Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/S9amNDAgFk2tNvyUJsW54zdcOxY.roa
File:                     S9amNDAgFk2tNvyUJsW54zdcOxY.roa (raw, json)
Hash identifier:          lJvRma19HWAwhL47xSjU5tYoCbpNk9bv9lajCCuwVC8=
Subject key identifier:   4B:D6:A6:34:30:20:16:4D:AD:36:FC:94:26:C5:B9:E3:37:5C:3B:16
Certificate issuer:       /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial:       05
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/S9amNDAgFk2tNvyUJsW54zdcOxY.roa
Signing time:             Wed 28 Apr 2021 05:13:11 +0000
ROA not before:           Wed 28 Apr 2021 05:13:11 +0000
ROA not after:            Fri 15 Apr 2022 01:30:01 +0000
asID:                     63789
IP address blocks:        202.9.208.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
        Validity
            Not Before: Apr 28 05:13:11 2021 GMT
            Not After : Apr 15 01:30:01 2022 GMT
        Subject: CN=4BD6A6343020164DAD36FC9426C5B9E3375C3B16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f0:04:1e:1a:20:e8:d0:4e:ac:ee:de:4b:fe:
                    3c:9b:7f:53:47:95:0a:e6:31:09:d6:36:68:29:49:
                    68:34:c0:bb:8b:a8:9a:2f:4a:a1:8f:a2:24:c2:67:
                    16:45:35:f8:5a:a8:0c:0d:87:96:f3:c3:e8:03:55:
                    84:20:5f:29:53:f6:5d:f1:20:3b:d4:c6:01:4f:4d:
                    81:12:e9:a1:81:c3:be:72:1a:3e:03:d0:1e:8a:62:
                    30:48:30:d4:45:9a:56:5d:8c:0c:47:16:a1:d4:ec:
                    96:a5:71:54:97:65:be:85:78:98:15:16:14:4b:0d:
                    d5:60:2d:82:c5:5b:63:a4:be:6a:c5:82:6f:ef:42:
                    f6:3e:ee:6e:35:bd:79:07:ea:ce:13:83:d4:64:f0:
                    4f:33:8f:56:e4:e0:05:83:b6:8b:60:dd:22:ea:e8:
                    3f:16:6b:27:41:d2:2e:db:59:2b:62:0b:77:22:d9:
                    f3:0a:eb:72:a1:17:e8:43:34:05:3f:d4:6e:f5:46:
                    3e:17:54:3f:14:fd:a0:0b:98:63:11:e1:42:e9:1c:
                    ff:68:96:14:37:8c:3f:ef:d4:ce:74:23:d2:a2:39:
                    be:12:76:c3:1f:f1:d6:fc:8b:ad:64:12:b5:90:2a:
                    d1:5e:ed:10:94:89:3f:20:6f:ef:0e:3c:b9:d0:44:
                    61:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D6:A6:34:30:20:16:4D:AD:36:FC:94:26:C5:B9:E3:37:5C:3B:16
            X509v3 Authority Key Identifier:
                keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/S9amNDAgFk2tNvyUJsW54zdcOxY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.9.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:82:77:12:25:ac:98:c1:8a:a1:b6:33:c7:c5:b5:f0:2d:e7:
         6a:95:f9:80:f3:3a:4b:9f:e4:0d:a5:3b:98:e6:8d:7a:e3:9b:
         36:15:2d:ea:f3:ba:5c:f3:3a:9d:a2:09:d3:5a:db:74:93:4c:
         72:90:c4:8c:43:dd:60:f1:21:48:dc:ed:e7:b0:ca:59:30:43:
         89:cc:94:17:fe:7e:17:48:ee:8e:c8:d9:30:f5:b7:f8:85:57:
         7f:8f:ca:b0:25:02:43:25:fa:01:74:91:8e:73:4e:93:14:ea:
         59:49:6e:60:14:15:18:5e:b6:61:60:e0:a7:4c:6f:59:f0:cf:
         4d:9e:d3:91:84:90:78:7a:f9:08:f6:d1:5d:97:ff:7b:12:60:
         06:73:41:84:4c:c3:65:db:6b:8d:d1:c1:70:1f:ef:4f:e8:0d:
         09:8d:97:f6:e5:b9:9b:e7:c0:db:6e:0d:f6:9b:02:d9:3b:51:
         8a:7f:f8:19:8c:16:9f:4f:12:a9:31:1c:32:46:35:93:42:b1:
         01:5f:e6:02:57:a5:ec:67:08:77:3a:2c:3d:56:e1:b1:68:81:
         97:1e:d0:73:52:f8:29:26:bf:b8:67:98:1c:47:e8:e7:b6:9b:
         0f:94:60:67:4c:a9:72:c4:00:6b:9c:f6:e0:56:ed:d3:fc:dc:
         3c:8b:5b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:24:36 2025 by rpki-client