Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/5WPbWceAjzKFNWVU3oThBE7vfmQ.roa
File:                     5WPbWceAjzKFNWVU3oThBE7vfmQ.roa (raw, json)
Hash identifier:          TMsDfzK017Qjf1MFLSy3Hv+DEd1bkpeX8/xiJXjGCsY=
Subject key identifier:   E5:63:DB:59:C7:80:8F:32:85:35:65:54:DE:84:E1:04:4E:EF:7E:64
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       51
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/5WPbWceAjzKFNWVU3oThBE7vfmQ.roa
Signing time:             Sun 31 Mar 2024 01:30:36 +0000
ROA not before:           Sun 31 Mar 2024 01:30:36 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     4694
IP address blocks:        61.215.208.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 01:30:36 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=E563DB59C7808F3285356554DE84E1044EEF7E64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:91:20:5c:d7:5f:2b:45:40:5d:14:44:5e:bb:
                    ff:50:ce:f1:a8:a1:c8:1d:f0:50:04:82:7b:3e:ea:
                    31:50:11:b2:51:6c:bd:2b:22:f2:bb:06:fb:f0:58:
                    e5:a1:1c:7e:80:e1:80:17:bf:ca:3c:47:f8:9a:bc:
                    08:3b:dc:04:34:04:b5:62:e8:43:24:f0:d7:f3:ca:
                    a4:d9:a3:51:58:5b:62:89:7d:8d:13:31:0f:34:67:
                    3a:0c:36:4f:64:cd:8b:ca:4e:89:18:2c:f9:b9:c2:
                    6a:82:89:5f:69:2c:2d:f9:c1:41:b5:3b:96:7a:a0:
                    6d:bd:e0:2d:d5:8f:0a:60:66:9a:91:3f:70:2d:94:
                    89:11:bc:58:6f:01:32:17:cb:da:58:f1:b7:ff:dc:
                    86:a1:ba:ce:7f:ef:17:36:7b:4c:98:15:50:ef:e2:
                    d1:19:09:59:9c:ae:93:1a:ef:a1:df:6c:f9:1f:f7:
                    75:83:3f:de:c0:55:cc:aa:57:67:e3:a1:71:d9:12:
                    0c:89:b1:84:68:4b:af:61:9c:f9:d9:59:4d:11:76:
                    de:81:87:10:56:82:40:34:29:8b:46:a0:af:42:fc:
                    98:5b:50:e7:5f:ba:c0:4d:5f:7c:5c:4a:11:a3:14:
                    f8:70:60:39:f3:18:c8:f7:59:47:30:2b:56:c7:f5:
                    e2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:63:DB:59:C7:80:8F:32:85:35:65:54:DE:84:E1:04:4E:EF:7E:64
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/5WPbWceAjzKFNWVU3oThBE7vfmQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.215.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:fc:e6:25:5a:c1:02:20:35:18:50:30:ca:19:95:73:db:8b:
         bd:b4:7c:75:c8:b2:b0:48:3f:e0:f7:00:06:56:88:e8:c2:89:
         46:b5:08:63:b9:3d:7b:7b:bc:88:21:97:a0:66:c7:86:0e:7a:
         9c:72:e3:4c:71:d1:9d:eb:82:8d:11:c4:86:c5:4f:42:1d:04:
         b8:49:6c:2b:2a:cd:4a:a0:7c:c1:90:aa:d7:db:21:c0:2a:13:
         1c:00:86:cc:f0:d6:48:91:b9:02:b4:9d:71:37:11:d9:d8:cb:
         01:e7:9c:34:41:14:ae:43:e5:7b:0f:20:49:6f:05:7c:42:d5:
         38:ca:f2:76:b6:ee:cf:9b:61:a8:04:30:1d:a9:bf:1f:2e:a2:
         84:d4:d4:f6:53:eb:1e:ea:9f:60:2d:f2:3f:d6:5c:9a:65:b8:
         a8:37:24:de:eb:53:a5:c6:d9:4d:ae:8a:ed:fa:53:78:08:61:
         d7:90:86:d0:a4:b3:54:f3:63:bc:2e:57:e3:66:05:4f:d5:5f:
         aa:7e:09:73:e2:52:4a:fa:81:73:18:a1:f2:65:cb:f7:dc:58:
         fe:08:4f:0c:28:22:c4:32:be:23:9e:b6:a9:11:15:fb:4c:a6:
         de:36:30:ed:7f:c5:33:89:32:55:23:5a:56:4b:4c:2a:4a:20:
         ed:34:5f:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:29 2025 by rpki-client