Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/LO5l9cgnphroMVpCevsVcKX656w.roa
File:                     LO5l9cgnphroMVpCevsVcKX656w.roa (raw, json)
Hash identifier:          4a8hz82lA7lbLiRsVuWZVW3YM5BQl9GbEwjQAwfahZ4=
Subject key identifier:   2C:EE:65:F5:C8:27:A6:1A:E8:31:5A:42:7A:FB:15:70:A5:FA:E7:AC
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       33
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/LO5l9cgnphroMVpCevsVcKX656w.roa
Signing time:             Thu 01 Sep 2022 01:28:50 +0000
ROA not before:           Thu 01 Sep 2022 01:28:50 +0000
ROA not after:            Tue 15 Aug 2023 01:30:03 +0000
asID:                     23816
IP address blocks:        182.22.0.0/17 maxlen: 17
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Sep  1 01:28:50 2022 GMT
            Not After : Aug 15 01:30:03 2023 GMT
        Subject: CN=2CEE65F5C827A61AE8315A427AFB1570A5FAE7AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:0e:7f:3d:d8:33:01:ac:6a:ae:2f:97:0b:
                    8b:20:01:ba:9e:0e:21:a0:9f:12:64:34:56:c4:a9:
                    46:54:11:38:6d:43:dd:e5:60:d1:21:78:8c:81:a3:
                    bc:94:f1:b0:31:78:9d:7a:a4:20:ec:bc:d3:07:af:
                    76:41:87:be:05:f1:77:6c:fc:bd:4b:78:0c:90:d5:
                    0c:ce:52:eb:8d:b4:4c:4f:a6:93:6c:71:d5:76:12:
                    b7:f1:a0:74:f5:df:ad:23:84:4d:c1:c2:75:11:30:
                    92:94:cc:ec:55:86:df:7c:21:19:6c:38:f7:8b:20:
                    2b:23:b6:ab:45:e8:22:55:6d:41:f7:62:e7:cc:30:
                    b1:a2:42:39:be:cd:5d:54:7f:26:d2:fa:1b:06:cf:
                    7e:f5:bf:8e:22:b1:23:c2:39:27:ad:cf:42:50:97:
                    7e:67:cf:0b:b6:ec:93:19:92:58:86:63:af:1b:df:
                    d0:d3:3f:b8:ca:a1:95:01:b0:77:c7:eb:4f:ba:0f:
                    53:7f:e7:20:9c:28:03:a0:f0:d9:c7:d7:a2:0a:4f:
                    75:67:fc:38:be:24:16:c7:51:d6:66:52:64:9f:a8:
                    4c:49:8c:b8:b8:c5:94:3c:73:f2:c5:8c:38:40:35:
                    56:74:ac:49:f0:d7:d7:5b:04:19:ba:bc:e5:29:0a:
                    b3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EE:65:F5:C8:27:A6:1A:E8:31:5A:42:7A:FB:15:70:A5:FA:E7:AC
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/LO5l9cgnphroMVpCevsVcKX656w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.22.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ba:05:c3:58:e5:a3:57:cb:8c:13:c7:03:d3:8b:84:5a:80:08:
         d4:e4:9d:c8:d5:2d:02:5a:73:90:38:72:e8:f3:a7:e3:20:c7:
         b2:b5:74:6b:06:a1:cc:53:f0:34:d8:2c:68:5c:62:6d:1c:dd:
         7d:dc:2d:95:ab:9d:d7:4e:06:d6:c0:da:a0:2c:2f:f9:5b:dd:
         f2:3e:01:64:de:f3:9d:b0:40:51:55:b4:df:7f:e1:17:24:28:
         31:ef:aa:68:33:16:8d:8c:4f:2b:3c:07:28:a3:3f:d8:c9:97:
         4c:1b:cd:0d:30:7a:f3:4f:92:09:c5:95:5e:52:91:20:80:61:
         f0:20:64:fc:8c:68:7e:b6:45:e4:dc:78:37:8f:49:81:ff:e6:
         43:a3:03:90:0e:4b:6f:47:21:88:3b:ab:ce:38:69:6d:df:39:
         29:db:73:e5:7f:53:2f:77:7b:bb:d0:bb:95:d1:e0:99:a3:f1:
         cc:ab:71:ad:31:6d:79:f3:a9:9a:9d:91:1c:2f:6f:19:97:e9:
         13:d7:c0:c1:c6:4d:b0:54:a9:a6:12:b8:77:50:fe:15:89:30:
         ef:82:25:74:c1:9d:a0:0b:0c:2f:31:65:62:b7:dc:7c:4e:af:
         f0:98:49:78:83:23:91:fe:ea:5f:da:af:4f:96:cb:0e:7f:20:
         df:7a:53:82
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:53:58 2025 by rpki-client