Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/C1PppvalMKsZMJ7-QTMcURieyAk.roa
File:                     C1PppvalMKsZMJ7-QTMcURieyAk.roa (raw, json)
Hash identifier:          /ElMW9DGwLDG3KXIHtqnJfuqNsmg7ocWYKp8yyMDQlo=
Subject key identifier:   0B:53:E9:A6:F6:A5:30:AB:19:30:9E:FE:41:33:1C:51:18:9E:C8:09
Certificate issuer:       /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial:       65
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/C1PppvalMKsZMJ7-QTMcURieyAk.roa
Signing time:             Thu 29 Feb 2024 01:29:29 +0000
ROA not before:           Thu 29 Feb 2024 01:29:29 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        2406:bb04::/30 maxlen: 30
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
        Validity
            Not Before: Feb 29 01:29:29 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=0B53E9A6F6A530AB19309EFE41331C51189EC809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b9:a1:48:3c:bb:1d:08:0c:19:7b:79:52:44:
                    1c:20:b3:5e:29:16:c7:d7:da:67:53:fa:2a:43:a5:
                    35:2c:0f:95:b5:91:28:68:44:c7:9d:9d:30:2a:e2:
                    a1:06:71:c6:f7:08:a8:f1:9f:db:21:5b:48:47:c2:
                    0e:09:75:31:54:5d:af:d2:c7:23:b4:7a:00:ac:86:
                    ff:71:32:46:41:e5:87:5b:64:6e:6b:d6:8e:6c:ba:
                    c5:ca:24:8b:ef:d9:97:c2:3a:49:68:26:9b:1b:43:
                    10:22:91:4e:cc:6b:86:24:46:66:be:55:28:27:2f:
                    f8:91:7f:a6:9d:ff:37:d3:ef:31:06:20:78:55:95:
                    42:d0:8a:70:8e:b0:e6:36:fc:24:19:08:93:95:cd:
                    c2:1e:35:1e:7f:e2:85:8c:a2:49:af:55:6d:97:8b:
                    c3:3f:16:2c:03:e6:58:7d:ca:f3:dc:4b:af:22:4f:
                    25:85:03:06:e2:73:3b:5f:91:30:fd:86:90:2b:c6:
                    2a:fa:20:36:44:b2:3a:c2:39:a7:ed:6c:90:02:bb:
                    ee:c8:47:70:ed:17:52:f2:11:23:90:2b:06:6d:57:
                    3c:3e:aa:56:95:f5:a7:31:51:6c:5e:c1:e2:6f:6b:
                    f4:e8:fe:85:96:cd:2d:ba:b5:9e:9c:be:85:d2:e8:
                    cf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:53:E9:A6:F6:A5:30:AB:19:30:9E:FE:41:33:1C:51:18:9E:C8:09
            X509v3 Authority Key Identifier:
                keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/C1PppvalMKsZMJ7-QTMcURieyAk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:bb04::/30

    Signature Algorithm: sha256WithRSAEncryption
         4d:8d:72:95:c4:3e:ab:26:95:03:02:55:f2:b9:0f:07:e7:19:
         af:bc:83:d8:94:11:41:b4:20:e0:dc:a8:2a:a8:07:6e:d9:10:
         54:f6:be:80:f3:1b:d6:85:aa:d6:48:2f:80:f5:2e:e6:f0:39:
         c9:32:ca:b1:43:64:d0:5a:4d:a7:ce:d6:33:8f:5d:0b:cf:64:
         fb:b9:69:06:b8:ed:c8:a4:b2:af:2b:e7:8b:a6:3a:39:78:c7:
         e6:41:72:bd:8d:4a:80:89:51:17:79:e2:82:bf:02:71:e5:37:
         99:96:46:b0:9a:67:1b:95:6a:60:f5:25:b3:c9:f4:8e:05:94:
         36:fd:52:6a:b0:0a:1f:f7:89:30:7a:da:75:a1:5e:0f:7b:3d:
         3c:0b:99:ee:50:71:a4:ae:0b:8a:d5:0c:b6:88:83:e4:f3:c4:
         bc:f0:98:f9:8c:05:4f:76:17:17:b6:2c:8d:5b:ae:00:f9:25:
         1f:c6:51:9f:46:7d:f7:d5:ff:db:7f:b9:e6:9f:fc:a4:5a:b7:
         82:29:4e:84:4d:4c:8e:cd:5e:40:e0:96:c7:9d:59:05:86:8b:
         15:a2:c3:e3:09:19:03:43:5b:a3:5f:38:8d:69:e6:3b:43:ba:
         7b:23:a8:bb:1d:32:c6:f1:55:5a:c4:34:c3:6d:ad:57:7d:a6:
         1c:84:cd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:28 2025 by rpki-client