Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/Ez_z_t744sR5Lx-BR3GSfGT4Omw.roa
File:                     Ez_z_t744sR5Lx-BR3GSfGT4Omw.roa (raw, json)
Hash identifier:          IlqJJmefZPn3NFbARWZirShM5Y9ZIHMFweq/XU74Rmo=
Subject key identifier:   13:3F:F3:FE:DE:F8:E2:C4:79:2F:1F:81:47:71:92:7C:64:F8:3A:6C
Certificate issuer:       /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial:       55
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/Ez_z_t744sR5Lx-BR3GSfGT4Omw.roa
Signing time:             Thu 13 Apr 2023 09:52:46 +0000
ROA not before:           Thu 13 Apr 2023 09:52:46 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     10010
IP address blocks:        2403:7800::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
        Validity
            Not Before: Apr 13 09:52:46 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=133FF3FEDEF8E2C4792F1F814771927C64F83A6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:01:d2:08:07:a3:45:87:48:f5:1e:07:df:fb:
                    71:aa:7c:03:48:ea:f9:51:bf:63:f7:86:9f:49:04:
                    bf:17:21:63:37:ee:e0:89:04:e6:af:df:f7:fc:1a:
                    40:44:58:51:d2:a0:be:39:79:f1:91:1f:60:89:50:
                    17:5a:41:b9:6b:38:5d:fc:be:5f:bf:bc:1d:d0:94:
                    df:ad:e0:14:c6:74:3c:0b:d3:65:71:14:5b:75:da:
                    e8:01:b3:73:8d:6f:2b:02:2e:9f:48:fc:bf:31:af:
                    ef:ed:df:24:01:72:8b:70:25:a6:e8:28:4f:ca:2d:
                    76:65:31:b9:55:eb:51:25:a5:a3:61:81:76:d1:2c:
                    0f:9f:ef:b9:18:ef:f5:47:ee:1f:b7:ff:31:2e:5f:
                    46:c0:0f:ff:f3:33:9a:d2:27:07:ec:57:b6:9d:0f:
                    8a:78:b5:ed:bf:d8:0a:50:86:5f:2f:37:61:0d:d0:
                    6c:d9:4f:8f:c0:cb:c8:91:cc:c1:ee:9e:32:85:39:
                    7b:26:f6:65:ab:7d:7f:cb:aa:bd:2a:85:fb:e2:af:
                    46:6b:74:a5:bd:29:ce:2c:3a:6c:1b:3d:83:97:70:
                    41:ef:6f:e7:39:4a:de:48:9e:4c:57:d0:16:3a:9c:
                    cd:21:9a:2e:ac:7e:60:f8:14:3d:3f:48:4d:07:75:
                    bf:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3F:F3:FE:DE:F8:E2:C4:79:2F:1F:81:47:71:92:7C:64:F8:3A:6C
            X509v3 Authority Key Identifier:
                keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/Ez_z_t744sR5Lx-BR3GSfGT4Omw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:7800::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:c1:4a:a9:db:4d:b7:ae:5a:30:4a:e9:60:06:da:f3:5f:8d:
         80:f2:b6:3d:07:fd:09:31:00:b0:50:a3:6f:aa:f5:e1:d5:6e:
         59:15:04:7d:57:93:4f:f6:5c:14:78:16:61:c9:f0:8c:d6:90:
         4c:57:0f:b5:7b:44:26:0a:e4:f9:bf:14:42:55:25:27:6c:d9:
         02:25:cf:0f:0a:f9:4f:ac:99:68:e2:54:55:d8:0e:4b:61:23:
         d9:d4:21:64:72:10:87:14:be:00:9c:8c:dd:f0:88:c9:2d:c5:
         e8:76:17:e8:fa:97:2e:09:51:38:9c:d7:76:05:9b:cc:c9:f4:
         b8:47:2c:be:91:8b:dc:66:68:8a:ea:16:e6:d2:bd:89:04:72:
         d0:63:a6:65:cb:7b:6e:d7:db:8b:96:35:dd:30:b2:00:c5:22:
         b6:c3:86:d6:b5:1e:22:56:c3:9d:48:69:f1:2e:ea:07:0e:77:
         cf:0b:ac:aa:c5:d9:e6:b1:d1:a3:ce:68:7d:a9:c5:41:ef:42:
         9c:7b:ee:f5:8a:72:ee:e0:9f:aa:c5:a1:17:5d:48:ae:94:58:
         1d:89:ed:7d:e9:90:57:22:e6:44:09:dd:34:7e:55:61:3f:6f:
         4a:66:7a:4d:c3:09:ad:da:36:65:c6:0e:2e:9c:5c:e7:fd:a3:
         91:ed:4a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:07:47 2025 by rpki-client