Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/8H9p-maegDx07g-wCkD4Gl3ig9o.roa
File:                     8H9p-maegDx07g-wCkD4Gl3ig9o.roa (raw, json)
Hash identifier:          pFGm+gKlAtN1L2ePQPgY63ukauciQ6frf+WFiCVeI2c=
Subject key identifier:   F0:7F:69:FA:66:9E:80:3C:74:EE:0F:B0:0A:40:F8:1A:5D:E2:83:DA
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       E4
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/8H9p-maegDx07g-wCkD4Gl3ig9o.roa
Signing time:             Mon 31 Oct 2022 02:16:09 +0000
ROA not before:           Mon 31 Oct 2022 02:16:09 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9617
IP address blocks:        219.115.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 31 02:16:09 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=F07F69FA669E803C74EE0FB00A40F81A5DE283DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:40:99:78:cb:74:cb:21:bb:69:28:07:a0:8e:
                    d3:37:84:96:de:59:88:05:f6:bf:6e:14:63:22:ea:
                    50:de:60:53:68:c3:23:72:c9:98:7d:c7:82:d1:01:
                    21:2d:f3:54:a5:2c:dd:eb:18:19:76:cb:1d:1a:59:
                    ea:79:01:17:9a:ef:98:3e:2a:d8:68:db:1d:6d:f3:
                    3b:81:75:cd:34:8b:ae:18:49:f8:4a:98:32:64:38:
                    20:58:3a:46:59:5a:bf:de:00:43:93:9d:e6:94:95:
                    b0:15:8c:ec:a6:b8:6d:96:b7:36:ae:cc:28:29:91:
                    09:09:53:c8:36:ce:f7:a0:90:ab:87:28:a5:e8:22:
                    4f:09:63:ba:8f:ea:c5:b2:fe:f2:41:86:a9:e1:58:
                    60:d5:31:8b:80:ec:de:02:75:06:d0:11:01:23:ac:
                    f1:2e:b6:3b:de:e3:bf:a5:ec:65:ca:9e:1c:a4:c6:
                    84:00:e7:fb:65:06:cb:e3:a2:63:09:7f:a9:cb:11:
                    b7:f7:5e:75:19:d9:3c:d7:ec:2a:50:62:3c:3d:40:
                    11:d9:bf:66:25:48:2b:40:bb:d4:18:1d:f7:56:12:
                    df:19:d7:eb:4a:27:8c:03:6b:ff:cb:eb:f7:f6:45:
                    69:2d:60:e1:dd:60:f5:e1:1b:5a:02:b4:f3:83:1d:
                    77:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:7F:69:FA:66:9E:80:3C:74:EE:0F:B0:0A:40:F8:1A:5D:E2:83:DA
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/8H9p-maegDx07g-wCkD4Gl3ig9o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.115.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         57:ca:ee:43:6c:18:02:92:6c:33:7b:78:4f:06:65:62:9d:35:
         58:a6:9c:d1:62:c9:31:00:41:5c:98:eb:79:e2:74:53:dd:dd:
         f5:81:e1:de:e0:4d:02:43:8c:36:16:bf:ea:44:fc:e7:ea:ac:
         64:29:7b:f1:58:32:38:3d:1a:34:17:d6:0b:39:eb:62:82:f0:
         17:48:b6:d0:3d:4a:59:6d:de:ec:3e:1f:07:3a:97:13:9d:96:
         9f:2b:4a:38:89:f1:51:b7:10:75:a1:71:aa:59:0d:08:64:bc:
         d8:72:f7:97:2a:a9:2e:7b:b0:b3:8c:e3:f7:b8:1a:dd:82:4b:
         7a:b2:3f:37:6f:d4:15:d2:42:79:e3:45:c5:e7:b0:4f:cf:af:
         2e:c6:8f:87:35:95:1b:3e:f7:f1:4d:1c:95:83:2f:fe:96:42:
         c7:49:a9:9a:b9:2b:c1:08:56:5e:2a:09:9d:29:3e:a6:bb:c5:
         ea:06:98:e9:86:aa:88:88:a5:fa:db:75:46:76:52:07:62:b6:
         31:4c:86:6e:07:ab:44:a3:ec:de:b3:95:8b:d7:3d:11:ab:77:
         ee:fe:f8:38:0e:b0:70:3c:52:ec:b1:c2:4a:49:8e:16:1e:91:
         37:99:69:6e:6d:27:0e:64:c5:a3:9c:3d:d2:e4:43:8b:08:c5:
         4f:f1:b1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:25 2025 by rpki-client