Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/yWJ8xZBOyqt-K9Yv_Mx758ABiJ8.roa
File:                     yWJ8xZBOyqt-K9Yv_Mx758ABiJ8.roa (raw, json)
Hash identifier:          OVYGj475xO5lvCgYmIeKVTa+6Km32f4dQiLPMHnlTB4=
Subject key identifier:   C9:62:7C:C5:90:4E:CA:AB:7E:2B:D6:2F:FC:CC:7B:E7:C0:01:88:9F
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       51
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/yWJ8xZBOyqt-K9Yv_Mx758ABiJ8.roa
Signing time:             Wed 01 Feb 2023 01:29:58 +0000
ROA not before:           Wed 01 Feb 2023 01:29:58 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     9351
IP address blocks:        61.206.192.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Feb  1 01:29:58 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=C9627CC5904ECAAB7E2BD62FFCCC7BE7C001889F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:38:53:b3:d2:32:d4:e1:33:3d:40:b1:d4:62:
                    ce:c6:66:b0:77:31:c6:c6:50:78:13:59:be:17:74:
                    93:9c:2d:40:cd:93:c7:25:d8:e8:58:32:a1:b8:6e:
                    03:79:cd:2c:40:3c:4d:48:21:42:a5:08:ad:90:2b:
                    cc:95:02:c9:c7:1f:e2:4d:fb:bc:a6:32:9a:22:13:
                    fe:f0:ee:b4:97:ee:a5:af:63:74:49:83:d7:d0:b2:
                    ea:8a:fd:f1:bc:fd:44:82:ea:58:e2:f3:9f:1c:f2:
                    14:3e:dc:03:01:ee:0d:df:36:2f:f1:15:99:56:d8:
                    b6:d4:8f:d4:a2:2a:29:a5:fb:ba:15:b7:0f:71:2c:
                    7b:43:ab:fd:42:df:56:e1:03:07:b3:9a:12:9b:10:
                    a3:60:ce:d0:bd:0d:76:42:84:16:ed:46:9d:cc:e4:
                    4a:4d:8b:69:be:f3:91:c5:26:49:29:21:1e:18:9c:
                    47:0b:ad:02:07:74:7f:d9:2d:fc:39:4a:81:cc:1f:
                    c3:b2:39:b4:a7:6f:bb:62:e0:17:bc:cd:99:a6:41:
                    2e:e3:a8:19:c4:ea:e2:c0:d2:22:5c:4f:5e:24:19:
                    7d:4b:3e:d5:ea:84:35:c5:25:4e:44:4e:e9:3e:9d:
                    59:01:91:f6:fb:0d:9d:e6:e4:c5:96:c7:a5:f2:a7:
                    8d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:62:7C:C5:90:4E:CA:AB:7E:2B:D6:2F:FC:CC:7B:E7:C0:01:88:9F
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/yWJ8xZBOyqt-K9Yv_Mx758ABiJ8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.206.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         72:5b:37:79:65:51:68:1e:44:c3:5d:db:5c:24:24:b7:2e:1c:
         af:40:50:19:b4:32:a1:35:19:bf:51:03:4b:38:93:02:85:e6:
         e3:d3:b9:5b:d5:09:53:98:65:a3:c6:5a:5e:a3:08:ba:11:58:
         51:35:49:8a:f4:3c:dc:bf:a3:ad:4a:0c:23:a1:5c:fb:63:95:
         17:f3:da:f4:2f:04:d9:c2:fb:aa:61:70:3e:e1:44:52:35:a7:
         df:40:3c:73:77:d4:e4:fc:99:80:a9:a1:9c:0f:d7:11:fd:0e:
         e9:ef:3c:37:ee:01:f0:4a:51:7c:98:e1:4d:78:7d:a0:b5:62:
         63:18:26:01:68:00:fb:3a:ac:06:9c:0f:6f:81:73:ae:ac:d4:
         93:3f:79:6e:f4:8c:e7:6f:53:28:35:ed:85:9b:bb:6d:e3:04:
         2c:77:3c:68:09:79:36:c0:c7:3d:7d:ef:64:d6:f6:84:90:ad:
         18:59:96:ae:f1:58:bf:ef:b7:b3:1e:d9:f0:76:cf:f5:9d:b2:
         25:54:36:ad:49:df:54:05:85:0c:8b:ef:26:1b:e1:39:ba:48:
         4e:78:40:57:1a:86:65:2e:a4:69:52:f9:e4:4b:d8:21:68:c1:
         ca:98:2e:56:57:e3:1d:a4:5a:1b:43:3c:6b:69:4a:9d:1b:5f:
         be:8e:8f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:47:48 2025 by rpki-client