Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9j0fTIPwj8KmrQ_7q0naZ2R3Y4U.roa
File:                     9j0fTIPwj8KmrQ_7q0naZ2R3Y4U.roa (raw, json)
Hash identifier:          7NqLQf7deuRvr59meutVO6CsiCf9MA85VbscmdfwlkY=
Subject key identifier:   F6:3D:1F:4C:83:F0:8F:C2:A6:AD:0F:FB:AB:49:DA:67:64:77:63:85
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       8B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9j0fTIPwj8KmrQ_7q0naZ2R3Y4U.roa
Signing time:             Tue 30 May 2023 16:06:28 +0000
ROA not before:           Tue 30 May 2023 16:06:28 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7200::/40 maxlen: 40
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 16:06:28 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F63D1F4C83F08FC2A6AD0FFBAB49DA6764776385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:67:14:01:a0:9d:dc:41:52:d9:e8:62:04:6c:
                    99:cd:c0:59:3c:da:00:01:30:78:21:69:5f:7d:75:
                    d5:1a:c9:59:ef:16:1b:63:b7:21:a9:cd:af:d6:f2:
                    7b:ed:7c:a6:56:ee:4f:97:a5:e1:f9:9f:d2:9f:9d:
                    0e:03:2f:21:14:f9:e6:52:53:b0:7c:c6:15:a6:bc:
                    aa:cc:f9:5d:c5:f1:52:4c:cf:0a:6c:fe:dc:b9:f5:
                    f9:56:53:94:a0:e4:d8:df:6a:04:35:42:08:f8:6a:
                    39:ca:e9:66:64:a4:c4:64:74:59:d1:88:03:ec:c5:
                    b6:5e:32:49:28:7d:e8:68:58:01:91:a3:aa:7f:fa:
                    08:4f:14:84:71:1f:b5:dc:c6:40:d3:e8:26:d4:9a:
                    9e:f1:b4:d9:75:5c:e8:50:e5:be:a2:e9:f1:b5:bf:
                    e7:f3:c7:9c:2f:fd:7e:3a:2b:4c:c5:21:ac:03:2c:
                    a6:3f:0d:bd:52:30:51:94:8d:87:93:9f:68:33:34:
                    b8:75:bc:25:f6:bf:31:9d:85:ed:76:7b:b8:22:e8:
                    d6:2f:76:92:73:bd:3a:a0:63:7a:4d:5e:6c:13:c0:
                    9f:4a:11:fd:75:bd:47:c3:6f:bf:ae:0d:6e:31:a1:
                    1e:1a:62:53:03:b5:e4:1e:db:22:fb:cd:97:3d:f0:
                    b2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3D:1F:4C:83:F0:8F:C2:A6:AD:0F:FB:AB:49:DA:67:64:77:63:85
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9j0fTIPwj8KmrQ_7q0naZ2R3Y4U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7200::/40

    Signature Algorithm: sha256WithRSAEncryption
         20:65:da:39:4a:6b:a9:35:00:38:cf:29:cf:38:40:2a:b2:96:
         68:9c:e3:9d:48:89:9f:df:21:2b:8e:b0:cd:57:f5:9c:fb:de:
         22:ff:8b:fb:7f:02:a3:2d:42:71:37:a7:81:4a:14:d8:7e:26:
         2e:99:0d:65:87:e0:5c:3a:4d:ed:75:83:2a:30:9b:23:91:9b:
         35:ec:93:c7:e7:4c:7c:7f:c7:c8:83:df:02:84:96:7b:af:7a:
         c0:e7:68:06:28:1b:9c:9b:54:3c:69:1f:9c:e1:92:31:a0:90:
         cf:ee:26:c7:28:c2:d8:94:8a:51:40:f8:69:04:7e:03:39:9f:
         3f:1d:4b:1e:30:10:20:fc:a0:19:cc:c2:67:80:1b:8a:d8:1e:
         86:cc:e5:6e:c6:91:76:59:13:cb:b0:c1:30:06:a1:e5:2f:dd:
         bc:e9:2f:99:f7:72:1e:dc:eb:4c:08:ce:0b:ad:4d:99:1f:c5:
         b1:05:86:18:de:8e:ea:82:95:2d:59:e7:8b:dc:02:d6:3d:f7:
         34:c6:de:a5:9b:00:2a:c6:e9:97:c6:7c:d3:64:38:fe:de:92:
         48:75:2c:b9:18:d2:e2:f1:3f:d2:06:24:1c:81:61:1f:8c:c5:
         ed:e8:78:83:28:5b:04:7b:48:10:45:a2:fc:a3:13:f4:66:24:
         69:dc:77:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:28 2025 by rpki-client