Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/bNikjzqISzHwxwSjl5Ukqs8gIdw.roa
File:                     bNikjzqISzHwxwSjl5Ukqs8gIdw.roa (raw, json)
Hash identifier:          RKfH/3//58FqTr/EAGDdU61HL249USIkRriy/mE3vVs=
Subject key identifier:   6C:D8:A4:8F:3A:88:4B:31:F0:C7:04:A3:97:95:24:AA:CF:20:21:DC
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       54
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/bNikjzqISzHwxwSjl5Ukqs8gIdw.roa
Signing time:             Wed 01 Feb 2023 01:29:59 +0000
ROA not before:           Wed 01 Feb 2023 01:29:59 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     9351
IP address blocks:        124.40.96.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Feb  1 01:29:59 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=6CD8A48F3A884B31F0C704A3979524AACF2021DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f6:0f:7a:f0:0f:47:6b:52:d5:a8:d6:8e:8e:
                    8d:ff:7d:8d:ec:33:54:f0:63:12:cf:1d:99:b7:12:
                    70:0f:5d:ac:57:83:4e:dc:a9:1e:96:04:81:9a:59:
                    7a:74:ac:63:6b:78:bb:74:03:46:99:6d:de:d2:05:
                    ec:ac:cd:4a:5e:2d:9e:36:5c:30:28:4b:70:4a:08:
                    fd:fa:0f:64:5e:84:f6:e4:dc:03:e8:0c:5d:68:b8:
                    6e:6c:4f:7c:78:8b:0d:2b:21:dd:4b:d2:b1:d0:3e:
                    8c:e7:34:62:b7:52:cf:40:b6:a3:1b:97:f6:88:d2:
                    a8:c9:c8:6d:39:14:c1:c1:5f:2f:2b:f5:c3:13:c0:
                    ff:35:cd:a3:df:2b:d8:6e:b7:30:84:b8:f3:20:45:
                    d1:eb:8a:cf:39:57:f8:cf:27:98:95:e6:64:c8:1c:
                    25:a0:57:bd:13:0d:78:8a:bf:bf:5e:b7:9a:e0:fb:
                    24:e0:ce:c9:18:4f:c1:4b:39:8c:f7:1a:49:eb:31:
                    0f:f0:0d:ff:68:c4:70:c6:a2:9d:62:0a:36:d9:aa:
                    46:7e:b6:c0:ca:a5:95:65:6e:1a:77:71:3e:2e:8c:
                    8b:aa:b7:f0:5e:ff:a8:75:ac:d9:7f:3b:7f:a8:c1:
                    ea:e3:8a:fd:5e:11:f9:91:87:c6:1a:dc:38:b9:37:
                    06:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D8:A4:8F:3A:88:4B:31:F0:C7:04:A3:97:95:24:AA:CF:20:21:DC
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/bNikjzqISzHwxwSjl5Ukqs8gIdw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.40.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:c1:27:b0:25:14:d3:11:55:99:b5:d4:93:5e:54:e8:07:a1:
         0d:e3:55:e5:e5:bf:32:49:23:0e:05:cd:4c:85:ee:5c:15:04:
         65:96:c6:51:94:e3:08:38:74:3c:c9:1f:99:4f:e6:0d:e5:d6:
         cf:7f:98:f7:18:b9:05:b8:04:a4:3e:b8:91:0a:a6:0b:c4:c0:
         f5:f3:b6:2d:af:89:f5:3c:a2:cd:45:58:6b:e0:99:bd:a7:43:
         60:dc:37:00:60:ba:6b:56:9e:88:95:b9:87:bd:3f:bf:d5:e3:
         c7:a8:1c:56:85:12:79:23:11:a9:55:71:ba:1b:40:c0:50:ee:
         17:27:7d:83:4f:85:6b:9f:44:1c:ba:58:c4:4b:c1:10:95:41:
         5d:61:a3:77:67:24:1d:d2:a4:15:9a:2d:94:20:bb:ca:5c:45:
         f9:58:b7:c8:6f:2b:33:22:db:3a:55:92:17:b0:df:1f:07:1f:
         3b:78:d6:4c:13:43:a6:90:13:80:32:6b:dc:06:0a:5b:a7:ff:
         ac:bb:2e:1b:01:2e:41:b3:ae:38:82:ef:e8:2b:40:6e:01:03:
         4a:44:79:4f:eb:c1:81:42:2b:5a:78:bf:14:03:ac:c6:97:97:
         81:6b:3d:aa:b1:83:c5:b3:60:a0:3d:2f:ac:e2:cf:30:f7:25:
         a3:7a:54:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:35 2025 by rpki-client