Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2005/mCOXMpCYNhK4kyvh_WAgZSNZhLQ.roa
File:                     mCOXMpCYNhK4kyvh_WAgZSNZhLQ.roa (raw, json)
Hash identifier:          lMQTRm8YvNlgMJAI9NNghPdcman9hXIrvfgHOWfHFb0=
Subject key identifier:   98:23:97:32:90:98:36:12:B8:93:2B:E1:FD:60:20:65:23:59:84:B4
Certificate issuer:       /CN=0DF81D1E559B0F1955274E1E362C50C70362F461
Certificate serial:       03
Authority key identifier: 0D:F8:1D:1E:55:9B:0F:19:55:27:4E:1E:36:2C:50:C7:03:62:F4:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DfgdHlWbDxlVJ04eNixQxwNi9GE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/mCOXMpCYNhK4kyvh_WAgZSNZhLQ.roa
Signing time:             Fri 28 Oct 2022 09:17:05 +0000
ROA not before:           Fri 28 Oct 2022 09:17:05 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     0
IP address blocks:        160.195.0.0/16 maxlen: 16
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF81D1E559B0F1955274E1E362C50C70362F461
        Validity
            Not Before: Oct 28 09:17:05 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=9823973290983612B8932BE1FD602065235984B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dd:d1:00:92:2a:84:e7:e4:0a:2c:14:03:d1:
                    9c:11:2e:b0:2a:81:8d:9f:38:57:4c:4e:52:d6:00:
                    84:63:94:35:de:d9:e8:f8:98:16:ee:e8:f0:d5:72:
                    6a:66:01:e6:9f:90:3f:20:05:c3:f3:10:28:28:a7:
                    17:eb:82:f3:8e:bd:e6:ed:0e:91:c1:1a:42:37:a1:
                    54:83:e9:04:ad:1a:6f:87:36:8b:30:c6:af:f7:26:
                    e9:c7:69:ca:93:45:fc:af:d0:49:11:f4:e1:26:90:
                    ff:4b:e4:b4:25:7a:4e:65:3d:ad:c5:85:c2:57:df:
                    93:b0:78:bd:c2:9d:24:87:dd:5c:22:9d:21:42:3b:
                    d7:5f:00:ed:3b:35:d7:f7:63:48:90:ce:55:54:c3:
                    10:1f:bc:b8:b5:ae:90:28:d1:76:60:84:6b:cd:52:
                    01:e8:ad:b2:e9:c2:70:8a:f6:b2:08:1a:62:63:38:
                    5f:8c:3a:54:9b:b4:31:61:7b:be:a7:f8:69:66:fa:
                    e9:f9:41:13:a8:24:a6:31:66:b2:7f:8b:18:ef:9a:
                    37:f4:3a:ea:f2:62:db:24:99:1d:78:d9:4e:23:26:
                    8d:69:3a:5c:05:20:cc:dd:8a:1b:c5:e5:c4:0b:a8:
                    d4:06:b3:63:23:f9:f5:ff:56:2e:0c:f9:d8:67:8e:
                    d1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:23:97:32:90:98:36:12:B8:93:2B:E1:FD:60:20:65:23:59:84:B4
            X509v3 Authority Key Identifier:
                keyid:0D:F8:1D:1E:55:9B:0F:19:55:27:4E:1E:36:2C:50:C7:03:62:F4:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/DfgdHlWbDxlVJ04eNixQxwNi9GE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DfgdHlWbDxlVJ04eNixQxwNi9GE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/mCOXMpCYNhK4kyvh_WAgZSNZhLQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.195.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         21:8c:53:b6:e9:c3:1d:7a:cd:ee:bb:01:04:35:68:ae:e6:8e:
         0f:b7:6f:b3:6b:a7:4c:b2:e5:eb:4d:31:67:02:95:79:a2:24:
         a4:76:ba:f6:72:4e:e5:ca:5b:61:dc:fe:46:48:73:23:9c:40:
         1f:06:7f:ad:98:15:b4:d1:0a:83:2a:74:17:03:ec:ad:e1:94:
         4b:3e:19:5b:c0:3f:af:88:63:5e:8a:2b:fb:3b:8f:e1:56:c7:
         f4:47:09:9e:a2:df:72:aa:4d:aa:fc:69:e1:50:7e:aa:c5:68:
         ad:0c:47:86:e4:c9:70:57:a6:cc:97:14:e7:3a:ae:cb:a8:a8:
         41:ae:6e:0a:cf:3e:c2:6b:53:9b:93:0d:cb:43:3f:2e:9c:6b:
         12:ca:76:f9:f6:0a:86:4f:02:f6:41:e7:a6:5e:85:0c:9c:3f:
         e4:c7:9c:7f:e9:c8:b9:60:2d:9e:fd:f5:60:0c:18:cb:3f:18:
         16:43:a6:c2:14:1e:08:67:d7:51:8f:bf:ae:b8:e7:fb:2b:b9:
         cd:28:9d:25:6b:0a:35:74:1e:64:5b:b5:79:33:aa:5b:95:15:
         47:a6:0f:89:2a:e1:2d:f5:e0:ff:18:d4:9f:18:c5:b6:26:44:
         84:f0:f9:49:26:34:38:90:7c:f4:3a:49:3d:de:f9:1b:ff:74:
         9c:24:f1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:13 2025 by rpki-client