Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/0O63o2vvTMD4KyrZ-Z3w1qh-RSE.roa
File:                     0O63o2vvTMD4KyrZ-Z3w1qh-RSE.roa (raw, json)
Hash identifier:          8bBvm8U5J9Lt6b3Id4g3tUNdIM9AnqMOWJybijWKCV4=
Subject key identifier:   D0:EE:B7:A3:6B:EF:4C:C0:F8:2B:2A:D9:F9:9D:F0:D6:A8:7E:45:21
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       017B
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/0O63o2vvTMD4KyrZ-Z3w1qh-RSE.roa
Signing time:             Sat 01 Jul 2023 01:30:44 +0000
ROA not before:           Sat 01 Jul 2023 01:30:44 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        210.170.64.0/18 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379 (0x17b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jul  1 01:30:44 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=D0EEB7A36BEF4CC0F82B2AD9F99DF0D6A87E4521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:db:9e:73:46:cd:2e:a9:34:8c:bc:10:95:8d:
                    59:10:1b:7a:1c:0b:18:aa:14:ac:9a:95:56:9b:bf:
                    a1:13:f0:53:f3:88:d3:06:4b:16:b4:c5:8e:ee:70:
                    67:96:34:d4:b1:54:b8:57:b5:ec:71:9d:52:ff:92:
                    09:96:7c:0f:f8:09:dc:23:99:e0:90:99:d7:f0:dd:
                    e3:67:0e:de:7b:05:b7:a7:4c:6d:f2:77:ec:0d:6b:
                    1a:40:f8:f6:f3:27:c9:cc:56:27:ef:20:af:9d:69:
                    b4:88:b4:45:e5:d8:ef:a9:e4:82:fd:b1:b9:5b:8f:
                    fb:6e:19:43:34:7f:94:b5:e9:4d:45:22:99:22:6f:
                    e9:9d:17:d3:1b:f0:55:aa:69:37:24:9e:f7:43:24:
                    53:ee:fa:c3:56:f4:11:3e:2c:8d:4e:85:64:3f:6f:
                    06:68:63:95:46:24:72:85:84:d2:ce:bb:38:3d:cf:
                    f6:3a:01:21:40:7a:17:32:3c:09:f3:51:f7:02:e4:
                    08:d1:fa:63:c4:7c:3e:ed:31:f4:8b:0f:eb:4e:b0:
                    fb:22:10:ff:bc:ca:69:32:f6:e5:55:e8:5a:77:37:
                    61:4a:de:ef:13:a9:29:28:b2:f6:99:19:1c:b6:b3:
                    7c:f4:0f:56:a4:48:b4:7e:88:1d:66:16:4c:35:ab:
                    05:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EE:B7:A3:6B:EF:4C:C0:F8:2B:2A:D9:F9:9D:F0:D6:A8:7E:45:21
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/0O63o2vvTMD4KyrZ-Z3w1qh-RSE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.170.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         37:a6:a8:44:e1:35:24:3f:57:35:ad:44:8a:ea:e5:f0:88:b7:
         92:9a:b8:93:14:d4:ff:ff:20:ab:c2:6c:db:85:0f:3d:78:1d:
         42:63:3f:cd:7b:4c:b9:30:4b:2b:3b:55:e7:35:42:ef:93:f5:
         c1:ff:2a:8c:64:10:bb:df:08:24:38:38:b5:c9:84:d4:52:d1:
         2e:af:bb:a1:78:0b:cc:e5:b2:d7:e5:0f:42:03:34:23:5f:9d:
         ed:ca:54:ae:13:64:e1:d0:8a:1c:29:ad:76:5a:18:a2:f7:92:
         21:c8:8c:47:09:25:25:f9:56:f0:d9:69:dc:69:7d:d7:82:cc:
         cc:0c:ba:db:c9:fa:46:38:56:07:76:01:01:c6:11:fd:35:78:
         c9:b6:ef:21:9f:ff:cf:93:70:5f:27:d5:0c:0d:b9:c6:fa:7c:
         ae:49:09:26:53:c9:43:b3:b1:86:e8:4b:35:a2:69:d7:93:be:
         f2:8d:3f:7a:aa:e0:4a:11:84:a5:c5:8c:9d:a2:57:0d:cc:71:
         3c:85:08:e2:72:9a:67:64:4b:eb:dc:41:fc:de:16:b4:37:ac:
         9c:12:21:11:f1:28:c2:d8:63:36:eb:bc:c5:06:4f:c2:8a:15:
         8a:2e:f3:55:72:df:42:72:31:6a:5e:55:20:f5:50:2a:3a:d1:
         48:34:aa:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:23 2025 by rpki-client