Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/FUh8qIZLqDQ0gOmCSq2jLj2L984.roa
File:                     FUh8qIZLqDQ0gOmCSq2jLj2L984.roa (raw, json)
Hash identifier:          x7Yljo27JrIL2IQKuTpfd7ArVy61KUp5B1Qrd+AEWMA=
Subject key identifier:   15:48:7C:A8:86:4B:A8:34:34:80:E9:82:4A:AD:A3:2E:3D:8B:F7:CE
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       5A
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/FUh8qIZLqDQ0gOmCSq2jLj2L984.roa
Signing time:             Tue 23 Feb 2021 08:57:39 +0000
ROA not before:           Tue 23 Feb 2021 08:57:39 +0000
ROA not after:            Tue 15 Feb 2022 01:30:02 +0000
asID:                     2527
IP address blocks:        218.41.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Feb 23 08:57:39 2021 GMT
            Not After : Feb 15 01:30:02 2022 GMT
        Subject: CN=15487CA8864BA8343480E9824AADA32E3D8BF7CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:94:d4:47:ad:5a:bc:a8:0c:18:2a:c3:f3:77:
                    36:71:fd:f3:c7:ef:59:c5:f1:79:1e:66:1e:d2:4c:
                    39:b2:6f:24:3e:bc:9d:6c:2d:9d:a7:92:50:0b:d6:
                    6d:ad:0d:98:4c:f6:45:03:25:54:db:de:58:cc:14:
                    e7:9d:33:a6:26:95:fd:cf:45:f5:ba:43:96:57:c5:
                    c4:26:e9:24:de:9f:e5:9e:8a:e9:f6:81:90:8e:f5:
                    df:37:07:55:1c:3f:43:bc:c1:36:4b:b1:b8:34:20:
                    b0:94:0a:71:1d:4e:f8:b8:c9:9a:4c:67:46:74:9f:
                    61:94:31:fc:b1:0c:f9:a6:e8:c9:2f:12:a0:b6:bb:
                    a5:ce:fb:95:60:6a:98:62:53:0e:23:e9:49:c4:26:
                    dc:f3:5d:05:22:32:eb:94:c6:50:4a:d6:6b:27:60:
                    ef:23:5d:31:38:d1:33:e3:17:12:1f:2a:d7:0e:cb:
                    ed:8b:e4:24:2c:00:fc:3c:a1:a5:fb:7f:4f:57:d4:
                    2c:76:2f:ff:7e:76:1e:1f:f8:a2:db:cf:39:5d:46:
                    74:bf:f2:5c:15:58:0b:a8:d3:04:36:f5:26:d4:27:
                    8b:b0:41:c4:83:ea:dc:e2:4b:e6:67:25:ff:2d:37:
                    1a:77:ae:a0:e8:9f:34:e8:ee:b5:80:50:44:80:81:
                    ca:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:48:7C:A8:86:4B:A8:34:34:80:E9:82:4A:AD:A3:2E:3D:8B:F7:CE
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/FUh8qIZLqDQ0gOmCSq2jLj2L984.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.41.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         69:b9:49:d4:a8:fe:86:43:b2:6d:39:b6:3f:44:54:38:ef:56:
         54:1f:7a:e2:77:fe:0e:ec:7e:89:58:2a:65:9f:42:f1:59:9f:
         0b:02:b0:13:a5:8b:38:cb:af:ea:15:87:f8:59:b7:45:f4:7b:
         3d:9b:e2:9a:d5:02:e3:be:67:43:ad:2d:d8:8d:78:e9:1c:2b:
         23:98:ba:39:fe:8a:13:02:84:ef:12:4d:05:2c:9c:07:35:a4:
         f9:75:83:f4:e6:b1:a5:96:91:26:9a:55:8c:81:e2:cb:5e:51:
         d4:e0:62:e6:9d:c1:fa:00:2c:af:9e:19:da:60:c0:de:5c:00:
         46:46:a5:92:e5:a2:1a:db:f1:bd:6c:32:b2:6e:f5:a9:8d:ed:
         a2:a8:87:cf:1c:b2:50:86:b1:3e:a2:17:99:3d:23:dc:d2:19:
         36:2e:a8:e9:63:fb:cd:03:0c:ab:57:4a:df:a5:6e:84:49:ff:
         38:ae:03:cf:66:9c:9a:b0:47:53:8f:3f:ae:b2:8c:eb:9f:fa:
         2e:52:90:6e:6a:d9:f2:76:50:9f:b3:b7:67:ce:af:27:48:c4:
         d2:4a:bd:85:c0:6b:ee:9b:ab:a0:61:dc:30:93:ee:58:d4:83:
         c6:ff:12:4e:1b:4f:1e:18:32:4c:c7:9c:8a:e3:08:9c:69:a8:
         06:53:42:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:45:56 2025 by rpki-client