Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39062/5Zc5PH07m-UE_7BbrK_cpcCkDdY.roa
File:                     5Zc5PH07m-UE_7BbrK_cpcCkDdY.roa (raw, json)
Hash identifier:          AQz699l9aUDN2RxFMHcSZsL/ZOBuvR9X++wBeEO9YLA=
Subject key identifier:   E5:97:39:3C:7D:3B:9B:E5:04:FF:B0:5B:AC:AF:DC:A5:C0:A4:0D:D6
Certificate issuer:       /CN=007304C8C78435522607E1CFAF1F3CE1A221FF7D
Certificate serial:       12
Authority key identifier: 00:73:04:C8:C7:84:35:52:26:07:E1:CF:AF:1F:3C:E1:A2:21:FF:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHMEyMeENVImB-HPrx884aIh_30.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/5Zc5PH07m-UE_7BbrK_cpcCkDdY.roa
Signing time:             Tue 28 Mar 2023 06:40:12 +0000
ROA not before:           Tue 28 Mar 2023 06:40:12 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     146980
IP address blocks:        2001:df0:8bc0::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007304C8C78435522607E1CFAF1F3CE1A221FF7D
        Validity
            Not Before: Mar 28 06:40:12 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=E597393C7D3B9BE504FFB05BACAFDCA5C0A40DD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:04:72:0e:3d:c8:b5:1a:ce:01:77:77:b9:71:
                    87:7e:82:cd:2c:d2:65:7a:51:b7:31:5a:3b:fb:3b:
                    d6:4d:14:e0:61:f0:a7:a7:fd:1b:34:8f:30:17:d9:
                    8f:d2:89:3d:f0:e5:07:2d:10:75:d6:70:8c:fd:67:
                    77:0d:fb:73:3d:40:af:b6:3b:60:93:e9:c7:da:bd:
                    9f:c0:82:d8:fe:34:5d:41:60:19:4a:b6:3c:e2:9d:
                    0c:15:fa:4c:c8:02:ae:c7:58:d7:95:17:4d:09:59:
                    4f:5f:df:47:19:28:80:26:8f:0d:f8:0e:1a:b6:3c:
                    88:04:c7:87:2f:f0:4a:5d:d5:00:2a:48:94:98:0b:
                    51:c2:e8:83:00:2b:e7:3e:7d:0a:d2:62:fb:47:8d:
                    51:d2:1c:ba:a8:d4:58:16:4e:4c:25:13:61:4e:a5:
                    39:96:27:e9:75:63:3f:3b:1a:0d:e5:05:f3:d8:3e:
                    b2:8d:d8:bf:55:d3:03:d0:84:5d:6d:d9:4c:96:39:
                    e9:f0:6b:bf:45:18:5d:2f:b6:8c:26:e3:7d:66:27:
                    87:88:02:d9:b3:3a:f6:bf:af:06:e1:4a:59:eb:21:
                    a3:39:6b:6d:4d:34:c5:29:9e:8d:cf:87:5b:1f:9c:
                    d2:65:6e:fa:f8:ea:bd:04:25:0a:75:8d:6f:fe:91:
                    9f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:97:39:3C:7D:3B:9B:E5:04:FF:B0:5B:AC:AF:DC:A5:C0:A4:0D:D6
            X509v3 Authority Key Identifier:
                keyid:00:73:04:C8:C7:84:35:52:26:07:E1:CF:AF:1F:3C:E1:A2:21:FF:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/AHMEyMeENVImB-HPrx884aIh_30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHMEyMeENVImB-HPrx884aIh_30.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/5Zc5PH07m-UE_7BbrK_cpcCkDdY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:8bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:1e:e9:df:52:a8:9d:d9:79:66:c6:fe:d1:cf:d0:56:66:bc:
         02:c5:1c:44:f2:37:88:46:03:49:b0:ae:f4:a2:38:16:1a:1a:
         75:ef:1d:15:51:19:55:9d:bb:0d:61:91:07:b7:2f:66:34:b6:
         53:05:d4:e5:1d:22:8c:64:62:ea:16:f2:48:0d:48:11:28:1e:
         5a:0b:19:4e:f3:33:0f:db:8a:31:c8:a9:28:ed:ad:78:8d:96:
         54:94:7c:00:6b:08:de:14:17:69:2f:9c:d0:cc:db:90:70:93:
         2c:0b:dd:0c:9d:18:1a:9d:c7:c0:d1:04:bb:31:fe:ba:9a:28:
         2e:8f:90:43:03:4c:b8:9f:79:06:c3:32:59:31:b0:ab:f5:60:
         9f:3d:d8:45:73:0c:f2:3c:74:4f:7c:3c:13:c3:f4:a4:96:bb:
         2c:5f:c1:b5:ad:b9:81:6e:f1:7b:c4:0d:b7:a4:2f:59:f5:ff:
         6d:84:af:6b:1d:71:dd:e9:4b:3e:bd:d4:51:f1:73:38:41:d4:
         50:e9:ed:38:f6:14:21:2b:7e:97:e9:72:82:04:2a:7c:9a:22:
         45:0c:bf:ed:36:ee:5a:9f:66:3a:ed:62:79:39:dc:72:bf:9d:
         43:a9:09:0e:90:3c:ab:05:92:98:47:69:ba:90:98:03:69:79:
         f7:bf:d2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:31 2025 by rpki-client