Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/SiKO8uE6xFQmh0wRBiUfIkdM7DM.roa
File:                     SiKO8uE6xFQmh0wRBiUfIkdM7DM.roa (raw, json)
Hash identifier:          g6tTWRbNcr1x3/BYSgkk6WhPCTB9UnZ9kJ7u+pQLhzg=
Subject key identifier:   4A:22:8E:F2:E1:3A:C4:54:26:87:4C:11:06:25:1F:22:47:4C:EC:33
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       49
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/SiKO8uE6xFQmh0wRBiUfIkdM7DM.roa
Signing time:             Sat 01 Apr 2023 01:29:55 +0000
ROA not before:           Sat 01 Apr 2023 01:29:55 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9622
IP address blocks:        211.125.96.0/19 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Apr  1 01:29:55 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=4A228EF2E13AC45426874C1106251F22474CEC33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a7:90:0c:aa:25:cd:38:1d:54:8b:af:2d:05:
                    b9:59:25:2d:3b:f2:a3:51:7e:76:af:f6:6a:0e:2a:
                    42:9d:e5:e6:12:51:bb:a1:63:22:ed:d0:20:7c:b5:
                    ee:37:fa:0b:01:2a:14:41:71:ca:70:d7:a1:60:92:
                    32:f0:03:74:90:bc:08:b1:45:d5:94:8e:33:bd:5f:
                    76:cf:8e:d2:1d:da:58:c0:e6:d4:ca:4b:61:db:bb:
                    d4:56:4c:2a:d0:9a:80:97:1c:cc:1f:b4:0e:b4:d7:
                    60:44:a6:e0:41:57:1e:07:eb:7b:e0:42:30:dd:06:
                    1d:56:db:cf:b7:cc:20:43:5a:ce:e3:6a:7c:7d:fd:
                    05:74:1e:4a:4e:c0:9b:ae:8e:11:7d:cc:9d:52:d5:
                    88:4a:9d:04:da:55:bf:f6:4b:1b:45:79:76:d8:17:
                    12:fd:8b:cf:07:11:a5:8a:f4:37:03:f9:1d:60:89:
                    a1:c2:d7:45:88:ea:05:0b:f8:22:7f:c3:8a:e3:16:
                    3c:55:dc:13:68:86:b7:23:0e:42:b6:9b:06:e4:10:
                    0d:20:0e:fd:95:aa:ba:fa:d4:c3:0b:7a:6b:ff:6f:
                    22:28:2a:46:80:0d:0f:92:6c:09:c0:e6:da:bd:1f:
                    d3:7f:05:04:b5:72:49:f2:1d:1b:75:6a:8b:af:23:
                    fe:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:22:8E:F2:E1:3A:C4:54:26:87:4C:11:06:25:1F:22:47:4C:EC:33
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/SiKO8uE6xFQmh0wRBiUfIkdM7DM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         87:35:05:e7:18:ea:3f:f7:ec:1d:b9:e3:6c:0d:c4:94:8e:8a:
         d4:80:f7:90:a7:a5:c6:48:4f:21:a7:ea:82:d2:7a:e2:31:de:
         b7:e7:d5:39:28:69:fc:9c:89:78:61:a8:84:c1:89:63:55:76:
         6f:31:26:91:69:02:25:66:94:cc:7a:be:54:9d:33:89:34:6f:
         4f:38:8c:ed:cc:8e:67:02:1f:c2:01:34:b3:7d:10:ba:33:80:
         23:49:6a:b6:f8:2b:58:db:13:90:46:88:4d:47:46:7a:c0:dc:
         9e:73:ce:81:2f:80:3a:b8:a3:ef:b9:b1:bd:f1:19:57:05:fb:
         20:03:f3:e2:25:4d:e3:dd:ce:81:33:74:63:39:bf:e3:e6:df:
         d1:c5:05:0d:14:f2:d4:c0:bd:9a:ab:40:80:17:be:92:f8:ab:
         c4:40:b9:20:53:41:46:8b:69:c2:53:71:d6:b7:46:27:e4:09:
         45:36:ce:9f:25:6d:13:9d:de:e5:7d:19:6a:8c:bf:3b:5c:90:
         3e:fb:1e:3c:e4:32:dc:6f:ba:b4:74:cb:68:10:67:bd:fd:35:
         43:a4:89:d4:35:dc:87:71:99:4b:e5:ec:e3:e8:d8:ce:48:85:
         98:26:07:71:d4:5f:c5:fa:9b:90:6b:dd:33:8a:fb:44:3f:00:
         12:1b:62:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:48:20 2025 by rpki-client