Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/v-X8jd8m_hWFDc-ZaaW4pBvDzlI.roa
File:                     v-X8jd8m_hWFDc-ZaaW4pBvDzlI.roa (raw, json)
Hash identifier:          8ItH055qMCzMmmMe60+T9q07In4BguXiF/HCsLUNi2M=
Subject key identifier:   BF:E5:FC:8D:DF:26:FE:15:85:0D:CF:99:69:A5:B8:A4:1B:C3:CE:52
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       DA
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/v-X8jd8m_hWFDc-ZaaW4pBvDzlI.roa
Signing time:             Sun 01 Jan 2023 01:31:01 +0000
ROA not before:           Sun 01 Jan 2023 01:31:01 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     2527
IP address blocks:        218.41.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Jan  1 01:31:01 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=BFE5FC8DDF26FE15850DCF9969A5B8A41BC3CE52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2a:bd:8c:99:38:d7:d2:54:02:a7:bf:33:aa:
                    76:8e:85:d9:7e:98:34:1a:06:da:e4:0e:f6:98:19:
                    ee:ad:ba:d4:6d:2d:85:30:c4:b1:cc:b6:b3:74:4e:
                    1c:ef:67:32:57:41:32:44:1a:61:4a:48:bd:1c:2e:
                    49:9e:16:8b:b2:da:99:ec:7e:53:2a:a4:02:c7:8e:
                    a5:38:9e:8e:f9:4b:29:7f:b1:18:14:cd:f4:79:7b:
                    d1:e5:eb:12:39:af:d7:bb:72:5d:25:71:b0:cd:d8:
                    43:97:72:0f:2e:2e:ae:8f:bb:74:8b:d0:47:ae:fe:
                    4d:93:7c:91:2a:0e:4e:26:74:4e:51:60:8c:d3:30:
                    7e:11:33:4f:c5:ac:2e:f1:07:14:29:e1:d9:c7:3f:
                    a4:fa:3d:f0:e3:d9:0e:c5:0f:bb:a0:fa:1a:4a:99:
                    aa:27:3e:8f:e4:6d:a8:a9:93:47:19:90:5c:2c:d9:
                    b4:ac:0b:fc:56:62:90:ac:e7:a2:59:60:c0:30:0c:
                    ac:ca:da:f5:b2:e1:27:b4:7f:86:31:d8:5d:5a:78:
                    31:63:f2:88:16:e7:8c:4f:d6:c9:bc:7b:27:43:ff:
                    e9:bb:55:2c:21:6d:45:0d:ab:b8:40:3f:db:2c:b3:
                    31:86:b3:2c:87:1c:75:f6:16:ce:6c:4f:64:8a:fc:
                    28:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E5:FC:8D:DF:26:FE:15:85:0D:CF:99:69:A5:B8:A4:1B:C3:CE:52
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/v-X8jd8m_hWFDc-ZaaW4pBvDzlI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.41.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         42:3e:15:50:a2:d5:e2:3f:1f:00:24:42:f8:1f:c7:ac:a2:c4:
         e0:fd:dd:37:0a:97:87:6e:42:cb:18:d5:71:4c:d7:73:5c:a7:
         b3:42:7c:21:a4:d4:0c:93:e1:81:fd:d2:bb:04:dc:57:7a:f1:
         f5:4f:09:52:3c:57:7c:1c:9c:fa:4d:a9:df:77:04:c0:2a:ce:
         65:38:d8:6c:5e:20:ab:7c:48:1e:47:c2:cc:59:0f:6a:ee:79:
         97:43:c6:71:cc:94:68:a9:54:52:69:1a:ed:2d:bc:5b:ff:29:
         cb:d9:8c:6b:09:c7:a2:11:09:58:9e:b5:bb:87:77:a2:77:1d:
         89:4d:8a:04:e4:7f:17:fc:73:5c:44:50:d5:e0:31:ac:ab:73:
         51:48:48:09:01:9a:fa:ab:9e:b7:86:f9:5f:25:69:ab:97:f3:
         12:e7:a3:e0:5c:b1:a2:4c:5a:00:3b:f5:af:0c:b0:eb:e3:a8:
         65:28:5a:f9:1f:ed:f4:33:d6:51:96:28:44:24:33:15:16:4c:
         09:e1:94:a2:e7:f4:39:2b:0b:95:08:c3:f6:92:e0:0a:3d:ae:
         45:4c:91:c8:21:3a:42:b4:ab:e3:3d:65:f7:cc:70:cb:f3:59:
         7c:bc:ba:8c:69:f7:d5:ed:af:72:a8:3d:5d:76:d4:1c:a3:9a:
         5f:64:fc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:06 2025 by rpki-client