Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/57bmd4VT8pe_R85FwbOl3fa2IlY.roa
File:                     57bmd4VT8pe_R85FwbOl3fa2IlY.roa (raw, json)
Hash identifier:          VSGcdMrDfm0OPfP+8puZrUraRDVgaZV9GUy+7yUz0f4=
Subject key identifier:   E7:B6:E6:77:85:53:F2:97:BF:47:CE:45:C1:B3:A5:DD:F6:B6:22:56
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       04A8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/57bmd4VT8pe_R85FwbOl3fa2IlY.roa
Signing time:             Thu 27 Jul 2023 16:46:15 +0000
ROA not before:           Thu 27 Jul 2023 16:46:15 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        220.159.32.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1192 (0x4a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jul 27 16:46:15 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=E7B6E6778553F297BF47CE45C1B3A5DDF6B62256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cc:8d:3a:de:bf:ed:eb:f4:b5:20:0b:aa:b2:
                    0b:4b:c0:8a:56:90:f6:87:a5:76:3e:5d:a3:cc:6b:
                    d8:f5:43:fc:6f:19:b2:5c:66:15:22:9a:0e:72:12:
                    d3:e5:2e:6e:f9:56:13:7c:78:9c:5b:5b:ce:69:8f:
                    66:3a:95:a0:d7:af:99:65:3f:0a:34:ea:45:49:3b:
                    f1:83:c4:18:40:c7:e9:5d:d3:49:db:fe:8b:f8:5a:
                    aa:7d:2c:6c:45:50:16:17:69:32:5f:d4:a2:4a:c9:
                    c7:46:23:ba:f3:a9:d3:7c:19:aa:33:f0:89:3d:b8:
                    11:8a:e8:7e:e6:27:98:8d:94:10:44:1e:06:c1:d5:
                    2b:21:2e:58:26:3c:3d:ae:b1:9e:55:ac:c4:c0:78:
                    cc:75:ed:31:00:42:d8:9e:82:4e:05:be:46:b3:e8:
                    9b:9b:e0:53:ec:81:ca:26:8a:9a:15:e2:71:25:b5:
                    13:8d:14:3f:e8:63:3e:01:5d:d4:f7:85:00:ba:32:
                    c5:37:08:bd:15:ce:a5:a7:4d:69:21:a3:40:17:bc:
                    38:f1:b1:bf:87:20:e7:3b:50:59:80:09:f4:29:3c:
                    8e:9e:8c:1b:0b:56:5f:0a:87:31:ee:12:6f:f0:7e:
                    23:9e:f0:4a:c7:3e:aa:60:b5:ae:06:c7:e5:af:8c:
                    05:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B6:E6:77:85:53:F2:97:BF:47:CE:45:C1:B3:A5:DD:F6:B6:22:56
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/57bmd4VT8pe_R85FwbOl3fa2IlY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.159.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3b:0f:b6:09:c4:60:c7:27:89:aa:f3:55:c5:4f:27:0f:52:e1:
         92:c9:9b:b2:1a:5e:bf:86:e9:0e:17:67:c9:96:14:df:3a:de:
         75:0c:39:d8:b4:78:79:8e:ce:c2:50:cb:91:12:9b:e8:0e:e4:
         3b:ba:9c:71:28:98:77:bd:0a:f5:b5:e1:03:34:e6:00:7a:92:
         04:c0:26:e2:4c:2f:3a:42:86:a6:cc:d0:49:8c:01:42:86:63:
         2e:f9:8e:bf:25:af:b6:2d:b7:89:47:98:d4:06:f1:1a:a2:44:
         6f:2a:51:f4:c1:a9:d3:1d:d1:de:8f:8f:88:41:3b:09:71:39:
         fa:ec:4c:31:96:cf:56:9e:fb:ab:dc:61:a2:95:97:78:37:be:
         cc:b3:ec:ff:af:c7:6b:fa:df:7e:c1:67:57:94:dd:30:af:6f:
         95:67:54:83:08:61:c0:e7:7e:c6:16:ea:ae:f7:c9:12:39:d6:
         7d:7d:ea:db:52:2c:3f:69:d0:ae:ec:47:45:e3:01:2b:c9:ff:
         97:8e:b8:5d:a6:4c:89:44:1d:2c:f0:01:e8:8d:e0:83:0e:c3:
         49:72:54:42:53:74:3d:7a:75:7f:83:96:52:e1:61:ef:c3:cf:
         82:34:ae:04:98:e8:14:85:e6:24:db:b0:a1:19:2c:68:2f:db:
         7e:fa:1b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:11 2025 by rpki-client