Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/itvWui36OHCNPQ-A4DHlOuUjV_M.roa
File:                     itvWui36OHCNPQ-A4DHlOuUjV_M.roa (raw, json)
Hash identifier:          WKbzs0nrBYvEYqJFWf1z/ztEjX7bEcF6Rhf5HmZ3VCE=
Subject key identifier:   8A:DB:D6:BA:2D:FA:38:70:8D:3D:0F:80:E0:31:E5:3A:E5:23:57:F3
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0195
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/itvWui36OHCNPQ-A4DHlOuUjV_M.roa
Signing time:             Sat 01 Jul 2023 01:32:08 +0000
ROA not before:           Sat 01 Jul 2023 01:32:08 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        222.144.0.0/13 maxlen: 13
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405 (0x195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jul  1 01:32:08 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=8ADBD6BA2DFA38708D3D0F80E031E53AE52357F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1b:07:7c:e2:7b:0a:50:3e:47:ac:f6:10:4f:
                    d9:d7:6d:86:78:01:c0:6b:eb:8e:53:ff:a2:10:60:
                    6a:f6:a9:57:71:b8:0f:e2:00:e2:b1:18:8a:1a:f4:
                    95:74:b2:40:04:ca:ea:2f:bb:f4:cc:de:1f:f5:96:
                    ff:8e:fa:97:0c:0f:66:15:0b:75:cc:e4:a7:f7:6a:
                    9b:ba:cf:96:37:f8:48:79:c0:29:b5:5b:a5:57:1c:
                    42:a4:b0:6c:51:0d:04:06:45:55:ee:5d:44:5f:aa:
                    d6:4f:19:72:d0:fa:c0:a4:75:10:60:61:1d:cf:62:
                    74:1a:dc:0d:33:90:ba:ec:5a:22:b2:f8:a9:20:a8:
                    62:9c:86:97:72:5d:35:9a:c2:64:f3:7c:1d:6c:cd:
                    88:61:ae:4a:15:74:af:1b:94:e6:5c:d5:fb:a4:d5:
                    9a:ff:be:25:41:71:fa:79:15:7c:76:22:66:7a:0b:
                    03:c8:dd:d0:45:fe:f4:d6:d7:da:8d:d8:a8:3d:4f:
                    be:b2:68:92:64:93:d7:40:1b:24:f5:ae:c4:ce:ba:
                    21:9d:cc:55:04:2e:7b:6e:74:4a:b7:22:1d:d7:0b:
                    13:cb:38:d8:f6:5b:2f:45:56:4f:fc:4b:9d:34:78:
                    42:95:82:86:ae:e0:04:3a:1d:cb:56:74:24:33:01:
                    85:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DB:D6:BA:2D:FA:38:70:8D:3D:0F:80:E0:31:E5:3A:E5:23:57:F3
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/itvWui36OHCNPQ-A4DHlOuUjV_M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.144.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         1d:96:94:49:90:8d:fc:a7:85:b6:94:39:a6:b3:77:fe:e5:75:
         f2:dd:b6:b6:3e:62:15:95:dd:b9:d3:be:3c:64:23:a6:62:4a:
         37:1b:83:ab:a2:21:76:8f:44:c0:b7:81:a0:af:bc:de:e8:33:
         46:62:3d:ab:66:9b:b7:6a:a1:17:00:28:75:e8:69:21:ef:2d:
         a8:eb:d1:94:7a:ba:ae:75:45:ce:15:b9:78:8a:e4:90:9b:e6:
         c6:70:a6:67:3e:ea:6b:ed:73:e0:48:48:4d:5d:b7:bc:d6:d0:
         d6:e7:c9:cc:54:13:d5:dc:3b:d2:20:b3:5d:ec:ff:53:0b:44:
         66:26:e0:59:60:66:41:d1:64:a6:9f:bc:a8:d3:c2:fe:2a:66:
         ee:e4:c9:c2:c7:c1:40:d2:4f:67:ea:42:c1:3d:cc:cb:87:82:
         c5:19:68:53:d3:d7:59:95:6e:08:38:0d:50:df:ae:1c:cd:aa:
         6e:37:a4:31:06:c0:e5:12:8b:a8:32:08:3c:aa:39:51:19:6a:
         99:29:bf:6b:ce:05:09:41:68:35:f1:5b:d4:25:bc:86:4f:99:
         e6:2b:db:bd:fa:62:4d:bc:6b:df:22:86:c0:eb:cf:43:d2:0e:
         aa:c6:6e:0d:48:b9:6d:28:63:a3:42:ff:3c:3b:ad:c1:7f:96:
         a8:34:c8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:15 2025 by rpki-client