Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/UoyadNsz8CQh5XReqY1TxYa8c1o.roa
File:                     UoyadNsz8CQh5XReqY1TxYa8c1o.roa (raw, json)
Hash identifier:          TjOO9+MqjWPcfllU0lIP9KENyF7sCf6kz6c+imYp/eQ=
Subject key identifier:   52:8C:9A:74:DB:33:F0:24:21:E5:74:5E:A9:8D:53:C5:86:BC:73:5A
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       5B
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/UoyadNsz8CQh5XReqY1TxYa8c1o.roa
Signing time:             Thu 22 Jun 2023 00:35:03 +0000
ROA not before:           Thu 22 Jun 2023 00:35:03 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.186.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:35:03 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=528C9A74DB33F02421E5745EA98D53C586BC735A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:47:5c:f1:5a:b3:1d:9e:10:47:99:ed:32:a5:
                    e9:18:8b:82:0b:4f:3b:3a:57:d0:d8:e8:95:24:9e:
                    64:75:ea:04:14:8d:b0:f7:44:52:b1:66:f4:e2:ec:
                    a4:f9:01:98:db:6a:be:ce:4c:6c:a2:82:49:00:a6:
                    d6:79:e7:89:71:10:3d:4f:7e:32:44:d8:9d:70:1b:
                    cb:ca:8b:85:66:cb:02:47:5e:5e:c4:83:2d:d4:66:
                    eb:99:27:fb:eb:8c:29:8d:2c:9c:16:f9:89:32:e3:
                    ea:7d:fd:43:98:57:17:81:f0:73:a0:73:50:9f:dc:
                    c0:87:83:28:4c:2a:10:d1:95:db:44:46:28:e4:06:
                    a2:a8:30:ca:3a:3b:2d:7b:e1:74:01:9c:57:02:aa:
                    09:f6:58:6a:43:a1:76:8c:5a:7a:be:50:16:2e:77:
                    2d:93:37:fe:e9:ee:3a:36:e3:1d:2f:25:d1:4d:c0:
                    0d:10:dc:b6:2b:64:64:4f:d5:8f:a0:cc:e8:44:e3:
                    73:4f:2c:60:cf:b6:d3:01:ce:2d:d3:f2:89:5e:7f:
                    9a:16:46:d2:84:5b:7d:83:77:64:04:28:cb:2e:06:
                    b9:47:c4:51:de:fb:28:18:03:22:04:00:55:ec:7d:
                    9d:50:b0:5e:5c:aa:14:8b:2a:0f:66:8b:0e:d8:c3:
                    94:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8C:9A:74:DB:33:F0:24:21:E5:74:5E:A9:8D:53:C5:86:BC:73:5A
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/UoyadNsz8CQh5XReqY1TxYa8c1o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:93:39:b0:9d:c5:9c:2d:d4:f3:53:65:be:e4:2d:68:5b:dc:
         bd:67:fd:7f:0c:15:dc:53:de:88:69:66:b7:8d:1b:4f:5f:53:
         8b:cb:a8:37:37:36:a6:19:aa:1f:1c:49:e8:b1:42:1d:f9:e0:
         f5:8e:2f:83:24:cc:68:18:16:5e:43:69:bb:6b:e3:98:b5:19:
         ae:ca:4f:80:6d:12:cc:61:61:5c:88:a6:e3:2b:30:2e:eb:10:
         77:aa:9c:4e:92:3e:c3:8a:a5:02:a5:14:d1:c7:fe:91:40:68:
         8d:2b:b6:b0:eb:35:a0:31:38:49:fc:5c:f2:e1:ef:56:a7:cd:
         50:6e:1b:d7:a1:cf:3c:31:32:7d:20:1a:7a:2c:52:d2:51:9d:
         93:b9:1c:dd:14:fa:92:d4:04:49:c9:64:9d:23:45:b1:9b:16:
         6e:08:3d:17:2a:79:bd:c1:49:10:f9:41:6d:cb:1a:67:63:c7:
         32:0d:df:0f:a0:fb:ea:77:68:3b:ce:e6:d7:da:8b:3c:ce:93:
         08:ec:cf:c0:96:30:4a:bd:d1:9a:1b:a1:c2:1c:57:35:dc:30:
         bb:8e:aa:a2:ed:f5:48:34:29:37:2d:1a:4a:99:45:15:a9:f4:
         a2:de:8d:0e:b5:8f:b3:b0:a1:3d:6d:9b:5b:ba:1b:5d:43:49:
         2d:0e:1d:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:16 2025 by rpki-client