Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nNY6kXXMG_IgP-gUViUCL3rXcqE.roa
File:                     nNY6kXXMG_IgP-gUViUCL3rXcqE.roa (raw, json)
Hash identifier:          mPzIJ1eXKh7GX1/gCk7D+nZpzBwYNhI1fTcqUBhLk8k=
Subject key identifier:   9C:D6:3A:91:75:CC:1B:F2:20:3F:E8:14:56:25:02:2F:7A:D7:72:A1
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       32
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nNY6kXXMG_IgP-gUViUCL3rXcqE.roa
Signing time:             Thu 22 Jun 2023 00:34:01 +0000
ROA not before:           Thu 22 Jun 2023 00:34:01 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.184.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:34:01 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=9CD63A9175CC1BF2203FE8145625022F7AD772A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:15:02:a8:85:3b:7b:d5:ad:7d:e0:fd:3a:d9:
                    88:b5:48:3c:6a:77:01:b9:e3:51:15:fc:5f:19:c8:
                    23:91:61:45:b1:9b:6e:c8:a6:0b:17:86:fd:6e:83:
                    fb:4e:60:fe:4a:87:73:f0:5d:85:04:39:1b:d1:7c:
                    03:0a:2a:d0:84:c5:80:ee:13:88:a2:23:6a:bf:21:
                    a7:44:78:76:c3:34:d4:ed:e0:35:b9:83:8b:a9:af:
                    b9:3a:66:5f:d6:ec:dc:fa:e1:06:a3:98:c8:1d:4e:
                    ec:ad:0f:ee:96:02:40:b5:91:29:7f:f5:7e:f7:4f:
                    c6:bd:1b:c8:e5:45:c5:81:5b:d3:32:de:22:79:40:
                    a6:01:d2:07:21:95:b7:8d:ef:b8:58:5f:87:19:f3:
                    51:8b:e3:7c:ea:ea:2a:d7:58:25:fd:7e:50:0b:09:
                    3b:d6:8b:84:65:cd:cf:b1:7b:32:bf:83:64:87:84:
                    0e:59:f1:49:57:b0:84:90:51:5a:8d:1f:fb:1c:6d:
                    ba:26:77:6e:c1:b5:f2:23:fb:08:23:1f:ad:33:1b:
                    91:72:88:58:20:92:c6:96:22:16:46:cf:00:43:58:
                    dd:b8:a9:54:8d:b8:67:3b:24:16:b0:86:3a:e7:6d:
                    16:23:f8:79:3e:cc:32:54:41:76:41:93:da:77:ac:
                    c4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D6:3A:91:75:CC:1B:F2:20:3F:E8:14:56:25:02:2F:7A:D7:72:A1
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nNY6kXXMG_IgP-gUViUCL3rXcqE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:22:dd:1b:b4:fe:95:e2:74:82:57:97:0e:b8:e4:f3:8e:8d:
         50:af:53:34:c8:9e:01:3e:28:37:89:5c:bf:fc:94:92:83:61:
         fe:bd:7c:3e:e5:ae:58:9e:a0:42:96:cf:29:17:96:77:1b:d6:
         a4:c6:ac:e4:b0:4a:27:70:3b:b5:c0:d5:5d:6a:9b:7a:f3:46:
         33:48:a2:6d:07:7a:4d:68:39:38:62:8a:20:e4:2b:ec:5a:f4:
         6c:33:49:36:ee:ec:95:7e:a1:cc:ae:e7:3f:f8:2e:a9:ae:49:
         1a:5d:3c:0e:e0:35:af:6c:95:fa:94:8d:91:50:c2:4d:1d:c9:
         97:14:56:42:b8:49:e4:56:0b:23:0e:ee:00:a5:d2:52:d7:83:
         23:f2:fb:7d:73:e3:4e:08:0a:ea:1f:ef:e6:00:5f:f0:4f:d8:
         41:64:71:6a:d7:e1:4b:6a:93:27:4a:f7:e9:e0:22:2d:13:26:
         e9:64:83:eb:ff:36:4e:89:76:62:f4:b8:61:1e:32:c5:01:ed:
         57:c2:8f:d5:69:7a:b5:5a:db:e9:f2:ca:ed:b1:ec:2c:fe:5b:
         17:71:0f:f5:63:53:21:08:73:8a:93:40:f5:f7:29:89:d9:1e:
         9e:88:7b:b4:67:e0:0f:14:fe:8a:88:c0:fe:81:66:36:25:59:
         23:3c:a4:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:16 2025 by rpki-client