Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/D9GU_pvoyUJQCNnZ1q8h844ujG8.roa
File:                     D9GU_pvoyUJQCNnZ1q8h844ujG8.roa (raw, json)
Hash identifier:          8HNhCb3LlRBXkOJOielzF19Sg7PotN5i2l2Yg0Id9ek=
Subject key identifier:   0F:D1:94:FE:9B:E8:C9:42:50:08:D9:D9:D6:AF:21:F3:8E:2E:8C:6F
Certificate issuer:       /CN=B79C47CD54D327D3C1777CF5E41F162C9876BB65
Certificate serial:       42
Authority key identifier: B7:9C:47:CD:54:D3:27:D3:C1:77:7C:F5:E4:1F:16:2C:98:76:BB:65
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t5xHzVTTJ9PBd3z15B8WLJh2u2U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/D9GU_pvoyUJQCNnZ1q8h844ujG8.roa
Signing time:             Thu 13 Apr 2023 09:52:37 +0000
ROA not before:           Thu 13 Apr 2023 09:52:37 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     55391
IP address blocks:        14.0.8.0/22 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B79C47CD54D327D3C1777CF5E41F162C9876BB65
        Validity
            Not Before: Apr 13 09:52:37 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=0FD194FE9BE8C9425008D9D9D6AF21F38E2E8C6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:46:1e:97:c9:aa:45:0f:0c:d5:79:74:54:df:
                    a0:44:e6:48:ab:28:90:3c:76:c7:af:67:2d:d7:7d:
                    aa:ba:42:85:6b:8b:af:e6:53:fe:1f:54:d4:44:ef:
                    b7:86:8c:fd:87:e7:0f:15:04:0f:80:41:5b:04:e3:
                    6d:33:e3:dd:e4:05:c9:ff:50:96:42:ba:3a:2f:69:
                    21:f6:f9:e4:dc:cf:c1:ab:ff:9d:38:43:8e:d3:a8:
                    8c:da:ba:ff:8c:4d:b3:51:da:17:6a:45:8a:b4:a4:
                    8b:31:33:33:7b:c1:5b:b3:69:9e:4f:af:5f:c7:52:
                    ae:5b:25:c0:bb:a3:9f:cd:52:a9:0b:ed:4a:6b:4c:
                    c8:4f:94:73:b7:2f:f9:c7:dd:45:28:3a:c6:97:e2:
                    c9:58:b9:e4:19:af:11:97:cf:34:c4:98:a6:c9:13:
                    66:4c:a7:6a:ce:e8:3b:c8:09:5d:ea:22:1d:9a:c1:
                    a3:96:f5:2e:9a:e7:20:8a:57:21:e1:6c:b9:1c:a2:
                    61:1d:4a:92:9b:61:38:c5:cb:c6:36:7f:75:bc:2d:
                    44:25:e9:85:3d:09:83:e9:1d:81:20:fc:5e:b6:21:
                    21:73:d2:c1:f2:45:c4:18:a9:6c:26:86:bf:db:21:
                    16:21:82:83:9b:c8:e3:1a:63:d0:1c:8a:58:97:6b:
                    ad:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D1:94:FE:9B:E8:C9:42:50:08:D9:D9:D6:AF:21:F3:8E:2E:8C:6F
            X509v3 Authority Key Identifier:
                keyid:B7:9C:47:CD:54:D3:27:D3:C1:77:7C:F5:E4:1F:16:2C:98:76:BB:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/t5xHzVTTJ9PBd3z15B8WLJh2u2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t5xHzVTTJ9PBd3z15B8WLJh2u2U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/D9GU_pvoyUJQCNnZ1q8h844ujG8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.0.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:8b:85:29:30:00:14:b2:55:b5:68:18:25:1c:44:bf:3d:c0:
         e5:0a:ef:d3:c6:c2:9c:0c:41:62:04:b3:3c:bf:6b:6c:80:9f:
         b1:bd:11:09:60:6b:2a:cb:0e:d4:59:61:27:5b:44:10:5a:d6:
         75:11:8c:09:9c:84:3b:26:4d:ca:c5:6b:1f:f0:ea:d2:95:ca:
         46:f5:5d:a3:54:88:f2:89:a4:fc:4f:3a:60:23:e7:7f:7d:42:
         ad:94:57:d6:6c:d9:46:fb:56:3f:4b:4a:e0:55:a9:0a:c7:e4:
         1c:7b:4f:ac:ac:1e:1d:38:3f:07:e6:a1:5b:ce:15:d9:49:e9:
         26:86:cd:1f:34:a4:01:73:de:71:d5:16:09:14:a3:f2:6b:cb:
         7f:21:55:63:98:1a:5d:87:36:8b:7e:e9:14:47:02:be:33:be:
         1a:c5:2a:60:c2:04:45:e6:e1:99:02:58:a7:45:ec:35:e2:49:
         74:e0:06:eb:d0:3b:7f:33:af:c4:39:55:e8:90:63:97:ac:8e:
         6c:23:e8:2e:9c:2f:c9:a1:0b:46:2b:8a:02:ef:ec:bd:39:bc:
         87:16:f7:49:6b:f2:cc:f6:d9:2e:f1:8c:1b:23:c4:93:15:38:
         cf:6d:25:55:2a:c6:be:e3:59:81:29:e3:d2:25:a4:e3:16:e2:
         ae:60:4b:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:34 2025 by rpki-client