Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30138/GP0VrZDw5Fcd-zynke9aWfrJXeU.roa
File:                     GP0VrZDw5Fcd-zynke9aWfrJXeU.roa (raw, json)
Hash identifier:          mR+mbNLpA0Yb3TZiBZhv+rC2rCUW87JxiA6f2zJcOjw=
Subject key identifier:   18:FD:15:AD:90:F0:E4:57:1D:FB:3C:A7:91:EF:5A:59:FA:C9:5D:E5
Certificate issuer:       /CN=36447C69FE93430A4EF5EB217C409EBB5B676BB9
Certificate serial:       0E
Authority key identifier: 36:44:7C:69:FE:93:43:0A:4E:F5:EB:21:7C:40:9E:BB:5B:67:6B:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/GP0VrZDw5Fcd-zynke9aWfrJXeU.roa
Signing time:             Wed 11 Oct 2023 00:23:31 +0000
ROA not before:           Wed 11 Oct 2023 00:23:31 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9374
IP address blocks:        2402:c200::/32 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36447C69FE93430A4EF5EB217C409EBB5B676BB9
        Validity
            Not Before: Oct 11 00:23:31 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=18FD15AD90F0E4571DFB3CA791EF5A59FAC95DE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c7:25:41:9d:85:3d:95:74:29:5c:a3:c6:ad:
                    5f:93:4e:7a:57:67:d2:42:35:82:01:77:13:71:d3:
                    05:bb:bc:6b:95:f7:ea:d0:7d:f3:e4:fe:cf:10:b2:
                    87:e7:d3:75:bb:b8:5d:a4:eb:b0:61:e4:d9:92:56:
                    c2:5b:b4:e5:84:b2:ff:95:bd:0a:3e:b7:67:a4:40:
                    f7:17:7f:5d:eb:69:73:9e:5f:b5:44:3e:e4:92:0c:
                    a2:bd:37:70:d4:8b:67:45:bc:8c:2a:a8:48:53:51:
                    c0:44:11:bb:0a:7a:8e:36:8b:64:00:9c:0c:89:5d:
                    0f:96:ba:de:d1:9c:f7:aa:68:f8:06:8e:be:3c:26:
                    bb:44:f8:a6:aa:41:f0:1c:b3:04:f8:55:56:f4:05:
                    62:0d:53:a5:de:6f:f6:5a:7c:84:2e:9e:c2:53:9c:
                    6c:4c:29:aa:e1:ee:7f:56:90:80:4d:55:97:06:91:
                    ef:17:1b:83:b0:a7:d4:1c:9f:50:d3:f9:a9:eb:f0:
                    09:30:f8:22:83:92:ab:96:54:34:21:96:f7:7b:65:
                    5d:4f:da:8f:80:15:5c:0f:b1:3b:00:1c:18:f9:21:
                    10:4e:d1:ff:40:a0:49:00:07:49:65:e8:24:7e:87:
                    84:b6:2d:65:89:3d:d9:f6:f1:3a:a3:6f:cd:71:1f:
                    b3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FD:15:AD:90:F0:E4:57:1D:FB:3C:A7:91:EF:5A:59:FA:C9:5D:E5
            X509v3 Authority Key Identifier:
                keyid:36:44:7C:69:FE:93:43:0A:4E:F5:EB:21:7C:40:9E:BB:5B:67:6B:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/GP0VrZDw5Fcd-zynke9aWfrJXeU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c200::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:62:2f:27:11:57:4e:c4:86:c7:dc:aa:aa:08:b1:e6:a9:be:
         72:28:d5:5d:93:11:20:58:a0:dc:ba:d1:8c:30:d0:44:b6:d4:
         6f:3e:6c:a3:1b:1a:02:a0:30:76:9b:67:02:96:f0:8d:a6:e4:
         a8:b7:b4:89:be:2d:b3:42:15:99:59:df:34:21:e4:1c:98:1d:
         95:ff:b3:7a:b4:76:13:f4:c8:11:f2:78:ad:61:b9:16:63:53:
         cb:62:48:22:78:9a:7f:e3:55:be:22:5c:0e:7e:21:70:29:87:
         55:a8:d0:d4:db:78:be:7a:05:7a:67:2a:4e:41:94:a1:9c:64:
         2f:21:cc:6e:2b:8c:98:a0:1b:2e:8d:d2:4a:b3:e5:c0:b4:1d:
         e5:2a:10:aa:af:1b:a6:1c:81:79:0d:4e:b4:3d:6a:60:e2:db:
         5a:a5:8d:1f:4c:e3:00:07:db:5b:ae:44:6d:6a:80:02:88:90:
         9e:65:b4:a7:9f:c0:11:6f:1e:f4:66:41:ca:2b:8b:17:07:87:
         e8:94:1d:eb:f5:1c:83:54:1e:a7:45:e1:0d:bc:71:1f:67:20:
         2c:19:91:e6:de:7c:4c:ca:71:40:2b:07:f3:b4:0c:4b:e8:a1:
         53:12:69:c1:c7:56:24:7a:73:6c:fa:01:8d:63:df:08:d7:37:
         f4:b5:37:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:25 2025 by rpki-client