Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/k42KuXfFWEVAU4ZXbr-COssOqp8.roa
File:                     k42KuXfFWEVAU4ZXbr-COssOqp8.roa (raw, json)
Hash identifier:          M/Civ+BILGyAcZZkKL/Vge97MWBYrRMYF4AUJ1j7bUE=
Subject key identifier:   93:8D:8A:B9:77:C5:58:45:40:53:86:57:6E:BF:82:3A:CB:0E:AA:9F
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       59
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/k42KuXfFWEVAU4ZXbr-COssOqp8.roa
Signing time:             Thu 22 Jun 2023 00:35:01 +0000
ROA not before:           Thu 22 Jun 2023 00:35:01 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.200.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:35:01 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=938D8AB977C55845405386576EBF823ACB0EAA9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d2:42:5a:0d:42:a9:bf:e4:ba:b2:98:b5:65:
                    d8:7b:ea:ff:19:5e:e9:f2:7b:08:8c:9b:b6:53:ba:
                    7a:47:22:8a:13:46:f9:46:7f:0e:dc:5e:5c:07:0e:
                    cb:70:2b:33:a0:44:ed:24:79:18:19:c1:17:a8:9d:
                    f3:47:96:24:ee:07:f8:e2:71:84:24:9c:7d:76:dc:
                    0d:c3:9b:69:82:0b:73:ef:c1:15:9e:9f:a1:8b:4a:
                    1a:60:11:17:6d:dc:bb:eb:c3:74:56:c9:19:44:ae:
                    bb:3f:51:eb:1f:79:b4:e7:72:ba:88:39:60:91:fd:
                    21:d2:83:60:08:05:63:d1:8b:67:ab:87:d0:b0:0e:
                    2f:6e:8e:db:16:aa:34:14:ce:9e:30:7e:0d:3c:79:
                    a4:e3:27:7b:a0:b8:d5:bf:fc:64:02:a2:4e:8a:a9:
                    ea:8e:b4:1b:86:71:98:e8:08:68:ff:b9:a0:93:7f:
                    9c:7c:7b:61:3e:93:ef:8a:cc:87:79:aa:9a:80:1d:
                    21:5a:4a:0e:2a:5a:18:3c:0f:d3:57:de:5d:99:cc:
                    46:58:77:c6:04:6e:fc:9f:82:b2:ea:6b:90:e1:b2:
                    3a:cc:ab:95:20:2a:de:3b:06:6a:0d:0a:9d:bc:1f:
                    0e:86:56:36:73:3e:38:e9:c6:95:34:dc:f0:0a:43:
                    79:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:8D:8A:B9:77:C5:58:45:40:53:86:57:6E:BF:82:3A:CB:0E:AA:9F
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/k42KuXfFWEVAU4ZXbr-COssOqp8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:f6:5a:a6:87:03:8f:ae:fb:86:a2:4b:4c:bb:d4:ec:90:be:
         7e:3d:d2:76:77:8b:52:01:ee:d0:11:98:55:5f:6f:f8:88:6d:
         11:c0:2c:2f:c4:50:5e:27:c5:26:f7:4d:d2:b0:b0:80:3b:0d:
         aa:80:f8:cc:51:06:51:3b:e8:46:3e:96:ca:89:a3:e6:2a:13:
         03:0f:76:8f:ab:89:3e:b8:4a:56:95:82:da:9e:42:80:33:29:
         d8:8b:0a:86:92:05:69:aa:7d:c2:1c:5e:e7:da:76:13:86:b6:
         50:00:ba:0a:e5:f0:7f:fc:42:5b:79:ba:44:37:a1:13:72:0a:
         57:62:f7:cf:4d:6f:79:9a:ab:d9:26:d1:f0:7f:1d:ba:84:b9:
         cc:d9:03:63:e5:db:85:e4:cf:74:3c:de:63:a3:91:3b:d4:06:
         99:29:11:63:ff:9b:06:2d:da:0f:55:05:47:02:04:ad:fc:02:
         0d:d3:d5:23:55:db:7f:f4:bd:2f:a2:7d:a0:e5:62:d8:ce:39:
         7c:a9:a2:bf:17:c5:11:f7:b5:a9:46:57:98:52:16:39:40:26:
         68:9a:59:fc:4d:54:e2:3b:1f:f1:d9:be:12:08:aa:54:a6:27:
         e8:de:4e:ae:69:2b:6d:02:99:79:09:21:5a:ef:96:41:bf:96:
         57:9f:2f:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:47:30 2025 by rpki-client