Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/zn7g60vPRH_hIHsMigY194yzQPw.roa
File:                     zn7g60vPRH_hIHsMigY194yzQPw.roa (raw, json)
Hash identifier:          eBLJawbfFaJdkMxHl24q2u6dzAFjLf/tNZYJerbLQdk=
Subject key identifier:   CE:7E:E0:EB:4B:CF:44:7F:E1:20:7B:0C:8A:06:35:F7:8C:B3:40:FC
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       66
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/zn7g60vPRH_hIHsMigY194yzQPw.roa
Signing time:             Thu 22 Jun 2023 00:36:55 +0000
ROA not before:           Thu 22 Jun 2023 00:36:55 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.165.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:36:55 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=CE7EE0EB4BCF447FE1207B0C8A0635F78CB340FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:76:7f:b6:20:0f:11:97:f7:49:ea:5e:49:40:
                    12:c1:ab:05:d3:a6:04:cb:fc:3e:3e:0a:cf:ff:46:
                    bc:a6:1d:e8:44:b4:8b:53:de:37:f6:0e:f7:1f:c3:
                    58:d3:cb:91:82:7b:d5:ba:f2:70:e0:9c:56:3f:d5:
                    cf:7f:ae:a9:8c:89:bc:d8:c1:24:ae:a1:53:91:0f:
                    cf:de:c2:3d:9e:45:24:84:60:05:df:ce:f2:a0:5c:
                    fc:c2:6f:b0:fa:50:80:bf:95:e0:ce:b0:f5:81:5c:
                    82:77:49:90:0a:7a:70:94:fc:f8:9f:c9:b1:de:7d:
                    45:21:bc:3d:d3:08:f7:48:3b:db:6f:d5:8d:aa:49:
                    56:28:28:40:68:6b:e2:0e:10:50:68:38:a5:d8:57:
                    02:ee:0a:71:eb:9e:bc:90:f3:8f:74:64:30:d5:4e:
                    de:f5:32:6b:f2:e3:4a:e0:15:bd:c8:99:a0:d6:df:
                    07:a7:99:1a:1b:58:d1:f0:7d:1e:16:a9:49:ac:b4:
                    cc:a3:5e:3f:c0:6d:35:be:f1:93:40:c1:2d:b0:9c:
                    f9:a6:a8:91:28:02:ae:54:c3:b1:83:2f:88:43:59:
                    eb:5e:04:06:4a:a7:3b:49:96:98:f0:36:37:08:46:
                    ff:d1:27:ea:21:89:fc:b2:07:93:07:ae:7a:b0:de:
                    24:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7E:E0:EB:4B:CF:44:7F:E1:20:7B:0C:8A:06:35:F7:8C:B3:40:FC
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/zn7g60vPRH_hIHsMigY194yzQPw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:15:b2:cd:0b:10:43:38:13:b3:e7:b9:40:aa:02:e1:2f:6a:
         df:31:40:c9:e7:1b:bf:53:3b:e0:8b:2a:30:7e:4d:55:01:9e:
         00:11:20:91:c8:83:04:bd:1a:26:c6:78:b5:6f:8d:21:45:28:
         9a:5b:25:5d:2a:92:6d:df:75:5d:ac:fd:60:48:92:68:e4:74:
         26:46:39:d9:92:51:c2:90:f5:37:c6:88:a0:31:70:0c:3a:a8:
         3a:fa:b6:7c:7f:79:35:21:c2:72:d5:2a:c2:b8:57:96:2f:4d:
         ce:c0:cc:88:af:b4:6e:04:3d:78:e8:b8:7c:63:60:e0:9c:9f:
         b3:0d:0c:7a:55:20:d2:06:36:b3:c4:4c:34:79:fd:22:65:da:
         6e:f9:40:04:09:94:13:02:bb:c2:89:d7:b4:ec:a2:5d:ac:25:
         50:53:4a:64:38:c1:17:19:cc:06:93:21:e6:cd:51:e1:33:34:
         96:e5:9a:e4:f4:b8:47:2b:32:2a:a9:d1:1a:cd:84:73:4b:f3:
         0a:c8:ac:38:15:1d:df:39:69:d1:d2:79:25:4e:6e:ca:ab:7d:
         d6:4d:d1:e2:05:9c:9b:c4:20:a9:28:2e:68:9e:9f:16:d5:b9:
         43:42:a2:49:33:83:fc:ef:df:90:4e:f0:ec:c4:4b:7f:d0:32:
         c2:00:82:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:19 2025 by rpki-client