Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30155/ODinBVI_3p8YtwBzyDjNBWOVgE8.roa
File:                     ODinBVI_3p8YtwBzyDjNBWOVgE8.roa (raw, json)
Hash identifier:          eiY57VAbd/KMTX56ZtI0Kq9rIdHdnJsFZI0LUGGjg3E=
Subject key identifier:   38:38:A7:05:52:3F:DE:9F:18:B7:00:73:C8:38:CD:05:63:95:80:4F
Certificate issuer:       /CN=540D04AB978801867F711546D16FB476A278FC9A
Certificate serial:       30
Authority key identifier: 54:0D:04:AB:97:88:01:86:7F:71:15:46:D1:6F:B4:76:A2:78:FC:9A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/ODinBVI_3p8YtwBzyDjNBWOVgE8.roa
Signing time:             Sun 01 May 2022 01:29:58 +0000
ROA not before:           Sun 01 May 2022 01:29:58 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     55391
IP address blocks:        2404:8e00::/32 maxlen: 128
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=540D04AB978801867F711546D16FB476A278FC9A
        Validity
            Not Before: May  1 01:29:58 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=3838A705523FDE9F18B70073C838CD056395804F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a8:d5:59:e2:ff:17:ad:3b:a4:d1:34:5c:d4:
                    21:40:3e:44:9d:81:6f:d9:46:22:ee:86:3a:46:7b:
                    88:21:42:5d:b2:ab:0e:14:84:db:91:cb:ae:4b:b1:
                    d7:a4:1e:44:a5:7b:b2:e6:b7:21:d5:7d:59:e1:6a:
                    e5:1a:36:21:8c:ba:e1:ab:65:5d:0b:93:6c:b2:d0:
                    e5:ea:64:21:19:b9:65:d0:3b:8f:a4:9b:47:65:1b:
                    e5:11:f9:68:35:5d:6c:a1:29:47:50:6c:d9:6d:72:
                    44:6b:25:0d:d3:2a:2f:c4:24:41:06:78:6e:65:d9:
                    0b:ff:69:5c:a9:f7:2c:ce:0d:6f:28:18:67:3c:9a:
                    b9:35:12:bf:10:7f:ec:0f:36:c4:9e:eb:4b:7a:ba:
                    d4:63:a1:3d:3b:af:85:55:e9:b0:33:e5:fe:b5:52:
                    3e:db:55:43:dc:a6:5b:da:27:77:ac:7d:ed:30:6e:
                    cb:c5:38:59:4d:3a:9e:e8:fe:e3:b2:6a:40:c7:c2:
                    34:cb:07:f3:54:56:20:95:b1:08:31:4c:59:98:e7:
                    ea:77:2a:67:61:01:ce:43:2e:69:b6:bf:42:c4:b6:
                    4f:c8:00:21:4d:2d:93:3c:de:44:0a:8a:cc:ea:e4:
                    a8:ae:f6:73:96:41:ba:84:07:9f:f0:5e:f8:b1:9e:
                    11:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:38:A7:05:52:3F:DE:9F:18:B7:00:73:C8:38:CD:05:63:95:80:4F
            X509v3 Authority Key Identifier:
                keyid:54:0D:04:AB:97:88:01:86:7F:71:15:46:D1:6F:B4:76:A2:78:FC:9A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/ODinBVI_3p8YtwBzyDjNBWOVgE8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:a4:a8:2e:13:68:4b:6e:e5:08:b9:ab:84:02:cd:63:70:15:
         cf:01:dd:7a:c6:66:b1:b3:1f:87:53:dd:ff:a3:d9:54:4e:10:
         8e:17:eb:ee:c1:7e:07:47:82:3b:5a:6e:55:e5:cb:0a:e9:e0:
         fd:38:cd:d5:a3:96:76:6d:a3:4d:0d:98:be:d5:1c:48:cd:e5:
         77:84:d8:84:3a:80:1d:f5:09:8b:0c:d5:00:28:86:40:fe:26:
         f2:75:6c:7e:36:b6:4d:6a:4b:8a:53:c9:72:c0:7b:d1:0e:41:
         1d:18:17:a3:4a:e3:b3:f8:d2:fc:84:3c:7d:55:34:a3:e5:bf:
         12:3c:50:98:fa:c5:00:bf:fa:49:77:af:1e:22:77:a6:22:b0:
         95:96:dc:c0:73:a6:92:95:30:40:e8:50:d6:9f:36:15:b9:39:
         fd:8c:44:0c:1c:68:97:59:e3:ff:ba:9d:03:7a:01:46:05:f9:
         b8:1d:90:c4:6c:22:2a:12:d8:bc:af:ee:c7:bf:d7:68:42:5a:
         58:30:42:21:94:3c:8d:20:e9:d3:52:00:29:4a:25:25:c4:f0:
         a2:07:5e:e3:46:b0:16:2f:3b:40:eb:df:c2:f6:14:5d:36:ec:
         c6:cb:e5:7e:1b:59:90:77:ca:3e:72:c1:a4:c2:ea:d1:49:d9:
         ca:04:9b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:43 2025 by rpki-client