Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/b5i5kMbWlTX2oGzN_4Pt-H5ow7w.roa
File:                     b5i5kMbWlTX2oGzN_4Pt-H5ow7w.roa (raw, json)
Hash identifier:          PF6clgjm7tF1X4UL9C5ScHhaZ5AIuzjEYRHdcBMX5dE=
Subject key identifier:   6F:98:B9:90:C6:D6:95:35:F6:A0:6C:CD:FF:83:ED:F8:7E:68:C3:BC
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       7F
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/b5i5kMbWlTX2oGzN_4Pt-H5ow7w.roa
Signing time:             Thu 14 Dec 2023 23:09:06 +0000
ROA not before:           Thu 14 Dec 2023 23:09:06 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     0
IP address blocks:        210.173.184.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Dec 14 23:09:06 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=6F98B990C6D69535F6A06CCDFF83EDF87E68C3BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b5:86:77:87:24:07:ab:6f:1b:cd:54:6e:76:
                    2f:f0:22:a7:be:2e:75:56:4b:43:a9:3c:a1:0d:35:
                    60:fb:89:08:31:1b:0c:24:32:bf:d3:11:34:18:65:
                    b5:e8:cc:14:ed:b8:db:24:67:4f:d3:cb:e8:cd:4d:
                    82:79:86:57:14:02:2f:d7:4c:9a:cd:09:bd:39:40:
                    20:8a:e1:6d:10:04:20:8f:29:4e:e1:0c:01:97:5f:
                    b6:00:1f:67:1f:92:e1:dd:63:ea:9b:87:3c:a7:39:
                    91:ff:74:50:f5:61:9d:4d:c4:62:7a:89:8f:3e:c5:
                    4e:66:af:12:02:2e:eb:a7:18:e1:02:db:80:b2:d5:
                    86:5d:89:c3:76:f7:55:e4:59:fc:d0:83:06:a2:45:
                    54:33:19:77:ec:b3:b3:f7:a8:90:00:7b:70:69:31:
                    3d:8a:28:26:a8:4a:31:10:c6:bc:c1:be:7c:aa:50:
                    0d:67:b4:4b:cb:c2:d1:36:97:a8:4c:31:23:7b:e8:
                    5c:44:b9:34:1a:50:bb:a3:14:a0:6e:3a:51:aa:a0:
                    db:6e:63:eb:f0:ef:b4:f4:c9:2f:8c:73:e7:64:3a:
                    50:c0:4d:4c:ba:e9:ff:b0:c3:01:f2:a2:98:e7:f5:
                    fa:aa:9f:17:59:42:73:f1:2d:43:99:83:37:bb:4c:
                    99:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:98:B9:90:C6:D6:95:35:F6:A0:6C:CD:FF:83:ED:F8:7E:68:C3:BC
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/b5i5kMbWlTX2oGzN_4Pt-H5ow7w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:81:ab:cb:74:f6:5d:c0:dd:56:58:38:36:29:5f:76:2c:2d:
         b6:f6:7f:61:2b:c6:a7:f5:d5:9f:96:a6:29:a2:6e:e8:c4:d9:
         18:06:71:ce:21:a6:33:5d:58:12:12:13:25:64:02:d9:b1:f4:
         7d:76:10:0b:37:88:73:7f:5f:d3:34:1c:29:43:73:b2:2a:a2:
         f6:4e:a4:4a:9a:ff:8d:2c:5f:7c:1a:a4:8c:27:e1:9a:64:bd:
         76:76:4d:17:9d:dc:71:1e:34:7c:d6:76:56:f3:80:05:5f:18:
         60:69:79:5a:85:95:1e:bd:3c:e3:87:41:5d:f6:c5:e4:71:b1:
         95:af:14:e2:fc:30:98:37:fd:24:04:27:c8:08:bf:74:64:93:
         9f:d5:20:3e:34:7b:f4:c2:6d:5d:2f:da:7c:08:1e:58:16:82:
         ac:a5:c9:ea:16:94:c9:89:bf:c5:c2:31:c8:5a:e6:c8:63:71:
         a5:9a:ff:ad:b0:2c:39:c1:3c:dd:24:ac:88:61:52:71:f4:61:
         fd:c6:d2:b8:97:73:d7:85:90:bc:80:60:ac:4c:a1:76:f2:98:
         3c:45:90:db:cb:ab:3a:78:02:df:d0:40:e7:73:24:11:4b:03:
         9e:36:d4:b7:be:7f:e1:4f:78:d7:6b:60:8d:ad:3e:15:69:40:
         3c:68:e2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:19 2025 by rpki-client