Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/VMCGVm6Lv1dOOJ_Abkujo3rV4BQ.roa
File:                     VMCGVm6Lv1dOOJ_Abkujo3rV4BQ.roa (raw, json)
Hash identifier:          G6UXb+0/MlRqHIDQo/F9XMkAOfc8KbfohFAM/npc8CU=
Subject key identifier:   54:C0:86:56:6E:8B:BF:57:4E:38:9F:C0:6E:4B:A3:A3:7A:D5:E0:14
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       35
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/VMCGVm6Lv1dOOJ_Abkujo3rV4BQ.roa
Signing time:             Thu 22 Jun 2023 00:34:01 +0000
ROA not before:           Thu 22 Jun 2023 00:34:01 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        122.128.112.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:34:01 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=54C086566E8BBF574E389FC06E4BA3A37AD5E014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8a:44:63:62:a6:84:f4:65:ea:35:f5:76:ae:
                    d1:1b:d2:11:1c:0e:ad:b0:6f:fa:b0:b1:30:b5:f4:
                    3f:63:47:65:81:4b:18:40:b1:0e:6b:09:43:21:a6:
                    9b:09:b7:23:47:d0:4d:c2:a5:4d:bc:f1:38:c2:5c:
                    ab:93:cd:b7:0a:2a:f7:91:52:67:21:8d:f1:d7:37:
                    47:5d:14:23:b1:ae:1e:91:53:18:45:67:21:f8:9e:
                    f6:e6:c7:de:c6:b8:7b:57:d3:82:95:79:7b:4b:15:
                    55:0f:75:ee:1a:ca:79:82:c9:8f:07:25:3e:ba:a1:
                    89:42:fd:57:08:48:29:0c:21:66:78:7c:e9:73:7c:
                    7c:00:20:2e:8b:3c:28:69:86:ac:e4:01:3a:6b:e8:
                    ee:52:f5:61:61:67:e5:b5:b1:25:f6:b3:32:52:e1:
                    f3:41:5f:3a:39:47:af:33:85:66:df:f7:cd:0d:11:
                    a1:a8:c5:c5:9c:8a:33:ef:9f:76:41:3a:7f:bf:f7:
                    ee:13:41:f8:53:b7:87:3e:2f:24:9a:4e:98:59:1c:
                    83:64:23:9c:35:19:42:75:98:ab:e6:21:d9:44:67:
                    d5:0c:e4:38:d4:85:8d:f2:06:49:6a:91:cc:bf:e9:
                    25:8a:b4:da:ee:94:5f:4e:31:12:dd:8b:11:93:c5:
                    1b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C0:86:56:6E:8B:BF:57:4E:38:9F:C0:6E:4B:A3:A3:7A:D5:E0:14
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/VMCGVm6Lv1dOOJ_Abkujo3rV4BQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.128.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         18:f9:85:63:8e:00:bc:8f:15:59:85:7d:5e:44:02:8a:fd:f3:
         00:49:8b:68:cf:03:fb:62:62:9c:09:4e:a8:2c:31:48:a1:c2:
         f7:e2:f1:33:b6:ac:4b:ba:65:ce:87:9d:76:a8:0e:4e:ce:97:
         c2:e8:e4:af:d4:05:26:78:f4:0a:32:8a:13:e4:3b:1f:bf:bf:
         20:bb:fa:2e:87:a6:7c:c6:81:0e:49:0d:aa:06:fa:6f:b3:23:
         ee:8a:e9:ad:e5:51:f5:26:66:78:eb:e0:1c:29:a9:ef:03:44:
         29:ec:3f:39:fc:53:11:22:39:5b:bd:eb:50:f1:c9:f2:8e:b7:
         a5:21:09:29:e9:61:ba:eb:7a:7f:6a:3e:73:02:00:db:0a:df:
         42:31:cd:48:3a:d3:36:db:6d:1e:af:0e:3e:94:2e:49:4a:6c:
         4d:7f:1d:b5:10:01:05:26:7b:02:55:da:df:aa:49:5f:d9:ed:
         be:24:01:ed:5b:7d:f5:85:0b:80:64:3d:04:6f:11:13:e2:28:
         ce:d9:f1:b3:1e:2b:1e:ce:61:ef:f5:29:3c:5c:b2:12:11:9d:
         b5:71:75:55:b8:7c:98:89:61:53:8a:25:92:f4:bd:e3:ef:8f:
         cb:5b:e6:62:eb:0b:2c:41:95:c3:63:45:4d:c0:c5:64:e4:ac:
         af:40:ac:53
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:22 2025 by rpki-client