Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20058/cOPzS1P58FweAgmv2bX-c7u2Jgs.roa
File:                     cOPzS1P58FweAgmv2bX-c7u2Jgs.roa (raw, json)
Hash identifier:          NoQHERhSRm5WkdksAvHl5WD3qvmEnA/pyqdXnLHlzY0=
Subject key identifier:   70:E3:F3:4B:53:F9:F0:5C:1E:02:09:AF:D9:B5:FE:73:BB:B6:26:0B
Certificate issuer:       /CN=E756D9A5CE9ACAC978360011F7A7CFC430181D53
Certificate serial:       02
Authority key identifier: E7:56:D9:A5:CE:9A:CA:C9:78:36:00:11:F7:A7:CF:C4:30:18:1D:53
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/cOPzS1P58FweAgmv2bX-c7u2Jgs.roa
Signing time:             Tue 26 Dec 2023 07:48:16 +0000
ROA not before:           Tue 26 Dec 2023 07:48:16 +0000
ROA not after:            Wed 25 Dec 2024 07:41:10 +0000
asID:                     24229
IP address blocks:        202.126.16.0/21 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E756D9A5CE9ACAC978360011F7A7CFC430181D53
        Validity
            Not Before: Dec 26 07:48:16 2023 GMT
            Not After : Dec 25 07:41:10 2024 GMT
        Subject: CN=70E3F34B53F9F05C1E0209AFD9B5FE73BBB6260B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6e:e7:18:0a:97:31:ba:56:50:2b:8c:cc:e7:
                    41:61:7d:45:5d:33:61:26:ae:d5:a3:83:df:34:e2:
                    84:ec:ea:1d:c4:3c:e5:50:44:5a:b0:28:8e:c3:ff:
                    82:f7:b3:cb:4b:35:05:9f:49:00:cd:aa:59:61:11:
                    98:0d:b0:94:3a:a6:a4:f9:82:3e:75:1c:bc:af:54:
                    fa:3f:86:94:ef:46:48:c3:a9:f0:7e:bd:66:d2:6d:
                    e1:fd:e9:d9:ea:f9:7b:6e:60:23:77:7b:ac:9a:fc:
                    a1:0f:64:a3:b2:15:49:76:25:fc:af:4c:e3:b8:ee:
                    1f:d6:15:4b:74:3a:1f:90:e7:37:07:39:4d:e4:06:
                    11:65:1e:42:2c:11:f3:c7:eb:2c:f0:49:65:bf:5e:
                    18:ac:0d:80:95:13:1d:66:58:bc:a6:64:c0:68:74:
                    b9:22:d7:fb:6e:f5:7a:ea:83:3b:ce:52:43:90:43:
                    24:ff:71:6b:0e:da:9e:47:76:98:91:99:2a:c4:b2:
                    3f:b8:bb:d5:d8:2b:01:3d:54:57:07:ec:29:14:f6:
                    d3:1f:d0:b3:6b:92:0d:2a:7d:d4:20:4d:56:cd:65:
                    c2:f5:57:73:89:02:d7:4a:ea:f2:25:0f:36:69:ce:
                    03:3f:8a:ac:95:fa:fc:e4:81:bb:dd:15:37:4c:66:
                    3b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E3:F3:4B:53:F9:F0:5C:1E:02:09:AF:D9:B5:FE:73:BB:B6:26:0B
            X509v3 Authority Key Identifier:
                keyid:E7:56:D9:A5:CE:9A:CA:C9:78:36:00:11:F7:A7:CF:C4:30:18:1D:53

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/cOPzS1P58FweAgmv2bX-c7u2Jgs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.126.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7e:8d:eb:db:b4:50:e4:b5:d9:50:f9:e2:d2:75:80:7e:ed:bd:
         4f:16:99:ee:e6:0f:83:e5:d0:09:1a:45:54:92:83:14:e3:ac:
         5e:63:8d:e9:0c:4d:c4:62:38:a3:f4:08:6b:06:7a:08:4a:82:
         28:6c:97:86:e2:9d:92:6a:4a:13:1e:04:49:67:6d:2c:1f:38:
         b0:59:6e:fa:c9:4e:0b:c6:bb:5d:9f:b7:d1:a3:1d:5a:44:33:
         77:1c:c7:3c:47:7a:de:13:83:d8:a5:8f:7f:ad:c0:5b:38:e0:
         1f:01:11:28:c4:fc:72:d4:90:ce:47:e5:15:b8:ad:03:5a:c6:
         47:ec:02:a2:65:5b:de:8d:92:8f:79:62:3a:e4:d9:eb:24:26:
         3d:b8:6c:60:89:11:2a:bc:39:44:09:d9:92:d2:52:e4:6f:cd:
         12:ef:de:01:18:e8:0e:8f:00:70:93:90:53:64:5a:63:bd:4c:
         ee:4c:91:58:7a:63:37:99:ad:eb:a9:fd:54:42:dc:4e:a7:ac:
         49:c1:11:48:1a:24:9c:cc:7e:3b:38:12:b2:9a:b4:25:4d:ee:
         ab:60:c0:2f:a1:11:d8:7d:74:8e:6b:ec:e9:99:70:b3:50:f2:
         91:36:ad:e0:31:19:6d:44:7a:30:8c:de:91:13:2e:83:f8:95:
         14:8f:98:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:28 2025 by rpki-client