Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20074/KQBIykcFPxqAVIFARTCnxre785M.roa
File:                     KQBIykcFPxqAVIFARTCnxre785M.roa (raw, json)
Hash identifier:          kBMzljerQd8PpTLKQdwBgiWKmcuF6flCG05q+qhAzt4=
Subject key identifier:   29:00:48:CA:47:05:3F:1A:80:54:81:40:45:30:A7:C6:B7:BB:F3:93
Certificate issuer:       /CN=9E5004D44AF29AD1209AB85A95F160E83D24E588
Certificate serial:       02
Authority key identifier: 9E:50:04:D4:4A:F2:9A:D1:20:9A:B8:5A:95:F1:60:E8:3D:24:E5:88
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/KQBIykcFPxqAVIFARTCnxre785M.roa
Signing time:             Wed 13 Jul 2022 18:04:55 +0000
ROA not before:           Wed 13 Jul 2022 18:04:55 +0000
ROA not after:            Thu 13 Jul 2023 17:50:42 +0000
asID:                     63782
IP address blocks:        103.119.88.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E5004D44AF29AD1209AB85A95F160E83D24E588
        Validity
            Not Before: Jul 13 18:04:55 2022 GMT
            Not After : Jul 13 17:50:42 2023 GMT
        Subject: CN=290048CA47053F1A805481404530A7C6B7BBF393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:9d:86:ae:8b:37:52:4a:2c:62:40:52:4a:90:
                    54:30:2f:b9:4c:e9:02:d3:22:18:49:6f:cd:7e:16:
                    04:f6:56:38:ed:32:3c:34:e4:cd:84:75:2c:2a:6f:
                    8c:c6:8a:87:ff:43:af:90:15:0b:a6:81:56:d3:68:
                    99:54:00:bb:ff:6b:92:0b:ad:bd:3d:91:17:5c:f7:
                    d0:a7:79:9c:e3:5d:40:dc:a9:bf:5f:05:20:87:b1:
                    bb:ce:73:49:1c:37:d3:2f:b3:9a:f4:79:4b:67:19:
                    6c:69:50:c1:36:cf:63:76:a5:d9:03:ae:ef:44:ef:
                    ea:3b:4f:c0:dd:6f:1e:36:24:e6:9d:79:60:12:7b:
                    57:1f:93:99:1d:87:ef:f5:7f:44:67:a8:1d:91:62:
                    92:f0:2d:16:a2:a5:17:94:99:6c:52:1f:0c:f7:d6:
                    3a:72:72:04:87:46:ea:23:b1:31:ec:d1:f3:54:ad:
                    c3:ca:07:c1:70:ec:b1:6b:39:b8:54:bf:99:78:ff:
                    25:c0:23:80:30:e3:55:17:46:c2:ca:c7:36:df:c3:
                    c7:89:6a:ea:70:d5:83:2f:75:41:f0:66:9e:c9:39:
                    d7:76:e6:4e:b5:0e:a8:75:49:51:e3:75:26:9d:00:
                    cc:5d:dd:cc:b2:63:5b:bb:4f:c9:3f:66:82:b3:d3:
                    ad:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:00:48:CA:47:05:3F:1A:80:54:81:40:45:30:A7:C6:B7:BB:F3:93
            X509v3 Authority Key Identifier:
                keyid:9E:50:04:D4:4A:F2:9A:D1:20:9A:B8:5A:95:F1:60:E8:3D:24:E5:88

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/KQBIykcFPxqAVIFARTCnxre785M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:10:4c:31:63:60:c5:11:dd:7e:c4:eb:31:d7:72:da:43:a9:
         f9:b8:18:44:5f:a9:1f:fd:cb:aa:27:cb:ec:d6:e1:f1:2e:15:
         86:e7:56:6d:5e:2c:ff:80:3d:1d:9e:36:7f:6b:37:8e:9f:cd:
         df:f7:fa:0e:41:99:79:20:9b:0b:1b:1f:b9:84:f7:03:14:7c:
         20:f8:4d:b7:64:88:3a:d3:0a:98:c0:e6:bf:c0:16:1c:64:bd:
         58:eb:ba:3c:0c:29:05:b6:38:2b:c6:b2:a0:53:c6:28:73:16:
         4f:ff:71:56:ef:37:67:96:cc:a1:d2:dc:59:de:bd:d6:b0:94:
         e5:2e:2e:2a:83:35:fa:e4:e2:f4:18:83:a3:ad:45:b6:84:43:
         9d:78:94:1f:16:b7:8e:f9:59:ed:c6:61:15:0e:fb:66:42:f7:
         8a:9f:fe:65:20:d1:41:da:a6:e4:9a:67:3e:85:01:43:38:60:
         38:3f:10:05:28:d5:2a:cb:27:ca:9b:fe:07:88:7e:c3:c7:0d:
         42:b3:b6:2a:1e:8e:6b:7e:d7:ae:95:fa:d5:23:d2:3f:b3:6c:
         1a:78:71:39:16:1c:e8:72:31:2d:6b:af:d0:3b:aa:50:2a:21:
         3e:34:32:2a:ca:79:f9:41:b4:8b:6e:31:25:bd:04:cf:73:8e:
         56:b0:34:52
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:13 2025 by rpki-client