Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/WZWF7JUg_Ul8WQ4zSco6ftMVl7E.roa
File:                     WZWF7JUg_Ul8WQ4zSco6ftMVl7E.roa (raw, json)
Hash identifier:          fpv3NlosuudFEnvBc9dJ15USnBaRI+UfCCjkQvShKCk=
Subject key identifier:   59:95:85:EC:95:20:FD:49:7C:59:0E:33:49:CA:3A:7E:D3:15:97:B1
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       37
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/WZWF7JUg_Ul8WQ4zSco6ftMVl7E.roa
Signing time:             Thu 22 Jun 2023 00:34:03 +0000
ROA not before:           Thu 22 Jun 2023 00:34:03 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.187.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:34:03 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=599585EC9520FD497C590E3349CA3A7ED31597B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0b:b8:e0:19:94:13:99:81:59:28:04:08:79:
                    bf:07:1f:47:37:4f:db:c2:ac:4c:c0:1e:d6:6b:ee:
                    71:b9:26:c5:f3:d4:88:42:58:94:d0:38:f2:5a:45:
                    a9:25:1a:35:e0:04:47:7a:2b:07:5d:1a:83:65:ae:
                    24:c0:2a:91:59:2b:1c:77:89:8e:3f:86:db:22:38:
                    5e:f1:4d:9d:dd:2f:32:86:77:78:ee:81:e7:b2:4a:
                    58:e9:84:05:e1:3b:00:01:6c:d4:2c:99:69:b3:6c:
                    88:77:bc:f0:9b:67:e2:26:63:ad:eb:a3:05:3c:b5:
                    dd:c1:67:0e:5e:b4:6d:50:70:cb:34:1d:19:09:64:
                    60:7d:fe:07:cb:85:c6:63:65:7a:17:8d:c6:3e:c5:
                    ef:8a:a8:4e:c3:13:4a:1a:8f:3f:76:ee:37:73:73:
                    94:73:25:c5:18:1b:4b:f3:2a:07:aa:83:62:1c:86:
                    44:e9:5a:2f:87:dc:10:79:4b:10:48:f3:ca:ad:48:
                    f0:11:e2:49:a4:b0:3d:85:f3:5d:14:94:07:f6:b5:
                    38:1b:cd:c5:c7:d2:9d:30:80:1a:49:57:e4:bd:56:
                    7f:49:d6:92:36:b4:87:51:78:92:e5:73:7f:82:d3:
                    a5:4e:f0:8f:c1:5f:84:33:65:d1:79:7a:41:b7:20:
                    91:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:95:85:EC:95:20:FD:49:7C:59:0E:33:49:CA:3A:7E:D3:15:97:B1
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/WZWF7JUg_Ul8WQ4zSco6ftMVl7E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:b3:18:d1:c9:de:92:95:d7:60:34:93:41:6f:82:9e:01:2f:
         2e:29:f1:92:bf:ca:d2:7e:5b:9e:39:e1:fb:09:d7:fc:83:fd:
         97:8a:69:4e:01:2d:17:a1:74:08:1b:9c:23:4c:07:8f:03:cb:
         aa:5f:ea:ad:3a:66:98:ca:02:06:c4:94:a6:61:f3:bc:56:46:
         f7:a1:82:b2:56:a5:fa:fc:13:7e:54:08:e6:05:98:aa:92:09:
         a8:aa:d1:24:ae:ee:02:ac:ec:63:ab:12:98:1d:d4:8c:6f:68:
         f2:a4:61:69:03:90:b7:c7:9c:ac:a5:a4:f7:27:d0:9c:7a:54:
         a7:90:9e:f4:ca:32:91:38:90:59:f7:73:58:fd:a8:0c:57:36:
         03:8d:e5:38:7e:5c:cb:c7:6f:c2:b8:7a:4e:75:28:8e:92:0e:
         01:1e:2e:6a:27:44:a1:f3:45:aa:2d:fe:62:4e:18:7b:7a:1c:
         19:ab:7e:fe:c2:eb:ba:53:2f:c7:10:94:6f:75:7a:a9:40:ba:
         fc:5e:14:b3:36:50:d1:ab:f2:8e:d0:20:37:56:8a:3e:a2:f1:
         51:c2:3b:af:d9:b8:67:3a:98:a5:1a:02:52:bb:cf:1c:46:b9:
         34:60:06:09:30:ed:d8:fa:1b:30:67:bf:50:d9:15:60:36:3f:
         68:b0:f2:7d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:41:06 2025 by rpki-client