Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/CxJVyYUsiso3QEY5PdqFx4aaoQI.roa
File:                     CxJVyYUsiso3QEY5PdqFx4aaoQI.roa (raw, json)
Hash identifier:          fe0Ty7Gr5fREyQlJ80xoSFxZXBe9ifG8MRuoxTOpum4=
Subject key identifier:   0B:12:55:C9:85:2C:8A:CA:37:40:46:39:3D:DA:85:C7:86:9A:A1:02
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       05
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/CxJVyYUsiso3QEY5PdqFx4aaoQI.roa
Signing time:             Thu 13 Oct 2022 06:48:04 +0000
ROA not before:           Thu 13 Oct 2022 06:48:04 +0000
ROA not after:            Fri 13 Oct 2023 06:37:32 +0000
asID:                     10000
IP address blocks:        103.29.48.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Oct 13 06:48:04 2022 GMT
            Not After : Oct 13 06:37:32 2023 GMT
        Subject: CN=0B1255C9852C8ACA374046393DDA85C7869AA102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:91:14:2b:05:5f:88:df:42:69:5e:47:2d:8c:
                    a2:c0:19:b9:b7:5e:12:2f:e5:58:50:6f:5f:68:14:
                    f3:84:57:4e:f1:99:f8:f4:8d:aa:18:f6:68:6b:1e:
                    6f:28:bc:d1:1f:7b:0d:75:4e:c6:f8:53:04:be:3f:
                    ab:4c:c9:5c:07:4d:8e:af:df:99:02:1d:7b:c6:a3:
                    0c:1b:f2:72:fc:97:82:e3:5c:2b:fe:c0:14:32:26:
                    f5:63:03:cd:35:a6:62:fc:75:34:14:b6:c1:56:5a:
                    29:c7:a9:6f:da:a2:0f:55:64:86:8f:09:fd:ef:25:
                    6e:ee:a3:74:82:96:0d:be:5f:6a:9e:fa:43:fa:bb:
                    d3:b7:34:04:96:5c:02:d2:9d:81:e6:56:68:97:2a:
                    68:76:9d:27:a0:da:1f:a8:7a:da:48:81:67:a0:60:
                    d3:7b:4f:f6:27:68:4e:e4:13:68:fa:40:79:13:6b:
                    d0:b1:f8:9d:15:10:95:c2:fc:93:91:5f:3e:be:49:
                    b2:fb:b6:8f:34:7a:c5:ba:d7:b5:52:be:17:a0:74:
                    77:d1:eb:b2:77:6b:ce:2c:b8:9a:a5:2a:b2:b7:c4:
                    26:2c:58:ff:f3:22:5b:3e:35:83:e0:23:34:42:7a:
                    a5:b3:a7:3e:2d:a1:c2:fd:7e:8b:e2:68:d4:00:42:
                    1b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:12:55:C9:85:2C:8A:CA:37:40:46:39:3D:DA:85:C7:86:9A:A1:02
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/CxJVyYUsiso3QEY5PdqFx4aaoQI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.29.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:33:00:f2:80:2a:5f:5d:83:be:ee:e0:74:e8:d3:5f:ff:47:
         ae:aa:a2:11:4a:6f:7f:fa:30:03:4d:2b:5c:79:4f:a6:7a:ee:
         09:c2:dd:7c:eb:4f:a7:53:99:e3:79:fe:ea:e2:ee:82:e8:ff:
         76:25:58:af:62:86:fe:a1:62:a7:0a:38:11:9a:22:f2:19:15:
         2f:a4:6c:b9:bf:5d:46:dc:47:75:33:d9:88:f4:3d:51:aa:63:
         cb:39:f0:2f:e1:d8:4f:7d:0a:f4:2a:7f:71:6b:10:54:48:bd:
         65:a9:a8:c5:ce:3a:c5:7c:68:19:92:2f:bb:88:b5:d1:97:df:
         85:5f:50:df:8f:07:18:99:08:47:60:7e:4f:2b:8e:99:28:55:
         dd:bc:9c:a8:a9:35:5d:af:1f:ee:43:22:93:88:fa:87:60:0b:
         4c:ff:ce:29:7e:9e:08:6a:fb:85:ca:66:d8:c1:45:96:32:f5:
         7c:2e:96:3e:db:4e:1b:08:e5:f5:24:6d:d7:a2:98:24:b5:c9:
         61:22:f4:25:79:67:ac:80:25:f8:98:48:0b:c0:e2:35:54:8a:
         a1:3e:c2:56:88:58:47:d6:da:83:1c:33:dd:a3:97:91:60:74:
         5d:09:bd:62:64:4c:d7:a2:69:3e:d9:d6:94:ea:14:40:1f:65:
         6a:73:21:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 22:07:17 2025 by rpki-client