Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30068/S7EiXVW5woNk5QxLU7T9GfkZUoM.roa
File:                     S7EiXVW5woNk5QxLU7T9GfkZUoM.roa (raw, json)
Hash identifier:          fIH4WB+I6xYqdUbpNOUyZIW83WzLzMOc5eZ+xR6gqZc=
Subject key identifier:   4B:B1:22:5D:55:B9:C2:83:64:E5:0C:4B:53:B4:FD:19:F9:19:52:83
Certificate issuer:       /CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Certificate serial:       35
Authority key identifier: CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/S7EiXVW5woNk5QxLU7T9GfkZUoM.roa
Signing time:             Sun 01 May 2022 01:31:21 +0000
ROA not before:           Sun 01 May 2022 01:31:21 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     9370
IP address blocks:        2406:ce00::/29 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
        Validity
            Not Before: May  1 01:31:21 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=4BB1225D55B9C28364E50C4B53B4FD19F9195283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6e:46:8b:e3:e5:a1:2b:58:22:6a:27:10:24:
                    fa:e5:b3:b0:7a:4e:0c:5e:5d:e7:4e:d8:8d:35:9d:
                    97:6f:43:b3:93:91:48:1d:55:9d:76:da:7d:8c:a0:
                    dd:a3:1a:f1:7f:02:a8:a0:bc:a2:d2:be:66:80:e0:
                    c5:51:90:6b:26:5f:12:a2:3c:23:95:5c:0d:d5:ff:
                    88:5b:14:6e:56:44:85:d8:69:57:96:ba:31:b7:2b:
                    31:1c:c7:a7:5b:93:4a:c0:be:a1:32:47:5c:f1:6b:
                    7f:74:7f:ff:33:6d:15:f7:b7:f7:10:ba:09:4e:ca:
                    32:f0:99:4b:f1:11:e7:39:c8:e7:5f:66:bc:d0:3d:
                    b6:ec:bc:0f:d2:d2:35:0d:41:f4:e5:ee:f8:22:4d:
                    55:22:50:02:7b:95:8e:40:2e:bc:38:91:e2:ee:1d:
                    9e:c9:3d:4b:2e:92:36:05:52:57:2a:4c:80:c5:4b:
                    cb:31:17:01:4c:dd:9e:10:3d:65:2a:24:1b:61:af:
                    2f:dd:ff:88:ed:fa:ce:7f:ab:cf:38:ab:fd:63:60:
                    48:b9:c9:c2:34:d3:20:8f:09:66:16:37:3e:8f:11:
                    2d:d0:15:e9:0e:19:14:a2:4a:de:24:94:b0:73:cb:
                    50:60:6e:25:15:4b:2c:ac:9a:74:bd:78:09:31:2a:
                    ad:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B1:22:5D:55:B9:C2:83:64:E5:0C:4B:53:B4:FD:19:F9:19:52:83
            X509v3 Authority Key Identifier:
                keyid:CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/S7EiXVW5woNk5QxLU7T9GfkZUoM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:ce00::/29

    Signature Algorithm: sha256WithRSAEncryption
         44:f9:0f:9c:bb:38:c9:15:24:43:98:61:f8:e8:c8:cc:9a:13:
         d2:da:5b:dd:61:cf:9e:c1:bb:77:0f:27:63:7d:7b:b7:37:1a:
         c1:af:ce:8a:3d:41:ca:15:08:39:44:79:fb:0f:41:60:47:fd:
         49:5e:f3:3a:1c:af:9e:e1:16:c3:13:47:1f:98:f0:ad:ea:c4:
         ba:0b:d4:68:6c:01:2f:f7:f1:a3:72:fb:26:5a:f2:e7:32:9a:
         cb:e3:5d:0e:96:bc:b6:40:cf:75:19:6a:53:3d:bb:4a:94:7f:
         96:d6:2a:46:27:86:8f:f4:0f:5d:df:44:be:2e:1c:46:71:a7:
         b9:6e:a5:c9:7b:99:c9:ed:b7:7e:6c:09:cc:34:6a:f6:3d:b4:
         71:9d:0d:e9:f2:af:d3:3a:9f:43:3b:b2:0e:db:42:4a:ed:6f:
         fe:5d:1e:d3:d2:f8:3e:92:fa:5f:3f:28:1d:3a:14:f2:d6:ff:
         93:e3:84:ed:3f:da:0f:4c:e6:c6:0a:ef:60:2b:b3:87:1d:fb:
         73:bd:81:eb:a3:d5:91:86:e6:d8:9a:63:6e:02:0c:fd:87:e0:
         98:cd:03:0e:69:5d:06:83:9e:b7:01:19:7c:30:0f:d8:8f:8d:
         f4:3e:ab:cc:1c:fe:c4:19:02:f5:af:3c:5c:70:85:29:82:c7:
         17:76:e7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:04 2025 by rpki-client