Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/HgkRtA3BF5AcyGLVO1OUO_cPQS8.roa
File:                     HgkRtA3BF5AcyGLVO1OUO_cPQS8.roa (raw, json)
Hash identifier:          p/kaoYuYzqazjMPRs3pFLupea2cJxeQx6rmAfwOfDI0=
Subject key identifier:   1E:09:11:B4:0D:C1:17:90:1C:C8:62:D5:3B:53:94:3B:F7:0F:41:2F
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       44
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/HgkRtA3BF5AcyGLVO1OUO_cPQS8.roa
Signing time:             Thu 22 Jun 2023 00:34:53 +0000
ROA not before:           Thu 22 Jun 2023 00:34:53 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        122.128.116.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:34:53 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=1E0911B40DC117901CC862D53B53943BF70F412F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1e:7b:55:fa:ef:ae:22:dd:15:61:5c:4a:0e:
                    33:10:27:7d:46:06:53:12:54:77:93:90:0e:0e:15:
                    a1:85:f2:b5:c6:bf:de:6f:fb:84:14:bb:64:ef:43:
                    7b:08:5d:6f:aa:32:ad:df:af:2f:03:e3:80:d5:4d:
                    f2:e8:0f:0c:05:84:23:64:ef:99:47:75:94:04:cc:
                    6a:4a:a9:23:e7:a1:5e:09:eb:b2:36:62:0b:f7:27:
                    05:bf:ff:12:71:b8:b4:e6:c5:c1:44:e6:81:4a:13:
                    ba:6e:4e:dd:b4:02:e0:c3:a3:51:f4:6e:15:1d:54:
                    e1:03:77:d2:3c:22:fe:d3:f8:4a:55:c1:a2:b2:9c:
                    dd:dc:f6:c9:10:c1:56:4c:2f:1d:fd:a2:59:a9:ec:
                    92:e5:a0:7c:e1:7d:2f:cd:1f:01:c0:da:80:dc:14:
                    2f:73:24:ca:d5:0b:9d:ed:57:ca:62:71:2f:15:9b:
                    10:aa:9f:db:71:d0:1a:4e:30:cf:4c:fa:03:93:7d:
                    6a:85:63:eb:15:4f:c6:78:9b:5c:7f:57:88:25:16:
                    5f:1b:0c:1e:dd:4d:db:e8:d2:67:91:6d:15:77:79:
                    4d:9e:d3:50:c6:fb:96:26:fa:8f:71:ac:14:fc:4b:
                    e8:58:20:16:7a:6d:3b:44:4d:7c:a0:90:c8:eb:3a:
                    f7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:09:11:B4:0D:C1:17:90:1C:C8:62:D5:3B:53:94:3B:F7:0F:41:2F
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/HgkRtA3BF5AcyGLVO1OUO_cPQS8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.128.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:10:0c:a7:19:c1:19:2e:f1:38:8d:03:03:61:0d:16:5c:86:
         ad:0d:c8:c1:4f:d5:25:b2:de:38:5c:6a:14:b3:f2:72:c6:49:
         13:59:79:a8:c0:65:50:e2:56:f7:aa:b3:0b:03:74:d0:d4:00:
         8d:ee:5a:7f:27:63:ab:18:b0:8b:3f:06:1c:29:3d:e9:d2:2b:
         2b:9f:ee:20:6b:7c:8a:5d:17:3c:0b:7f:16:d3:9f:4b:7d:d8:
         8c:a6:8d:12:d8:d9:9b:65:ce:e1:37:09:64:f2:9a:ae:ed:fb:
         11:a6:71:2f:95:07:46:5b:28:92:5a:0f:1f:f9:f4:ff:c1:db:
         07:e8:60:49:ef:6b:82:fc:18:9c:0f:67:ad:22:7d:9e:93:cd:
         ad:19:1b:ab:aa:5e:fb:26:f8:a2:4f:f6:38:53:c2:b9:05:a7:
         8b:41:85:a4:12:0f:48:81:2b:df:3f:0d:0d:dc:23:2e:65:4e:
         61:b1:50:ab:f6:76:fb:aa:99:2c:ab:42:15:c4:e6:2c:d3:43:
         ac:7b:49:76:c2:76:11:3d:bc:d2:b3:1d:ab:c6:83:0a:5e:e8:
         5f:ca:e1:62:d9:80:e3:46:83:92:17:2f:59:eb:e4:90:f2:ff:
         49:ce:d6:08:19:10:18:29:8d:2c:c5:c1:0c:ee:1f:b0:34:1c:
         e7:da:30:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:59 2025 by rpki-client