Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/aN8-tUyfiFZkcekv1PF8HQcQlZo.roa
File:                     aN8-tUyfiFZkcekv1PF8HQcQlZo.roa (raw, json)
Hash identifier:          XIWZlU/zqY9N4g0jrp0GWP1X6PqakKBNoHe8y5bpENg=
Subject key identifier:   68:DF:3E:B5:4C:9F:88:56:64:71:E9:2F:D4:F1:7C:1D:07:10:95:9A
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       57
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/aN8-tUyfiFZkcekv1PF8HQcQlZo.roa
Signing time:             Thu 22 Jun 2023 00:35:00 +0000
ROA not before:           Thu 22 Jun 2023 00:35:00 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.160.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:35:00 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=68DF3EB54C9F88566471E92FD4F17C1D0710959A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:83:e6:92:85:15:19:bd:78:6c:4c:42:41:6f:
                    7e:5f:02:34:46:09:00:0a:6c:02:8c:a9:7a:d5:a5:
                    a8:f5:0c:d2:6c:1b:f7:4b:a1:eb:ed:a3:9f:45:ea:
                    06:8b:8a:bd:86:54:e5:61:9e:6a:b5:93:1d:a6:51:
                    a2:95:e0:38:84:e0:52:b8:71:0c:1f:ef:e2:a8:ae:
                    8b:a1:1a:73:2d:4d:c0:24:9d:71:6e:4c:ed:97:7e:
                    ef:64:b5:33:73:96:b6:6f:5e:63:df:ae:ea:1b:70:
                    86:34:9c:4f:b9:a8:ec:11:cb:4d:6d:33:44:4b:fa:
                    b4:ee:31:85:96:12:32:9e:67:27:67:9b:b6:6a:af:
                    df:f8:63:82:4d:7e:be:8d:a2:e2:71:c6:d0:c8:cd:
                    df:36:6b:95:0e:06:2a:65:31:4e:f5:e8:b1:49:23:
                    f3:4a:f6:e8:c0:4c:37:93:60:1f:9a:e9:8f:80:86:
                    92:84:08:85:b1:fe:64:33:28:b2:6e:f8:36:37:ee:
                    21:42:24:25:cc:b5:95:c5:a1:c3:83:6a:a3:e3:e4:
                    11:e1:3f:e1:de:ce:28:ab:f1:ae:c0:f5:ab:da:4a:
                    c8:cf:f6:8c:3a:2a:ce:9b:82:81:ee:e9:b0:8a:e9:
                    11:54:06:aa:dc:b3:95:d4:35:00:f5:39:44:1c:68:
                    ed:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DF:3E:B5:4C:9F:88:56:64:71:E9:2F:D4:F1:7C:1D:07:10:95:9A
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/aN8-tUyfiFZkcekv1PF8HQcQlZo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9c:02:bd:56:e5:e7:46:dc:72:83:32:13:a4:71:64:57:be:0e:
         ab:29:45:67:6f:a6:51:e4:e7:a7:5d:20:6a:0e:30:52:21:7d:
         37:11:c2:31:d7:2d:d5:26:fa:62:a8:be:2f:c6:65:f0:cd:87:
         8f:ee:cf:b7:37:f2:3c:45:20:4e:c9:70:65:9a:d8:e1:0a:92:
         11:5f:76:bc:7b:79:65:67:fd:2d:89:fc:fe:62:ff:8d:38:2d:
         18:74:5c:a3:31:b8:fa:9f:55:5a:b2:16:d5:ca:f7:35:8d:b5:
         d2:c2:2f:93:bf:10:84:08:40:3f:ed:90:72:99:d3:b5:34:ce:
         a4:4b:c8:05:92:20:bd:c9:6c:c4:ac:ee:ac:46:79:63:98:6f:
         16:f8:00:59:53:4d:b8:b6:ac:47:a7:8d:96:24:8b:3c:dc:9a:
         4d:15:45:71:a0:a2:12:b6:b0:7f:4a:b3:f6:aa:ed:68:b5:da:
         b2:e3:e8:d2:a3:fb:ae:fd:c7:14:79:07:1f:31:16:59:f6:28:
         69:22:55:68:63:3a:11:10:c0:29:0f:1d:85:61:85:53:6a:fe:
         bf:e3:b2:19:32:9d:06:a0:bf:c7:6e:57:c4:d5:b8:c5:40:b5:
         2e:7d:29:18:da:ab:67:a6:9b:a7:db:e2:0a:2a:c7:8c:0b:f4:
         c8:61:cd:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:45:17 2025 by rpki-client