Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30391/z-h_v3z_l4ZHMcyWIT8MzjNMsy0.roa
File:                     z-h_v3z_l4ZHMcyWIT8MzjNMsy0.roa (raw, json)
Hash identifier:          O7NgspBt2y0RiylM8r9wHualjz9SZ5Aqh0hhLfJz16M=
Subject key identifier:   CF:E8:7F:BF:7C:FF:97:86:47:31:CC:96:21:3F:0C:CE:33:4C:B3:2D
Certificate issuer:       /CN=4C5C52540813E5D1C736CE3F57A4C9F32699591F
Certificate serial:       0F
Authority key identifier: 4C:5C:52:54:08:13:E5:D1:C7:36:CE:3F:57:A4:C9:F3:26:99:59:1F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TFxSVAgT5dHHNs4_V6TJ8yaZWR8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30391/z-h_v3z_l4ZHMcyWIT8MzjNMsy0.roa
Signing time:             Tue 01 Aug 2023 01:31:45 +0000
ROA not before:           Tue 01 Aug 2023 01:31:45 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     146974
IP address blocks:        2400:1920::/32 maxlen: 128
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C5C52540813E5D1C736CE3F57A4C9F32699591F
        Validity
            Not Before: Aug  1 01:31:45 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=CFE87FBF7CFF97864731CC96213F0CCE334CB32D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2c:84:2e:4c:77:b9:33:fe:d0:61:02:9c:c6:
                    aa:0a:7e:39:39:4c:66:0c:96:8c:bd:a7:0e:94:d7:
                    9f:49:0b:4a:96:ed:e3:0a:4a:7f:a8:c6:5c:5b:e4:
                    fb:f6:92:f2:ce:63:c2:72:fb:fb:f7:e9:21:e4:1b:
                    19:1e:f1:1c:ea:1d:69:04:69:d4:78:f6:d0:c4:0a:
                    92:45:fb:d9:6c:46:fc:e9:c2:26:4f:57:90:73:8a:
                    4c:76:2c:03:5c:3e:6b:13:ce:c0:23:12:da:91:e9:
                    fb:91:ec:f0:41:89:a9:aa:c1:47:f9:45:d1:7a:1d:
                    7e:ba:ed:e9:ec:14:2a:61:a1:7b:e5:36:9f:d4:49:
                    60:14:be:24:b9:95:d5:90:00:59:32:13:a8:d6:3d:
                    17:de:8a:3f:3d:2d:b2:af:7d:91:ad:ed:c0:b3:02:
                    5a:4d:16:10:92:55:35:ed:37:41:f2:05:06:08:34:
                    97:3a:48:57:88:60:b5:43:0a:d7:f4:50:4c:4b:0b:
                    4d:70:9a:11:93:65:5c:5a:b0:b6:d5:8f:df:8d:d4:
                    fd:64:cf:30:ae:4b:8b:5d:01:c9:f3:2f:0c:60:7a:
                    4c:33:8f:1d:14:c9:13:81:68:9c:36:ed:6b:ab:0d:
                    ed:02:96:a2:8e:a4:55:ce:0f:b5:d3:9b:41:8a:1a:
                    7d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E8:7F:BF:7C:FF:97:86:47:31:CC:96:21:3F:0C:CE:33:4C:B3:2D
            X509v3 Authority Key Identifier:
                keyid:4C:5C:52:54:08:13:E5:D1:C7:36:CE:3F:57:A4:C9:F3:26:99:59:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30391/TFxSVAgT5dHHNs4_V6TJ8yaZWR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TFxSVAgT5dHHNs4_V6TJ8yaZWR8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30391/z-h_v3z_l4ZHMcyWIT8MzjNMsy0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:1920::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:70:55:10:4a:b3:e1:d5:48:c7:e8:09:d9:8b:05:46:3e:f8:
         43:4b:59:29:dc:06:d6:9c:76:cc:42:01:0a:c1:25:93:7c:7e:
         a3:78:ae:57:36:97:29:cb:76:13:db:af:ac:47:a0:b5:c2:63:
         fb:70:99:00:f8:78:a0:5c:6d:58:db:35:c8:40:03:97:18:4e:
         7c:2f:df:a3:1b:08:04:66:08:4a:bc:64:e8:7c:ee:f3:24:ef:
         f7:a1:a8:cb:af:a5:40:9e:51:10:d2:5d:f2:73:21:f8:57:63:
         79:ec:52:88:73:af:76:90:91:41:a3:41:4e:20:32:34:19:90:
         d4:cb:7e:fd:19:f9:3c:5e:3a:53:81:9e:18:2a:ad:e2:e2:e8:
         5d:44:87:d1:47:54:e2:64:22:7c:b0:82:51:93:29:f9:97:ac:
         e0:8e:17:c3:f4:c9:54:b8:df:2e:a5:c3:c3:83:f7:bd:00:21:
         d1:ac:23:c4:58:96:06:b3:17:77:76:5b:dd:dd:02:76:e4:9e:
         5b:2a:2b:3c:08:3b:3f:78:89:38:d7:d3:60:82:ae:60:55:67:
         38:0f:a6:f0:99:cb:7b:19:ac:bb:ff:b6:b6:77:4a:30:e7:c7:
         f0:66:dc:ff:8c:e3:c0:bb:67:cc:35:4b:4f:5a:01:db:78:cc:
         36:1b:d7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:01:31 2025 by rpki-client