Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/554/6ikQ-F1V0AF74K6x9wm9EaU0kqY.roa
File:                     6ikQ-F1V0AF74K6x9wm9EaU0kqY.roa (raw, json)
Hash identifier:          qitYy1ffwrcH0GXvmfgggYaNTel6tWAVI9Q/DWO146g=
Subject key identifier:   EA:29:10:F8:5D:55:D0:01:7B:E0:AE:B1:F7:09:BD:11:A5:34:92:A6
Certificate issuer:       /CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
Certificate serial:       1A
Authority key identifier: 96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/6ikQ-F1V0AF74K6x9wm9EaU0kqY.roa
Signing time:             Thu 01 Sep 2022 01:29:01 +0000
ROA not before:           Thu 01 Sep 2022 01:29:01 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     131921
IP address blocks:        153.122.208.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
        Validity
            Not Before: Sep  1 01:29:01 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=EA2910F85D55D0017BE0AEB1F709BD11A53492A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:39:8a:6b:05:f3:75:69:31:ee:9d:05:4d:7a:
                    8d:a1:ee:d5:f4:4b:a2:54:6e:9e:77:90:33:e6:83:
                    f7:11:6b:31:b7:a5:d2:71:1a:0e:9d:f2:bb:84:63:
                    e1:1c:31:72:c3:4a:de:30:4a:06:e1:16:2f:77:d0:
                    7d:24:00:db:ca:68:36:3e:0e:00:3e:c9:59:32:58:
                    8b:34:a1:10:47:93:ec:1c:6b:d6:2b:62:2d:26:2a:
                    ed:9e:53:be:04:2f:bc:59:b0:68:db:5d:96:65:fb:
                    03:bf:88:7f:cd:5d:5c:82:72:e3:2c:ae:21:c5:da:
                    f8:65:8d:1f:45:61:76:70:6f:ae:d1:05:42:e0:54:
                    9c:29:0b:3c:19:f9:40:ae:b0:6c:a7:1d:8e:11:7d:
                    1f:99:b6:fd:08:6a:6a:23:ee:c5:30:7d:f4:6c:34:
                    be:5e:bd:1e:9e:be:7e:9a:e5:cb:0c:6d:9d:ae:b0:
                    57:d1:83:9b:21:8c:e5:53:12:c3:1f:17:05:3c:d9:
                    d8:6d:79:77:8c:4e:19:4a:05:ab:03:dc:52:d4:f3:
                    f0:33:4b:4d:4d:99:fb:66:8b:6c:c7:10:93:59:80:
                    80:86:a3:99:9c:3e:9c:57:7d:ee:25:fa:12:63:06:
                    4d:96:4e:df:dd:78:b3:19:be:7c:b0:ab:3b:7c:45:
                    c7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:29:10:F8:5D:55:D0:01:7B:E0:AE:B1:F7:09:BD:11:A5:34:92:A6
            X509v3 Authority Key Identifier:
                keyid:96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/6ikQ-F1V0AF74K6x9wm9EaU0kqY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.122.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1f:6d:7e:b2:e5:03:00:36:37:1e:b0:4f:f9:1a:12:fe:8b:21:
         c5:35:1a:e6:14:9c:88:d9:c9:52:27:6e:b9:27:9b:32:8e:dd:
         4c:43:32:10:16:fc:52:91:02:94:e3:ef:12:2b:ef:a2:5f:bd:
         98:79:72:97:fa:b3:62:ab:8e:b1:9a:d5:a6:71:4b:23:17:5a:
         a5:f1:d4:85:33:f5:aa:23:eb:b3:82:4f:ce:81:61:8e:cb:0b:
         64:0c:55:9e:99:41:58:de:a5:1b:5e:db:00:32:18:65:2b:87:
         c6:dc:06:b8:68:1f:2e:49:b1:f1:54:ab:05:de:af:d4:2d:6a:
         a2:b3:39:b0:ab:a3:5f:f6:65:17:9f:96:a2:e5:85:2c:31:4c:
         85:e9:cf:d7:22:47:09:e3:cd:b3:4c:dd:e8:7a:6a:a1:4d:ae:
         53:26:07:ab:2d:66:82:d5:3a:5e:d7:2a:bf:c2:47:6a:cf:f7:
         4e:7a:e1:9e:70:77:18:c9:c7:ce:2f:3e:ac:e2:2e:6f:25:ff:
         85:f9:d6:c1:7b:82:cc:34:d0:c3:17:4b:58:73:8d:4a:40:57:
         d5:ec:55:18:68:34:9a:71:91:73:ed:7c:14:c4:43:8c:2d:6a:
         ca:0a:82:ba:cb:f7:c8:ab:c2:18:69:17:c1:86:98:9a:85:75:
         37:39:39:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:08 2025 by rpki-client