Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/R2kLsVtJ9CmR7Bu6mjD7bJvhHH4.roa
File:                     R2kLsVtJ9CmR7Bu6mjD7bJvhHH4.roa (raw, json)
Hash identifier:          1hl+JABpIxK6TlkYsVxGwFRqLEayDmjUTKVF/0EH1Dc=
Subject key identifier:   47:69:0B:B1:5B:49:F4:29:91:EC:1B:BA:9A:30:FB:6C:9B:E1:1C:7E
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       36
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/R2kLsVtJ9CmR7Bu6mjD7bJvhHH4.roa
Signing time:             Mon 01 May 2023 01:29:05 +0000
ROA not before:           Mon 01 May 2023 01:29:05 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     131934
IP address blocks:        61.245.208.0/20 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: May  1 01:29:05 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=47690BB15B49F42991EC1BBA9A30FB6C9BE11C7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ea:9f:31:d1:0c:21:ce:28:d0:16:46:fc:ec:
                    37:27:72:20:fe:52:df:7f:15:97:7c:ba:e1:0a:30:
                    9d:34:ac:d1:2e:7b:a6:ff:91:aa:55:10:c4:2d:11:
                    3a:99:43:5e:ce:d0:09:09:c2:42:9c:29:06:78:33:
                    90:1d:b9:bc:52:c7:7d:99:3d:9c:53:f6:10:e7:3b:
                    b4:49:10:85:06:c1:74:1b:3c:49:c4:18:08:d3:06:
                    dd:f2:f9:50:d5:eb:34:f4:ad:37:99:a4:32:50:ef:
                    5b:2a:48:3f:20:65:3e:7b:22:fe:fb:29:66:25:63:
                    be:fa:2c:b5:8e:72:2b:57:b4:fe:3d:4f:28:04:3b:
                    bb:d2:8a:50:fc:ae:56:8f:7a:9a:57:ac:ed:22:4d:
                    50:a6:0a:63:83:1c:da:2a:16:d4:f9:c3:a2:8b:3d:
                    35:ab:7d:37:59:72:34:b3:c1:8d:8c:89:12:7c:c4:
                    aa:9f:30:f9:cd:63:2d:1f:e0:c0:e1:26:b2:9c:12:
                    38:cc:c7:d3:69:7e:20:ee:c1:3d:85:ce:09:53:aa:
                    74:01:11:b2:b3:1a:d4:e6:dc:fa:5f:44:ef:b9:f2:
                    7a:10:98:90:7e:8c:4b:29:55:f5:1b:bc:f3:a4:4f:
                    e6:4e:31:43:f6:fc:f1:8f:88:83:a8:7f:09:d1:2a:
                    84:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:69:0B:B1:5B:49:F4:29:91:EC:1B:BA:9A:30:FB:6C:9B:E1:1C:7E
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/R2kLsVtJ9CmR7Bu6mjD7bJvhHH4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.245.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8e:e4:c0:ba:db:0d:a7:35:ad:1d:aa:47:cc:34:37:ba:bb:82:
         dc:04:6e:9b:ae:af:dd:80:53:4b:20:cf:ef:4c:98:6b:c9:d6:
         d4:8d:75:55:54:ca:0d:ae:fd:96:61:11:e6:b8:f8:de:b1:e0:
         88:60:cb:89:d2:ea:8d:43:00:64:7c:d4:5a:de:50:40:ba:d1:
         0f:1c:08:3e:a3:12:d0:16:87:4f:1d:60:cb:ca:2c:08:7a:27:
         9c:2f:d2:d5:ba:4b:77:9f:fd:f2:84:5c:43:bc:44:60:6c:5d:
         73:d4:0b:ee:7d:13:4d:00:58:44:a6:b4:06:5d:8d:79:84:78:
         b1:71:a1:e5:28:0f:5f:5e:d5:fa:c5:22:c9:11:f5:f0:0c:0f:
         c6:7f:90:ae:1f:c3:db:a9:56:d4:12:c8:68:d2:39:7d:ae:5b:
         e0:b8:e6:28:70:89:17:13:ec:a5:6f:a2:c9:98:0b:73:27:96:
         ed:d0:78:f8:61:4e:ce:ea:c1:21:1d:b1:7c:b0:cd:5f:cf:a2:
         83:e9:bd:4d:54:12:ba:38:10:71:a8:e3:9f:19:3d:a6:6e:fe:
         f2:80:27:87:38:e9:f5:9f:03:cd:aa:a7:7d:f7:e4:d6:24:fa:
         1c:5d:41:2b:c3:aa:66:2f:18:81:fb:db:ca:d3:7b:3d:44:ab:
         4f:ad:6c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:24 2025 by rpki-client