Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/5MV9mFx-2f_4dTeqKSM1wr_CBB4.roa
File:                     5MV9mFx-2f_4dTeqKSM1wr_CBB4.roa (raw, json)
Hash identifier:          Skp3uc5SRKa4l8+8pZ3XBVRZhos4L3PdLT8v8K2zgvA=
Subject key identifier:   E4:C5:7D:98:5C:7E:D9:FF:F8:75:37:AA:29:23:35:C2:BF:C2:04:1E
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       29
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5MV9mFx-2f_4dTeqKSM1wr_CBB4.roa
Signing time:             Wed 01 Feb 2023 01:30:26 +0000
ROA not before:           Wed 01 Feb 2023 01:30:26 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     17676
IP address blocks:        61.200.0.0/18 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Feb  1 01:30:26 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=E4C57D985C7ED9FFF87537AA292335C2BFC2041E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4e:20:ce:70:4b:e9:20:65:3c:be:64:71:d6:
                    d5:1e:32:af:32:86:e4:18:9b:e0:1e:08:2b:3a:4f:
                    ea:7e:2b:d8:28:5e:0e:b7:cd:0c:7b:a9:46:63:c6:
                    71:6a:52:6f:26:65:67:22:2f:b0:32:59:ef:4c:27:
                    44:60:cb:5c:8e:00:5b:c8:ab:60:b6:22:88:36:0b:
                    26:f2:18:eb:8c:82:0f:54:64:0d:4d:82:d3:4f:a5:
                    f8:57:2d:db:7c:22:8a:d9:57:d5:92:9b:25:0f:61:
                    1f:12:47:c2:8b:be:5f:f5:9c:cc:44:37:c3:2f:b3:
                    9f:e5:fc:b8:ec:18:84:33:34:00:9b:04:2a:ba:b4:
                    41:ab:5f:1b:76:57:ef:1c:04:87:00:65:a8:ab:56:
                    46:72:0b:4a:c8:ca:e5:b5:c3:3a:09:b6:68:ea:8b:
                    8b:c1:47:9d:80:ab:f0:35:88:34:62:97:19:f7:e9:
                    a0:e2:9b:f9:64:7c:53:d1:5f:e9:a9:bd:70:b2:fb:
                    05:70:13:65:1d:3e:45:ee:13:c4:43:02:d3:38:35:
                    7d:c1:a0:87:5d:39:60:08:37:c7:81:ae:33:09:ea:
                    12:0f:f5:39:87:3a:88:57:8a:4b:98:b8:7c:5b:a5:
                    16:c8:eb:59:07:2f:42:28:b2:62:e0:f3:39:1f:1d:
                    79:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C5:7D:98:5C:7E:D9:FF:F8:75:37:AA:29:23:35:C2:BF:C2:04:1E
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5MV9mFx-2f_4dTeqKSM1wr_CBB4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.200.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         bd:09:b1:3d:7e:ed:b0:fe:35:e1:f2:18:1f:aa:d6:aa:fe:e0:
         81:c4:9f:b9:f7:48:17:ee:d6:b7:05:b1:43:f0:50:2b:45:f6:
         73:1a:13:07:be:43:f0:bc:9e:4b:a7:82:56:4c:d4:8a:69:fe:
         74:fa:36:66:2c:ae:35:72:86:74:08:d7:ce:3c:dd:01:50:e1:
         8e:e1:e0:c1:52:29:ba:88:9c:55:3d:49:9c:38:2a:3d:da:55:
         62:63:1b:a7:16:97:99:e9:ba:19:82:e9:c2:3f:2b:63:96:65:
         ed:1a:69:8b:25:19:51:b6:c3:e4:83:5b:a6:65:e3:2f:95:f6:
         ec:85:66:de:e7:45:a3:0d:8a:b7:b3:52:4c:67:83:51:48:6d:
         9b:88:57:50:13:3e:da:8b:6f:c8:44:98:6f:52:30:dc:2c:f8:
         70:0b:ed:af:f8:b8:7a:64:63:6f:ab:7e:e3:a3:13:75:41:6c:
         c8:f4:13:0e:e2:63:98:bc:f1:29:80:af:74:4c:91:66:37:8a:
         2f:09:d0:62:5e:df:8f:39:1b:ac:2e:79:5b:f6:9b:d3:1f:fa:
         25:8f:74:ff:1f:2d:33:95:7f:00:36:d2:d8:4c:ed:34:c2:66:
         11:fb:0f:39:fd:ac:94:74:78:16:03:55:0d:c7:ee:10:e8:b7:
         0e:78:ef:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:32 2025 by rpki-client