Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/ArnwSwGo_oRNipi8GFr_LASx10U.roa
File:                     ArnwSwGo_oRNipi8GFr_LASx10U.roa (raw, json)
Hash identifier:          22Cyn5ueiJl2/fvLNch4JFBSFD3lufYB89sP6SCrZik=
Subject key identifier:   02:B9:F0:4B:01:A8:FE:84:4D:8A:98:BC:18:5A:FF:2C:04:B1:D7:45
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       3C
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/ArnwSwGo_oRNipi8GFr_LASx10U.roa
Signing time:             Thu 22 Jun 2023 00:34:05 +0000
ROA not before:           Thu 22 Jun 2023 00:34:05 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.204.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:34:05 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=02B9F04B01A8FE844D8A98BC185AFF2C04B1D745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:64:da:0d:3a:3d:f9:47:95:47:5b:87:8a:d0:
                    94:22:f6:82:7c:f4:42:74:76:cf:6c:77:a4:43:ad:
                    45:af:45:fd:02:0d:eb:40:83:75:9f:cf:f6:65:5d:
                    d6:50:be:f6:73:01:3c:45:61:eb:3b:b3:75:69:90:
                    97:09:af:2a:f1:7d:78:84:e4:b2:49:f3:61:25:86:
                    53:64:f5:f9:92:ed:16:2a:e7:ee:19:52:fc:8f:69:
                    87:dc:39:e9:4c:24:76:bf:fe:7c:2e:09:3e:e6:d0:
                    9f:d0:ea:d5:13:b2:bd:f3:0b:44:5c:bc:d9:36:46:
                    cf:db:c2:e5:e5:98:4e:e6:10:ae:fc:1b:5e:70:f6:
                    b2:d7:ff:19:c7:bc:04:4f:28:6d:4c:32:b9:11:87:
                    07:23:12:c4:7f:5b:ba:c9:e0:28:d2:f3:2e:09:e9:
                    6e:13:b4:df:64:58:d4:78:07:49:7e:70:13:1d:13:
                    b5:84:76:2c:c3:2e:6a:98:5b:63:d4:9b:26:e1:75:
                    a4:68:07:9d:83:75:2c:52:14:15:ce:20:c7:ce:b8:
                    4d:f5:93:12:0d:3a:f0:7b:7c:ae:44:df:b5:bf:18:
                    d8:12:d9:4a:f3:ea:2a:32:2e:f1:0d:92:24:36:d2:
                    a0:cc:88:f8:e2:65:d1:7d:12:b9:47:e0:54:e8:37:
                    4d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B9:F0:4B:01:A8:FE:84:4D:8A:98:BC:18:5A:FF:2C:04:B1:D7:45
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/ArnwSwGo_oRNipi8GFr_LASx10U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:be:85:c8:9d:6d:92:2b:09:23:75:f5:df:2e:5d:9c:b2:56:
         14:82:8b:26:6b:5e:91:57:ca:b3:6d:74:26:e7:27:e6:36:df:
         b4:ab:17:cb:a6:ea:9c:89:74:ab:c9:5b:00:19:4c:ed:f4:e2:
         33:21:a2:2c:53:ae:69:ff:c5:1d:cd:30:8f:57:a9:28:5d:f8:
         3a:d6:7f:36:c6:ee:60:fe:cc:7e:38:04:f0:03:02:0c:6c:f2:
         59:21:60:9d:ce:2b:79:7a:00:6b:98:f6:ea:34:13:39:a3:14:
         5f:e7:2e:bc:10:17:02:c5:c4:98:d9:9e:78:bb:13:a2:3a:3e:
         31:26:f7:fd:4a:bf:37:6e:89:d0:05:1b:51:8f:64:2a:9f:55:
         3b:32:55:5d:78:a7:10:37:eb:e8:59:61:b8:13:7c:fe:15:1f:
         2e:27:9e:c3:44:5e:fb:0e:2c:8c:ea:71:18:70:4b:ea:45:6e:
         64:f9:37:c3:1b:3e:69:b8:1f:b6:57:3d:a3:c8:8a:d0:e7:ba:
         28:b6:38:2b:97:9d:da:e2:fc:cd:e1:ae:03:a3:dd:5d:b5:37:
         ff:01:33:0a:67:db:e6:87:89:15:b3:23:b7:a7:59:a6:c4:19:
         a3:04:45:cf:d3:be:53:d1:3b:c0:16:0d:63:96:07:46:47:0d:
         09:d1:df:84
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:40:47 2025 by rpki-client