Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/TmdsY_rgWWxkN509hKQZuh2S64I.roa
File:                     TmdsY_rgWWxkN509hKQZuh2S64I.roa (raw, json)
Hash identifier:          9wpTQj0t8+C/GRJzJWiRv9epCBh8ttyo1XtHYaOFL38=
Subject key identifier:   4E:67:6C:63:FA:E0:59:6C:64:37:9D:3D:84:A4:19:BA:1D:92:EB:82
Certificate issuer:       /CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
Certificate serial:       38
Authority key identifier: 1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/TmdsY_rgWWxkN509hKQZuh2S64I.roa
Signing time:             Fri 02 Jun 2023 04:15:43 +0000
ROA not before:           Fri 02 Jun 2023 04:15:43 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     59125
IP address blocks:        1.21.96.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
        Validity
            Not Before: Jun  2 04:15:43 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=4E676C63FAE0596C64379D3D84A419BA1D92EB82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:66:52:a7:10:cd:2d:de:4f:24:15:f2:9b:43:
                    ee:3c:03:7b:e7:3f:eb:dd:f9:64:05:6b:99:98:94:
                    10:0f:91:62:95:62:31:5e:27:ad:a1:ad:9d:f7:05:
                    da:63:d7:7b:24:6f:68:d1:54:7a:8c:88:34:aa:c3:
                    3d:26:06:7f:61:c4:ff:9e:85:db:79:6e:81:22:e5:
                    13:1f:fc:b2:e3:23:7c:b0:df:42:16:74:07:9e:f5:
                    b1:ba:4b:b0:a3:db:cf:02:2e:2e:4e:ca:1f:c2:b2:
                    91:6c:44:fa:1c:92:ee:cc:c6:5f:08:30:6d:83:41:
                    61:3a:12:d6:ed:74:97:e0:84:ce:02:15:d8:0b:cd:
                    61:cc:16:27:9d:67:01:02:fd:6f:89:44:b2:ed:93:
                    9f:4d:ba:d6:89:8c:e0:11:25:50:83:5a:c5:3e:61:
                    64:eb:a6:50:05:7d:6b:cf:9e:f0:78:69:86:0b:e0:
                    a2:00:bf:10:df:2e:b3:21:25:46:58:20:7e:dc:87:
                    b8:3e:13:da:c2:58:05:e2:f7:ee:cb:ce:41:66:5e:
                    a7:11:4b:71:d2:d3:16:9b:ba:e6:5d:df:ac:09:cb:
                    85:41:eb:6d:c8:e6:bc:4b:9f:31:47:d6:d4:04:bd:
                    ea:1d:d6:95:63:1c:85:a5:bf:4a:95:14:31:d5:50:
                    a1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:67:6C:63:FA:E0:59:6C:64:37:9D:3D:84:A4:19:BA:1D:92:EB:82
            X509v3 Authority Key Identifier:
                keyid:1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/TmdsY_rgWWxkN509hKQZuh2S64I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.21.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         27:b6:88:44:c9:04:77:40:77:5f:eb:89:4a:24:fc:ed:33:93:
         1c:1e:a5:df:ce:bc:18:3e:90:65:ac:83:83:34:75:41:7b:1b:
         f2:f1:84:c3:58:23:8d:93:c3:5a:75:8a:e4:64:9f:5a:68:75:
         60:86:9c:fa:5f:bc:cd:a2:79:e9:9b:06:be:3a:89:ad:26:3e:
         ba:b5:d1:2f:32:b9:c5:c4:d1:77:c4:00:89:35:f5:82:36:c5:
         c7:01:fe:20:ea:fb:a5:19:96:c4:9b:5d:f0:85:20:6f:61:d6:
         c9:84:e3:57:78:2a:4a:7d:29:11:29:c0:47:39:3a:e8:c6:c2:
         f0:f7:f3:d5:cc:67:22:30:39:e9:59:0d:72:67:d8:12:57:f1:
         03:c8:55:ba:c0:5a:e5:e1:2b:7a:68:8a:29:d8:f1:8e:14:d9:
         00:81:66:88:5d:ab:fd:37:fa:9b:fe:17:a0:aa:12:c5:25:3f:
         3c:27:d5:6d:78:f8:0a:3b:a6:bf:f8:f4:4b:a8:f3:54:90:9b:
         3c:82:86:33:4e:0e:e5:cf:19:69:c8:06:91:0b:0d:18:da:82:
         e3:74:22:9f:8b:71:af:f7:1a:0f:86:f5:36:c4:08:8e:59:b7:
         a6:f8:73:a7:39:c3:f7:7f:40:56:ce:bb:8f:96:58:79:7f:d6:
         01:44:6b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:39 2025 by rpki-client