Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/beLbVjxOj3vjLdohouY6xQPZl-E.roa
File:                     beLbVjxOj3vjLdohouY6xQPZl-E.roa (raw, json)
Hash identifier:          nEzevdVKNcPmbOvsurAQc6d0yFlfQ3VkAL6ZNeD7PK0=
Subject key identifier:   6D:E2:DB:56:3C:4E:8F:7B:E3:2D:DA:21:A2:E6:3A:C5:03:D9:97:E1
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       54
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/beLbVjxOj3vjLdohouY6xQPZl-E.roa
Signing time:             Thu 22 Jun 2023 00:34:59 +0000
ROA not before:           Thu 22 Jun 2023 00:34:59 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        203.160.19.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:34:59 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=6DE2DB563C4E8F7BE32DDA21A2E63AC503D997E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a5:45:eb:c8:dc:00:c7:2f:4b:05:81:18:03:
                    06:ae:40:21:c6:8e:08:e6:61:04:ee:32:ea:a6:59:
                    0e:05:0d:ba:0c:47:74:73:81:c5:d7:f1:98:37:18:
                    81:f3:b5:e7:08:83:db:4a:36:c7:9d:14:27:2c:3a:
                    6e:1b:cb:a2:99:32:a6:d3:b9:72:86:6a:f6:8b:82:
                    bc:67:c1:47:5c:08:24:f2:44:d0:6d:2d:9b:87:0b:
                    84:8e:07:7b:6a:7a:b1:fe:e5:9e:a7:09:30:70:83:
                    0b:3b:0d:da:5b:9f:54:eb:00:cc:00:ad:4c:b0:f7:
                    b7:08:3f:13:35:2d:bd:3d:34:40:10:32:79:03:fe:
                    09:83:d1:ed:36:ef:ba:53:ea:b1:ab:a4:56:87:99:
                    68:ad:52:26:db:1a:3f:de:7f:85:8b:f9:81:2d:06:
                    c2:3c:5c:e6:12:98:f4:e1:15:97:c4:5c:7c:67:1e:
                    c0:ce:79:f3:25:2e:16:b3:71:43:10:01:38:5a:0c:
                    a0:3f:fc:70:f7:5d:8f:c7:33:b9:1e:5c:08:46:41:
                    c4:68:7d:eb:a8:e6:fa:6e:1f:3a:68:14:79:06:2e:
                    6e:7c:e3:9a:f2:4e:fa:74:5e:f0:76:5d:c2:56:15:
                    de:21:a3:aa:39:17:c6:ab:c1:50:58:bd:a2:47:ee:
                    e5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E2:DB:56:3C:4E:8F:7B:E3:2D:DA:21:A2:E6:3A:C5:03:D9:97:E1
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/beLbVjxOj3vjLdohouY6xQPZl-E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.160.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:b5:b9:41:dd:12:bf:c5:b4:fd:ba:4a:2f:b6:a5:18:ae:8d:
         d0:0c:7d:74:41:58:16:35:f2:04:14:8a:8d:8f:c0:6f:ed:4f:
         65:a5:a8:14:3b:ed:73:79:3c:d7:71:2c:ae:ea:d8:58:43:4e:
         d4:46:70:e3:c5:eb:69:f2:93:e7:33:95:13:ca:49:d0:9f:c1:
         f2:c5:cd:0a:69:7e:6b:b8:10:f0:e2:5b:70:8f:59:19:fe:b3:
         2c:cc:39:82:68:be:86:40:9c:f0:9b:14:fd:ef:97:80:ef:26:
         1c:5a:68:54:a4:05:2f:2a:be:a6:62:53:35:c2:a0:20:01:19:
         e6:84:e7:84:ba:c2:39:39:c7:d2:17:25:70:8c:5c:30:c8:e7:
         e4:f3:22:36:06:63:4e:43:5d:5f:89:53:28:ca:94:e0:85:a7:
         c8:50:87:4e:df:db:36:61:2d:be:83:68:7c:c5:8a:2b:37:2b:
         50:ee:bd:80:3c:79:d4:0e:c7:58:b9:02:9a:65:6d:98:c7:c9:
         36:82:da:e7:fc:26:d3:f0:3e:a3:75:8c:d4:b2:6f:80:61:fb:
         20:69:7d:56:88:e2:43:b0:ba:06:a4:37:8c:d5:44:16:e1:53:
         75:ab:ac:0f:58:84:7d:90:17:f6:8e:8f:d5:ff:21:54:eb:2e:
         f9:30:90:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:41 2025 by rpki-client