Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20199/qSQAAgJpcMPSaWn9cdpfocJ-nng.roa
File:                     qSQAAgJpcMPSaWn9cdpfocJ-nng.roa (raw, json)
Hash identifier:          kGTKBqBkaBvksT0aRvN5wIUQQ3cY8xUEdZz/8QQHl28=
Subject key identifier:   A9:24:00:02:02:69:70:C3:D2:69:69:FD:71:DA:5F:A1:C2:7E:9E:78
Certificate issuer:       /CN=8D57B3B8DB318598B66F4DD6618CB19A08565FFD
Certificate serial:       0C
Authority key identifier: 8D:57:B3:B8:DB:31:85:98:B6:6F:4D:D6:61:8C:B1:9A:08:56:5F:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/qSQAAgJpcMPSaWn9cdpfocJ-nng.roa
Signing time:             Wed 26 Apr 2023 11:34:45 +0000
ROA not before:           Wed 26 Apr 2023 11:34:45 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     150296
IP address blocks:        103.37.88.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D57B3B8DB318598B66F4DD6618CB19A08565FFD
        Validity
            Not Before: Apr 26 11:34:45 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=A9240002026970C3D26969FD71DA5FA1C27E9E78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:86:16:6b:03:0e:16:8c:13:30:2a:ac:72:d8:
                    35:57:21:a7:c4:f1:a2:18:d2:55:1e:b4:6a:9b:20:
                    8b:fa:d5:ee:99:63:04:19:4a:86:c5:51:ff:53:1f:
                    a1:ef:e6:4b:d1:92:f4:ad:3a:49:54:5f:cd:58:79:
                    6a:cd:0e:77:57:cf:af:db:20:13:8e:c2:ea:b0:da:
                    87:e4:33:6c:97:80:a2:96:36:b8:ac:e2:c0:65:12:
                    2b:68:6c:84:a6:f7:14:db:b2:6a:50:98:63:3a:0c:
                    ae:f6:a4:cf:05:1f:fc:2f:82:9e:3a:55:d4:49:af:
                    e4:50:24:96:d7:8f:7f:51:79:3c:56:20:0c:20:36:
                    b6:44:91:be:17:32:08:0c:4b:74:aa:34:0a:4d:e3:
                    47:47:f3:0f:16:db:e8:56:0f:58:dd:09:0d:77:b7:
                    84:5b:f4:ac:59:de:b2:9f:67:d8:c7:ba:40:69:c5:
                    1c:35:aa:dd:ab:1b:4e:02:9d:59:a5:5e:ef:22:35:
                    62:22:95:75:8c:3f:e1:70:93:91:b9:d6:2c:56:e4:
                    24:dc:d7:2b:9a:33:64:99:5d:fc:54:8e:7c:75:8e:
                    2a:2e:fa:89:c3:39:38:58:4b:b6:2b:d5:74:18:42:
                    f7:44:c8:51:64:29:69:ce:3c:4e:4a:d1:16:60:28:
                    35:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:24:00:02:02:69:70:C3:D2:69:69:FD:71:DA:5F:A1:C2:7E:9E:78
            X509v3 Authority Key Identifier:
                keyid:8D:57:B3:B8:DB:31:85:98:B6:6F:4D:D6:61:8C:B1:9A:08:56:5F:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/qSQAAgJpcMPSaWn9cdpfocJ-nng.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:af:5a:6b:88:c3:1f:6d:ad:7b:15:39:a0:8d:41:79:28:96:
         5e:11:8c:43:52:19:1b:df:ff:6a:3d:30:38:6b:bd:8c:3a:7c:
         b4:ec:9a:cd:3f:c3:97:c6:17:02:06:d6:6b:94:b9:99:20:a4:
         08:d2:01:ce:a0:a6:bb:29:21:31:23:5f:91:77:10:21:95:a5:
         6b:92:a8:c5:91:a9:a4:d0:2a:d3:cb:20:c6:24:53:1c:ce:62:
         a1:d3:17:91:a2:2c:bf:70:28:74:85:01:a7:48:b7:89:85:00:
         3c:9e:bf:f3:30:15:63:27:79:9c:e1:6b:3b:2d:41:5b:7b:32:
         c7:82:10:bf:15:a2:be:23:0d:12:81:38:92:56:e8:c4:a0:5c:
         f9:23:57:21:a5:50:71:53:10:79:14:38:37:2a:13:f3:db:0c:
         6b:84:1c:fb:14:c3:eb:5a:49:d4:c8:0f:33:e9:e7:28:cc:09:
         5c:cb:9b:26:32:aa:4a:5c:b8:03:95:f5:dd:f5:13:f5:df:58:
         11:b6:53:31:bb:a6:d7:2c:7f:94:8d:7a:26:c2:e1:d9:cb:09:
         91:85:db:02:2f:12:c5:7f:2c:8d:62:0f:5f:49:79:fc:23:4d:
         ae:c4:42:e9:bb:4e:51:d2:54:17:5d:53:05:84:b9:5f:14:04:
         48:59:c4:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:05 2025 by rpki-client