Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/YPSdG_Mc1z9HXw4oVfctaWUDIOg.roa
File:                     YPSdG_Mc1z9HXw4oVfctaWUDIOg.roa (raw, json)
Hash identifier:          daIJo9RwxkAEXjIpeyLEuPRwalsmfubhuLfh2yOH6Vw=
Subject key identifier:   60:F4:9D:1B:F3:1C:D7:3F:47:5F:0E:28:55:F7:2D:69:65:03:20:E8
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       2F
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YPSdG_Mc1z9HXw4oVfctaWUDIOg.roa
Signing time:             Thu 27 Jul 2023 16:58:06 +0000
ROA not before:           Thu 27 Jul 2023 16:58:06 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        157.112.32.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Jul 27 16:58:06 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=60F49D1BF31CD73F475F0E2855F72D69650320E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:33:5a:9e:21:9f:da:fb:49:fe:b0:e7:5c:fa:
                    be:a8:77:97:05:1f:83:9c:3f:73:c1:46:f9:fb:2d:
                    b7:c2:ca:5b:6a:92:06:77:f4:49:bc:b1:c0:b7:46:
                    e7:3d:0c:0c:29:e3:3b:e6:9e:92:b6:61:e3:7d:a2:
                    0e:bb:86:0c:c0:80:26:b7:5a:89:6d:99:bb:85:36:
                    bf:b0:91:86:e0:ee:9f:58:94:7b:b7:68:10:eb:db:
                    07:f9:c4:66:35:73:02:65:f6:f6:7f:b7:ec:79:7e:
                    e4:77:41:7c:f7:cb:de:bd:f4:b7:fa:99:9a:d1:2f:
                    ab:a1:c9:76:22:6a:d9:de:8c:94:ad:9d:3a:8e:ba:
                    83:69:57:71:39:5a:cc:ed:b0:ab:a2:ec:5f:16:94:
                    e7:74:89:a2:f9:af:e5:72:f3:18:6b:b8:3e:40:1d:
                    21:04:9e:56:5d:53:31:bf:14:8f:b4:9c:65:dd:b4:
                    e8:d7:d9:7a:9f:ff:0a:09:b2:3f:0a:b5:4b:f2:d6:
                    8f:f0:34:aa:d5:9e:a6:6f:4c:1d:9a:ae:e1:f5:95:
                    b7:34:34:51:6a:8d:07:8c:50:fb:63:57:e5:b9:da:
                    fa:ee:ea:b6:f5:c2:1d:46:04:da:d7:b4:94:25:58:
                    b0:51:d8:db:25:46:a3:f4:dd:a9:7b:e7:3c:48:aa:
                    88:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F4:9D:1B:F3:1C:D7:3F:47:5F:0E:28:55:F7:2D:69:65:03:20:E8
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YPSdG_Mc1z9HXw4oVfctaWUDIOg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.112.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5c:ee:5e:6b:e4:87:7c:41:63:6f:2d:8c:c2:6e:6e:d3:c6:7f:
         2a:7c:b7:75:d7:13:d5:f1:f1:6c:bd:d7:33:89:7c:c5:0b:32:
         9a:7f:4f:9a:11:42:b1:16:cb:63:82:b7:83:14:f0:48:e9:14:
         3d:ff:2c:6c:76:72:e1:50:67:43:1e:7c:e5:f7:3c:4d:31:8f:
         89:a3:84:32:16:bf:42:d9:e8:c2:6f:ce:8c:a3:6e:4a:4e:ba:
         e8:8d:27:0f:46:d2:dd:03:30:f7:a4:c4:93:2b:7f:47:72:26:
         e5:fb:70:e4:dc:38:4c:db:11:d3:37:11:c5:aa:34:39:4a:42:
         d6:dd:ba:fa:45:4b:e9:e0:11:8a:63:8b:29:e6:67:cf:cd:12:
         c6:99:75:51:b2:86:fa:bc:1e:07:f5:8c:80:3f:06:3f:ff:44:
         85:41:73:e5:0e:cc:fe:23:fe:bc:a4:45:78:a2:d4:b3:f0:7b:
         4e:52:a0:73:b4:05:d1:09:ec:56:2d:ea:2d:a6:55:7c:c0:0f:
         92:12:e2:06:9b:eb:ef:7d:dc:c8:a6:a3:4e:22:b6:19:a6:dc:
         d8:4b:cf:42:ac:02:e1:cf:9e:d0:bb:a3:cd:09:48:f7:34:05:
         4c:a6:5e:be:dd:7c:9c:58:4d:48:52:d2:00:c6:42:4f:f6:08:
         03:cb:3c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:28:07 2025 by rpki-client