Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/R9oS1M5OxacEtVguVW8kDOsC-w4.roa
File:                     R9oS1M5OxacEtVguVW8kDOsC-w4.roa (raw, json)
Hash identifier:          7afXGC/t5E0v9KSGY0X9wGmTu+Q/K2hY5ordgffIEYU=
Subject key identifier:   47:DA:12:D4:CE:4E:C5:A7:04:B5:58:2E:55:6F:24:0C:EB:02:FB:0E
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       C5
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/R9oS1M5OxacEtVguVW8kDOsC-w4.roa
Signing time:             Sun 01 Jan 2023 01:29:33 +0000
ROA not before:           Sun 01 Jan 2023 01:29:33 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     2527
IP address blocks:        210.250.64.0/18 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Jan  1 01:29:33 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=47DA12D4CE4EC5A704B5582E556F240CEB02FB0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:55:36:f3:c0:11:7f:af:1a:d2:e8:c1:83:7f:
                    42:89:76:61:ce:4b:12:15:3a:2d:30:0a:1f:bc:c4:
                    5a:b7:1f:f6:47:5a:f3:15:cf:9b:e8:85:55:2c:14:
                    c6:7d:81:77:3a:38:c7:bb:02:42:3a:f8:ec:a2:1b:
                    dd:96:07:1d:81:2d:c7:78:ba:c4:65:bc:02:bf:7e:
                    86:1a:d3:87:37:1c:55:fa:8e:14:c5:c6:5f:78:4a:
                    dc:fd:8c:8d:69:12:95:c1:c4:30:aa:1f:b6:ac:28:
                    29:5e:5c:7d:a4:7b:c7:ec:80:a6:6f:08:14:52:4d:
                    1f:c4:87:d6:4b:6c:f8:52:02:1d:94:13:dc:72:3a:
                    56:e7:9b:3b:ad:9c:92:62:d9:69:33:0e:aa:57:79:
                    0f:97:00:75:c0:27:10:11:15:ef:c1:7d:44:b7:f7:
                    f9:90:a9:e6:c0:97:66:d2:70:6a:de:90:08:f5:ff:
                    1e:a6:02:4c:59:51:08:ea:a1:05:ef:8e:cc:ab:83:
                    a5:b4:85:f7:e4:fc:ea:d3:a3:aa:57:9f:e4:9d:e3:
                    f4:cd:54:b1:9e:ea:97:48:af:50:90:b4:75:0d:66:
                    5d:b8:92:b4:d1:16:9e:43:c0:fe:95:df:d4:62:fe:
                    90:42:a1:2a:d1:92:15:83:cc:2a:28:c5:65:70:e6:
                    47:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DA:12:D4:CE:4E:C5:A7:04:B5:58:2E:55:6F:24:0C:EB:02:FB:0E
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/R9oS1M5OxacEtVguVW8kDOsC-w4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.250.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         75:b1:b2:d3:b1:f0:c3:13:5e:d3:88:ea:e1:92:6c:34:c4:0d:
         cd:55:0c:21:e9:07:42:fe:86:2a:25:49:00:dc:d1:12:e6:85:
         8b:ab:31:53:70:26:7a:14:4c:f4:d8:d6:17:2e:4d:85:c0:fc:
         65:be:b4:bf:78:2b:e7:48:fa:81:2e:3a:81:56:f8:72:ff:2f:
         fa:0b:42:06:a7:38:03:e9:2d:87:69:99:3b:5e:5e:ad:4c:90:
         a2:6c:10:a4:c0:d7:e6:07:f4:3b:6d:48:87:fd:08:c2:fc:98:
         b7:0b:5d:ee:eb:b4:96:40:80:b1:bb:5c:fb:67:3f:f7:8b:bd:
         6e:11:51:6b:16:28:95:68:7d:9f:4b:ad:0e:a2:f6:78:fc:47:
         e9:8a:f6:71:56:c9:69:2c:d2:98:6d:73:32:cb:77:1a:e5:2c:
         9f:01:41:da:6a:05:00:b2:71:10:81:ba:06:76:36:bf:a4:be:
         f0:50:f9:fd:f9:c9:2e:8b:cf:e2:75:48:70:cb:94:5d:eb:23:
         25:fc:79:5b:39:b3:1b:1a:70:09:4d:4f:c6:83:12:bb:6c:30:
         33:86:36:ae:49:2b:04:e8:1d:38:54:6a:71:3c:7a:c9:46:00:
         35:bb:94:c3:c3:ca:69:58:8f:9e:c8:bc:26:28:b2:6d:4e:13:
         bb:dc:7c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:49 2025 by rpki-client