Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/54/sDIuWNCXh5YigIxg2pKleBszTT0.roa
File:                     sDIuWNCXh5YigIxg2pKleBszTT0.roa (raw, json)
Hash identifier:          bDFnQgnUlKHz0pLkJcQzKH/ilQf9jbGhzYd9d1J5Vhs=
Subject key identifier:   B0:32:2E:58:D0:97:87:96:22:80:8C:60:DA:92:A5:78:1B:33:4D:3D
Certificate issuer:       /CN=5D8F48F99C5B0745B77F8BCA754E63885CADC418
Certificate serial:       06
Authority key identifier: 5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/sDIuWNCXh5YigIxg2pKleBszTT0.roa
Signing time:             Fri 15 Sep 2023 07:49:22 +0000
ROA not before:           Fri 15 Sep 2023 07:49:22 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4695
IP address blocks:        210.156.128.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D8F48F99C5B0745B77F8BCA754E63885CADC418
        Validity
            Not Before: Sep 15 07:49:22 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=B0322E58D097879622808C60DA92A5781B334D3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:77:ac:49:58:15:98:04:a0:5d:7d:3a:5b:1b:
                    a7:1e:e3:b7:68:98:a5:40:16:3f:78:e6:3c:9a:68:
                    d4:0d:17:77:47:d9:e6:fd:07:5d:13:82:bd:98:82:
                    fd:f7:32:4f:f6:98:a3:ae:f1:5f:a1:29:0a:19:65:
                    5b:a3:7e:1f:83:f1:aa:ec:06:ec:a0:3d:3f:8d:da:
                    2f:3e:99:34:53:1e:a8:c6:47:b4:ed:05:16:ad:24:
                    d7:9b:79:73:56:25:11:2f:4b:31:4a:76:5c:98:d5:
                    8e:99:05:09:02:2a:e0:97:9d:d4:62:2a:c9:e0:df:
                    61:3a:16:e2:de:ea:72:33:3a:ff:fc:1b:ab:80:0b:
                    06:e2:30:01:d5:e0:34:10:a1:55:93:be:1d:d5:e5:
                    fb:6a:cb:d5:df:d0:9c:87:e8:05:82:05:18:0b:e6:
                    57:59:59:7e:b1:78:4b:24:a2:0a:20:d0:10:a4:7f:
                    77:98:29:6d:e9:c6:0f:4b:61:8e:2b:90:02:77:7a:
                    b2:55:66:31:d7:b7:d4:47:f9:e6:ac:7e:ce:ea:44:
                    52:78:2b:71:21:4d:b8:67:20:c2:26:9a:01:b2:71:
                    42:b5:9d:c0:bb:45:05:1a:bd:3a:a0:8b:00:92:79:
                    d8:b9:d7:42:a5:df:fc:dd:65:1a:cb:f6:7d:0c:71:
                    5e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:32:2E:58:D0:97:87:96:22:80:8C:60:DA:92:A5:78:1B:33:4D:3D
            X509v3 Authority Key Identifier:
                keyid:5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/sDIuWNCXh5YigIxg2pKleBszTT0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.156.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3a:f9:f6:e7:94:47:66:e8:a4:f8:28:59:c5:f4:dd:29:2e:52:
         c5:dd:a7:a8:0f:bf:d5:a3:7d:f0:bc:e9:72:7e:90:e2:61:4a:
         39:f5:2b:b8:a9:2c:56:57:3a:12:a9:7d:31:df:32:b7:8f:90:
         1e:4b:0b:8b:79:b5:98:55:ea:d1:76:ec:4d:49:d1:0b:cc:e4:
         1a:5a:5c:c4:29:08:84:b6:1c:fe:a4:74:f6:63:49:4f:33:e8:
         87:b6:7b:6f:67:ef:89:8a:ae:b8:09:27:60:49:d1:6f:53:96:
         42:d2:18:32:b9:b2:66:fe:33:2f:b8:f2:fc:6c:d8:7c:74:0d:
         ff:25:fc:aa:34:b2:42:a8:2f:2b:15:8c:f0:35:36:72:14:ce:
         f8:1d:8e:05:fa:76:41:63:8b:20:ae:eb:b8:58:d1:3a:35:78:
         a1:8c:4d:2b:a9:a8:c0:54:4e:77:c6:80:8d:6a:47:11:57:1e:
         b5:1f:6f:04:82:eb:e6:13:db:3c:02:91:63:f4:f5:59:7b:2e:
         4f:c0:70:11:c4:72:8a:b0:36:18:4e:c8:3e:f3:37:80:74:4c:
         cf:a0:85:bc:7c:1a:1e:2b:6a:4d:92:7d:38:fd:4a:2e:50:1f:
         30:92:be:91:65:85:ba:db:b3:dc:80:c7:c9:a4:dd:5f:4b:42:
         89:97:3b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 21:12:08 2025 by rpki-client