Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/a-tgiuPQ4_jqwd-1Udq4R3yvR60.roa
File:                     a-tgiuPQ4_jqwd-1Udq4R3yvR60.roa (raw, json)
Hash identifier:          8OB9QW54ElhP+dLi9eIDLU37uxxM5zhO/3VJp3GaEhs=
Subject key identifier:   6B:EB:60:8A:E3:D0:E3:F8:EA:C1:DF:B5:51:DA:B8:47:7C:AF:47:AD
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       42
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/a-tgiuPQ4_jqwd-1Udq4R3yvR60.roa
Signing time:             Thu 01 Feb 2024 01:30:03 +0000
ROA not before:           Thu 01 Feb 2024 01:30:03 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     4694
IP address blocks:        61.115.224.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Feb  1 01:30:03 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=6BEB608AE3D0E3F8EAC1DFB551DAB8477CAF47AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:69:27:92:43:f9:ad:d2:46:0d:b6:17:81:35:
                    1b:16:06:ee:9e:fa:f7:08:b3:fc:fc:a1:c1:34:56:
                    0e:2b:1c:86:95:53:10:64:81:cd:69:9a:e5:b0:31:
                    f7:0d:d0:63:b2:88:ac:df:09:f0:bb:08:2b:89:88:
                    97:87:01:19:1b:2a:71:41:0a:14:52:89:2f:76:32:
                    54:62:d1:07:c4:65:46:dd:22:61:20:51:8b:44:d8:
                    ec:e5:00:84:15:49:5f:38:6f:c1:28:f6:88:d8:c0:
                    9c:04:62:fc:43:57:d3:3f:d3:a2:03:00:0b:64:e6:
                    66:5d:bd:e1:32:e4:6e:d2:f4:5e:b2:73:19:04:f3:
                    5e:f1:9f:e1:9d:ba:a0:fc:3b:23:07:55:70:36:bd:
                    6a:dc:a2:52:7e:95:15:67:7b:b7:e4:d2:c5:14:66:
                    1c:0d:d7:67:f9:6c:24:ea:6a:fc:bd:94:db:e6:f5:
                    f5:e6:59:e1:d4:d0:14:1e:24:b7:f2:0f:4c:87:d6:
                    1b:cd:ed:3a:b9:73:2f:bf:cf:90:fd:1d:00:ac:2b:
                    6a:cd:bd:f6:a8:46:2e:b2:eb:3a:cd:b1:05:05:35:
                    09:08:8e:fe:8a:4f:2e:15:be:b7:31:42:9c:eb:0c:
                    a1:c3:2b:47:d6:3f:75:4e:d2:e3:33:27:4d:e3:7b:
                    de:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EB:60:8A:E3:D0:E3:F8:EA:C1:DF:B5:51:DA:B8:47:7C:AF:47:AD
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/a-tgiuPQ4_jqwd-1Udq4R3yvR60.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.115.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1f:56:ec:33:06:05:aa:07:22:83:e8:d7:90:92:b0:a4:fa:cb:
         c3:27:ec:d1:a7:56:15:f3:82:fe:24:51:d5:8d:db:9e:91:d7:
         46:23:49:ed:2e:6c:13:ac:5f:87:6c:5a:da:69:db:45:b1:a9:
         1d:31:cb:8f:48:55:5f:66:d1:bd:3f:b2:bd:7e:e8:4d:b2:f7:
         cd:b9:85:ca:07:ae:92:bb:30:55:30:b4:c2:31:8f:94:c8:e3:
         cd:05:de:bb:ad:74:09:23:80:83:7e:b2:bf:74:0a:f8:18:66:
         bc:46:3c:8d:42:89:d9:e6:20:5a:cc:a2:46:88:89:6f:21:ad:
         f0:cf:df:50:d2:cb:41:e6:93:0d:f2:e1:08:d3:88:50:7a:09:
         1d:d9:c8:35:9c:88:20:36:64:8e:73:9c:d5:95:02:e2:2c:7d:
         8c:c1:1a:1a:e5:81:5b:c3:3f:e9:dc:e9:14:7d:ee:4a:a2:3f:
         3f:26:ea:74:38:a7:7a:b1:9e:5e:9c:17:62:74:dd:7f:6e:9b:
         07:99:62:84:b2:b5:dc:57:37:b1:06:43:13:40:57:d2:3f:90:
         68:52:87:87:82:49:3d:a2:5c:78:fc:1b:a3:be:f1:56:8f:f7:
         f6:60:b9:61:b6:fd:9e:90:dd:a8:3d:36:62:0c:fe:92:40:0b:
         f1:78:36:f7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:30 2025 by rpki-client