Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/Wn3RLtAH2IX5EUN4gj8rWypQ_ho.roa
File:                     Wn3RLtAH2IX5EUN4gj8rWypQ_ho.roa (raw, json)
Hash identifier:          mqXL2i+biCML+sX1EoZwzX7FVPKp6/C3butQHFgt2J4=
Subject key identifier:   5A:7D:D1:2E:D0:07:D8:85:F9:11:43:78:82:3F:2B:5B:2A:50:FE:1A
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       45
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/Wn3RLtAH2IX5EUN4gj8rWypQ_ho.roa
Signing time:             Sat 01 Apr 2023 01:29:52 +0000
ROA not before:           Sat 01 Apr 2023 01:29:52 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     9622
IP address blocks:        202.91.48.0/20 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Apr  1 01:29:52 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=5A7DD12ED007D885F9114378823F2B5B2A50FE1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c0:04:1f:e8:b5:c4:11:78:e0:d6:eb:04:c8:
                    e7:d7:d5:8e:b9:c1:e2:a8:43:ee:f3:c3:22:cf:09:
                    0c:e5:03:ac:68:1a:84:bb:a0:f3:4f:0b:7b:ee:cf:
                    ef:01:97:8d:49:61:b1:99:bf:ef:4a:32:0d:e8:58:
                    51:81:77:3b:92:de:6f:3b:b0:73:8b:6e:bf:44:41:
                    78:93:26:e4:e3:2c:8c:c1:3b:44:e1:7c:34:f5:d7:
                    86:61:68:2f:a7:66:11:78:1c:70:30:af:fa:87:90:
                    b3:7a:cf:fa:0a:40:f4:87:05:dc:db:06:6a:12:b8:
                    b3:48:0f:d2:de:f2:3a:fb:5d:d9:f9:3f:77:8e:69:
                    67:a0:48:df:2d:d9:a5:27:9e:7c:6d:8e:cc:3a:25:
                    f3:31:82:4a:62:11:c4:8c:14:aa:6d:6e:81:10:21:
                    d9:ae:0a:aa:b6:17:b2:c1:70:66:8f:a7:8b:f7:72:
                    c3:6b:84:17:ad:6e:5d:dd:a3:01:14:9e:95:69:66:
                    c5:f6:3e:ee:3f:90:10:83:56:a0:e8:b3:26:88:58:
                    ca:5d:f6:37:26:75:15:09:c9:92:81:06:06:c9:5c:
                    a9:99:7b:a7:2b:c1:57:dc:40:bb:0f:2f:83:5d:6d:
                    78:78:4f:e6:83:26:cb:c7:5e:3a:6a:89:1c:05:89:
                    55:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7D:D1:2E:D0:07:D8:85:F9:11:43:78:82:3F:2B:5B:2A:50:FE:1A
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/Wn3RLtAH2IX5EUN4gj8rWypQ_ho.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.91.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:dc:8a:65:4c:09:d7:fc:d8:fd:25:2f:3e:9c:3b:5e:a0:01:
         94:ca:88:a2:ed:8f:8c:f7:33:70:3f:c6:f8:13:9f:1b:6c:55:
         15:80:12:fe:d5:7f:ff:fe:9c:85:7e:fd:83:82:dc:e9:42:6f:
         8a:42:14:05:33:da:2f:96:b5:7a:1c:00:ec:00:26:cd:66:6d:
         05:f8:63:84:97:90:6f:b7:09:05:f3:ad:61:8e:54:49:7e:c1:
         3b:7b:33:9a:b1:c4:23:89:05:a2:30:68:9b:61:87:5c:8e:c5:
         43:0f:72:c9:25:9b:13:3d:83:80:ca:6f:4a:80:55:3f:21:cd:
         ee:a9:c3:09:46:28:9f:84:1b:63:53:c3:12:6c:d3:59:44:c6:
         8a:b7:8b:c6:a6:7a:50:c7:3a:f9:8b:66:55:30:c3:c2:10:81:
         99:39:43:c3:af:c6:ce:d8:de:9e:9a:37:0f:e6:6f:06:40:f7:
         9d:f1:83:7a:00:4f:59:db:d1:dc:7e:5d:f6:db:b0:36:7d:61:
         85:dd:5e:b3:d2:33:4d:dc:8e:9b:40:0c:ae:c1:f8:3d:f7:e6:
         e6:6e:a5:e0:53:60:ff:1f:85:09:22:81:1e:0b:9d:19:f8:b5:
         6b:f2:df:74:89:1c:62:3b:75:77:29:2d:f0:d3:65:b8:fb:93:
         0e:0e:bf:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:51:19 2025 by rpki-client