Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/Yngs1OLDd7Z1aO2hvXjSzrzWz9I.roa
File:                     Yngs1OLDd7Z1aO2hvXjSzrzWz9I.roa (raw, json)
Hash identifier:          kmrZzyCX7hQijx1crTVOlsQxjpQMWV5iai1kIn2+xdY=
Subject key identifier:   62:78:2C:D4:E2:C3:77:B6:75:68:ED:A1:BD:78:D2:CE:BC:D6:CF:D2
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       03
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/Yngs1OLDd7Z1aO2hvXjSzrzWz9I.roa
Signing time:             Thu 17 Jun 2021 09:41:57 +0000
ROA not before:           Thu 17 Jun 2021 09:41:57 +0000
ROA not after:            Wed 15 Jun 2022 01:30:03 +0000
asID:                     24277
IP address blocks:        115.166.160.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 17 09:41:57 2021 GMT
            Not After : Jun 15 01:30:03 2022 GMT
        Subject: CN=62782CD4E2C377B67568EDA1BD78D2CEBCD6CFD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ff:c2:68:c1:09:84:ad:c2:29:ec:6d:bb:2f:
                    88:81:69:36:b6:0b:4b:b4:04:70:c5:a5:c5:89:22:
                    df:67:1c:32:68:e4:9e:b8:9d:a3:55:95:37:84:7c:
                    57:e3:d9:38:04:81:76:f4:2b:28:a6:71:b3:4a:85:
                    cd:68:18:04:4c:bc:63:d7:a8:da:3a:80:b3:6b:70:
                    2a:e6:17:c6:be:42:47:00:1b:39:62:01:9c:c9:ba:
                    49:3d:21:a2:b0:12:33:79:a2:34:4e:ba:88:cb:ec:
                    92:b8:55:03:81:45:17:76:44:2f:ba:eb:f9:f7:31:
                    22:ab:b1:a1:8d:14:cf:f2:47:1b:3b:bb:fd:94:5d:
                    33:8d:2e:dd:3d:ef:9a:36:e1:ba:2b:ac:59:cd:3e:
                    e8:a7:ea:bc:72:c0:0f:a2:69:3a:f5:ff:50:0b:79:
                    72:a4:1a:68:16:54:56:ae:ed:48:20:71:41:4f:27:
                    53:a8:a6:d0:06:d0:92:b6:de:dc:32:06:1f:51:c6:
                    5a:d7:d7:82:33:c5:0a:92:7a:aa:d6:c3:09:ef:8d:
                    05:b5:1d:f4:0c:1a:2e:9f:4f:55:cb:64:43:f1:22:
                    0a:9d:90:8a:99:be:b1:f0:af:11:02:d6:f5:12:7d:
                    b4:1b:10:4c:99:8a:f2:11:3a:82:0b:c2:97:d5:49:
                    0d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:78:2C:D4:E2:C3:77:B6:75:68:ED:A1:BD:78:D2:CE:BC:D6:CF:D2
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/Yngs1OLDd7Z1aO2hvXjSzrzWz9I.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         44:57:c3:91:ee:5e:07:9e:aa:ca:c3:36:1c:c4:b0:66:da:b0:
         82:15:db:b9:29:02:3c:49:d4:24:1c:4d:71:91:6a:0b:65:5b:
         e1:2a:33:4a:f8:4e:e9:a5:09:af:b0:3b:39:b8:9c:da:8d:03:
         13:b9:e5:6b:39:5f:5f:5e:e7:87:90:07:a2:8e:4e:49:9f:6e:
         6c:c6:79:ae:8b:9f:d1:8e:74:eb:7b:bd:e7:3b:a4:fb:e5:69:
         56:8c:4c:15:06:5d:7e:5d:c8:95:2e:b1:0a:fb:c0:c1:63:50:
         30:39:46:96:4a:f1:12:d4:2d:6a:1b:67:92:9c:41:93:27:4c:
         50:5e:a1:1b:46:01:63:43:f3:24:89:1c:09:9a:25:4d:2a:fd:
         f0:ee:98:f3:85:f5:9d:af:e3:63:18:b4:5e:da:ec:99:ca:aa:
         d5:39:3a:12:ec:f7:e4:c9:56:25:26:f5:cd:92:d3:27:ae:aa:
         b7:ff:7a:dd:4a:0c:85:d0:70:3b:d5:8e:f3:1e:c1:9c:cd:8d:
         d0:2f:9d:ba:02:b1:fc:ce:79:31:2c:72:a3:0a:73:73:0c:47:
         6d:6a:5f:a9:a4:6e:07:78:ef:8e:30:66:19:25:3c:13:39:bd:
         f9:41:5f:b0:0b:74:88:7f:28:63:f0:54:1f:96:74:0a:e6:6a:
         e4:6e:a8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:35 2025 by rpki-client