Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9/gcjwB5gDXPBC-dBHYFy63QXsAVU.roa
File:                     gcjwB5gDXPBC-dBHYFy63QXsAVU.roa (raw, json)
Hash identifier:          AAVUndEfns5LOGd11vOFSJZJKTtbqF3kPdZKuAi4OmU=
Subject key identifier:   81:C8:F0:07:98:03:5C:F0:42:F9:D0:47:60:5C:BA:DD:05:EC:01:55
Certificate issuer:       /CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Certificate serial:       2C
Authority key identifier: 16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/gcjwB5gDXPBC-dBHYFy63QXsAVU.roa
Signing time:             Sun 01 May 2022 01:30:50 +0000
ROA not before:           Sun 01 May 2022 01:30:50 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     2500
IP address blocks:        202.249.128.0/18 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16851F56697ED9D56929BD0242D43B0278FC16E0
        Validity
            Not Before: May  1 01:30:50 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=81C8F00798035CF042F9D047605CBADD05EC0155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2c:f1:bf:19:32:2a:fd:00:41:a9:99:33:bf:
                    e5:94:cf:f0:c5:d2:00:30:83:d2:1e:7d:8c:a2:12:
                    5f:d9:5d:15:cd:c7:8a:6a:00:a1:21:eb:90:f1:b4:
                    8c:be:d7:29:ec:f6:2e:73:70:60:b6:74:0a:5e:ea:
                    b3:db:b6:a7:d5:73:3c:6b:92:f5:7f:1a:6d:9d:b9:
                    74:1e:77:8d:e3:ce:b5:c2:ce:4c:ea:b7:a0:4f:16:
                    5e:bc:49:82:ce:63:3c:10:ae:83:76:cf:47:70:46:
                    1b:e2:23:a1:db:92:a4:3f:7b:41:56:35:9f:00:81:
                    cd:49:8f:f4:d9:ca:e5:0a:70:c4:77:f7:85:78:f8:
                    8a:27:22:fe:48:f6:a2:e3:54:03:6c:65:42:53:cd:
                    91:98:8c:72:b0:4c:80:df:95:3c:b8:a3:e9:8d:2f:
                    c6:e0:78:c2:25:dd:11:00:36:48:dc:e6:38:40:15:
                    35:23:75:d0:d8:c8:05:62:60:52:74:cd:87:25:5f:
                    b5:71:f1:bd:98:35:cd:dc:57:1a:c4:bc:5e:9f:64:
                    cb:bb:de:b3:ae:8e:4c:46:93:0f:a1:7b:f8:fd:db:
                    76:b6:d1:0f:5f:e3:6a:99:aa:5a:f5:9c:2a:7b:98:
                    5c:6c:9e:3e:b0:8d:13:d6:e3:34:fb:f2:89:00:3b:
                    51:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C8:F0:07:98:03:5C:F0:42:F9:D0:47:60:5C:BA:DD:05:EC:01:55
            X509v3 Authority Key Identifier:
                keyid:16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/gcjwB5gDXPBC-dBHYFy63QXsAVU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.249.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         97:80:6e:1a:3c:09:d2:76:ad:e4:41:9e:d4:0d:96:08:ce:93:
         5b:09:40:3d:14:3c:46:30:6a:ac:b5:7c:f3:d5:49:1c:6c:84:
         98:99:dc:87:99:91:4d:8f:8c:e7:e4:46:48:de:a0:1b:f1:04:
         c0:13:8e:90:7e:a1:b8:8f:0e:61:98:2d:21:31:7f:aa:d6:19:
         64:9d:df:07:d3:16:e1:61:f9:e7:ab:d1:b4:65:d5:82:a5:94:
         ef:95:69:bc:fc:ab:0e:cb:5a:c6:f6:9a:99:31:ad:01:44:e9:
         79:46:7f:8e:19:a4:72:88:c5:03:a9:a8:d1:f0:4f:b4:d7:ef:
         d9:3a:08:d8:05:a2:cb:7b:c4:43:50:41:c8:a6:54:e3:a0:69:
         28:e8:66:7c:6a:47:1c:35:35:95:a3:9d:2a:c3:8b:91:9f:fe:
         99:f0:24:67:90:16:03:33:0f:e2:1e:66:0f:f9:45:3f:91:ec:
         1b:7b:1e:df:45:62:d0:83:63:2b:70:b3:1e:65:d6:d9:08:f4:
         72:70:b0:0a:ab:ee:53:49:1f:23:1b:c3:4a:33:9f:0b:19:6c:
         fb:ee:df:5d:b2:71:ae:01:eb:90:13:c9:07:c9:d7:6e:e0:50:
         ca:89:d3:ce:99:59:a3:f0:72:32:02:f1:23:2f:54:71:2d:cb:
         eb:54:c9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:18 2025 by rpki-client