Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/zwmsljN9H3t3qaL9JJMAsbGSMe0.roa
File:                     zwmsljN9H3t3qaL9JJMAsbGSMe0.roa (raw, json)
Hash identifier:          7tn5tbyEzwr0BD+acOSN0SWWlkaqM2sZ9cPfI0cq/Pk=
Subject key identifier:   CF:09:AC:96:33:7D:1F:7B:77:A9:A2:FD:24:93:00:B1:B1:92:31:ED
Certificate issuer:       /CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
Certificate serial:       03
Authority key identifier: 71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/zwmsljN9H3t3qaL9JJMAsbGSMe0.roa
Signing time:             Wed 17 Jan 2024 07:59:04 +0000
ROA not before:           Wed 17 Jan 2024 07:59:04 +0000
ROA not after:            Thu 16 Jan 2025 05:46:42 +0000
asID:                     18071
IP address blocks:        132.182.0.0/16 maxlen: 16
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
        Validity
            Not Before: Jan 17 07:59:04 2024 GMT
            Not After : Jan 16 05:46:42 2025 GMT
        Subject: CN=CF09AC96337D1F7B77A9A2FD249300B1B19231ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0a:19:07:af:dc:53:d6:2a:b0:6a:ea:14:10:
                    52:f8:21:91:04:67:4b:1f:5c:f1:21:d2:3a:f1:cd:
                    5d:1d:94:35:4c:db:e1:e6:90:d7:b8:23:33:14:fe:
                    30:c0:04:18:f8:ec:a2:6e:b1:65:f9:19:58:ed:15:
                    ff:18:a5:c1:2f:f8:41:42:56:8f:1e:b6:09:4b:25:
                    eb:88:c2:57:3e:bb:50:00:c6:32:d6:0f:cf:3f:89:
                    89:ac:b6:02:c2:ca:29:36:d0:c7:e6:63:33:6b:05:
                    1c:73:3c:a2:87:cd:eb:6d:ac:d0:fb:b2:95:7f:07:
                    6f:61:82:b8:8a:bf:62:6f:55:5b:3a:5b:a5:f7:de:
                    2f:5f:47:37:c7:b0:a1:4d:d0:a0:cf:a0:a1:6f:3b:
                    cf:0e:60:c1:d3:95:b2:27:0b:4d:03:82:a1:d7:01:
                    43:d5:41:2e:63:49:16:42:38:e6:35:d6:fe:11:a4:
                    1e:5d:0c:f3:d6:13:b1:05:86:4b:6d:b1:46:b2:15:
                    0b:46:f7:af:8d:cf:75:9e:e5:d9:e8:0e:8a:01:e9:
                    51:11:0d:6b:d3:e5:fd:e3:ff:11:fa:96:e4:3b:55:
                    c0:59:13:9e:3b:61:8d:33:91:65:01:54:ab:86:fd:
                    c3:37:52:fd:8b:44:3f:7e:58:ac:c2:44:a7:54:49:
                    8e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:09:AC:96:33:7D:1F:7B:77:A9:A2:FD:24:93:00:B1:B1:92:31:ED
            X509v3 Authority Key Identifier:
                keyid:71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/zwmsljN9H3t3qaL9JJMAsbGSMe0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.182.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         19:75:74:42:b8:eb:07:64:30:49:0b:5c:09:f1:90:bf:19:0e:
         85:ab:9e:b2:1a:73:56:b9:74:19:5b:f2:d9:e3:3a:59:78:23:
         00:dc:4f:e1:48:06:83:59:10:ac:95:45:87:05:a8:c5:4f:f1:
         c2:79:76:64:cd:da:a3:47:3f:22:1c:60:d3:74:fd:8e:1c:6f:
         9d:28:ba:cf:df:8d:f3:fd:76:27:89:c9:13:bf:d4:dd:b2:ee:
         75:ae:bb:e2:9b:44:da:1d:0c:15:55:43:05:c4:54:9a:fb:c0:
         62:f1:05:07:47:0f:d2:75:37:39:f6:da:c5:78:ad:59:4a:3c:
         43:e0:b6:d3:10:6f:7b:46:72:1c:5a:53:fe:b5:ae:96:7d:09:
         59:62:91:96:b4:23:78:6a:0a:49:e0:33:c9:30:79:be:3d:60:
         eb:d1:bc:65:50:10:88:b0:f6:0d:7b:7b:28:77:3b:e1:dc:3b:
         ed:b0:01:fe:2d:c1:9d:28:0e:d1:67:3d:80:8e:71:83:c2:36:
         8e:76:03:08:ba:f1:82:26:4d:d7:18:c4:d9:9e:ea:75:46:08:
         3a:cb:9d:10:30:b5:1b:13:9e:02:56:35:ef:d3:47:1c:eb:14:
         ce:b2:f4:ed:1d:2e:e3:49:1c:8b:86:e6:ac:72:44:35:fd:c9:
         0d:4e:44:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:25 2025 by rpki-client