Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/6KEayfKOiUo5tRbLU1GWbgzbmNA.roa
File:                     6KEayfKOiUo5tRbLU1GWbgzbmNA.roa (raw, json)
Hash identifier:          FHdYK4asor9sNKsXfE9VuGTQtY7oPiqqe0akn/wRErc=
Subject key identifier:   E8:A1:1A:C9:F2:8E:89:4A:39:B5:16:CB:53:51:96:6E:0C:DB:98:D0
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       4B
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/6KEayfKOiUo5tRbLU1GWbgzbmNA.roa
Signing time:             Tue 23 Feb 2021 08:57:35 +0000
ROA not before:           Tue 23 Feb 2021 08:57:35 +0000
ROA not after:            Tue 15 Feb 2022 01:30:02 +0000
asID:                     2527
IP address blocks:        123.198.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Feb 23 08:57:35 2021 GMT
            Not After : Feb 15 01:30:02 2022 GMT
        Subject: CN=E8A11AC9F28E894A39B516CB5351966E0CDB98D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7a:ae:0c:f2:62:98:6d:81:50:ce:47:12:64:
                    71:38:6c:80:08:c8:ce:77:13:82:a6:b5:47:52:7d:
                    fa:0b:59:ab:5c:97:1d:0a:d5:91:a6:5c:94:46:8c:
                    fe:87:5e:57:c3:57:ce:26:9d:41:6b:58:b9:65:fb:
                    61:18:9a:61:36:a0:ca:22:6b:a5:42:9a:58:c7:f2:
                    a2:75:36:42:60:90:30:9a:fa:73:d4:4b:05:5b:af:
                    b2:1b:90:57:98:3b:3b:95:dd:ac:a0:35:70:65:44:
                    0c:e6:9e:b0:19:7d:a5:47:1c:45:ea:2b:2a:09:32:
                    22:87:ae:fa:0e:38:2d:29:a9:fd:97:04:aa:ae:c7:
                    12:ad:29:b8:83:6b:9f:12:60:e6:bb:8a:40:60:aa:
                    66:9d:a9:8f:da:c1:af:91:24:0c:47:a7:a5:c9:c1:
                    5b:c6:35:7b:26:25:68:bb:df:7a:f0:b9:0b:7e:92:
                    22:41:03:3e:a7:41:67:01:f4:a0:f5:6e:2f:a3:4b:
                    bd:3c:2f:e2:66:06:4f:35:40:8f:b2:d1:b9:1d:6d:
                    03:9d:a2:8f:d3:f2:ae:01:39:d3:b7:59:da:5b:d8:
                    f9:0a:a5:61:a7:98:da:c5:4b:c2:6e:d6:6e:51:32:
                    d7:64:92:9a:eb:63:5d:ff:51:bb:95:d9:51:ca:ea:
                    b5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A1:1A:C9:F2:8E:89:4A:39:B5:16:CB:53:51:96:6E:0C:DB:98:D0
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/6KEayfKOiUo5tRbLU1GWbgzbmNA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.198.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         68:cd:d9:b7:d4:73:1f:7f:85:97:ea:b6:a9:78:28:10:d0:c5:
         84:4c:c7:49:59:16:0c:c1:ac:6e:a8:2d:5f:57:cf:12:d1:e3:
         d8:b3:b3:71:a0:2a:73:49:74:45:95:5b:07:20:29:98:d1:c4:
         64:46:de:ec:0b:89:77:72:71:02:24:cd:92:8e:a4:d9:e8:7b:
         a3:98:63:fa:56:03:83:16:50:a1:56:27:78:f7:b2:95:9c:74:
         4a:b8:72:e7:21:36:63:5f:78:d8:b4:13:42:cf:54:f7:16:c9:
         87:ae:5e:9c:bb:e8:93:8c:06:0c:00:8f:f6:34:17:b1:2c:d3:
         45:12:7a:6f:76:c5:1b:58:78:8c:52:57:35:9a:71:26:c2:a3:
         07:c9:db:f6:b2:d7:e9:de:93:9e:c2:25:f3:43:e8:1d:70:41:
         22:cd:bf:a3:61:61:15:4a:63:34:04:4e:90:07:1c:db:f6:00:
         ca:5e:9f:50:3c:a6:c4:09:10:e3:4d:22:89:1e:37:c1:96:52:
         16:b0:1e:d7:00:50:be:65:50:35:59:89:54:47:b8:8b:8b:42:
         f4:4d:86:9f:d1:c3:d3:a1:a9:3b:a1:89:fa:3d:88:bb:67:59:
         c7:4c:8d:fe:4c:1b:90:dd:88:82:6d:ff:35:46:ad:0a:3f:f3:
         57:a6:aa:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:49 2025 by rpki-client