Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/X-b2wBMPiMbHz0_zIsqiVyWCMHI.roa
File:                     X-b2wBMPiMbHz0_zIsqiVyWCMHI.roa (raw, json)
Hash identifier:          A5v6M1qQrbgKNOnY4d7xwwfhUnVCxteSlevAjVgbSDQ=
Subject key identifier:   5F:E6:F6:C0:13:0F:88:C6:C7:CF:4F:F3:22:CA:A2:57:25:82:30:72
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       C8
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/X-b2wBMPiMbHz0_zIsqiVyWCMHI.roa
Signing time:             Sun 01 Jan 2023 01:29:35 +0000
ROA not before:           Sun 01 Jan 2023 01:29:35 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     2527
IP address blocks:        110.66.0.0/15 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Jan  1 01:29:35 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=5FE6F6C0130F88C6C7CF4FF322CAA25725823072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:aa:5b:96:ae:6a:15:98:b4:b1:11:d0:6e:59:
                    fc:80:ca:f0:82:c3:4a:d5:03:eb:53:f1:eb:f9:b2:
                    11:92:d4:f7:38:93:c6:eb:c2:da:4c:52:56:83:f1:
                    dc:d9:41:44:f9:83:0f:f4:1c:1a:d5:60:e0:18:8a:
                    63:1a:00:8c:d6:a1:94:98:ec:f9:a7:cc:dc:99:2e:
                    9c:d1:2c:bd:5a:51:db:98:97:e9:da:cd:53:28:3d:
                    dc:3f:99:dd:cc:87:58:98:19:1c:05:1a:58:11:42:
                    0b:d7:ac:56:87:2e:ef:70:e8:e1:71:66:97:1a:21:
                    47:08:16:21:63:a6:89:4a:ff:08:20:4e:f7:10:bd:
                    2d:d0:88:6a:d8:b6:25:61:4d:b7:d0:b0:6a:9d:0b:
                    5d:16:e9:92:9e:8c:2d:6f:0d:0d:f6:2d:81:bf:5e:
                    75:96:02:6a:a7:d3:1c:0f:87:4e:4b:46:64:d8:4d:
                    32:aa:9a:b7:de:fa:82:29:64:41:8e:fd:69:84:7b:
                    6d:1e:34:f7:ad:46:0a:1e:3a:89:42:95:22:88:73:
                    4b:c0:93:bf:36:65:ac:35:07:e4:ca:cf:13:64:54:
                    2d:8a:49:58:fe:56:59:c2:cf:8b:02:fe:dd:41:d2:
                    de:19:50:94:39:1b:5b:49:46:d9:e0:f2:d3:8b:8e:
                    25:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E6:F6:C0:13:0F:88:C6:C7:CF:4F:F3:22:CA:A2:57:25:82:30:72
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/X-b2wBMPiMbHz0_zIsqiVyWCMHI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.66.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         3f:d2:63:b1:b7:7d:35:2d:eb:1f:94:cd:96:a4:d4:9d:79:9d:
         36:08:f5:c6:48:e9:e5:43:4c:4f:b0:d8:93:b0:0e:8f:a6:a9:
         76:fa:73:99:e7:95:47:0b:f5:42:06:00:ae:31:b7:10:ba:58:
         fa:a0:5d:03:00:71:f8:66:ba:93:f7:da:69:07:95:74:b7:f4:
         ad:04:df:1c:9f:7e:7c:9d:cf:a1:ac:dc:8f:50:8e:ea:46:8a:
         46:1d:3e:3a:60:49:80:5f:3d:77:9a:04:b5:ba:6f:15:5b:7a:
         bd:06:61:d4:fd:23:50:7a:e5:9c:33:9e:d2:27:e4:5f:f5:57:
         8f:9b:22:69:60:26:81:aa:2b:ca:5f:0b:5b:f5:c6:a3:12:ae:
         15:6b:88:94:a8:52:10:c3:56:ef:82:a7:44:c3:54:0b:0e:7e:
         6a:b7:9a:fb:8f:56:b0:1a:1f:cc:3c:a9:29:16:16:75:cc:47:
         bf:0c:b9:9f:74:d2:25:1d:08:47:90:c0:7c:c0:3c:58:63:83:
         90:d4:8e:f5:0f:a9:46:57:09:38:14:36:d9:d3:1a:d6:a5:9e:
         39:05:e9:96:51:16:7b:de:3c:7a:7b:4c:4d:d0:9b:29:4e:67:
         44:00:59:db:91:59:c9:42:5f:0a:63:48:78:e8:ed:38:08:d4:
         b4:5c:b0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:41:59 2025 by rpki-client