Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/a5vPaBmA0HXtHf6udLcFNBWiUEk.roa
File:                     a5vPaBmA0HXtHf6udLcFNBWiUEk.roa (raw, json)
Hash identifier:          FEuLrhKvQ6ur1QjTvIFvelEvVk/oOpDq9rm/b7C29LA=
Subject key identifier:   6B:9B:CF:68:19:80:D0:75:ED:1D:FE:AE:74:B7:05:34:15:A2:50:49
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       41
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/a5vPaBmA0HXtHf6udLcFNBWiUEk.roa
Signing time:             Fri 01 Oct 2021 01:28:07 +0000
ROA not before:           Fri 01 Oct 2021 01:28:07 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     7521
IP address blocks:        210.173.160.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Oct  1 01:28:07 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=6B9BCF681980D075ED1DFEAE74B7053415A25049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:94:b6:d5:4b:d8:ff:6a:66:ca:11:d4:4c:72:
                    6e:fb:a9:09:98:c4:02:aa:ab:46:c3:d9:08:c1:0c:
                    0a:93:ac:9e:a8:08:f9:77:92:7d:e7:29:df:e0:a3:
                    37:38:2e:38:4e:77:6c:b1:5c:b0:8a:87:15:c6:89:
                    a4:49:1d:94:bb:d1:af:6a:e9:85:e3:14:a8:28:df:
                    b7:f5:15:5c:c4:9e:36:cc:8d:61:d8:7b:00:70:b9:
                    c3:a7:37:fd:7f:c4:f3:75:95:d2:e2:38:bc:f1:24:
                    2f:1d:fc:04:3f:4a:5d:55:a7:43:28:58:e8:be:a6:
                    97:37:21:6c:3f:03:ff:a1:e9:7f:96:a0:14:77:b5:
                    11:70:68:4d:bd:a1:87:3e:04:2e:8e:22:e4:97:1e:
                    92:40:3d:ff:19:5a:c1:16:5a:61:fd:0c:75:58:16:
                    b2:2c:63:00:71:ce:d7:a0:92:ce:09:3d:4f:e6:82:
                    08:c3:d6:42:aa:8a:53:1a:c7:de:97:dc:4c:93:e5:
                    e0:5a:97:37:f2:f9:35:d3:2e:4c:aa:68:6d:ed:93:
                    27:f1:67:5f:46:00:7e:ce:f2:c2:5d:75:de:a1:7d:
                    a4:97:c6:b1:7e:12:d2:64:21:76:ca:0f:f3:ba:b8:
                    ee:02:e6:38:49:15:48:b0:78:1a:6c:13:b2:8a:68:
                    73:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9B:CF:68:19:80:D0:75:ED:1D:FE:AE:74:B7:05:34:15:A2:50:49
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/a5vPaBmA0HXtHf6udLcFNBWiUEk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         38:68:62:be:65:cc:09:c2:13:f0:27:e8:49:dd:5c:15:b8:53:
         c1:6a:47:c9:80:8d:11:60:42:6a:fd:5a:c6:02:fe:6c:51:23:
         e7:14:68:14:4b:fb:08:33:43:55:53:f3:1b:fc:fe:41:b0:95:
         c8:1e:87:71:0a:aa:53:88:39:50:a4:32:09:1e:bb:50:ef:36:
         20:6b:76:b5:d7:fa:8a:b0:5f:9a:18:03:86:b7:0a:4b:06:dc:
         cf:4a:a0:25:e7:3a:d1:3f:02:92:6f:68:a0:4e:bc:d4:4a:25:
         cc:91:1b:c0:5c:a9:db:24:0d:5a:ba:a5:15:f7:75:7d:bb:13:
         94:93:77:b8:1a:78:0e:9c:89:ff:cf:b2:7d:e3:41:55:ea:6d:
         6d:1d:c7:7b:85:7d:c4:96:23:5d:91:56:19:86:19:49:07:cf:
         e9:6b:4c:7c:31:96:f0:b8:0f:b6:15:c3:1f:24:92:22:bf:8c:
         9c:07:5e:40:b6:96:f4:b1:4a:c6:9b:22:0b:02:5c:3a:c1:36:
         a2:f3:65:aa:45:48:3b:9e:c6:00:da:cf:36:a8:1e:ba:95:15:
         00:f0:85:71:4d:52:39:1c:2d:7e:ec:3e:a1:38:f0:db:aa:f6:
         11:19:e7:39:1b:89:ac:e3:e4:0a:0d:0d:27:52:56:96:c9:a7:
         5b:9b:1f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:13 2025 by rpki-client