Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/-WbNeajPx4IboWDofWSR0vZbWZo.roa
File:                     -WbNeajPx4IboWDofWSR0vZbWZo.roa (raw, json)
Hash identifier:          gSS3Rcn9I93WssPgh/wtw3HvifRbFjfxufNWzaaaJfI=
Subject key identifier:   F9:66:CD:79:A8:CF:C7:82:1B:A1:60:E8:7D:64:91:D2:F6:5B:59:9A
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       015D
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/-WbNeajPx4IboWDofWSR0vZbWZo.roa
Signing time:             Mon 01 May 2023 01:28:19 +0000
ROA not before:           Mon 01 May 2023 01:28:19 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        118.0.0.0/12 maxlen: 12
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:28:19 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=F966CD79A8CFC7821BA160E87D6491D2F65B599A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c6:64:a8:48:db:ec:d8:12:fb:32:e7:68:f1:
                    a0:f3:60:97:d5:ca:42:55:bd:c7:4a:20:6b:c1:fd:
                    d1:7f:5e:3c:66:a8:7b:52:2b:27:6c:be:4c:ad:a8:
                    98:85:67:07:8b:02:c5:f0:1e:8a:65:40:fe:83:11:
                    68:12:3b:2f:76:73:21:65:89:71:82:99:f2:0f:96:
                    32:0c:ea:72:21:1e:b5:23:51:c0:6f:84:a9:02:5a:
                    c4:00:da:a0:6f:37:18:ed:2a:90:91:26:77:a3:0a:
                    59:da:9f:d1:44:b3:04:57:46:7e:1f:07:00:03:b6:
                    df:86:b0:8f:cd:22:77:1c:ec:10:68:d2:89:e3:e4:
                    99:46:98:ae:a0:27:4b:a2:f5:85:5f:ce:7a:ca:dc:
                    f5:b9:3a:a6:77:e4:38:02:94:e9:a3:04:e2:9c:44:
                    ed:98:90:c9:1b:35:0a:bd:d4:ce:fc:e6:79:c0:bd:
                    31:b5:d3:0e:1a:b9:be:ad:e4:a7:6b:24:e4:9c:c2:
                    a4:04:b4:c5:b0:1a:51:a4:8b:e4:83:82:e8:2c:39:
                    c4:78:a6:2e:f8:dc:bc:93:ab:4f:f5:1a:0c:47:ea:
                    ef:c7:dc:2c:ef:8d:cc:b8:71:77:1e:b9:cb:5f:3c:
                    fe:bf:88:76:1b:4a:dd:eb:4b:9d:92:fb:7f:bf:c7:
                    c0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:66:CD:79:A8:CF:C7:82:1B:A1:60:E8:7D:64:91:D2:F6:5B:59:9A
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/-WbNeajPx4IboWDofWSR0vZbWZo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.0.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         ae:7f:39:a3:41:83:60:ac:0b:f5:1a:2e:b0:46:29:21:c1:75:
         ad:5e:95:48:a5:75:b4:d6:67:88:b7:b3:92:d6:d2:ac:30:9d:
         28:94:98:f6:a2:84:93:cf:45:51:16:3b:8d:68:2b:13:21:ac:
         a3:a6:f5:38:08:9b:8a:c0:f4:dc:37:84:95:38:f5:e3:72:50:
         56:c6:45:61:f5:9f:9a:60:cc:04:77:83:f5:cc:4c:4f:e0:d2:
         20:d4:d4:d6:ba:06:f7:a2:7f:94:3d:6a:b2:20:d1:4e:19:66:
         66:25:66:33:56:b0:de:ed:32:c9:8b:31:3c:6b:13:05:85:2a:
         3a:99:a8:29:16:7a:35:5a:48:7e:68:93:d9:2b:b4:a3:2a:bb:
         65:8f:24:e4:95:80:a6:6b:dd:74:5e:91:50:2b:29:e9:bd:0c:
         dd:6e:67:d3:43:7f:44:83:04:d9:91:2e:a8:62:36:7a:11:3d:
         80:2e:d0:24:fe:eb:ce:00:7b:af:37:eb:69:5d:42:0a:39:67:
         53:05:aa:4c:5f:18:16:b7:04:24:9d:19:87:07:2c:cc:ca:95:
         cd:b5:24:00:44:c8:48:fa:fa:1a:7e:3d:a4:e2:bc:42:1e:34:
         ad:7e:a0:70:8a:d6:d8:93:bb:0d:9d:84:5f:2d:b4:33:5e:97:
         16:91:12:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:37 2025 by rpki-client