Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20099/_utX5de0Y4YQW2caau5sASEBBmc.roa
File:                     _utX5de0Y4YQW2caau5sASEBBmc.roa (raw, json)
Hash identifier:          ZQ8/8DTD+SRvwlBVHMpgFnI4bKPYEMbGyPoWYU6NqhQ=
Subject key identifier:   FE:EB:57:E5:D7:B4:63:86:10:5B:67:1A:6A:EE:6C:01:21:01:06:67
Certificate issuer:       /CN=2327CD1B4F1F8B8956861597E494314A68561591
Certificate serial:       24
Authority key identifier: 23:27:CD:1B:4F:1F:8B:89:56:86:15:97:E4:94:31:4A:68:56:15:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IyfNG08fi4lWhhWX5JQxSmhWFZE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/_utX5de0Y4YQW2caau5sASEBBmc.roa
Signing time:             Fri 12 Apr 2024 01:51:12 +0000
ROA not before:           Fri 12 Apr 2024 01:51:12 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     131966
IP address blocks:        103.141.94.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2327CD1B4F1F8B8956861597E494314A68561591
        Validity
            Not Before: Apr 12 01:51:12 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=FEEB57E5D7B46386105B671A6AEE6C0121010667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:aa:5b:74:d9:96:46:c5:0f:d3:e7:f2:22:dc:
                    f1:cb:c7:4a:7c:04:18:52:93:53:be:19:ed:9d:8f:
                    42:c6:83:52:34:6a:ec:e1:94:5c:6a:4a:9e:59:a3:
                    b6:c1:f7:e0:5b:dd:80:b6:38:0c:76:ed:38:24:65:
                    cd:5c:11:b8:c0:06:6e:b7:52:bc:7d:79:8d:e8:41:
                    24:00:91:ed:41:41:2e:52:3e:2d:b1:06:a0:31:e1:
                    02:b7:c6:68:1a:3b:0d:10:d9:58:82:b7:79:23:0e:
                    3e:82:48:68:ec:62:ad:d9:c3:a6:c8:db:3b:bb:f4:
                    da:9b:e6:67:08:de:fb:d1:91:2b:9d:a2:40:1e:4f:
                    11:94:53:92:e2:c3:61:01:5f:57:72:4c:6b:b2:2f:
                    d4:98:ab:d6:aa:e3:cc:e8:40:ef:9b:60:84:b5:73:
                    1c:64:0c:49:d4:cd:79:2a:99:26:08:7a:13:12:0a:
                    7f:54:11:5a:eb:fa:99:76:fe:de:31:31:f8:36:c9:
                    37:16:79:04:ad:16:66:47:a5:b5:b1:a0:f8:86:65:
                    bf:fb:94:66:04:7d:32:4f:1f:9d:8b:06:f0:bc:4f:
                    2d:63:7e:4e:90:75:c4:33:fb:fd:50:57:fd:01:06:
                    0b:c0:b4:16:a4:54:68:8d:7d:b1:91:a6:16:3a:8c:
                    37:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EB:57:E5:D7:B4:63:86:10:5B:67:1A:6A:EE:6C:01:21:01:06:67
            X509v3 Authority Key Identifier:
                keyid:23:27:CD:1B:4F:1F:8B:89:56:86:15:97:E4:94:31:4A:68:56:15:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/IyfNG08fi4lWhhWX5JQxSmhWFZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IyfNG08fi4lWhhWX5JQxSmhWFZE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/_utX5de0Y4YQW2caau5sASEBBmc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:dc:53:c8:64:08:d2:89:aa:bd:37:f6:fd:e1:f3:15:cf:44:
         70:97:64:cd:6e:2e:83:97:0d:0d:51:dc:1e:a4:a2:8c:81:2f:
         59:a6:4e:6e:c4:be:98:cc:60:88:63:e9:01:20:86:1f:ba:a0:
         cc:82:e0:85:ec:c6:8b:c5:9f:0e:cd:6c:5a:58:9b:d9:58:4c:
         e9:8a:d7:9c:2c:65:46:91:19:78:7e:17:a4:ed:9f:b3:a2:52:
         ea:5e:bf:bc:b3:f0:a2:cb:be:80:99:7b:cd:9d:f4:ea:0a:da:
         a1:19:c6:fd:fd:9a:d1:d6:7c:2f:21:5d:36:2d:19:4c:04:bd:
         04:7c:cc:23:63:7a:88:f7:f3:e0:35:a0:ec:d4:f3:95:cd:d8:
         e5:82:99:c7:c9:dd:8f:3c:f5:3f:b1:72:f4:e4:03:b6:d1:7b:
         dc:04:ba:c9:39:d5:bd:d3:e6:c6:3a:48:99:a9:47:bf:89:cc:
         64:17:05:d3:02:86:70:43:3d:a8:96:06:1c:e0:f9:2a:8e:1f:
         65:53:94:0c:d3:e3:57:3a:7d:60:6c:0b:f8:d3:f1:fe:48:34:
         60:3d:07:82:a2:8a:cd:dd:d3:cc:69:6c:25:40:71:60:a3:86:
         a6:6a:8b:9b:4a:5e:79:94:37:09:a4:da:c7:fb:be:49:fd:80:
         ff:6e:d2:94
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:49:59 2025 by rpki-client