Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30140/IpWTpiIM8OdcOhZLUHC2D6HprZU.roa
File:                     IpWTpiIM8OdcOhZLUHC2D6HprZU.roa (raw, json)
Hash identifier:          uWEpmdV8DfyoFg8FuXoOMW/p3j7HSGop3y4lWYLurp4=
Subject key identifier:   22:95:93:A6:22:0C:F0:E7:5C:3A:16:4B:50:70:B6:0F:A1:E9:AD:95
Certificate issuer:       /CN=A68ECA29D06CB4C00611BA4AD8526F0490CC6E7D
Certificate serial:       1F
Authority key identifier: A6:8E:CA:29:D0:6C:B4:C0:06:11:BA:4A:D8:52:6F:04:90:CC:6E:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/po7KKdBstMAGEbpK2FJvBJDMbn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30140/IpWTpiIM8OdcOhZLUHC2D6HprZU.roa
Signing time:             Thu 01 Sep 2022 01:28:51 +0000
ROA not before:           Thu 01 Sep 2022 01:28:51 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     17948
IP address blocks:        2402:d600::/32 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A68ECA29D06CB4C00611BA4AD8526F0490CC6E7D
        Validity
            Not Before: Sep  1 01:28:51 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=229593A6220CF0E75C3A164B5070B60FA1E9AD95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f6:32:b2:be:09:a6:06:2e:9d:c9:29:e2:e1:
                    c9:02:93:17:64:37:d7:88:c7:35:b1:d1:d4:c5:3a:
                    4a:b3:6b:42:d6:9a:6f:5b:db:47:92:d0:49:4c:0e:
                    95:00:a5:37:60:19:5e:e4:ce:0b:1c:09:a8:b9:52:
                    fb:dc:fc:4f:4a:0c:ec:a6:67:4a:64:c7:b4:56:73:
                    08:e8:3a:e6:f7:17:08:c4:75:7e:48:9e:ab:a8:24:
                    b4:08:9b:57:a4:29:82:42:11:c1:26:28:02:fd:a0:
                    d1:08:5f:88:e9:05:45:2a:e6:f0:9a:f4:7d:6d:72:
                    cf:9e:1f:c9:37:8d:7e:f9:6a:6d:e9:db:ea:8e:f6:
                    94:56:aa:8b:69:fa:6e:28:c1:02:65:21:d4:1b:3b:
                    5f:a2:eb:0b:26:45:74:5b:ef:ad:7e:db:ca:78:a2:
                    8e:99:24:5c:3d:bd:e2:80:a0:dc:ec:4e:41:30:42:
                    05:0a:3f:fe:d9:05:12:ae:35:b0:29:42:cc:b5:4d:
                    14:34:64:07:82:3d:ad:4e:32:2c:c1:69:10:7c:1a:
                    3d:0f:a6:16:88:c7:81:f4:6f:8f:e5:73:2f:c0:e3:
                    0a:14:ac:c0:c7:2e:49:6c:dd:cc:48:8d:a7:fb:a0:
                    f6:ba:43:d6:3b:aa:9e:0e:4e:ef:b8:2d:cc:aa:7c:
                    c6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:95:93:A6:22:0C:F0:E7:5C:3A:16:4B:50:70:B6:0F:A1:E9:AD:95
            X509v3 Authority Key Identifier:
                keyid:A6:8E:CA:29:D0:6C:B4:C0:06:11:BA:4A:D8:52:6F:04:90:CC:6E:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30140/po7KKdBstMAGEbpK2FJvBJDMbn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/po7KKdBstMAGEbpK2FJvBJDMbn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30140/IpWTpiIM8OdcOhZLUHC2D6HprZU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:d600::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:8f:6a:8e:41:2b:cc:b2:33:61:f4:4e:5a:b0:14:57:e9:9a:
         7c:33:a6:28:de:3d:86:8b:61:c9:ef:1b:8a:76:b0:06:ea:ba:
         33:18:a8:47:04:8e:4a:43:4d:d5:62:70:54:af:c9:99:c3:23:
         a8:89:32:13:cb:13:a3:ca:88:a4:b6:52:dc:7c:3a:99:02:c3:
         3e:9a:5e:80:70:46:be:09:23:50:94:c6:df:e0:17:e9:7e:41:
         08:24:02:5f:dc:23:90:18:ab:2f:0a:2c:82:89:4f:0f:8c:33:
         df:82:96:e6:b2:a3:f1:4c:dc:58:5a:a3:f1:04:35:3b:46:65:
         b3:8a:bd:a9:17:de:48:9d:6e:14:61:e2:19:a1:13:04:7e:84:
         26:02:7e:67:63:c9:b1:32:bc:11:dd:72:07:9b:f5:41:1b:12:
         b2:2a:2e:d7:d1:ee:47:c9:7c:48:1e:1c:00:4a:d7:f1:e4:50:
         05:84:6a:26:91:52:86:81:8a:e5:12:94:94:21:ce:14:ef:4b:
         b9:b2:41:41:d2:28:b5:ca:fb:4c:22:28:1b:51:45:cb:71:24:
         2e:e1:db:e4:22:fe:14:99:55:17:51:93:e9:7f:41:be:a4:44:
         78:d6:0e:ff:d8:e9:f4:40:0f:4a:fa:64:a5:62:f4:de:72:6f:
         bc:84:77:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:43:18 2025 by rpki-client