Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10699/5fM0acgqNsZbi8h6qM4HThZ9Hn8.roa
File:                     5fM0acgqNsZbi8h6qM4HThZ9Hn8.roa (raw, json)
Hash identifier:          lyFN9Zlfi9PWa80YLQyI1JctAHft2qeTxpAxdWsyVck=
Subject key identifier:   E5:F3:34:69:C8:2A:36:C6:5B:8B:C8:7A:A8:CE:07:4E:16:7D:1E:7F
Certificate issuer:       /CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8
Certificate serial:       36
Authority key identifier: CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/5fM0acgqNsZbi8h6qM4HThZ9Hn8.roa
Signing time:             Sun 01 May 2022 01:30:10 +0000
ROA not before:           Sun 01 May 2022 01:30:10 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     7671
IP address blocks:        122.50.16.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8
        Validity
            Not Before: May  1 01:30:10 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=E5F33469C82A36C65B8BC87AA8CE074E167D1E7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:10:58:e4:8f:df:d4:29:60:38:0c:65:6d:fd:
                    30:0b:15:46:59:ba:f1:e2:51:29:74:6c:de:39:59:
                    fd:0e:cf:54:48:5a:84:1e:3b:a8:c6:c5:6b:71:f6:
                    32:e6:cb:e3:7f:53:bd:03:a3:5b:7b:de:97:de:75:
                    ca:3f:73:59:88:f9:03:7c:b3:65:e9:4a:f6:1a:82:
                    43:5f:4b:be:2c:c7:e8:bb:1d:48:b3:64:20:3d:03:
                    75:3a:15:91:42:48:10:3a:16:7d:1e:dd:18:bd:d4:
                    22:e0:85:e8:89:f0:4e:b9:59:78:b0:60:eb:a6:2d:
                    75:69:2d:97:b0:66:4a:81:cb:bd:be:bc:93:30:2f:
                    c6:67:6f:12:fa:f9:ba:a3:da:b4:a2:4f:39:fe:18:
                    16:ee:d8:58:ff:74:0a:56:e6:2d:b1:75:24:5e:ba:
                    a9:f9:7c:49:ba:02:41:e6:d4:42:8c:b5:72:a1:0f:
                    ad:f7:82:2e:1c:06:d4:56:e0:00:6d:88:a5:55:44:
                    9a:74:cf:b5:33:59:01:08:f7:ef:c2:a3:df:2e:b8:
                    6d:83:69:11:75:b8:55:c2:ec:ba:20:35:0a:70:d5:
                    1b:dc:f7:68:55:0e:e3:a2:d3:88:2c:24:27:aa:43:
                    b3:42:e7:2b:52:eb:31:01:fa:2b:e9:9b:08:53:5b:
                    b6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F3:34:69:C8:2A:36:C6:5B:8B:C8:7A:A8:CE:07:4E:16:7D:1E:7F
            X509v3 Authority Key Identifier:
                keyid:CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/5fM0acgqNsZbi8h6qM4HThZ9Hn8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.50.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         38:40:6f:55:2d:69:c7:2d:38:11:1f:d1:2b:4a:ee:6a:d2:f3:
         9a:19:ed:43:24:11:14:a9:2c:22:cf:d8:77:ca:d1:d6:69:7e:
         28:37:aa:e9:87:f2:d2:5d:31:10:6e:e0:f3:b1:cf:b5:93:74:
         d7:a0:8e:de:d5:02:46:69:93:86:e6:39:61:15:cd:88:6b:03:
         8c:0a:d5:b2:2f:ce:04:26:f6:93:57:87:1b:58:f6:08:db:ba:
         2b:91:56:7c:1c:af:02:18:cb:85:13:42:56:5d:5b:0d:f4:2e:
         b6:ea:c5:aa:df:40:4a:c3:85:04:9e:a2:3b:0e:8a:a7:af:35:
         09:73:c6:b6:40:11:89:28:df:45:a9:c4:ee:7a:4a:d5:b6:4b:
         90:9f:5a:aa:5f:69:ea:73:7b:22:ea:05:ee:64:10:86:a2:39:
         c3:66:2f:6c:24:3e:8f:09:52:d1:93:4c:d2:2f:53:aa:c0:bc:
         12:c7:94:26:59:d3:cd:42:c7:2c:16:47:68:b6:b6:3f:2e:57:
         7c:a3:9b:8e:50:73:e0:6c:66:ff:c0:f9:23:87:c4:47:45:b3:
         05:ab:1f:54:8e:f4:14:ad:6f:52:5b:dc:8c:14:d4:ed:50:3d:
         0f:d2:e2:b4:a7:bb:a8:3a:3d:3d:8d:fe:2f:2e:01:5e:af:ac:
         10:ed:5c:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:40 2025 by rpki-client