Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/CtTNgA9Sq8hh_vZfwG8gQxQI5hU.roa
File:                     CtTNgA9Sq8hh_vZfwG8gQxQI5hU.roa (raw, json)
Hash identifier:          7Z2df26O6U6AjQ2KXWGbpRx4JWZ7Xhh2ELg98bVzMZ8=
Subject key identifier:   0A:D4:CD:80:0F:52:AB:C8:61:FE:F6:5F:C0:6F:20:43:14:08:E6:15
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       9B
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/CtTNgA9Sq8hh_vZfwG8gQxQI5hU.roa
Signing time:             Mon 01 Aug 2022 01:28:49 +0000
ROA not before:           Mon 01 Aug 2022 01:28:49 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     9370
IP address blocks:        113.20.160.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Aug  1 01:28:49 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=0AD4CD800F52ABC861FEF65FC06F20431408E615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:70:40:5c:2d:44:e8:39:2d:c1:4c:5f:31:a4:
                    a8:cb:9a:31:95:d9:4d:a0:69:1a:a3:98:f2:f7:27:
                    5a:51:99:30:c2:40:01:18:90:2b:86:f6:c9:96:92:
                    ec:70:dc:af:ee:83:37:1f:9c:53:0b:94:28:3b:7b:
                    04:a7:37:9b:27:7a:bc:d6:c0:45:da:b5:c3:47:5d:
                    e6:4b:49:cb:9c:56:93:17:0d:ce:62:7e:28:be:36:
                    3d:62:76:1e:94:6a:16:a7:13:2d:40:12:0a:cf:9f:
                    1a:61:78:6f:f0:55:3e:83:36:9b:f3:5c:f6:c9:6d:
                    86:87:c0:9e:c2:9b:ec:94:89:be:89:b5:56:ef:17:
                    80:5b:22:b5:5d:a9:8b:ca:45:6d:86:f3:e7:09:d5:
                    8e:86:c9:25:10:84:a7:69:f8:6c:83:e2:0b:1d:10:
                    c5:5b:8b:6b:7f:4a:38:f9:fd:65:18:b3:3e:f1:9d:
                    a3:22:5f:0a:ae:1f:03:fd:7d:99:75:a3:f7:d7:4b:
                    45:90:e4:af:28:ee:37:38:c7:01:4e:26:f6:9b:51:
                    db:e1:5c:43:e7:7c:22:07:c1:a2:6f:83:62:bc:de:
                    1d:b5:5f:37:91:d0:b5:0f:11:ee:61:42:d2:d6:82:
                    4e:68:bf:cb:41:e6:15:c9:07:0e:a4:2d:08:8f:2d:
                    8f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D4:CD:80:0F:52:AB:C8:61:FE:F6:5F:C0:6F:20:43:14:08:E6:15
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/CtTNgA9Sq8hh_vZfwG8gQxQI5hU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.20.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         65:43:a4:f4:5a:6a:50:4f:eb:6c:ce:8b:cb:08:eb:f5:f8:78:
         e2:5a:2a:ea:7a:98:90:c1:22:61:15:a2:66:9b:30:d4:ea:09:
         8c:b2:81:0d:ef:88:3b:fe:e7:d4:eb:3b:e3:fe:dc:5d:aa:86:
         e9:36:f1:f2:e3:da:1e:67:c8:8c:08:af:5d:07:95:d5:c2:34:
         2a:79:e6:70:93:27:0a:0a:18:c9:70:fe:b9:cf:29:ea:fa:a5:
         7f:9f:5e:66:a7:22:0a:38:f2:ed:bc:e2:18:40:db:16:1b:45:
         42:dd:1e:fa:0f:93:aa:ae:cc:81:7d:61:37:ac:e2:17:d0:bc:
         0e:9c:bf:05:4d:01:33:81:60:8d:27:31:d8:b0:24:6b:af:c1:
         5b:f1:68:66:6c:80:9a:29:ce:26:35:93:07:ea:47:69:fa:98:
         ea:ee:6c:1f:6f:ee:6a:83:19:22:71:44:01:7d:18:e2:da:5f:
         c2:21:12:80:53:22:01:22:11:e9:a8:27:b9:20:a5:e7:a7:bc:
         bc:41:e9:7a:5f:87:02:94:73:2c:d3:53:bf:6f:25:3b:4b:c8:
         20:0b:9c:d3:28:b8:78:0c:65:e9:ee:4b:e8:cb:df:ad:95:74:
         7b:df:3a:5e:cf:60:7e:72:f4:bd:47:a7:f6:e8:ff:c2:0e:74:
         8f:3e:2c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:28 2025 by rpki-client