Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/SzrJoj8BGLXB3sPNk4Vv_RACruY.roa
File:                     SzrJoj8BGLXB3sPNk4Vv_RACruY.roa (raw, json)
Hash identifier:          uPVZkEq+Ts3JhHyS9I92DA4cIr3alatkYZDB7WPfa9c=
Subject key identifier:   4B:3A:C9:A2:3F:01:18:B5:C1:DE:C3:CD:93:85:6F:FD:10:02:AE:E6
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       16
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/SzrJoj8BGLXB3sPNk4Vv_RACruY.roa
Signing time:             Thu 20 Oct 2022 06:26:24 +0000
ROA not before:           Thu 20 Oct 2022 06:26:24 +0000
ROA not after:            Fri 20 Oct 2023 06:07:19 +0000
asID:                     9374
IP address blocks:        218.216.144.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct 20 06:26:24 2022 GMT
            Not After : Oct 20 06:07:19 2023 GMT
        Subject: CN=4B3AC9A23F0118B5C1DEC3CD93856FFD1002AEE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:98:9a:5b:67:76:77:19:f2:05:64:c3:d5:af:
                    83:0b:1a:6e:e6:fe:90:9a:3e:3e:43:1e:3a:c0:d5:
                    1a:6b:99:33:8c:1f:02:33:46:a7:dd:26:49:21:8d:
                    19:7e:92:00:2e:7e:04:42:19:7d:5f:f1:13:32:e7:
                    bb:23:80:c5:ed:46:a6:96:91:69:57:35:5c:a3:7b:
                    51:2c:eb:dc:d8:fc:55:25:31:33:9c:c5:5c:fc:00:
                    0f:d6:23:21:bd:bb:51:fe:eb:b7:ed:1b:e1:73:b7:
                    c4:6b:c9:4d:2a:cd:d2:f7:c9:fc:dc:f5:c1:84:c0:
                    fb:c8:20:7c:ea:1b:09:82:53:c2:ee:7c:8f:eb:5c:
                    c9:83:42:0f:bd:9c:ac:e7:ed:d4:c4:2e:25:fd:f7:
                    6a:ab:a7:d2:46:94:d6:72:3a:b8:a3:9d:e6:d5:a4:
                    27:c1:bf:d5:c8:6f:37:31:39:a2:c1:45:f4:7e:ec:
                    17:8c:ad:d1:77:85:aa:69:b1:9f:88:4a:55:78:02:
                    70:dd:88:ec:7d:5b:5d:7b:b4:ed:e6:e5:67:3d:90:
                    5e:99:a3:b0:2f:28:ef:5e:e7:78:e1:1f:50:72:92:
                    19:c0:63:47:bb:6c:29:ee:f6:1e:e7:0a:dc:6b:f5:
                    4d:94:14:73:a3:a9:26:26:77:55:bd:c8:45:89:a8:
                    7d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3A:C9:A2:3F:01:18:B5:C1:DE:C3:CD:93:85:6F:FD:10:02:AE:E6
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/SzrJoj8BGLXB3sPNk4Vv_RACruY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.216.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         42:b5:7d:51:b6:09:e4:ea:df:80:01:d7:b1:94:71:47:7c:76:
         a6:34:6b:43:3e:2d:6e:75:85:ed:dc:08:1e:0e:34:55:fb:7a:
         f1:66:8f:94:00:05:04:3e:69:4b:f3:42:a4:1c:a1:d2:75:45:
         ae:7b:67:33:b0:58:99:e6:ae:9b:77:6d:cf:9b:49:95:a0:ae:
         a8:92:b8:06:d3:de:4a:93:eb:7b:ad:b5:f6:3f:e0:6a:d9:aa:
         b7:36:b5:7f:8b:09:c7:c6:14:2b:fe:9f:16:bc:74:2e:53:8f:
         21:95:94:da:c3:57:dd:26:17:22:88:20:f6:d4:2c:45:3d:4a:
         fc:85:b9:87:fa:bc:5f:34:93:36:63:ae:1f:2d:e3:d1:45:6f:
         47:0c:02:33:28:ab:e7:80:9d:b1:82:ef:60:5e:37:a9:d0:4c:
         0f:90:42:71:3b:0d:2c:be:d1:67:ad:a3:02:f3:e0:71:f8:26:
         c0:48:bd:a9:d4:fb:44:6f:cf:b6:ef:54:80:53:dd:6b:89:4d:
         27:8f:30:9f:d8:3f:09:8e:27:42:5b:e4:e9:00:0c:15:f3:17:
         fa:0e:c0:af:04:13:e7:e0:7c:5d:77:b3:7e:9a:a8:fd:ff:08:
         4d:88:d5:8a:a8:aa:f4:5c:0a:06:c8:4b:3c:95:35:51:c0:77:
         6c:ac:ad:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:36 2025 by rpki-client