Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30272/JzVICwyIQX9ib_g4JpiJzx_R3BI.roa
File:                     JzVICwyIQX9ib_g4JpiJzx_R3BI.roa (raw, json)
Hash identifier:          +ZSn3sTVSDPt/9sSGBbk/d1mlb7y/wTEoAqCnSb9LsA=
Subject key identifier:   27:35:48:0B:0C:88:41:7F:62:6F:F8:38:26:98:89:CF:1F:D1:DC:12
Certificate issuer:       /CN=5F468B31DB275A5DDAE7A549AC058DC20D7F8C9C
Certificate serial:       11
Authority key identifier: 5F:46:8B:31:DB:27:5A:5D:DA:E7:A5:49:AC:05:8D:C2:0D:7F:8C:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/JzVICwyIQX9ib_g4JpiJzx_R3BI.roa
Signing time:             Tue 12 Sep 2023 01:22:00 +0000
ROA not before:           Tue 12 Sep 2023 01:22:00 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     17682
IP address blocks:        2402:1580:2960::/44 maxlen: 44
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F468B31DB275A5DDAE7A549AC058DC20D7F8C9C
        Validity
            Not Before: Sep 12 01:22:00 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=2735480B0C88417F626FF838269889CF1FD1DC12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:42:d0:a9:c9:bb:33:73:84:8a:7c:f0:73:be:
                    8b:cb:61:75:3f:ba:32:de:81:34:97:b8:21:ca:8f:
                    09:de:4d:43:43:f6:02:6c:64:75:0b:15:0e:c9:a2:
                    fe:a5:96:64:f4:8b:89:cb:62:74:a9:a7:cc:90:2a:
                    02:84:d0:25:52:4a:46:ec:30:bd:d7:96:bb:b5:e9:
                    c4:05:b8:e4:cc:ea:ab:1a:72:65:6d:84:dd:30:42:
                    15:33:68:8a:be:ee:7b:79:8b:6b:34:1e:02:e0:f1:
                    f6:fd:21:21:d4:c9:2b:0e:c5:e0:94:b4:66:31:0a:
                    36:ff:0a:bb:03:a2:a4:61:54:a8:da:cc:6f:25:39:
                    61:8c:a1:2f:df:94:15:f2:f4:a2:00:13:f2:f2:10:
                    f1:bd:31:bb:c5:d3:be:b3:81:85:13:74:21:57:2a:
                    44:a2:e8:62:df:b6:d1:45:d8:9a:2e:08:16:3c:15:
                    0b:43:3a:e4:c4:dd:a0:f7:99:66:4f:9c:8b:fb:6f:
                    2f:bd:a4:12:30:82:5e:74:ea:30:81:e3:50:52:80:
                    78:11:bf:5f:e0:28:fd:be:88:b4:f6:fc:db:9c:23:
                    fd:8a:9d:98:1e:39:ea:e9:09:4e:97:1f:4e:bd:1d:
                    4a:68:d7:e9:94:36:0a:e4:02:87:42:a3:bc:5f:4c:
                    bf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:35:48:0B:0C:88:41:7F:62:6F:F8:38:26:98:89:CF:1F:D1:DC:12
            X509v3 Authority Key Identifier:
                keyid:5F:46:8B:31:DB:27:5A:5D:DA:E7:A5:49:AC:05:8D:C2:0D:7F:8C:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/JzVICwyIQX9ib_g4JpiJzx_R3BI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1580:2960::/44

    Signature Algorithm: sha256WithRSAEncryption
         75:92:82:51:ef:4b:7a:cb:51:de:df:0f:1e:89:fe:67:1d:0a:
         b0:24:39:46:c9:b7:2e:a3:14:1c:ff:51:a0:6c:56:6c:6e:e4:
         be:84:6f:41:24:3e:5e:91:b0:68:28:36:c0:23:96:16:e7:1d:
         40:8c:bf:85:77:49:3d:b6:d0:dd:81:7b:e1:d0:33:cd:67:16:
         34:13:14:46:b0:8c:22:f2:9a:cf:e1:41:34:9c:17:03:0d:d5:
         ba:b4:5b:4a:e2:2b:a2:1e:d4:0c:72:8b:64:ae:92:37:aa:79:
         28:21:f1:60:2f:e6:d3:cf:3b:eb:02:39:7f:fa:ae:fb:af:cb:
         73:0c:26:a8:02:29:3c:d3:5e:c4:fc:87:47:23:47:91:56:c9:
         ad:2b:46:9a:3a:f7:c7:a8:fa:e1:7d:a8:e8:e5:5c:df:07:86:
         d0:80:9c:0d:4c:cf:3e:dd:b6:23:60:6d:b8:e2:ba:71:28:77:
         21:2e:37:71:54:c9:d3:f6:5b:11:63:52:d5:e5:5c:e4:c9:6c:
         e7:35:7f:41:bd:0d:48:59:15:23:07:1d:fc:4b:09:eb:b4:e4:
         82:2c:a4:bf:07:c4:3c:30:0a:2f:ce:91:7f:59:3c:da:ef:2e:
         7c:75:f3:f5:c2:85:78:db:67:f2:2b:98:10:3a:c7:ce:dc:a2:
         29:86:87:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:02 2025 by rpki-client