Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/EuQXpvCI0hrYw24NPmIHw9lUBlg.roa
File:                     EuQXpvCI0hrYw24NPmIHw9lUBlg.roa (raw, json)
Hash identifier:          cqF2PpJNXzwCPYRBz6yILFvOV9tf0MLWHpVdlw7CFB8=
Subject key identifier:   12:E4:17:A6:F0:88:D2:1A:D8:C3:6E:0D:3E:62:07:C3:D9:54:06:58
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       B0
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/EuQXpvCI0hrYw24NPmIHw9lUBlg.roa
Signing time:             Tue 01 Nov 2022 01:28:11 +0000
ROA not before:           Tue 01 Nov 2022 01:28:11 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     8220
IP address blocks:        202.95.218.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Nov  1 01:28:11 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=12E417A6F088D21AD8C36E0D3E6207C3D9540658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b6:3e:73:8b:42:f9:0f:19:8e:38:67:f1:e2:
                    ff:4b:9d:b3:e9:1c:40:f5:05:8b:6d:5d:98:fb:53:
                    0a:3c:5d:53:b0:de:7c:c1:aa:13:af:d4:7a:3a:18:
                    7f:4d:2a:10:d9:50:21:1d:3d:aa:97:2b:d8:dc:31:
                    d2:b4:93:a4:97:2e:2e:aa:e2:a6:58:5b:eb:08:3d:
                    e5:dc:c7:e0:93:ff:a9:d0:d4:5d:56:c0:f7:c0:7d:
                    ea:5d:03:cf:cc:5b:46:66:c9:09:8f:56:44:87:48:
                    b0:96:62:7b:19:36:e1:a4:e2:ff:9d:8a:2a:83:42:
                    0f:0c:c7:29:aa:b1:28:83:64:63:a0:2c:f2:c9:1f:
                    33:c2:15:a2:12:e5:ad:22:8b:76:e8:4c:39:06:4e:
                    cd:b1:d2:c7:2d:88:57:3d:1d:7a:14:47:47:98:c1:
                    9f:73:98:29:d7:83:be:f4:7b:6d:6c:7e:9c:6e:69:
                    5d:1f:83:84:1c:0f:d6:0b:5b:c7:dc:c1:15:56:19:
                    77:f5:9d:09:8a:f2:4b:c7:b9:e4:7e:6e:04:01:e5:
                    74:58:a1:c1:0e:49:0c:c7:99:d2:32:bc:57:34:7f:
                    4d:58:21:04:07:59:5d:37:55:38:be:9c:54:7b:44:
                    87:78:a1:60:a1:ac:c1:f2:de:58:f1:4a:41:11:71:
                    29:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E4:17:A6:F0:88:D2:1A:D8:C3:6E:0D:3E:62:07:C3:D9:54:06:58
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/EuQXpvCI0hrYw24NPmIHw9lUBlg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.95.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:8d:9a:9b:85:1c:ab:7e:fe:06:33:cf:36:b7:8c:a5:52:13:
         a2:c7:63:05:31:2f:68:33:09:6b:64:c6:df:19:a1:0c:ef:0b:
         cd:af:88:64:b6:0b:a4:8f:ce:57:47:b2:7e:d8:35:c4:64:dc:
         83:f5:d4:59:94:10:38:8b:20:c5:41:de:38:22:ca:28:9f:3e:
         f7:03:a7:cb:17:18:0a:ac:31:1b:e2:ae:9e:ee:e4:f8:87:5c:
         0f:4d:24:7b:92:bf:16:b6:ef:2b:41:e0:49:fa:3f:ab:c3:86:
         b4:72:48:06:72:f8:56:5e:3b:04:9f:e4:fa:f8:56:9c:80:de:
         0f:32:48:da:de:25:c9:30:7e:8a:c2:f5:2b:34:c8:d9:8d:3f:
         ea:ee:e3:69:9a:71:a0:22:44:f9:63:fc:7a:84:e9:05:32:f7:
         66:55:b1:e7:1a:bc:f7:7c:50:1e:05:d4:21:bc:f9:4f:44:ec:
         b2:51:6b:1a:65:16:63:21:71:eb:40:ed:db:21:ca:46:9e:23:
         af:3b:6f:e1:48:f3:d6:46:87:d5:35:b4:44:9c:6e:0d:83:4b:
         c5:24:a3:8b:8b:47:95:73:18:45:ae:0a:f8:76:4f:1c:52:94:
         f0:73:98:88:36:0d:88:4e:b1:9d:a4:f4:48:9b:c3:ed:cc:19:
         70:93:9d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:15 2025 by rpki-client