Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/V2t_hTXzPAXPzgfPSITL9l924Zc.roa
File:                     V2t_hTXzPAXPzgfPSITL9l924Zc.roa (raw, json)
Hash identifier:          ZEo0Wsog5YZqUW13G9dcKdJ9K048lX1sIdgljdo103o=
Subject key identifier:   57:6B:7F:85:35:F3:3C:05:CF:CE:07:CF:48:84:CB:F6:5F:76:E1:97
Certificate issuer:       /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial:       47
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/V2t_hTXzPAXPzgfPSITL9l924Zc.roa
Signing time:             Tue 24 May 2022 01:25:04 +0000
ROA not before:           Tue 24 May 2022 01:25:04 +0000
ROA not after:            Mon 15 May 2023 01:30:04 +0000
asID:                     10010
IP address blocks:        2406:bb04::/30 maxlen: 56
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
        Validity
            Not Before: May 24 01:25:04 2022 GMT
            Not After : May 15 01:30:04 2023 GMT
        Subject: CN=576B7F8535F33C05CFCE07CF4884CBF65F76E197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:0b:63:6b:5c:be:41:e0:f7:c9:50:72:5f:
                    8c:90:d2:32:be:85:85:1f:36:b6:e0:e3:5d:60:b9:
                    46:f1:d1:82:9e:d4:45:db:06:53:c3:60:41:62:c4:
                    cc:d1:48:cf:3c:f1:3e:51:7b:bd:67:76:c6:ab:22:
                    94:30:dd:b4:85:fb:41:fd:c1:61:7d:87:fb:10:9b:
                    d5:58:3e:02:78:9a:76:cb:c7:31:82:97:05:5a:8d:
                    76:84:ef:82:b4:fe:ee:f5:c4:e2:7d:40:11:ba:55:
                    29:b7:2d:81:fb:79:77:70:bc:a4:38:03:42:5a:26:
                    93:8b:bf:26:56:6d:a5:16:ee:2b:58:9f:fa:72:98:
                    77:3a:29:cc:d8:4f:af:57:09:d6:c6:42:59:84:c7:
                    86:21:b9:7f:d3:10:bb:60:e8:c3:18:49:a4:13:3b:
                    a2:da:24:64:f5:ca:75:fd:9c:8d:62:2f:1f:df:fb:
                    da:40:a5:27:e1:32:71:ca:08:ba:93:8b:14:a6:4d:
                    cc:96:aa:af:58:22:21:cc:16:19:de:17:06:f1:85:
                    a7:e2:f4:78:4f:d8:02:7b:0f:61:6d:b7:f1:fe:a5:
                    93:1e:97:bd:3e:df:30:1a:fd:57:dc:31:c4:5f:a0:
                    30:f7:96:4b:85:a6:ad:3c:1f:11:27:4d:56:17:c9:
                    69:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6B:7F:85:35:F3:3C:05:CF:CE:07:CF:48:84:CB:F6:5F:76:E1:97
            X509v3 Authority Key Identifier:
                keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/V2t_hTXzPAXPzgfPSITL9l924Zc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:bb04::/30

    Signature Algorithm: sha256WithRSAEncryption
         0c:bc:5d:29:23:b5:84:aa:4d:7e:ce:e9:4f:80:5c:47:72:3d:
         20:84:bd:6c:73:29:7f:49:10:bb:3d:7f:c7:b8:ce:bd:c9:ee:
         a4:3d:09:93:e0:91:f9:b5:68:65:73:a5:aa:92:90:0a:b9:cd:
         af:36:dd:31:9b:b7:55:ed:cb:be:9b:c9:34:55:49:98:93:eb:
         f0:c0:16:c5:13:30:0b:52:d0:d2:9d:c5:27:6f:9a:25:58:f2:
         52:47:90:d2:ed:49:21:e4:bc:ea:91:c9:61:83:77:cc:6e:85:
         81:a9:32:38:46:98:56:ff:8b:0d:23:b3:ba:88:58:4b:a4:0b:
         cf:ec:36:ab:2f:52:10:00:ca:09:23:78:98:5b:71:c5:7a:35:
         af:1d:53:a9:2e:69:3a:cb:20:38:ff:c8:c3:fa:63:43:44:d7:
         ae:0e:d1:ff:08:97:80:93:5f:f8:9f:2f:d8:be:2c:30:e0:c7:
         8e:15:69:33:d3:97:1e:e6:0a:de:51:16:88:a3:e1:51:6e:59:
         9d:3c:1d:89:69:db:5e:1e:0c:e5:9f:a1:7e:f8:f5:0d:f5:fc:
         ed:35:73:2f:0b:69:e9:01:86:ab:b8:ee:09:4f:f5:85:7d:c2:
         e6:1e:af:6b:74:a6:be:76:3e:f0:d8:d4:b1:2f:e6:3b:db:16:
         df:88:b4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:16 2025 by rpki-client