Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/GpUz1FcLhZZWf-u7qnzLIAcpu5I.roa
File:                     GpUz1FcLhZZWf-u7qnzLIAcpu5I.roa (raw, json)
Hash identifier:          vUAjQkl2pRvDwJCzTBYoe4BCv3ubPNdmjXnIMCGrq08=
Subject key identifier:   1A:95:33:D4:57:0B:85:96:56:7F:EB:BB:AA:7C:CB:20:07:29:BB:92
Certificate issuer:       /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial:       39
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/GpUz1FcLhZZWf-u7qnzLIAcpu5I.roa
Signing time:             Wed 01 Feb 2023 01:29:36 +0000
ROA not before:           Wed 01 Feb 2023 01:29:36 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     10011
IP address blocks:        223.27.72.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
        Validity
            Not Before: Feb  1 01:29:36 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=1A9533D4570B8596567FEBBBAA7CCB200729BB92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cd:1f:17:9f:81:9c:bc:89:10:dd:50:d3:34:
                    99:78:30:a0:39:e5:0e:88:59:26:9f:41:ed:46:45:
                    eb:16:d2:04:4e:57:01:00:87:7c:03:b7:ad:ef:0f:
                    3f:2f:18:3b:fe:fa:25:dc:78:14:4f:a2:21:7e:d1:
                    74:34:43:e5:65:db:8b:44:b6:2c:3e:27:b2:bf:0e:
                    f2:24:a0:e8:b3:d4:0e:4d:a3:fa:c0:be:0e:c7:cf:
                    61:60:a1:c1:6e:8b:3e:12:3b:2d:07:cf:72:23:9b:
                    02:b1:2f:67:2a:ac:34:be:bc:f7:51:15:37:24:99:
                    32:8a:9e:e2:be:48:ca:56:ee:89:da:55:26:c0:4c:
                    48:da:75:84:4e:13:b8:06:82:90:11:d0:69:69:ac:
                    39:ed:27:86:05:50:b6:36:bf:ea:97:49:b5:8d:9b:
                    8d:59:2c:de:b3:a7:0c:1d:09:f0:5e:45:e7:e9:39:
                    c6:df:93:98:75:12:18:40:0d:2e:f2:36:28:a1:48:
                    78:e2:c1:69:01:c2:2f:d8:f5:68:09:98:c3:df:c3:
                    51:ab:29:02:22:71:54:43:47:ae:d9:9c:1d:b2:e1:
                    0d:94:1e:bb:f6:87:67:1f:ff:62:38:85:00:83:c1:
                    1d:9b:7d:a0:3e:4b:87:12:c9:aa:68:a5:22:90:a0:
                    90:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:95:33:D4:57:0B:85:96:56:7F:EB:BB:AA:7C:CB:20:07:29:BB:92
            X509v3 Authority Key Identifier:
                keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/GpUz1FcLhZZWf-u7qnzLIAcpu5I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.27.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:31:6e:45:7d:a7:1b:bc:70:6f:f5:19:c5:c7:23:5f:70:6e:
         6f:98:17:3b:50:2f:56:b1:82:a8:28:9b:9d:f3:2e:0f:f5:45:
         4a:a5:0b:3f:aa:f0:f0:96:7b:a9:d5:bc:3a:77:96:6c:f0:47:
         a2:2c:04:0e:00:9e:6d:95:c9:87:79:a8:98:fb:3a:1b:c3:90:
         a5:a9:2a:47:e0:f6:c5:ff:95:4c:f0:b8:cd:d7:c8:3e:12:ae:
         83:2b:5f:24:b7:28:fa:44:58:53:80:06:51:dc:30:b6:f7:c7:
         5d:6b:29:e1:ff:0b:58:91:d7:62:69:4e:99:76:5d:24:e7:8b:
         8d:ed:5f:a5:c2:01:70:9a:37:35:a2:46:32:6a:c7:35:c3:ad:
         f5:f4:c0:e7:76:fc:8f:f2:1c:f1:8d:d8:47:4a:10:79:64:09:
         55:d3:b9:2c:1c:b7:28:0d:e6:32:b9:9c:0a:59:19:ef:c5:d8:
         28:e7:f6:de:39:ff:7b:e5:f6:4a:e5:86:12:57:3f:86:7b:c0:
         36:43:00:ec:2a:3b:45:a6:4e:9d:a3:f3:41:13:eb:03:97:3e:
         31:85:2a:17:5b:b8:b3:44:f7:39:c1:8a:14:b3:39:2f:e4:c5:
         c7:06:7a:92:d2:2f:45:bb:3b:b7:a9:05:1a:c5:04:a2:dd:66:
         6a:61:5c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:35 2025 by rpki-client