Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/KvQ_ZTJb_zERdG-h_WrgiC4Xn4g.roa
File:                     KvQ_ZTJb_zERdG-h_WrgiC4Xn4g.roa (raw, json)
Hash identifier:          fTBCiaGUgXsdYzjjpq6YqH+ccYaO4F6sErMGr8X6chY=
Subject key identifier:   2A:F4:3F:65:32:5B:FF:31:11:74:6F:A1:FD:6A:E0:88:2E:17:9F:88
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       BE
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/KvQ_ZTJb_zERdG-h_WrgiC4Xn4g.roa
Signing time:             Sat 01 Jul 2023 01:31:18 +0000
ROA not before:           Sat 01 Jul 2023 01:31:18 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     9370
IP address blocks:        61.211.224.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Jul  1 01:31:18 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=2AF43F65325BFF3111746FA1FD6AE0882E179F88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7a:45:a3:39:50:0a:5b:7a:25:83:05:76:6a:
                    00:95:5d:dc:6b:c8:4e:9c:3f:c9:fa:2f:2f:f1:59:
                    56:03:6c:7a:8d:78:ad:75:69:ad:d2:15:33:06:65:
                    10:fb:58:04:a9:c5:71:34:09:dd:e8:8e:f3:6e:9e:
                    f2:8f:d9:60:c8:dd:31:2b:0c:41:65:8a:a5:0e:f8:
                    ff:a9:ed:90:2c:5b:06:62:ab:df:43:d1:a4:f4:69:
                    01:18:fa:ba:31:cf:11:39:f7:6d:f9:5a:89:1b:cb:
                    b8:67:53:0c:b1:2b:b3:f8:d8:76:5c:3d:57:ab:8e:
                    20:ff:9f:b4:89:83:bd:e1:29:80:69:a5:98:3a:57:
                    3a:54:be:af:22:65:4b:e3:50:c0:08:35:53:24:fe:
                    cc:1f:89:9f:da:2d:00:6d:20:87:6d:e8:47:ed:54:
                    6d:60:cc:9c:33:0a:2d:60:c6:ae:1e:82:8b:7b:e6:
                    d0:89:93:77:85:97:89:32:0a:56:d7:d9:95:fa:7a:
                    d8:d5:41:bc:1e:89:f0:25:15:4b:d1:f5:17:b3:d2:
                    a8:11:d9:d8:d2:c9:a0:0e:22:d6:da:f4:57:e2:b3:
                    31:fc:25:2e:09:3e:c7:46:a1:d3:09:94:b3:32:d0:
                    e8:f1:86:21:78:47:f6:3e:01:ae:e0:4e:8c:0f:e3:
                    83:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F4:3F:65:32:5B:FF:31:11:74:6F:A1:FD:6A:E0:88:2E:17:9F:88
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/KvQ_ZTJb_zERdG-h_WrgiC4Xn4g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.211.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         73:43:5e:86:c9:2d:4d:25:d0:45:17:63:f4:ee:82:d9:54:9a:
         b8:f3:87:56:77:2f:b9:c2:00:a0:06:0b:3c:42:ae:fc:8d:d0:
         1e:d0:ee:1c:2d:9e:4f:c6:92:7f:63:64:15:49:79:e2:4c:17:
         70:d9:47:d0:30:f1:78:0f:2d:22:fb:da:8f:4c:c7:79:68:95:
         65:bf:16:38:47:4c:f8:67:b7:48:11:f8:95:b1:06:69:b3:3b:
         78:7c:00:27:9b:0b:8b:2d:97:94:e7:58:71:bf:54:94:96:0d:
         fe:24:58:a8:8d:d3:df:c5:15:7d:20:d0:bc:49:b6:57:15:ec:
         b7:a3:48:6b:9c:51:32:6e:15:8d:6c:5a:34:42:54:38:97:8d:
         54:3c:c8:ab:fd:91:43:9f:7b:26:26:44:2a:5d:f4:1d:a6:95:
         de:d2:99:a1:34:34:2b:54:86:50:fa:c6:72:4a:12:86:29:e9:
         ec:85:e1:38:77:7a:e8:56:a9:3b:25:79:c4:c3:19:3e:a7:29:
         f3:01:c6:32:ff:87:c2:b7:65:79:1b:4a:d8:94:21:44:75:bb:
         a6:e7:40:0c:e8:8e:7a:d4:be:23:bc:14:8b:61:f7:61:be:bb:
         77:4b:2a:72:70:80:23:00:97:1f:48:e8:a3:45:39:f1:5e:2f:
         6d:1c:25:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:12 2025 by rpki-client