Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/owBIW36Sd_dLYrjlzQ7cV6BwQTo.roa
File:                     owBIW36Sd_dLYrjlzQ7cV6BwQTo.roa (raw, json)
Hash identifier:          NPvhLpZOUsrZ9w4aSi+RTHt2lr3kSW3Stz8AUn458qg=
Subject key identifier:   A3:00:48:5B:7E:92:77:F7:4B:62:B8:E5:CD:0E:DC:57:A0:70:41:3A
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       D9
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/owBIW36Sd_dLYrjlzQ7cV6BwQTo.roa
Signing time:             Mon 31 Oct 2022 02:00:07 +0000
ROA not before:           Mon 31 Oct 2022 02:00:07 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     9617
IP address blocks:        125.4.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct 31 02:00:07 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=A300485B7E9277F74B62B8E5CD0EDC57A070413A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fd:26:2f:cc:ec:ca:7e:28:b5:08:24:06:ab:
                    df:29:86:75:42:58:73:f7:ec:0b:63:eb:a6:b1:27:
                    4a:62:90:8a:28:6d:fc:33:16:9d:fa:a7:4d:cb:28:
                    23:83:62:39:e8:e9:86:39:2f:01:b5:6c:32:3c:69:
                    7e:f4:62:16:4d:43:0f:55:8b:56:4c:45:98:34:bb:
                    9c:9d:b4:a2:f3:14:f5:97:e9:fe:a9:e5:dc:a4:de:
                    d9:b2:d5:f0:62:89:b9:44:4d:97:af:0e:ca:a3:82:
                    4d:e9:2f:fa:0b:16:34:b6:74:03:be:7b:1c:01:00:
                    8c:fa:b2:6d:43:4b:45:8b:03:9c:86:b4:a0:10:4c:
                    27:14:2d:f4:54:b0:5c:d8:c5:5d:64:e0:d0:9d:46:
                    45:6a:cb:64:10:4b:8d:5f:ed:3a:a0:59:80:be:14:
                    bd:1e:30:c3:c7:49:68:2e:b7:0d:e4:0e:da:c7:58:
                    84:44:23:82:89:8e:e1:47:18:f4:bc:85:f7:76:66:
                    1c:e1:50:30:1d:91:f7:0f:9d:5d:90:d5:dd:f2:70:
                    88:83:e1:dc:47:70:65:01:d5:a4:88:d8:5b:e1:0e:
                    cf:e6:e5:07:b1:af:a8:45:ec:6e:54:7f:3e:cf:f0:
                    00:4a:38:b1:88:a6:96:ef:2b:0e:5b:86:91:7f:96:
                    92:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:00:48:5B:7E:92:77:F7:4B:62:B8:E5:CD:0E:DC:57:A0:70:41:3A
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/owBIW36Sd_dLYrjlzQ7cV6BwQTo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.4.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9f:c3:3d:43:41:8c:54:cf:b8:7f:5d:81:3d:4c:e1:99:52:6e:
         b5:a6:1a:4f:06:4d:6c:3b:13:d7:2f:5a:ac:62:02:ac:27:22:
         2a:dd:20:36:6f:8a:ba:64:44:88:67:a2:5f:a5:da:60:f5:64:
         53:7d:b7:b1:62:f1:d8:7e:6d:62:56:21:24:31:c6:60:73:8c:
         6f:7f:c3:b0:54:3d:ca:77:c3:93:68:b4:ee:24:26:3f:8c:aa:
         19:2e:d7:d9:b5:97:8b:94:a9:7b:20:9b:53:63:d9:72:87:44:
         26:28:ee:bd:d8:a7:fc:75:e4:a3:2d:3d:3b:61:0c:e8:d5:50:
         52:09:db:d1:f5:2c:a1:0d:93:02:1a:1d:3e:0f:62:b7:c5:fb:
         24:bf:bb:b8:a4:e3:fe:ee:ea:0c:13:9a:a5:8f:ce:24:b7:c9:
         c5:9a:c9:ec:d7:38:1e:dd:09:e8:74:04:27:d7:fa:c9:99:f9:
         d5:e2:77:81:12:30:60:e7:db:12:71:22:a0:9e:db:b4:fd:79:
         5a:c8:ea:8f:67:4e:0e:09:98:22:3c:06:2d:83:0d:6c:67:8b:
         d4:29:52:de:37:ad:16:13:a6:b6:13:0a:cb:0c:63:f8:26:ae:
         81:0f:91:76:d6:9a:21:06:7a:05:bd:1f:81:17:a6:eb:6c:89:
         52:17:c6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:03 2025 by rpki-client