Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/Ti5ubzHX3yTb5TIfakrPLT8CuuQ.roa
File:                     Ti5ubzHX3yTb5TIfakrPLT8CuuQ.roa (raw, json)
Hash identifier:          n0JhCdCcpCVs3+VqY4QuyMmQ26LccSUQr0tOAO62m+8=
Subject key identifier:   4E:2E:6E:6F:31:D7:DF:24:DB:E5:32:1F:6A:4A:CF:2D:3F:02:BA:E4
Certificate issuer:       /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial:       2C
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/Ti5ubzHX3yTb5TIfakrPLT8CuuQ.roa
Signing time:             Wed 01 Mar 2023 01:29:52 +0000
ROA not before:           Wed 01 Mar 2023 01:29:52 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     23637
IP address blocks:        202.9.208.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
        Validity
            Not Before: Mar  1 01:29:52 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=4E2E6E6F31D7DF24DBE5321F6A4ACF2D3F02BAE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:91:76:c1:6f:0a:21:70:d4:69:25:47:a6:ec:
                    1a:8f:8b:b7:3c:26:f7:ed:ea:d9:a2:e5:f5:55:b4:
                    0a:46:be:c0:ba:78:08:23:3f:16:3c:56:f4:2a:9b:
                    45:1b:23:7e:c5:68:76:3f:45:7e:0f:6d:58:a7:21:
                    a0:22:c9:ec:40:af:d5:d1:71:10:1c:25:7b:2a:1b:
                    1d:03:7b:7c:17:13:ef:98:08:dd:84:8d:86:c4:ed:
                    56:32:a3:25:39:c1:fa:a3:21:4c:3d:5c:93:ee:66:
                    42:f3:a1:a6:a8:c4:db:6a:68:96:e9:48:df:53:c7:
                    fc:2a:2a:5d:92:32:b2:ff:3c:2e:6d:ae:d7:26:e7:
                    71:e5:2b:2b:55:25:1c:7b:9d:81:74:bc:f8:55:8f:
                    de:28:d8:c9:35:99:4f:69:1b:98:83:99:dd:3c:cc:
                    7b:0e:84:e1:76:ad:23:a7:44:21:0d:f3:8b:40:f0:
                    86:62:73:71:66:c1:e1:c8:94:2c:ef:e6:69:e3:73:
                    17:14:80:be:ef:2b:d8:bc:b8:f9:e3:62:12:fd:2a:
                    3f:12:d3:a9:ec:01:6d:1b:95:ad:1f:4a:f7:f0:92:
                    a5:fc:d9:a2:e8:f9:2e:04:4c:ea:30:1f:ca:24:cf:
                    2c:d1:89:01:74:9d:25:28:40:79:d2:28:eb:c1:f7:
                    55:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2E:6E:6F:31:D7:DF:24:DB:E5:32:1F:6A:4A:CF:2D:3F:02:BA:E4
            X509v3 Authority Key Identifier:
                keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/Ti5ubzHX3yTb5TIfakrPLT8CuuQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.9.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:e2:cd:e5:fa:75:df:35:61:42:88:6c:cd:e4:28:c9:03:84:
         40:42:f3:7a:68:a0:e4:95:79:9b:de:16:6d:8c:60:16:d8:63:
         ff:b7:12:6f:9a:b2:61:a4:9e:cd:26:d5:7d:c9:cb:6d:e8:d1:
         00:cf:a5:30:e3:1e:7d:b7:23:db:04:25:93:d8:9f:fe:d5:a0:
         26:46:61:1c:92:ab:59:47:9d:bb:cb:fa:b8:b4:4c:12:76:c9:
         0c:f7:13:cb:c8:77:6b:39:2e:93:53:75:47:2f:f6:64:b5:3f:
         14:99:26:a1:5d:1b:4b:ec:97:e1:a8:0f:87:7c:2c:4d:6b:38:
         bf:8f:95:bf:29:9e:89:01:20:0d:30:61:4b:e0:f4:d9:e0:f2:
         9b:99:34:96:1c:70:87:5f:47:fe:99:2a:d4:38:a4:be:fc:fa:
         20:f0:92:c2:5e:94:e4:18:2f:9a:27:16:ad:c2:6d:7f:9a:ce:
         f9:8f:b0:8f:5a:d8:9b:2a:8d:e6:8f:2c:2c:38:1d:fe:cf:fb:
         fd:07:85:be:d3:e0:88:90:0a:1a:46:cf:d1:d9:cc:df:f0:0a:
         9a:ee:79:1d:65:43:7e:71:3c:aa:b2:01:9c:86:83:8f:65:4d:
         ce:3f:1c:55:38:5e:65:28:8b:ad:ac:a6:80:40:01:64:d3:f8:
         6e:9c:69:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:18 2025 by rpki-client