7b:89:17:18:be:d2:7f:0d:a2:40:ed:
         54:30:84:4f:cd:8a:f6:fd:fe:57:77:9d:a4:ca:e8:49:7d:35:
         6f:84:66:ba:e2:f4:58:c3:b8:58:72:3d:76:1d:92:02:88:84:
         3c:d7:3d:2c:8d:6d:29:38:db:4f:39:fb:f3:60:dc:03:91:5f:
         eb:7d:4d:65
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:53 2025 by rpki-client