Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/PLWnfCQt13GlToxcoITMba0KbWA.roa
File:                     PLWnfCQt13GlToxcoITMba0KbWA.roa (raw, json)
Hash identifier:          SGetNfY88WpM1/rKAyl9YvFyyLf1sIWLWJhgteVXIe0=
Subject key identifier:   3C:B5:A7:7C:24:2D:D7:71:A5:4E:8C:5C:A0:84:CC:6D:AD:0A:6D:60
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       0C
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/PLWnfCQt13GlToxcoITMba0KbWA.roa
Signing time:             Tue 16 Mar 2021 04:45:39 +0000
ROA not before:           Tue 16 Mar 2021 04:45:39 +0000
ROA not after:            Tue 15 Mar 2022 08:34:35 +0000
asID:                     9351
IP address blocks:        202.137.32.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Mar 16 04:45:39 2021 GMT
            Not After : Mar 15 08:34:35 2022 GMT
        Subject: CN=3CB5A77C242DD771A54E8C5CA084CC6DAD0A6D60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:33:72:0e:de:37:54:8b:ce:a5:81:a5:f1:08:
                    48:22:b0:b3:86:b9:ee:db:c7:68:85:35:9b:7b:08:
                    78:4c:df:87:22:9f:0c:e3:44:a6:0a:00:4b:b2:70:
                    90:dd:d1:40:a0:a4:6c:ad:37:4b:21:22:32:0e:44:
                    2b:65:69:34:b9:46:79:6d:f9:b3:10:dc:41:13:97:
                    2f:15:13:5b:c1:e1:29:00:c1:ee:55:ea:3b:e0:89:
                    f9:0a:8e:f4:f0:6f:09:79:d4:31:de:56:92:c7:ea:
                    fe:14:dc:96:01:fd:2f:f1:10:74:5b:89:72:73:70:
                    f5:93:49:74:c7:f9:62:01:88:c1:c5:1d:bb:75:a2:
                    b9:0a:bf:38:71:a5:c4:f3:7f:66:c6:84:ba:7e:8b:
                    d9:ab:28:96:7a:c3:03:8a:5c:cf:95:f7:bd:e7:18:
                    db:82:f0:29:d2:8b:2c:df:42:03:24:8b:ce:c6:de:
                    74:b2:a3:15:de:6a:1c:61:c5:70:5d:a7:f1:ea:cd:
                    54:e6:96:52:f0:fb:48:70:2f:3d:aa:88:89:b6:29:
                    a6:bd:72:a3:48:35:cd:e9:1d:9c:0e:68:d3:77:f0:
                    a9:fd:98:b2:e1:fd:7b:ab:00:9a:5c:cc:70:a4:4e:
                    c1:75:d5:9e:09:f4:dc:fb:ae:a8:71:02:fa:88:4a:
                    17:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B5:A7:7C:24:2D:D7:71:A5:4E:8C:5C:A0:84:CC:6D:AD:0A:6D:60
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/PLWnfCQt13GlToxcoITMba0KbWA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.137.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         89:c8:7b:75:2d:df:45:15:15:6a:15:42:10:be:1a:a9:e2:6d:
         c1:ce:c5:4e:6e:e3:8a:16:8d:76:53:64:e0:ec:b2:ed:9b:5c:
         e4:90:ca:f0:5f:aa:a5:bf:21:14:0f:1b:f6:36:47:78:fa:8c:
         59:f5:76:51:c0:d9:93:92:bd:eb:82:f7:22:22:db:85:88:ce:
         89:ed:9d:90:2e:65:9f:54:5e:3e:f7:05:9a:12:99:63:e7:b7:
         55:d7:11:ee:ad:ba:c0:dd:7f:6d:f3:65:25:d9:cf:55:93:14:
         56:45:9b:ae:68:fa:9c:c6:a5:a3:5f:de:61:1a:3b:1f:97:39:
         51:da:6c:22:d1:f5:98:f2:04:d2:75:12:6a:d2:15:a7:20:8f:
         7f:05:b5:0a:8a:b0:3c:ec:e5:a4:a3:19:0d:5c:9a:04:fd:56:
         e9:af:74:57:a4:ba:6e:76:a1:67:88:dd:bf:ad:f9:22:5f:15:
         76:5d:01:67:50:97:fe:93:5c:53:ea:7b:06:72:04:9e:2f:5a:
         c1:48:bd:c8:22:45:46:7c:df:a8:94:61:eb:db:ef:b4:2a:f1:
         3a:5c:9a:5a:a5:5d:14:31:76:f9:b6:71:b7:48:93:1a:66:73:
         ab:95:ad:60:c3:e7:c9:91:91:16:aa:4e:b2:1b:d6:05:34:5a:
         08:0e:f8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:00 2025 by rpki-client