Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/PrDDd6W6k4YVrlUcN0MnCayLi4A.roa
File:                     PrDDd6W6k4YVrlUcN0MnCayLi4A.roa (raw, json)
Hash identifier:          UELWjUvxZsnK5t+CLHmLlvztQ6TkGNcnr2vA5/rfgb0=
Subject key identifier:   3E:B0:C3:77:A5:BA:93:86:15:AE:55:1C:37:43:27:09:AC:8B:8B:80
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       013C
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/PrDDd6W6k4YVrlUcN0MnCayLi4A.roa
Signing time:             Fri 05 Aug 2022 05:06:55 +0000
ROA not before:           Fri 05 Aug 2022 05:06:55 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        219.96.128.0/17 maxlen: 17
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 05:06:55 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=3EB0C377A5BA938615AE551C37432709AC8B8B80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:da:fe:88:b9:18:14:3b:b8:d0:49:83:a3:a9:
                    36:63:49:59:15:8a:b3:1d:42:5d:0a:31:c8:76:d0:
                    63:5d:0c:df:fd:4f:32:9e:d9:36:07:d0:f8:a3:ef:
                    52:c8:c1:a3:de:e8:46:20:9e:b2:1c:3e:03:c7:b3:
                    d8:3a:32:44:d1:02:6f:c1:8d:e1:55:64:62:75:a8:
                    42:84:87:fb:7d:df:c7:e8:3b:33:78:75:5b:60:06:
                    27:60:1c:ee:75:64:d6:b2:bd:67:c5:df:76:f6:26:
                    2b:95:32:8d:10:ba:bb:af:c4:ce:72:76:b9:d6:36:
                    3d:72:63:ee:d3:67:a3:fd:bb:f4:81:58:fc:8b:44:
                    93:9d:4b:0f:8d:8d:01:fa:08:c6:bf:df:da:18:f8:
                    26:ad:fc:06:e9:fb:6f:de:bb:c7:22:c8:8e:df:a6:
                    8a:e4:6d:e6:e7:8f:33:cc:b3:63:13:d7:87:97:16:
                    c1:be:30:1d:7c:88:34:42:db:14:46:65:4e:c5:e1:
                    b9:05:9c:fb:ad:13:dd:db:f3:63:cb:a2:1b:1e:bb:
                    de:87:91:af:a7:df:ae:18:dd:98:0d:22:f7:d2:e9:
                    99:6b:7c:2d:14:85:5a:cf:6e:04:27:73:01:47:ec:
                    23:aa:84:26:a0:53:6c:24:05:6e:85:61:16:74:6a:
                    57:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B0:C3:77:A5:BA:93:86:15:AE:55:1C:37:43:27:09:AC:8B:8B:80
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/PrDDd6W6k4YVrlUcN0MnCayLi4A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.96.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b9:05:21:4c:2f:4c:cf:bd:08:a1:ec:67:0d:bd:b1:5d:41:2b:
         49:84:22:4a:c9:63:50:4c:51:70:7d:bc:18:87:31:db:29:7d:
         4b:7e:49:75:cc:64:1e:33:1b:f9:28:16:97:5e:fb:e6:69:da:
         ce:da:4c:e2:c6:84:c1:38:60:1d:e9:31:f7:ea:b1:77:57:fc:
         fc:f4:95:b3:2b:57:17:d1:ff:74:2f:73:6e:61:6c:35:79:92:
         40:c4:75:43:8d:09:97:e7:33:22:c9:ea:11:70:31:55:14:42:
         a5:47:95:80:c4:3c:85:54:c5:74:26:58:48:30:28:32:58:9f:
         65:5a:97:9c:bb:46:9e:06:69:9c:51:1f:6a:32:17:d9:74:c0:
         15:58:31:72:cf:3d:ca:e6:0c:f1:d6:dc:91:23:8e:b6:9b:b5:
         ed:c5:5a:39:0c:e5:18:02:33:71:85:49:6a:0e:1d:03:98:6a:
         aa:2c:c9:2f:a7:e1:25:0e:b8:8d:9d:83:26:01:1a:10:25:6d:
         40:c9:92:57:c2:c8:7f:d6:34:94:25:62:02:c6:39:aa:a9:d0:
         e0:82:05:27:56:05:bf:fc:a6:c8:fe:c0:36:2d:68:d9:9f:07:
         75:3b:bb:61:56:87:00:62:79:a1:b9:7a:46:a4:37:57:83:52:
         39:c8:d9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:28:11 2025 by rpki-client