Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/Oq6bitff6BpzcaixWm4ukplQDp4.roa
File:                     Oq6bitff6BpzcaixWm4ukplQDp4.roa (raw, json)
Hash identifier:          2JuwoqcGsyS2nvC3nwVfDGMFQy+1n0+fg/ufq8RQPcQ=
Subject key identifier:   3A:AE:9B:8A:D7:DF:E8:1A:73:71:A8:B1:5A:6E:2E:92:99:50:0E:9E
Certificate issuer:       /CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
Certificate serial:       51
Authority key identifier: 24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/Oq6bitff6BpzcaixWm4ukplQDp4.roa
Signing time:             Thu 13 Apr 2023 09:52:32 +0000
ROA not before:           Thu 13 Apr 2023 09:52:32 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     7667
IP address blocks:        202.255.44.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
        Validity
            Not Before: Apr 13 09:52:32 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=3AAE9B8AD7DFE81A7371A8B15A6E2E9299500E9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:41:26:79:f3:c4:a7:e5:e1:a9:01:f6:34:fc:
                    2a:7d:17:ab:aa:75:fe:4f:af:d6:92:ab:f6:60:01:
                    ad:14:c5:55:33:c8:df:57:20:6e:c4:29:10:b7:43:
                    35:a0:df:d1:44:1c:58:2f:2f:31:d2:4c:94:bd:3f:
                    81:1e:1b:66:9a:46:f2:cf:dd:4d:73:67:83:39:52:
                    e3:99:d7:4e:8e:41:43:d3:d7:7b:1c:30:6d:41:48:
                    11:61:5a:dd:f6:fe:e6:64:eb:1e:eb:c7:e0:48:54:
                    8b:6c:75:79:aa:a0:5f:49:93:df:16:b5:4a:5c:9c:
                    80:2e:5e:13:1f:9e:c6:c8:e4:08:a1:2b:cd:8c:a0:
                    0e:0c:b6:6f:13:d4:3b:64:2e:66:f2:18:87:3d:96:
                    ec:41:73:f2:06:f1:c8:5d:f9:bc:4b:a3:5c:5d:8d:
                    e7:20:07:0d:e7:91:34:4c:53:5d:35:d7:86:da:30:
                    5d:22:d1:cd:92:c0:62:85:cc:c8:33:09:56:82:10:
                    50:46:b4:e7:f6:72:07:0c:a8:bb:3d:00:d9:97:2e:
                    a1:b1:e8:a2:6a:51:43:b5:1d:b9:c1:9e:bd:06:86:
                    7c:94:bb:f1:a9:8d:a1:5b:38:ff:1e:f8:8a:1a:b8:
                    e6:c9:9a:c6:8c:29:2d:b9:4e:4c:0c:a8:6c:6b:af:
                    d7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AE:9B:8A:D7:DF:E8:1A:73:71:A8:B1:5A:6E:2E:92:99:50:0E:9E
            X509v3 Authority Key Identifier:
                keyid:24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/Oq6bitff6BpzcaixWm4ukplQDp4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.255.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:69:07:36:ca:8b:b2:96:80:71:e0:5f:76:48:8f:f5:b9:7e:
         48:60:e9:53:1a:64:cd:84:65:90:de:09:40:25:0b:99:11:19:
         7b:8e:ff:f5:1c:9c:8d:86:91:45:60:c5:2b:00:fa:6b:f8:a5:
         dd:54:8b:87:45:92:18:65:52:8f:19:49:4d:74:8f:ea:53:b6:
         b4:a0:13:72:af:a4:66:a2:5e:a2:4c:bb:4d:2f:7d:9f:62:ab:
         1c:6b:8e:f9:d0:d1:22:5d:c6:13:63:f3:f8:3f:94:19:e4:91:
         54:4c:10:e9:0c:f9:45:fd:f1:9e:08:f5:6b:94:3a:35:b0:fd:
         4d:f0:b2:9a:fe:be:23:0b:a5:c1:80:a7:4e:76:6e:40:d7:85:
         9e:48:3d:74:99:27:6d:fa:d1:79:06:9c:af:21:48:8a:ee:0f:
         bf:22:fe:9b:fe:2d:fb:8a:cc:57:77:c1:db:d2:97:7e:4f:99:
         28:ed:d6:f7:27:0e:59:0c:91:50:f7:7f:a8:31:2f:00:8a:d7:
         71:0a:ea:f1:6b:b4:8a:f3:b8:0b:17:56:48:fb:24:59:2d:f1:
         a0:86:42:c6:c7:5d:cf:bf:dc:94:6f:55:5d:49:3a:b7:db:7f:
         dc:54:ff:8b:79:01:88:3c:e4:76:90:a2:3b:1a:91:91:ae:f5:
         cd:39:bf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:46 2025 by rpki-client