Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/YyfPVWacg1UCN2CxQ-_McDon0ms.roa
File:                     YyfPVWacg1UCN2CxQ-_McDon0ms.roa (raw, json)
Hash identifier:          +d4OqGx/4bWjn0nrEIbQkMX3BggOWZLIpavSNG665Kc=
Subject key identifier:   63:27:CF:55:66:9C:83:55:02:37:60:B1:43:EF:CC:70:3A:27:D2:6B
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       2B
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/YyfPVWacg1UCN2CxQ-_McDon0ms.roa
Signing time:             Fri 06 Oct 2023 06:05:41 +0000
ROA not before:           Fri 06 Oct 2023 06:05:41 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9374
IP address blocks:        123.255.128.0/18 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct  6 06:05:41 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=6327CF55669C8355023760B143EFCC703A27D26B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9a:85:bd:15:01:48:6e:2e:28:99:40:df:dc:
                    d0:37:af:80:51:d5:e3:78:23:ec:ac:ab:4f:de:23:
                    a5:aa:a8:1c:7b:b2:82:f1:43:3a:55:b0:fd:de:56:
                    23:f9:59:e3:3d:24:97:1f:6f:89:c8:42:a1:df:45:
                    d1:58:8a:db:90:2b:0e:30:b6:c5:a0:68:bd:2d:7a:
                    40:a7:dd:ad:8b:32:ac:52:37:29:8b:35:11:42:47:
                    3d:b1:51:1b:e7:e1:dd:6c:81:f6:c9:42:e8:45:90:
                    4b:8f:2b:f6:35:14:c3:03:5c:e7:94:16:90:1e:00:
                    68:66:4b:9f:56:cb:f7:c5:6c:1f:de:0b:16:a9:35:
                    7e:62:7b:a7:71:9a:20:58:7d:1b:12:66:d5:c1:45:
                    0d:4f:bb:6b:36:bf:b8:d7:df:ec:1b:2b:2c:4e:0c:
                    dc:0e:e4:9c:73:2a:8f:76:9b:bf:3f:24:4c:98:b5:
                    73:b2:f2:28:ce:97:2d:26:27:fc:30:06:9a:ca:e5:
                    42:29:3c:d4:ce:f9:70:53:9a:dc:d9:60:ea:13:1b:
                    06:21:1c:8c:b2:52:ad:86:fd:5e:f3:f5:fc:32:a2:
                    81:f4:da:b6:63:fe:03:4d:82:58:ba:45:c7:04:f0:
                    78:d2:ec:5e:f3:ba:77:f5:29:c7:97:c9:ac:2b:dc:
                    89:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:27:CF:55:66:9C:83:55:02:37:60:B1:43:EF:CC:70:3A:27:D2:6B
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/YyfPVWacg1UCN2CxQ-_McDon0ms.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.255.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         45:e7:d1:3d:91:4b:09:54:c1:13:b3:ce:b0:a0:1c:5a:57:c1:
         3c:f8:87:db:40:bf:5f:a6:de:c6:cc:0c:d9:8b:2c:21:7f:03:
         81:ea:67:a4:1a:c3:c5:0f:7c:4f:1d:1d:48:cc:b1:a1:fd:40:
         21:c3:d9:55:62:b5:2a:ed:58:50:f0:81:6c:69:dc:88:dd:03:
         44:5f:d6:c3:15:9e:36:1d:7e:02:2d:f4:7c:a2:2d:ba:f4:da:
         63:f4:7d:bc:d0:d3:c7:35:ad:f0:e5:50:91:57:26:38:32:b5:
         05:ae:ff:0b:e5:ca:07:9d:45:25:1b:2d:a6:6d:1d:c6:0d:17:
         62:1b:78:a7:29:6b:36:91:59:64:0a:a3:4b:25:c0:8b:0c:48:
         f3:f2:76:95:6a:e0:f6:c0:46:0e:7a:06:d1:62:8e:9f:6b:ff:
         a3:e0:2b:2c:56:2d:55:85:74:c6:fd:b0:74:01:4b:fd:17:99:
         19:e5:9d:26:a5:02:37:3b:a7:93:57:65:ac:34:31:9d:ca:aa:
         b2:7f:4b:6d:55:29:20:ee:06:17:40:7b:95:6b:f4:3c:90:79:
         07:47:89:5b:3c:b4:9a:68:cd:64:19:26:9a:cd:b6:b9:c3:23:
         44:71:e9:05:10:b3:17:5a:72:8d:28:db:52:98:c8:de:92:c0:
         32:72:5f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:17 2025 by rpki-client