Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/ymtdylEClckBjbqYLKb_Q_pbWHg.roa
File:                     ymtdylEClckBjbqYLKb_Q_pbWHg.roa (raw, json)
Hash identifier:          SE7HvO7GV6CYITOgEcgF+REozUjYnBGvvA28pNSvLDs=
Subject key identifier:   CA:6B:5D:CA:51:02:95:C9:01:8D:BA:98:2C:A6:FF:43:FA:5B:58:78
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       2C
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/ymtdylEClckBjbqYLKb_Q_pbWHg.roa
Signing time:             Thu 22 Jun 2023 00:33:58 +0000
ROA not before:           Thu 22 Jun 2023 00:33:58 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.166.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:33:58 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=CA6B5DCA510295C9018DBA982CA6FF43FA5B5878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d8:46:b2:84:89:4a:fa:a6:08:82:2a:69:ac:
                    8a:9c:cb:f6:62:e2:c4:b0:1d:e9:c6:da:a5:42:97:
                    64:70:82:6f:fb:45:c0:08:ac:64:8c:5f:e7:2d:5d:
                    78:e6:32:7f:bd:08:8a:9c:1a:da:d2:72:77:43:3f:
                    f3:f2:79:75:a0:c3:53:d2:58:35:2e:52:a5:ed:2c:
                    37:93:b9:ba:f8:5f:7c:ed:08:95:42:66:3d:30:d7:
                    b7:33:5e:86:5f:f5:de:ff:5a:c4:51:d3:ab:9c:b7:
                    8d:f1:45:2f:79:d7:95:5a:4a:8a:f0:f0:42:fb:de:
                    ca:a2:e1:9f:11:c2:07:50:75:9d:14:17:50:10:b7:
                    20:23:e8:8d:c0:16:be:40:9c:55:bd:0a:d0:31:6d:
                    80:53:61:a8:62:2d:2d:2e:68:04:6f:ef:63:65:17:
                    1c:8e:58:49:d3:c1:08:c6:bd:8e:71:99:61:28:8b:
                    c8:37:3a:2f:dd:d3:7a:04:60:f1:4d:cb:b1:2a:c3:
                    19:b8:8b:45:91:b0:34:7b:b5:43:1a:e4:0a:a9:b6:
                    43:21:b3:dc:b3:32:a4:9e:7b:c1:04:84:31:7a:c5:
                    dd:65:39:63:f3:06:0a:04:5f:83:9b:f2:07:ff:7b:
                    e4:7b:20:05:32:45:b2:0f:13:33:70:9e:a5:14:42:
                    08:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6B:5D:CA:51:02:95:C9:01:8D:BA:98:2C:A6:FF:43:FA:5B:58:78
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/ymtdylEClckBjbqYLKb_Q_pbWHg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:79:28:ea:24:15:74:90:d6:06:25:1f:1f:68:7d:58:ca:a8:
         3e:9d:7f:94:2b:16:f6:2b:aa:29:6f:24:9c:56:38:bd:58:d5:
         c6:2c:6c:f9:a2:2c:d7:8d:33:87:09:1e:28:1b:47:25:e1:ad:
         ad:41:4d:01:e1:ce:ca:e8:72:9d:98:01:80:79:a0:30:c9:88:
         64:e2:a6:a0:4d:41:dd:df:5d:fd:1b:6a:c1:ed:b3:1e:f1:af:
         38:0d:60:c3:f2:2e:1f:9f:e6:c4:e1:50:55:cb:95:55:e4:c6:
         b0:3a:8e:f8:de:99:9c:40:98:53:f3:9a:0f:98:f5:46:4a:e5:
         60:e2:77:6c:8e:3c:4e:6d:ef:74:d6:eb:f6:1b:96:33:39:8f:
         f9:be:87:55:19:a6:47:30:8d:d9:ed:4f:30:54:90:1e:37:7f:
         cc:cb:12:25:a3:26:4a:26:4f:05:74:15:7b:1d:71:43:c9:d0:
         2b:90:79:47:8f:54:cc:e0:a0:c0:dc:e8:77:96:32:5c:3d:e9:
         25:21:d2:61:3c:b1:21:8e:ab:86:27:92:d1:1e:f1:67:32:c6:
         5c:65:ca:8c:d3:6a:34:c9:c3:fe:2b:f3:e9:12:64:fa:ff:a1:
         dc:21:dd:72:15:2e:bc:30:8f:1d:e5:e5:d6:08:40:89:7a:51:
         5b:34:aa:0b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:13:29 2025 by rpki-client