Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/x2TOGVtSHDPLTVH2xuwIqWUn7zE.roa
File:                     x2TOGVtSHDPLTVH2xuwIqWUn7zE.roa (raw, json)
Hash identifier:          lQXNZBThZ1vmHS7nTIikGJGTCGqUwUVXxX19K4L/Vb4=
Subject key identifier:   C7:64:CE:19:5B:52:1C:33:CB:4D:51:F6:C6:EC:08:A9:65:27:EF:31
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       5F
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/x2TOGVtSHDPLTVH2xuwIqWUn7zE.roa
Signing time:             Wed 01 Feb 2023 01:30:05 +0000
ROA not before:           Wed 01 Feb 2023 01:30:05 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     9351
IP address blocks:        113.20.192.0/18 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Feb  1 01:30:05 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=C764CE195B521C33CB4D51F6C6EC08A96527EF31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:26:4b:74:b8:c8:b6:c3:4e:47:81:e6:8d:ca:
                    3b:66:aa:ea:99:04:44:3d:f2:f1:d1:a0:6f:25:79:
                    50:11:24:6c:74:cb:0d:97:37:f3:73:13:fc:5a:43:
                    20:60:ad:5c:d9:37:6c:42:a7:88:c0:e0:af:8b:5b:
                    11:88:48:48:2c:c6:f4:71:3a:f1:66:4e:78:f8:5e:
                    d8:81:31:20:31:9f:84:a6:41:b7:13:db:ac:12:9b:
                    5e:7b:f0:c6:de:5b:9c:b8:14:65:3d:fc:e4:2b:86:
                    4b:5b:e5:90:a8:ce:b5:5f:6f:8a:66:e7:a9:81:6d:
                    a2:7b:0e:bb:0f:0e:5a:20:22:c5:50:21:0e:59:58:
                    86:69:5d:0d:9b:1b:da:41:63:0c:c1:99:c7:46:4a:
                    c8:6e:de:1b:61:69:b3:77:81:49:f4:d1:a9:31:ca:
                    8f:cd:3e:e0:58:11:28:f3:9f:26:48:38:35:0a:42:
                    9b:20:45:8f:13:03:92:d2:67:78:f7:34:51:3a:c7:
                    55:86:7a:82:04:03:0e:2e:79:21:eb:f9:ec:65:9e:
                    2d:61:d4:6d:80:d5:9f:6a:f4:37:d2:fd:9b:ab:0d:
                    b9:6c:88:76:10:61:5d:8b:26:d6:10:b0:93:9d:ba:
                    9a:f7:88:37:8d:06:21:72:11:67:03:8b:cb:ef:03:
                    46:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:64:CE:19:5B:52:1C:33:CB:4D:51:F6:C6:EC:08:A9:65:27:EF:31
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/x2TOGVtSHDPLTVH2xuwIqWUn7zE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.20.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         21:7c:10:5d:b3:71:a9:8e:d2:3b:0c:3a:3d:15:5d:8a:3c:b4:
         8b:0f:4a:cd:29:c2:df:e5:17:e1:55:9c:03:5c:8a:33:ba:de:
         30:d2:2c:8f:ff:6a:b7:f5:76:43:11:70:34:20:1f:dc:29:c1:
         fe:44:d0:33:a3:cc:f5:23:90:c4:33:29:19:61:66:a2:7b:71:
         ed:9f:bd:3f:00:a9:a1:d9:9c:cd:96:91:98:b2:6b:ce:f2:3e:
         8a:3f:43:ae:45:59:72:39:c4:bc:54:49:f6:f7:3a:f5:22:a1:
         a6:21:7f:af:98:ac:7b:93:72:07:9a:93:7c:a7:33:3d:ea:30:
         04:cc:db:c5:e9:a9:3a:ff:43:89:4f:fd:93:9f:d8:13:21:44:
         03:9e:70:53:ef:a8:d9:38:ef:6c:9e:e0:ec:d1:98:8a:9f:d3:
         f6:46:29:3f:0f:16:dc:c1:0f:e3:9d:73:e4:b8:39:3e:e9:21:
         fb:46:ca:5c:04:93:c2:bb:63:a9:90:e9:13:70:f5:7e:a4:a5:
         d6:bc:eb:24:34:2c:b6:9d:b9:30:0a:80:57:52:c7:28:70:4c:
         6e:3d:62:e1:ee:c7:de:b5:4d:09:60:9c:ed:5b:05:6d:23:0a:
         32:b2:11:ad:12:67:2d:d8:12:31:a5:09:5e:46:0a:1e:15:c6:
         60:bb:84:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:04:40 2025 by rpki-client