Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/VlPIWsQ3SRB-WQeLN6ZrhbCUGN4.roa
File:                     VlPIWsQ3SRB-WQeLN6ZrhbCUGN4.roa (raw, json)
Hash identifier:          oFFw5c0RRrKCJ3Ts2BRhEMlj3aqyIG0Sq/NvcdqtlRI=
Subject key identifier:   56:53:C8:5A:C4:37:49:10:7E:59:07:8B:37:A6:6B:85:B0:94:18:DE
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       91
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/VlPIWsQ3SRB-WQeLN6ZrhbCUGN4.roa
Signing time:             Sat 01 Jul 2023 01:28:35 +0000
ROA not before:           Sat 01 Jul 2023 01:28:35 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     2518
IP address blocks:        211.135.128.0/17 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: Jul  1 01:28:35 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=5653C85AC43749107E59078B37A66B85B09418DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a7:03:9e:22:97:5b:e4:f1:84:99:bf:6c:5e:
                    e0:8a:6c:9a:99:87:5f:c5:bb:0b:6e:7e:d1:8c:31:
                    ae:99:39:05:7f:83:82:16:86:c2:cb:e3:86:20:5c:
                    f3:54:3e:bf:b8:a3:2b:38:3e:e9:01:bc:2d:23:6d:
                    35:66:f8:d4:5f:aa:44:02:29:14:6d:79:45:05:ef:
                    9e:eb:70:9b:c6:5e:03:b7:ce:be:de:72:9b:28:14:
                    c5:7a:2b:f3:6b:b6:86:04:9c:6f:99:e3:d2:7b:f3:
                    4b:57:98:74:37:06:28:3a:2a:d5:77:8b:5f:b7:95:
                    a2:2e:99:c5:46:55:c4:87:0e:11:31:7d:75:ba:a7:
                    44:df:ef:68:6f:af:4f:49:65:4e:90:23:03:c0:b4:
                    8b:f1:4a:c0:3a:47:8f:60:7c:91:95:47:49:2a:28:
                    c0:21:42:d2:a0:b8:62:14:1c:b0:ac:6f:b5:07:ff:
                    fb:d1:04:51:25:33:f3:ef:e4:cb:78:b5:9b:22:4b:
                    1c:b3:3b:58:a4:8f:96:50:7e:6b:11:02:47:33:51:
                    6c:99:70:5a:d7:9b:b2:bc:be:f5:8c:a5:c9:81:0d:
                    bb:21:56:c2:d8:7d:a0:8b:93:2b:40:41:a0:5b:a9:
                    56:03:3b:5e:47:3e:1f:29:e3:50:5c:5a:15:d5:c4:
                    56:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:53:C8:5A:C4:37:49:10:7E:59:07:8B:37:A6:6B:85:B0:94:18:DE
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/VlPIWsQ3SRB-WQeLN6ZrhbCUGN4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.135.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         7e:0a:3a:ab:a9:aa:89:e2:16:4a:fd:4f:a8:94:b3:9f:b4:fd:
         15:d4:0e:6c:d0:df:bf:b8:4f:ae:33:31:49:27:68:bb:4c:7a:
         af:95:a3:94:51:8f:a9:4c:42:8d:db:db:bc:0a:32:b6:99:fb:
         6a:b2:77:7a:65:9e:7f:65:d5:02:a2:4a:66:4b:ff:b2:52:20:
         fb:ec:1f:df:73:9c:53:57:99:48:c5:f4:f5:a1:1b:f1:f0:1a:
         af:4b:50:ff:a7:82:51:b9:57:0f:64:59:aa:a4:9c:93:3c:64:
         7f:71:d4:f6:b5:3b:8d:b9:e5:1c:f4:fb:65:ce:1e:78:4d:37:
         01:1a:60:ef:81:a2:e5:bf:d1:ff:b5:dd:98:d2:ef:d6:03:6d:
         c2:b6:75:6a:65:e2:c2:58:03:f3:97:96:c2:7c:6a:21:5d:30:
         15:1d:43:26:65:24:9f:a0:aa:90:9d:4f:d5:74:27:be:ab:01:
         19:4c:c3:4a:a8:c1:66:d2:81:15:f5:6d:b6:e7:7c:86:08:8b:
         4b:2f:f2:9c:84:88:6c:3b:be:13:a5:23:90:8e:ce:b2:01:a8:
         68:fe:4f:e2:a9:f4:bd:64:ab:d2:41:c2:a8:da:2c:ce:03:c9:
         77:99:d6:57:49:ce:ea:1b:5d:39:69:ac:49:2e:4b:9f:27:51:
         4a:3a:d7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:48:39 2025 by rpki-client