Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3m53lAcFOyfmJB2VRSXVWZrGphg.roa
File:                     3m53lAcFOyfmJB2VRSXVWZrGphg.roa (raw, json)
Hash identifier:          TZSDxWFumaBh38egMKFkdcIdQ3IBH88pN5h7ZkBddx0=
Subject key identifier:   DE:6E:77:94:07:05:3B:27:E6:24:1D:95:45:25:D5:59:9A:C6:A6:18
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01B9
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3m53lAcFOyfmJB2VRSXVWZrGphg.roa
Signing time:             Tue 30 May 2023 17:36:31 +0000
ROA not before:           Tue 30 May 2023 17:36:31 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9000::/40 maxlen: 40
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:36:31 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=DE6E779407053B27E6241D954525D5599AC6A618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ce:03:1e:82:e9:78:7a:41:c0:40:bb:7c:61:
                    58:6a:a1:53:2b:9e:1e:1a:23:f9:0e:d4:b7:17:56:
                    09:bb:b6:59:06:c8:b9:bb:65:b4:3d:28:65:9c:32:
                    ff:02:b9:33:42:04:1c:15:4b:01:dc:42:fc:11:d1:
                    61:01:96:75:0b:0f:95:77:01:6d:3f:08:68:ca:c9:
                    66:3f:d1:87:61:cb:63:7a:b5:a1:bd:c1:b5:f2:26:
                    72:02:8c:74:de:75:99:96:64:5f:6b:31:a3:37:7c:
                    b2:60:86:ad:b2:d7:10:09:9c:75:5f:73:2b:29:3f:
                    ca:9e:0d:bc:ec:85:6f:71:de:ad:59:60:92:3d:3d:
                    af:c0:75:ab:5e:13:96:01:3d:77:bd:9a:a6:d6:3c:
                    f9:ae:1a:89:88:fb:b5:97:e0:d0:1a:74:e1:3b:fd:
                    e6:3f:0a:b0:be:9d:7a:3f:14:3d:78:08:1c:ba:a6:
                    ff:4c:16:f1:90:dd:67:4c:22:47:bd:8e:c3:91:ca:
                    22:7c:70:99:fa:bb:22:0d:ae:a2:42:5f:69:9b:3a:
                    b5:0d:b8:c2:6b:c9:da:e8:15:4f:fc:fc:a2:cc:78:
                    a9:d1:15:80:b7:b6:80:75:78:25:8e:8b:70:d7:91:
                    dd:4c:79:f0:02:a9:98:30:98:34:96:1d:44:33:e9:
                    28:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6E:77:94:07:05:3B:27:E6:24:1D:95:45:25:D5:59:9A:C6:A6:18
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3m53lAcFOyfmJB2VRSXVWZrGphg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         bb:46:25:e8:81:6a:84:25:3a:85:d2:1c:84:a4:2b:eb:20:99:
         02:89:b8:0e:1d:f2:31:0a:b3:cf:1b:f7:37:53:dd:48:9e:cd:
         84:7a:a1:d8:cd:e8:fc:21:05:d9:6a:44:aa:d7:f1:3f:07:33:
         89:d0:fb:84:9a:98:b2:ff:71:42:95:61:ad:4a:a3:24:18:f8:
         73:b0:73:4f:38:49:e0:24:18:d8:7d:4d:58:0f:2a:5f:8c:57:
         55:0f:78:28:65:0e:dd:51:3c:c3:f0:15:c0:40:71:2f:13:7d:
         f2:fd:31:0c:03:49:a4:2a:94:4a:86:6b:f2:e5:b7:01:b7:33:
         53:9f:c5:a6:80:3d:db:e3:c8:0e:ab:dc:21:64:c0:bd:8f:d2:
         6e:eb:b9:f9:d2:e1:f4:79:56:13:7d:0d:7b:2b:e1:29:e2:da:
         3b:ab:8e:b5:a4:4d:49:b4:0f:ed:0b:b5:81:93:50:7f:9d:77:
         7e:d7:0b:f3:af:52:96:a7:5d:21:87:54:bb:af:16:00:b3:68:
         7e:85:b8:79:fc:dc:89:34:d0:54:12:32:b2:98:4e:a5:06:7c:
         cb:71:30:de:67:1b:44:b5:92:e9:f1:7a:b4:0e:48:d8:6f:a8:
         e7:99:4f:9e:71:d9:ec:80:9f:2c:a6:94:f6:d4:67:b4:92:2b:
         25:82:03:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:51 2025 by rpki-client