Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/d3M-xOj6aQSHKM-bFIA4wLJcwL4.roa
File:                     d3M-xOj6aQSHKM-bFIA4wLJcwL4.roa (raw, json)
Hash identifier:          VoDdNpEcQ7H9zktyaR3YHDftuucYZjrqrrbXmwTd4WQ=
Subject key identifier:   77:73:3E:C4:E8:FA:69:04:87:28:CF:9B:14:80:38:C0:B2:5C:C0:BE
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       014E
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/d3M-xOj6aQSHKM-bFIA4wLJcwL4.roa
Signing time:             Mon 01 May 2023 01:28:07 +0000
ROA not before:           Mon 01 May 2023 01:28:07 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        211.130.0.0/18 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May  1 01:28:07 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=77733EC4E8FA69048728CF9B148038C0B25CC0BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:95:9e:c0:f4:ad:3d:bd:ca:df:9a:7c:8e:6e:
                    a6:3e:a1:46:a8:81:87:79:0e:88:03:ea:58:3b:e2:
                    d6:e7:10:94:0d:bb:0f:d1:84:1f:d5:a7:72:6c:d2:
                    a6:ed:11:bb:b6:2a:6c:b3:2d:06:a3:4f:01:0c:db:
                    50:a2:4e:7e:a3:3c:29:aa:85:c9:c8:6d:29:b8:21:
                    18:f5:0f:2d:e8:38:df:35:72:62:be:ca:bb:62:2c:
                    71:80:8b:72:18:a0:77:0a:23:97:47:19:f4:19:46:
                    89:9f:54:18:24:27:24:b1:09:9a:e2:86:20:cb:76:
                    a6:3a:a4:cc:23:9d:f3:a2:92:d6:7d:ed:c0:35:c4:
                    7e:f1:6d:b9:fe:f9:b4:6f:62:f4:b5:a3:1e:3a:c0:
                    1c:88:99:61:6a:73:b0:54:ea:fd:c1:d5:4a:0a:78:
                    6a:64:23:53:0b:db:38:9e:3f:26:12:52:af:6c:82:
                    25:5c:fc:93:57:6c:2b:61:ae:be:a0:b6:0b:b2:ea:
                    3a:c8:5d:e8:a3:26:16:91:cb:d7:5f:07:ab:be:bd:
                    be:02:b5:af:a3:a7:a2:ce:e6:67:7b:46:7e:da:61:
                    65:4a:c0:93:60:f4:0e:4e:13:64:78:16:34:5e:f5:
                    61:16:ce:5a:ed:35:eb:76:76:f9:75:78:6f:c8:5a:
                    d2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:73:3E:C4:E8:FA:69:04:87:28:CF:9B:14:80:38:C0:B2:5C:C0:BE
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/d3M-xOj6aQSHKM-bFIA4wLJcwL4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.130.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2a:11:aa:0a:a9:2d:be:68:da:d5:ff:b2:5b:7c:bd:75:d0:90:
         0a:a3:0a:ef:46:f6:55:e9:86:4c:90:68:eb:c1:ca:9b:72:71:
         f9:b0:28:ae:f4:dd:91:9e:19:c2:67:88:98:3e:1e:1f:1b:a3:
         4b:02:08:f8:10:fb:d9:ac:68:8f:76:65:3e:84:f7:6e:70:8d:
         5c:a3:dc:48:bd:e9:81:09:59:11:2e:59:c5:3d:bf:f6:5b:b0:
         bd:89:df:4d:e4:b1:66:14:60:d8:9a:38:d0:0a:c0:b9:4c:5a:
         24:10:cf:50:f2:0c:11:1d:1e:16:40:80:1f:88:be:9c:05:f5:
         25:a9:9f:b9:62:d9:17:19:a4:72:d8:07:39:4f:82:cd:ff:f0:
         a5:a4:cf:c4:df:86:a2:16:ec:06:09:2c:99:9d:e9:0d:23:d4:
         46:d6:41:10:3d:0c:72:bc:82:3a:85:13:a9:90:bc:f0:27:a8:
         cd:aa:d4:bf:b6:92:69:82:2f:51:af:0d:35:3b:56:02:69:34:
         29:46:bd:5f:39:51:0f:df:8b:c5:a9:b6:46:1a:5d:6c:54:36:
         a4:8e:ae:f6:0a:a1:f4:24:9a:9e:10:6c:be:ff:d0:e9:ac:fb:
         58:aa:e8:f2:83:2e:51:22:4d:90:01:4d:a4:0e:70:de:7c:a1:
         0a:af:dd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:17 2025 by rpki-client