Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/cuMIPE5lpp_iRq-ESQShsjB3OvY.roa
File:                     cuMIPE5lpp_iRq-ESQShsjB3OvY.roa (raw, json)
Hash identifier:          rPjY3W77S0c4/CxHGdDLjGhF4HguUqIA+Iygdy2WnZc=
Subject key identifier:   72:E3:08:3C:4E:65:A6:9F:E2:46:AF:84:49:04:A1:B2:30:77:3A:F6
Certificate issuer:       /CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
Certificate serial:       39
Authority key identifier: 1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/cuMIPE5lpp_iRq-ESQShsjB3OvY.roa
Signing time:             Fri 02 Jun 2023 04:19:40 +0000
ROA not before:           Fri 02 Jun 2023 04:19:40 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     59125
IP address blocks:        1.21.128.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
        Validity
            Not Before: Jun  2 04:19:40 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=72E3083C4E65A69FE246AF844904A1B230773AF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:40:6d:81:c9:80:16:11:30:f2:ff:d5:36:37:
                    d2:76:4e:1e:3f:be:51:18:02:c6:c5:ca:ea:aa:bb:
                    58:0a:62:6b:8e:c5:cd:72:03:1a:b6:c6:f4:38:91:
                    ff:af:0e:1b:5b:b8:2a:3a:cf:27:9c:de:9b:fe:fd:
                    b3:47:3a:0a:2f:f9:1d:37:5b:46:ce:23:24:f9:77:
                    4a:33:9b:f9:80:50:49:87:af:66:ab:6f:46:35:87:
                    e1:68:99:f4:d8:fe:fc:78:7f:62:48:17:f0:26:c2:
                    e0:9c:a1:d8:0d:1e:fa:3e:5a:bb:89:be:7d:0e:02:
                    97:7a:32:b4:c4:05:60:07:a4:16:22:f8:0b:ea:62:
                    3a:21:e1:3f:03:43:d8:46:bf:76:37:1c:3f:d8:ef:
                    5c:6c:d6:91:7d:02:88:8b:ea:52:7c:39:3a:b0:44:
                    2d:ff:d9:a9:62:7d:5d:ef:29:0c:23:cf:0a:35:67:
                    f5:4d:55:ad:c3:0e:15:84:6d:2b:95:eb:eb:d2:12:
                    c6:49:02:c6:e1:04:90:f8:2e:71:3a:61:16:de:5e:
                    2b:bc:c7:cd:23:22:00:81:9c:e1:31:1c:47:83:e2:
                    90:86:f5:f4:b9:2c:01:5b:79:b6:12:8b:ab:40:63:
                    66:52:04:1d:58:a1:f2:60:f9:64:a8:25:7a:2c:4c:
                    e9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E3:08:3C:4E:65:A6:9F:E2:46:AF:84:49:04:A1:B2:30:77:3A:F6
            X509v3 Authority Key Identifier:
                keyid:1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/cuMIPE5lpp_iRq-ESQShsjB3OvY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.21.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:08:be:f3:41:45:a2:e9:79:84:75:85:a8:e7:34:6b:64:52:
         72:da:5d:3c:5d:40:19:98:0e:88:9c:3c:8d:f4:c3:8a:26:1f:
         0d:d0:96:41:b3:6f:ff:e3:aa:26:7e:e4:9f:89:c5:e6:df:e1:
         c1:93:86:05:de:88:e7:03:6b:79:d2:de:2a:b2:f3:94:0d:d3:
         0b:9f:02:20:a0:85:3c:4e:c8:f0:36:c9:93:e9:f1:5f:71:ff:
         95:d0:a5:a3:f6:77:e7:7f:06:03:17:f7:0d:57:33:f3:3e:b7:
         ab:b9:7d:f6:0e:5a:c0:44:ef:f3:de:ca:09:2b:4c:13:47:ee:
         64:1e:22:23:73:e6:a1:5f:1e:58:05:32:d9:d0:9a:be:1f:50:
         84:36:fa:a4:0f:78:29:f6:63:d3:c2:8a:6f:5c:08:69:43:c8:
         10:19:89:b2:dc:30:a3:36:ec:57:1b:2e:a0:9b:e1:27:de:d3:
         df:31:83:f3:42:f7:15:20:52:a4:f5:6e:2e:61:d1:e6:15:fa:
         92:86:4a:60:7f:b8:69:b4:40:b5:af:dd:70:b3:78:e1:5d:55:
         42:03:c0:fc:f4:61:9d:c9:0c:d1:69:0d:c8:b3:16:d4:13:66:
         4c:3b:1f:4a:1b:cc:e0:b2:6a:13:ac:52:26:79:4f:cf:47:24:
         b8:4f:34:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:04 2025 by rpki-client