Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/M7RsxGoA4kyN__2XY0240zyVVFA.roa
File:                     M7RsxGoA4kyN__2XY0240zyVVFA.roa (raw, json)
Hash identifier:          qP8Lo55BdRMu2feCEzuMg+PvJebmygT0e4IbRGO22TY=
Subject key identifier:   33:B4:6C:C4:6A:00:E2:4C:8D:FF:FD:97:63:4D:B8:D3:3C:95:54:50
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0131
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/M7RsxGoA4kyN__2XY0240zyVVFA.roa
Signing time:             Fri 05 Aug 2022 04:52:43 +0000
ROA not before:           Fri 05 Aug 2022 04:52:43 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        211.122.0.0/15 maxlen: 15
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 04:52:43 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=33B46CC46A00E24C8DFFFD97634DB8D33C955450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:22:12:84:bc:da:ce:d4:1b:22:70:e3:bc:e0:
                    68:a6:39:b1:05:4c:c4:b2:c6:0d:21:b0:cb:e5:04:
                    37:56:7c:ac:d1:a0:12:b9:36:ff:0f:39:8a:c2:1a:
                    4d:43:7b:ba:3c:6b:81:dc:cc:87:e2:51:46:0f:b5:
                    a2:ec:1e:fd:1f:6f:fe:01:ce:93:fe:10:08:96:93:
                    44:94:2a:04:bb:3d:e0:e0:cd:67:8f:e2:c3:b6:45:
                    59:48:53:53:17:bb:76:93:04:73:e6:44:d4:53:a9:
                    ba:c4:05:ed:e1:7f:b6:37:35:01:f3:f4:05:b9:fb:
                    a2:87:1d:8e:4c:d7:3d:4b:17:3c:82:06:c2:ed:4f:
                    4f:65:86:a8:4d:a6:71:75:f1:fc:e2:29:56:62:bf:
                    5f:bc:6a:b5:70:0b:21:5f:78:d8:f3:5d:d0:c3:6c:
                    ab:14:29:83:d1:fa:4d:15:01:43:c5:f2:69:2c:c6:
                    48:c3:f7:66:e8:11:60:8f:f1:71:53:cb:17:bc:9a:
                    f1:34:09:ea:c8:9c:e8:3c:bc:9b:0e:2b:06:42:2e:
                    93:38:23:41:b1:3a:67:3e:bb:b3:38:38:04:26:d6:
                    bd:62:90:e9:85:27:45:57:8e:7f:7f:d3:b8:df:72:
                    57:d2:59:1f:b1:11:f9:e6:82:1a:ec:16:4c:a7:ea:
                    6d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B4:6C:C4:6A:00:E2:4C:8D:FF:FD:97:63:4D:B8:D3:3C:95:54:50
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/M7RsxGoA4kyN__2XY0240zyVVFA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.122.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         88:9b:a2:14:92:97:5c:63:d2:74:fa:ce:d3:51:e3:58:47:35:
         22:b2:94:1e:b0:cd:b5:53:eb:ce:d8:ff:45:34:ef:3b:f4:a2:
         6b:e9:9d:36:5f:74:7a:10:ab:41:76:f4:41:b8:04:73:b0:c0:
         7a:8e:fb:90:c0:d5:e2:79:07:55:d9:7a:b3:ad:b7:25:64:6b:
         d6:74:e9:19:9a:e1:0c:99:53:c6:cd:6e:5c:d1:fb:68:48:6e:
         82:4c:0c:a2:b3:52:69:f3:1f:86:71:d6:0c:0b:79:07:53:ba:
         a1:06:21:ee:33:79:bd:53:a9:cf:dc:0a:1e:57:4f:a2:d0:33:
         69:6a:80:c7:36:d2:0a:f6:18:18:5f:c4:cb:37:5c:13:00:bc:
         0c:26:0d:bf:c4:10:4c:24:ea:2c:43:76:d5:28:ed:1d:4a:55:
         d7:4d:5c:a6:11:dd:88:32:b6:7b:0c:51:58:d9:92:48:1f:ae:
         a3:c7:36:05:2a:bc:df:65:48:d9:2c:b1:dd:73:f8:a4:3d:c8:
         52:c4:0b:0c:87:ff:13:64:a2:7e:91:3a:28:0e:81:6a:1b:40:
         27:86:9d:14:64:1c:35:39:4c:d4:86:ab:e7:20:b6:25:dd:52:
         16:b0:1f:41:bb:17:2d:64:69:e3:7c:05:e4:cf:15:e3:48:20:
         8f:9f:40:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:04 2025 by rpki-client