Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/-2wvtx7mAdlMAUEVCiYb3vYsu2o.roa
File:                     -2wvtx7mAdlMAUEVCiYb3vYsu2o.roa (raw, json)
Hash identifier:          65wme3RUTVSSlHKypbubHWZyF2Lad6VyoJBMCW1Qm0g=
Subject key identifier:   FB:6C:2F:B7:1E:E6:01:D9:4C:01:41:15:0A:26:1B:DE:F6:2C:BB:6A
Certificate issuer:       /CN=0FEDD4D310C95068C87E2DE6BF0719BAD9AC0A43
Certificate serial:       23
Authority key identifier: 0F:ED:D4:D3:10:C9:50:68:C8:7E:2D:E6:BF:07:19:BA:D9:AC:0A:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D-3U0xDJUGjIfi3mvwcZutmsCkM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/-2wvtx7mAdlMAUEVCiYb3vYsu2o.roa
Signing time:             Sun 01 May 2022 01:31:25 +0000
ROA not before:           Sun 01 May 2022 01:31:25 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     2527
IP address blocks:        90.149.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FEDD4D310C95068C87E2DE6BF0719BAD9AC0A43
        Validity
            Not Before: May  1 01:31:25 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=FB6C2FB71EE601D94C0141150A261BDEF62CBB6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b5:16:df:f9:23:51:8a:6c:72:2d:20:7b:49:
                    14:87:a6:76:30:69:b0:70:dd:6d:c6:42:10:0c:45:
                    97:b8:c5:f6:05:66:cf:ce:5a:c8:e2:a3:e8:52:72:
                    95:75:ac:05:af:d7:9e:f0:d1:29:c2:77:85:1c:f5:
                    6e:65:3a:fa:46:02:f2:ee:b3:55:60:d3:ea:7d:ae:
                    f6:46:b6:bc:07:a8:86:8b:f0:9d:9b:31:c1:3d:fd:
                    b9:36:95:01:a7:e1:50:29:d8:3f:68:24:7d:86:9d:
                    f9:25:00:c3:04:51:a9:c9:7f:e4:6e:17:4b:09:97:
                    ad:d5:02:b7:6d:85:b8:95:83:d1:ae:fb:72:76:94:
                    89:e5:45:08:47:52:9a:6e:30:17:24:c6:9a:76:27:
                    4a:3d:45:6e:92:95:4d:6f:f4:62:06:c7:9e:9c:85:
                    c0:e1:99:24:69:08:ac:36:32:65:f8:01:2d:2d:06:
                    1b:6f:0f:2c:99:a2:89:cb:d5:46:6e:65:7f:1b:69:
                    38:86:11:79:44:b1:e9:b9:bf:87:ab:65:0f:4e:24:
                    b3:89:b5:35:36:f7:25:a2:97:38:e2:4a:9f:b1:79:
                    f8:b5:3c:12:98:18:00:ce:4c:5a:d5:69:93:3c:c3:
                    d1:7a:65:98:c7:b1:b5:c6:f3:28:01:9c:8f:5f:2a:
                    ac:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6C:2F:B7:1E:E6:01:D9:4C:01:41:15:0A:26:1B:DE:F6:2C:BB:6A
            X509v3 Authority Key Identifier:
                keyid:0F:ED:D4:D3:10:C9:50:68:C8:7E:2D:E6:BF:07:19:BA:D9:AC:0A:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/D-3U0xDJUGjIfi3mvwcZutmsCkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D-3U0xDJUGjIfi3mvwcZutmsCkM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/-2wvtx7mAdlMAUEVCiYb3vYsu2o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  90.149.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cf:fb:1a:d0:b1:f8:f2:44:a3:21:07:27:2d:45:8c:95:ab:d8:
         47:34:42:b1:d2:e0:41:49:55:ae:8f:c4:e1:30:12:d0:96:d4:
         ab:71:9d:11:fa:db:6b:33:d2:f4:ae:31:ca:88:38:e2:fa:d2:
         84:84:10:44:22:e5:5d:56:5a:cb:04:f7:e8:8c:fa:8c:ec:b1:
         32:c4:8f:0f:8a:80:4c:78:f3:e2:45:b2:cb:64:df:dc:50:f8:
         8f:24:71:f7:1e:0b:89:76:3a:9c:d3:08:e7:80:20:96:12:3d:
         3c:a2:d7:a1:19:8f:5b:31:6d:41:5b:ac:ab:d1:b8:b1:c6:c5:
         39:05:87:ba:1f:ad:ce:a5:89:1b:1d:65:a3:ea:f9:ce:c4:6b:
         54:2f:43:2e:7e:93:22:7c:83:db:05:9a:e6:5f:48:d0:32:f6:
         9f:63:2b:3e:8f:08:b8:f3:f7:82:5a:d1:35:68:2f:8c:8c:70:
         11:4c:f6:c1:fa:d2:f9:7f:22:54:33:80:61:2c:d8:6b:2c:bc:
         cb:8b:04:ca:a2:72:ed:d3:a9:12:53:34:17:ad:6b:c1:ac:94:
         14:3e:df:70:5e:67:65:6d:b4:a1:3b:3a:13:e0:62:75:2b:6c:
         0e:d5:b2:05:12:bb:83:c7:ad:d2:bc:0d:e2:31:1e:da:a4:c5:
         f3:f0:0a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:20 2025 by rpki-client