Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/wVU2PxGfZz6hIx65ucNRwNMh8A0.roa
File:                     wVU2PxGfZz6hIx65ucNRwNMh8A0.roa (raw, json)
Hash identifier:          8Wflhe2xygYbibI3nj9Ck4wgD1wLb+5UGrq5Z8N+LiA=
Subject key identifier:   C1:55:36:3F:11:9F:67:3E:A1:23:1E:B9:B9:C3:51:C0:D3:21:F0:0D
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       017C
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/wVU2PxGfZz6hIx65ucNRwNMh8A0.roa
Signing time:             Sat 01 Jul 2023 01:30:44 +0000
ROA not before:           Sat 01 Jul 2023 01:30:44 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     4713
IP address blocks:        210.190.0.0/16 maxlen: 16
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380 (0x17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Jul  1 01:30:44 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=C155363F119F673EA1231EB9B9C351C0D321F00D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:73:6c:99:e9:9d:09:2a:3b:3c:ea:c8:28:ae:
                    4d:02:7a:cb:e2:40:00:df:20:e7:a7:c1:2d:0a:e2:
                    35:63:1a:dc:ed:43:cd:c3:eb:f8:39:7c:76:65:8a:
                    18:31:2b:6b:ef:9b:1c:bb:dc:83:39:bd:99:d7:a8:
                    25:89:23:1a:3e:28:20:26:55:05:b6:a5:c7:fb:c1:
                    f1:ce:85:0f:a0:1f:c2:62:c8:55:ab:c5:d8:7c:a3:
                    76:8a:3a:56:56:8a:c3:c9:ee:d0:36:6c:7f:2f:70:
                    00:cb:7f:31:01:5a:30:7f:46:ba:bb:bd:c0:a2:a4:
                    05:f0:e1:1c:b5:5b:c7:ef:bd:22:2b:46:43:a1:6c:
                    f5:53:73:2e:69:ca:6c:39:f3:22:fe:c2:b8:8c:e7:
                    38:fe:5c:b7:2d:99:b0:de:b3:c6:02:59:08:41:9c:
                    55:e0:15:35:c0:84:36:be:95:98:d2:10:6d:6b:1d:
                    a0:43:21:1d:63:3a:8b:80:2b:e0:7f:2c:67:18:05:
                    89:33:2c:f0:c2:28:67:90:15:95:4a:05:6c:f1:de:
                    65:b2:cc:7d:d4:86:39:d9:ae:76:33:f5:4b:87:39:
                    ba:c5:7c:a9:42:c5:d1:1e:a9:9d:6c:26:13:bc:cc:
                    5b:be:ad:2b:44:5f:e4:43:b7:9f:99:13:ec:d0:42:
                    ff:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:55:36:3F:11:9F:67:3E:A1:23:1E:B9:B9:C3:51:C0:D3:21:F0:0D
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/wVU2PxGfZz6hIx65ucNRwNMh8A0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.190.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         de:27:de:0b:89:87:79:a5:a7:88:16:fa:7c:63:82:33:2e:d6:
         07:04:cb:46:cb:68:20:ef:c9:cf:1d:fe:17:81:ff:49:2c:b0:
         2b:85:98:22:83:59:09:49:aa:ab:95:82:73:26:0d:e0:05:68:
         db:24:f1:24:9e:96:ab:73:08:fe:be:5e:d7:9d:9e:f7:8d:45:
         10:94:24:48:bc:48:fa:50:f5:c5:94:f4:2e:67:0c:45:34:2f:
         d4:6d:3c:66:f7:66:10:b1:f2:7e:48:92:43:f4:e7:ae:90:37:
         63:2d:89:ce:ef:d6:f6:21:f0:81:a9:b8:c6:27:cb:47:6f:c3:
         7e:5e:7f:f2:01:b7:a6:50:b6:9c:cf:84:2a:0f:80:1b:09:52:
         ff:2b:0b:81:1c:c0:a8:45:92:2f:d2:f9:27:92:16:99:38:5b:
         08:55:8e:06:2b:d7:c6:1f:ba:0f:a0:5f:17:ce:f6:a5:7b:87:
         3b:f2:1d:f5:54:cf:a3:c0:1c:07:29:27:d9:4c:09:33:3f:4e:
         9d:4a:39:8c:e5:fd:d2:98:b3:81:ce:88:29:bd:b6:85:4a:90:
         09:46:d0:54:9e:c2:f8:31:6a:5c:8c:d3:ba:34:af:8b:57:23:
         a1:56:ae:d1:91:33:6d:41:f4:90:76:14:01:3a:7c:32:2a:70:
         d2:82:db:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:10 2025 by rpki-client