Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30091/F9fxuT3C-V9vesuNc_E5mDNrAXk.roa
File:                     F9fxuT3C-V9vesuNc_E5mDNrAXk.roa (raw, json)
Hash identifier:          EKlXKseFcUJjME84/JjBPyjefgM7CZ8lbR6Jk0MrmFw=
Subject key identifier:   17:D7:F1:B9:3D:C2:F9:5F:6F:7A:CB:8D:73:F1:39:98:33:6B:01:79
Certificate issuer:       /CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
Certificate serial:       44
Authority key identifier: 89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/F9fxuT3C-V9vesuNc_E5mDNrAXk.roa
Signing time:             Tue 09 Jan 2024 04:53:20 +0000
ROA not before:           Tue 09 Jan 2024 04:53:20 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     38639
IP address blocks:        2402:c800::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
        Validity
            Not Before: Jan  9 04:53:20 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=17D7F1B93DC2F95F6F7ACB8D73F13998336B0179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:25:f5:f5:9f:1b:27:8b:5f:dc:bd:ae:d9:3e:
                    31:4b:91:aa:45:d9:48:33:3e:c8:45:89:f8:7e:34:
                    02:97:c8:9a:ff:0c:0b:07:e3:1b:b7:13:66:8c:1b:
                    bc:78:e0:06:93:fc:fb:0b:81:b2:19:57:5c:95:62:
                    7e:7e:91:99:91:c4:46:6e:7a:31:c0:10:71:ea:df:
                    3e:6f:e9:f6:4c:ef:eb:7d:e2:5a:a2:6f:24:3b:67:
                    c3:5a:5f:f2:3b:e9:ee:32:42:e7:7d:87:50:83:97:
                    55:13:0b:e0:48:e9:b4:a3:c7:1b:18:83:4d:fb:a0:
                    24:73:b5:63:33:76:d0:6b:43:c2:e2:88:db:15:26:
                    f2:c8:9b:df:38:04:e4:f9:2e:05:cd:97:74:29:74:
                    43:86:c0:74:2f:78:9c:a3:62:51:7c:32:0e:c2:61:
                    cf:27:fd:ee:4b:d2:ab:5d:81:f8:ed:7d:a7:f3:b8:
                    42:f6:d8:b6:bb:c2:d3:25:a3:1d:8a:55:dd:17:bd:
                    6c:21:56:f4:10:32:51:0c:7d:f8:9e:e8:b2:12:bd:
                    e3:c3:17:8c:2e:57:93:bf:e6:26:47:08:ff:0e:66:
                    8e:83:c6:ee:9b:b6:8c:e6:53:e7:bc:42:51:79:6f:
                    be:91:eb:57:ad:fd:c9:13:fa:8d:21:4a:65:30:16:
                    05:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D7:F1:B9:3D:C2:F9:5F:6F:7A:CB:8D:73:F1:39:98:33:6B:01:79
            X509v3 Authority Key Identifier:
                keyid:89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/F9fxuT3C-V9vesuNc_E5mDNrAXk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c800::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:7d:4a:6b:7c:98:ea:7b:f1:b6:45:69:36:d2:66:61:85:4c:
         27:45:24:ef:61:a2:2b:3c:1d:c0:be:90:4c:7f:ca:58:e7:d7:
         1f:b7:f6:b5:ab:93:4e:01:cd:22:62:1e:6e:1e:27:ad:fa:da:
         55:8b:01:f6:05:bd:52:6b:2f:86:85:1f:14:de:eb:7c:74:2e:
         d3:53:ad:71:f8:d0:52:65:d1:bf:bf:ba:e0:cd:5f:5e:96:33:
         ce:10:45:2b:ba:09:d0:b4:39:6c:66:ad:ba:f2:30:76:c9:68:
         35:be:08:84:90:5e:db:87:ad:85:74:91:9a:c1:61:52:53:4f:
         eb:ad:56:aa:dc:aa:87:d1:50:e4:65:dd:56:b4:a2:d4:9a:71:
         a2:b4:f3:17:69:cf:b1:35:ba:7e:85:ab:c6:43:bd:04:06:84:
         eb:b1:0f:7b:2c:4c:22:2b:4c:00:d0:70:ba:e3:3e:50:43:b2:
         dc:e5:74:61:3d:37:e5:3e:ee:fd:17:82:36:26:0f:6b:61:e1:
         b0:87:8a:dc:fb:47:6d:33:63:98:cd:f4:66:6f:63:44:4c:06:
         f6:2a:78:ab:b0:fd:22:e3:39:05:9b:f6:c7:17:bc:5d:b1:e0:
         cb:ad:cb:71:16:73:29:af:b2:af:ec:f8:86:0d:18:d8:4f:aa:
         aa:d6:73:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:09:52 2025 by rpki-client