Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/JGI6Lm-gc7cQJrfLZFOImhW9CXQ.roa
File:                     JGI6Lm-gc7cQJrfLZFOImhW9CXQ.roa (raw, json)
Hash identifier:          /SozaRb1oKHEwuigNPdaUEPOiJEY2Y7oH5tpGvRJaws=
Subject key identifier:   24:62:3A:2E:6F:A0:73:B7:10:26:B7:CB:64:53:88:9A:15:BD:09:74
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       31
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/JGI6Lm-gc7cQJrfLZFOImhW9CXQ.roa
Signing time:             Thu 22 Jun 2023 00:34:00 +0000
ROA not before:           Thu 22 Jun 2023 00:34:00 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        122.128.114.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:34:00 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=24623A2E6FA073B71026B7CB6453889A15BD0974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:62:ff:9f:14:97:7e:6c:2a:88:d1:2a:ac:c2:
                    d7:b2:3a:c0:d9:37:83:6a:f3:4d:ec:44:f0:a5:7f:
                    68:1e:7a:b0:0f:b4:63:2e:8e:c3:ae:77:dc:c6:e8:
                    4a:c9:81:5a:62:a5:20:a9:ae:5a:36:bc:96:85:95:
                    a7:5d:2a:40:96:c4:40:47:94:5f:b6:2a:49:70:ff:
                    bf:2d:13:5f:42:16:f9:d8:06:44:52:f4:c3:af:6f:
                    49:9f:45:e3:c5:1d:73:5c:3a:e5:6b:84:52:cf:08:
                    ab:c7:6b:97:35:51:8d:49:93:04:ff:d2:f5:2d:a1:
                    12:4c:dd:1d:9d:9b:62:b4:45:12:24:34:40:42:fb:
                    a4:d0:67:56:1a:a9:65:92:cc:d7:83:3a:15:b3:46:
                    a7:77:3a:16:4a:20:e5:34:6e:3a:ca:c0:4a:39:ad:
                    0e:55:1f:17:ea:a0:58:90:74:83:0d:ef:17:d1:5d:
                    0e:23:c8:b2:aa:d9:c0:77:13:b3:56:fc:04:3e:ee:
                    6b:89:e6:81:b0:02:60:f1:bb:3d:7f:86:b0:1e:f9:
                    3c:6f:c9:a9:2f:3a:56:f6:2d:11:25:80:3d:6b:18:
                    a3:92:ae:36:23:73:96:66:7e:ee:22:2a:16:15:b2:
                    c8:f5:b0:5d:0e:73:58:7c:87:ea:d5:2f:29:17:ba:
                    ff:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:62:3A:2E:6F:A0:73:B7:10:26:B7:CB:64:53:88:9A:15:BD:09:74
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/JGI6Lm-gc7cQJrfLZFOImhW9CXQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.128.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:2d:54:a0:94:f9:c9:47:d0:77:aa:9e:98:79:d2:a3:da:48:
         55:92:de:d8:3a:f4:6b:f0:02:76:3d:02:fb:98:1c:ec:b7:7e:
         1e:31:bb:5d:e5:7b:fe:a9:77:cc:d0:47:7b:3a:f0:8d:4b:85:
         9d:22:ef:03:26:0c:3b:88:aa:e1:1e:11:09:e7:69:84:5d:83:
         9e:c1:84:dc:1d:3a:37:86:fd:85:dd:96:9d:a4:df:41:18:43:
         6a:01:02:18:bb:34:32:24:f8:1a:d6:ec:5f:6a:6b:e1:d9:c7:
         97:f1:d0:a2:a6:bf:ec:a3:56:6d:59:10:20:53:56:2f:63:3a:
         5d:a8:d5:39:db:91:94:d7:7c:24:16:c8:76:41:0b:9c:a5:7d:
         f8:30:d1:65:39:8b:47:ef:ce:f5:a4:12:3b:31:38:c2:ca:bd:
         bf:72:f8:02:45:b5:65:d6:48:b8:4e:eb:b1:5e:ba:47:f9:05:
         1f:7d:c8:4b:47:b0:4b:0a:1d:21:be:48:b9:f5:0f:52:a2:09:
         de:8b:b6:5b:2c:c5:f8:6e:66:9e:ae:77:9b:4d:4c:cc:11:d4:
         8a:5f:e8:56:4e:8d:74:7e:0a:88:32:30:82:83:57:eb:01:4f:
         e5:59:88:1e:c5:21:ef:54:fd:d1:8b:c2:12:55:e2:6f:34:ce:
         ac:67:e3:f7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:29 2025 by rpki-client