Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/4-8fViXrwZa25_XhBeMLzRvcKbM.roa
File:                     4-8fViXrwZa25_XhBeMLzRvcKbM.roa (raw, json)
Hash identifier:          7eDPIWgkveDh/Dd8SKYwdcJn7xVgxIA0u5LDIC9oJQ0=
Subject key identifier:   E3:EF:1F:56:25:EB:C1:96:B6:E7:F5:E1:05:E3:0B:CD:1B:DC:29:B3
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       20
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/4-8fViXrwZa25_XhBeMLzRvcKbM.roa
Signing time:             Tue 23 Feb 2021 08:57:37 +0000
ROA not before:           Tue 23 Feb 2021 08:57:37 +0000
ROA not after:            Tue 15 Feb 2022 01:30:02 +0000
asID:                     2527
IP address blocks:        143.189.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Feb 23 08:57:37 2021 GMT
            Not After : Feb 15 01:30:02 2022 GMT
        Subject: CN=E3EF1F5625EBC196B6E7F5E105E30BCD1BDC29B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:05:42:ac:bf:3b:91:43:6c:26:03:0d:ab:6b:
                    7c:6c:af:46:2f:d1:3e:a1:ab:81:e6:0b:50:fa:a3:
                    a7:be:ae:f8:8b:7c:8a:f9:2e:9b:ee:36:85:10:2a:
                    b1:de:ff:67:5b:e2:df:8d:2a:51:bf:d8:ad:25:71:
                    1e:33:a0:7a:9f:bd:92:f5:78:52:ab:60:9f:7a:4e:
                    e6:7d:fe:a3:c4:2c:c2:5b:76:e0:f3:90:16:a3:44:
                    a8:fa:f7:65:20:d3:24:35:95:d6:ac:4f:2e:18:92:
                    82:31:71:6e:14:44:5c:2d:4d:37:fb:d9:8a:8f:00:
                    f3:51:a2:e4:20:8a:dd:33:0b:8c:7e:4e:6f:e4:e8:
                    76:d8:2e:08:cb:99:ab:d8:a5:c1:ba:a5:19:f5:bb:
                    47:d8:47:3c:da:25:a3:4e:84:51:c3:6e:13:2b:89:
                    55:9e:b6:d8:ea:f2:45:f6:cd:ba:78:77:49:d3:73:
                    7e:cc:ff:9f:a4:dd:be:9f:49:e8:3a:19:84:b6:c4:
                    07:2e:09:21:97:fb:4a:bc:49:81:41:a9:9a:bf:50:
                    ec:9d:ae:69:0b:f1:b4:38:60:8f:9b:21:fd:7e:ce:
                    97:bd:e7:86:8d:55:39:46:35:77:52:44:1d:51:6e:
                    c1:ad:37:07:12:1f:5e:51:15:f5:07:39:26:19:b7:
                    59:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EF:1F:56:25:EB:C1:96:B6:E7:F5:E1:05:E3:0B:CD:1B:DC:29:B3
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/4-8fViXrwZa25_XhBeMLzRvcKbM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.189.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         51:1c:92:1c:1d:f0:ff:f7:ae:97:86:b6:78:95:f6:75:d2:b0:
         63:fa:76:28:e2:5c:ba:c5:a3:f7:63:4e:f9:f3:01:46:d6:e3:
         a7:b4:e6:84:1b:72:6a:04:6e:5f:13:17:36:4c:83:35:77:ed:
         89:fd:db:5f:9b:95:ff:e0:f7:16:5b:47:8f:27:30:27:00:44:
         e2:97:6e:94:4a:0f:f9:83:da:3f:41:d7:56:7f:5e:09:7b:6c:
         b4:c1:cd:10:91:7d:4b:21:89:33:e6:1f:fb:44:17:f0:31:8c:
         2e:64:73:96:b5:d6:e6:b8:53:8a:4b:0f:28:69:74:42:db:e8:
         48:67:94:69:6e:89:5a:8d:30:d5:9b:07:0c:e1:94:36:56:31:
         25:60:5f:fc:46:22:48:d0:91:13:27:30:6e:15:4e:c5:85:34:
         8f:9a:84:d3:04:29:c8:15:08:82:ee:5a:57:3e:81:9f:e9:71:
         37:3f:d8:cd:97:37:0c:7f:63:5f:c8:76:f1:d4:44:d0:fc:87:
         c0:70:d6:df:ea:71:61:b7:94:8c:bd:92:32:be:27:24:61:e2:
         b7:c2:7d:98:b9:6a:d5:15:14:9d:ab:e2:6b:d7:d7:31:ed:56:
         63:cf:3c:d7:1a:42:d5:f2:e6:4a:95:14:59:c1:f6:ff:1b:3a:
         97:73:8c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:43:44 2025 by rpki-client