Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/oYBuWBZsy-3gxxLFqXT1M1-7wLw.roa
File:                     oYBuWBZsy-3gxxLFqXT1M1-7wLw.roa (raw, json)
Hash identifier:          GwhH5z57n7yYVCLl4DNDw4SFcD2ErZFl50mgomp7JRA=
Subject key identifier:   A1:80:6E:58:16:6C:CB:ED:E0:C7:12:C5:A9:74:F5:33:5F:BB:C0:BC
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       93
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/oYBuWBZsy-3gxxLFqXT1M1-7wLw.roa
Signing time:             Sat 01 Jul 2023 01:28:36 +0000
ROA not before:           Sat 01 Jul 2023 01:28:36 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     2518
IP address blocks:        61.193.0.0/17 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Jul  1 01:28:36 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=A1806E58166CCBEDE0C712C5A974F5335FBBC0BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9a:5c:9a:5f:e2:23:4f:16:35:12:a6:66:84:
                    5e:94:1e:99:c8:c3:2c:30:8f:27:ac:af:f7:b4:95:
                    d7:f2:2f:8c:6b:10:6f:ab:76:56:4b:9f:1b:13:1a:
                    e0:78:18:70:e8:24:fb:85:6e:78:5b:b5:d6:96:18:
                    5b:d1:73:b5:81:b2:8d:2f:f0:d4:c6:70:b6:b7:76:
                    5a:41:03:e0:73:04:a9:a5:c9:f7:fb:e2:cc:b7:dd:
                    19:b1:e1:3e:ca:1e:29:ea:db:4a:f9:8a:99:86:c3:
                    db:77:12:00:86:9d:02:ad:88:7e:08:c7:fe:99:67:
                    de:a7:6a:87:7d:86:d1:5c:b7:b8:50:af:cb:ae:47:
                    75:58:b0:f9:1c:dc:22:ec:c5:15:6c:6b:db:69:a8:
                    ed:9d:90:87:1e:35:6e:85:e9:de:3f:a4:fc:f9:60:
                    f0:a4:b6:4f:2f:3c:80:65:55:84:bc:f6:f0:57:e8:
                    50:5e:ab:af:72:57:cc:69:ed:cb:9c:dd:b8:d4:8c:
                    b9:6e:3c:3b:2e:08:d2:64:68:a5:6b:bf:9a:45:35:
                    96:35:98:a5:cb:0c:e2:9c:67:69:51:28:2b:89:80:
                    5b:2a:76:cc:b8:ef:5e:58:5f:5c:15:54:1f:e3:bc:
                    32:2c:df:82:c9:3d:c8:35:1a:7a:7a:42:60:99:2f:
                    2d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:80:6E:58:16:6C:CB:ED:E0:C7:12:C5:A9:74:F5:33:5F:BB:C0:BC
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/oYBuWBZsy-3gxxLFqXT1M1-7wLw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.193.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         61:eb:36:29:49:04:e0:a8:4d:6c:ed:52:f6:88:10:fe:0b:e9:
         af:aa:a7:89:0a:ba:2c:d4:58:b0:b3:18:26:df:35:02:31:be:
         c4:09:98:2f:8b:87:2a:59:55:d8:51:f8:db:84:09:4f:c4:f4:
         59:dd:63:5c:24:25:e8:5a:5d:ad:5f:8d:58:32:0a:33:e5:8c:
         dc:9c:f9:cc:00:21:31:ea:8f:48:2d:7d:c1:0f:0b:fd:e1:4c:
         68:36:f2:4c:9b:34:40:de:5a:b2:37:b6:b2:95:ac:02:63:b0:
         67:31:57:c7:5e:6f:87:87:80:b8:8e:a4:16:62:a8:c6:f7:07:
         c8:2a:a0:15:c5:70:bf:2d:09:dd:7e:ae:f4:59:f1:4f:e8:79:
         e4:ff:96:39:2e:11:c9:d4:ba:0f:24:0a:8f:fd:bd:46:87:94:
         63:3f:95:5a:5d:83:fc:d1:51:bf:4f:cf:82:f5:49:14:97:b1:
         66:f6:cc:8f:e2:53:a0:28:02:21:50:84:e9:bd:31:c9:f5:51:
         67:45:74:f4:e8:49:9e:a3:4c:73:75:4d:b5:12:35:95:2b:dd:
         9f:15:50:1c:19:7f:9e:ed:21:ea:fb:57:e7:05:36:16:76:14:
         85:4c:b8:0e:a7:23:5f:58:75:c6:59:a5:80:b6:11:8e:d0:c5:
         ad:df:1c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:41:57 2025 by rpki-client