Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30003/jfew816m3Qes9tJEmL5P0yBmpRI.roa
File:                     jfew816m3Qes9tJEmL5P0yBmpRI.roa (raw, json)
Hash identifier:          tqteocmlX6NLbyvft4ZUXQytUmcjEvS7LWEIOZBYK54=
Subject key identifier:   8D:F7:B0:F3:5E:A6:DD:07:AC:F6:D2:44:98:BE:4F:D3:20:66:A5:12
Certificate issuer:       /CN=EA6B49B0752AD3BE3DD683B8AEEA2205F5AFD279
Certificate serial:       2F
Authority key identifier: EA:6B:49:B0:75:2A:D3:BE:3D:D6:83:B8:AE:EA:22:05:F5:AF:D2:79
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/jfew816m3Qes9tJEmL5P0yBmpRI.roa
Signing time:             Fri 01 Apr 2022 01:33:04 +0000
ROA not before:           Fri 01 Apr 2022 01:33:04 +0000
ROA not after:            Fri 31 Mar 2023 13:10:57 +0000
asID:                     0
IP address blocks:        2001:7fa:0:3::/64 maxlen: 128
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA6B49B0752AD3BE3DD683B8AEEA2205F5AFD279
        Validity
            Not Before: Apr  1 01:33:04 2022 GMT
            Not After : Mar 31 13:10:57 2023 GMT
        Subject: CN=8DF7B0F35EA6DD07ACF6D24498BE4FD32066A512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7d:21:bc:b6:3a:f5:79:bf:94:b5:ee:e8:c6:
                    61:f1:b7:e3:e1:6b:c0:eb:84:09:fc:75:6f:98:de:
                    d9:62:69:45:2b:2e:c3:d3:2c:90:8c:25:23:ec:70:
                    64:48:16:f1:18:2d:60:42:c6:b5:47:af:e5:47:e1:
                    8e:63:58:b6:3d:86:d4:49:9d:d2:26:da:70:1c:30:
                    13:49:c5:a8:98:e5:91:ef:d6:fb:72:1d:ed:14:86:
                    08:e9:1f:d9:ed:79:72:b4:2c:ac:2f:95:9d:cb:71:
                    37:4e:98:69:88:5e:87:eb:91:b5:c5:e8:5a:da:d0:
                    b4:67:48:7e:88:61:30:6b:66:b7:1d:45:3d:d3:1e:
                    4c:85:be:3f:27:67:1b:a9:7f:63:d0:b6:5a:f6:5d:
                    61:5c:dd:1d:50:19:16:7d:a3:2c:97:62:a5:d3:37:
                    24:b6:a8:3e:22:b5:ee:80:d6:4a:0c:00:1d:5d:7b:
                    e3:13:bb:b4:44:26:4c:a1:f0:6c:3a:d1:fa:61:a7:
                    47:0c:68:1b:b6:89:f2:4b:7d:9f:2b:b0:3e:3b:15:
                    24:aa:4f:46:6b:99:a7:fb:5d:ac:16:8e:13:ba:7c:
                    a1:b4:45:0d:07:03:c7:19:9e:8d:1c:0a:4d:70:30:
                    8d:c7:fe:58:ff:63:fb:85:0f:6a:98:df:3d:23:1c:
                    96:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F7:B0:F3:5E:A6:DD:07:AC:F6:D2:44:98:BE:4F:D3:20:66:A5:12
            X509v3 Authority Key Identifier:
                keyid:EA:6B:49:B0:75:2A:D3:BE:3D:D6:83:B8:AE:EA:22:05:F5:AF:D2:79

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/6mtJsHUq07491oO4ruoiBfWv0nk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/jfew816m3Qes9tJEmL5P0yBmpRI.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:7fa:0:3::/64

    Signature Algorithm: sha256WithRSAEncryption
         14:d1:4d:3f:43:d5:89:95:a3:d2:8b:74:e0:25:46:d6:e3:f7:
         68:80:00:2a:90:11:26:8a:40:46:20:2e:e7:4b:af:12:27:85:
         8b:8e:52:50:95:22:61:5e:1d:71:1c:55:c2:dd:8d:a6:98:da:
         09:55:0e:e4:55:57:4a:8d:11:36:c9:ed:6c:bc:8b:67:27:a0:
         6e:b2:8a:f0:72:26:fc:16:1c:21:bb:c9:46:d7:07:4b:3a:2d:
         81:7b:5d:f5:6c:b8:34:42:54:29:a1:dd:53:2a:d4:8f:2f:7a:
         f7:f0:a5:28:d1:5a:5f:d5:6c:d6:6a:ae:e6:67:8f:da:71:c3:
         38:28:13:d6:f3:e7:9b:3b:0b:b7:75:17:33:89:6b:b6:7b:ba:
         8b:68:08:61:7a:b0:4f:e8:af:2d:3b:fa:2e:f7:66:b1:9d:ce:
         d8:a3:da:79:82:1b:73:f1:e0:fb:d3:e2:6f:7e:fa:34:5a:c6:
         e6:5d:4e:31:fa:f7:7b:19:18:f6:37:a4:61:2e:4c:2c:51:b7:
         ac:b3:7c:03:00:92:d4:f9:a4:26:47:9f:b8:7c:a3:c8:36:dc:
         6e:94:ff:6f:f5:59:8a:6c:04:5c:26:7a:33:6e:65:25:d5:3c:
         c4:15:f8:bd:00:41:91:0f:99:4f:d8:3c:2a:cd:80:06:74:97:
         c7:a9:9e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:06 2025 by rpki-client