Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30140/fuEQ3kfNxdQj7EamNUAxpOKotjQ.roa
File:                     fuEQ3kfNxdQj7EamNUAxpOKotjQ.roa (raw, json)
Hash identifier:          mOKDROboZtVviAvV+wJy/4qb4OosdBAFXrWFVGGlmd0=
Subject key identifier:   7E:E1:10:DE:47:CD:C5:D4:23:EC:46:A6:35:40:31:A4:E2:A8:B6:34
Certificate issuer:       /CN=A68ECA29D06CB4C00611BA4AD8526F0490CC6E7D
Certificate serial:       0F
Authority key identifier: A6:8E:CA:29:D0:6C:B4:C0:06:11:BA:4A:D8:52:6F:04:90:CC:6E:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/po7KKdBstMAGEbpK2FJvBJDMbn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30140/fuEQ3kfNxdQj7EamNUAxpOKotjQ.roa
Signing time:             Sat 25 Sep 2021 07:37:34 +0000
ROA not before:           Sat 25 Sep 2021 07:37:34 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     17948
IP address blocks:        2402:d600::/32 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A68ECA29D06CB4C00611BA4AD8526F0490CC6E7D
        Validity
            Not Before: Sep 25 07:37:34 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=7EE110DE47CDC5D423EC46A6354031A4E2A8B634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4b:07:3f:f6:0c:3f:ad:93:23:ea:aa:d4:ba:
                    98:d6:ee:18:8a:81:04:42:0d:9f:48:60:47:ed:99:
                    e6:d7:54:e6:db:28:30:22:e8:08:43:7a:c0:b9:88:
                    2c:cb:f4:a1:fd:2b:5d:36:33:fc:6a:4a:56:d3:b8:
                    3d:a1:fe:ad:73:5e:05:e7:00:7f:27:97:87:24:3e:
                    81:1b:5c:9b:f6:05:9d:b2:dc:c8:44:17:6a:6e:91:
                    e0:bc:49:e0:43:41:ea:d4:62:c5:f2:b2:71:65:f0:
                    15:39:4b:88:6e:1b:cc:cb:01:c0:1b:2f:32:d4:ae:
                    af:fa:9f:57:15:c4:ac:8a:aa:5b:ae:87:2e:b7:74:
                    12:41:09:55:c3:b4:4f:57:1d:a5:ad:9a:2a:9e:77:
                    b0:9e:1e:97:33:2b:4e:8a:2f:09:5c:fa:5a:9b:a8:
                    c2:6a:fb:54:6e:3b:d9:09:62:fa:a8:9f:55:bd:a5:
                    0e:0c:15:29:ff:8f:9e:1c:70:10:50:4a:48:50:12:
                    dc:9d:70:cb:11:de:9a:4f:51:46:14:a8:16:48:9f:
                    32:89:3a:06:f5:59:ac:47:23:c0:64:6f:ca:cc:27:
                    10:60:13:24:2d:5c:b3:80:42:06:57:85:3d:f9:e8:
                    7f:7a:a7:69:af:af:bc:08:00:0b:59:7b:fd:2b:c3:
                    89:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E1:10:DE:47:CD:C5:D4:23:EC:46:A6:35:40:31:A4:E2:A8:B6:34
            X509v3 Authority Key Identifier:
                keyid:A6:8E:CA:29:D0:6C:B4:C0:06:11:BA:4A:D8:52:6F:04:90:CC:6E:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30140/po7KKdBstMAGEbpK2FJvBJDMbn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/po7KKdBstMAGEbpK2FJvBJDMbn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30140/fuEQ3kfNxdQj7EamNUAxpOKotjQ.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:d600::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:85:11:59:89:cc:68:a2:f6:c4:1b:ee:21:6b:2f:b7:c6:ca:
         f8:d2:96:9d:e2:0e:9b:25:6d:0d:84:cc:92:84:ae:c5:2f:60:
         2b:c8:c5:29:8c:e5:0e:03:04:f4:ec:c7:80:19:4a:7d:af:18:
         ae:e6:ee:d5:22:ea:7e:f1:e2:76:23:ce:a5:97:00:c6:1e:dc:
         65:cb:ac:58:44:0f:ff:e9:58:ac:f8:eb:98:43:2b:0e:f2:be:
         78:4b:43:4c:0e:54:0c:e1:50:69:47:41:b5:a1:11:02:86:34:
         50:da:c8:67:f1:1a:5e:ff:6a:db:ac:fc:37:15:75:11:e0:31:
         ed:0c:6a:f8:bb:a0:51:4a:87:1e:7d:d0:58:df:80:41:37:c4:
         23:df:9a:14:45:d9:10:64:19:6a:33:a7:27:4c:17:57:79:a2:
         d2:20:b7:f3:6c:c8:60:06:8f:e6:0c:49:bb:84:5f:13:39:6b:
         42:a0:e2:0e:ae:af:38:0e:57:0a:a3:6c:24:4e:7f:d6:89:c7:
         54:01:3e:ab:3f:00:a5:ae:1a:59:4b:1a:7c:0d:47:97:f8:95:
         87:d7:2e:cb:5d:2d:0f:f5:14:68:53:11:9c:f7:47:4c:dc:62:
         5d:dd:dc:55:78:9f:87:50:54:49:33:e3:db:6e:cc:ac:2f:45:
         08:c2:61:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:36 2025 by rpki-client