Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/sLXPgP1tQlp5_fx6ikB3QG-arAw.roa
File:                     sLXPgP1tQlp5_fx6ikB3QG-arAw.roa (raw, json)
Hash identifier:          CMeoKIic9OCEdgB6ZIvdAS2p0jdHgbehiPRvR5dx6+c=
Subject key identifier:   B0:B5:CF:80:FD:6D:42:5A:79:FD:FC:7A:8A:40:77:40:6F:9A:AC:0C
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       33
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/sLXPgP1tQlp5_fx6ikB3QG-arAw.roa
Signing time:             Tue 01 Mar 2022 08:34:00 +0000
ROA not before:           Tue 01 Mar 2022 08:34:00 +0000
ROA not after:            Wed 15 Feb 2023 01:30:03 +0000
asID:                     9351
IP address blocks:        122.152.32.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Mar  1 08:34:00 2022 GMT
            Not After : Feb 15 01:30:03 2023 GMT
        Subject: CN=B0B5CF80FD6D425A79FDFC7A8A4077406F9AAC0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:64:a9:97:fd:d0:4f:e7:32:49:c8:4f:47:f9:
                    0b:e9:e0:1a:0c:ad:da:91:b6:73:5d:7e:82:8f:3f:
                    c1:71:24:4e:c3:1d:c7:f6:30:9d:5b:b0:a8:d6:71:
                    49:df:9d:25:90:d2:7c:6b:b0:53:7d:d2:5d:8c:93:
                    fc:72:95:0c:55:e1:e8:23:f6:2f:dc:3e:91:20:64:
                    08:aa:99:97:a2:ae:36:61:b1:77:01:3e:4e:4d:55:
                    30:8f:0a:17:20:eb:7c:3a:ab:30:cc:76:d4:9c:55:
                    98:7a:88:86:16:1b:e0:8b:42:53:07:48:79:22:87:
                    b4:f6:aa:a6:34:a7:20:8f:bf:ec:15:1e:07:73:21:
                    ac:57:02:d7:f2:57:65:b9:b8:40:82:df:90:d1:30:
                    e0:f9:85:42:be:7e:4c:a4:34:06:ff:32:89:97:7b:
                    cf:59:47:5f:3d:ca:8f:6d:ab:d2:8d:a3:fe:98:bb:
                    cc:73:b6:fc:5b:9f:c4:af:26:13:bc:c7:7b:5f:f5:
                    94:f1:14:bb:d1:3c:40:1d:57:4b:ab:f1:54:f2:3f:
                    95:d0:16:e3:6b:42:6f:a0:bd:dc:02:76:fb:60:b1:
                    74:bf:45:8d:1c:e6:04:aa:1b:a9:cc:05:7d:6b:d7:
                    c5:42:5a:a9:2b:b2:ad:62:4b:bb:58:7e:d2:b8:ec:
                    d5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B5:CF:80:FD:6D:42:5A:79:FD:FC:7A:8A:40:77:40:6F:9A:AC:0C
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/sLXPgP1tQlp5_fx6ikB3QG-arAw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.152.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:d6:25:0e:33:8f:4d:a8:74:5c:dd:cb:2b:7c:37:f7:c5:e2:
         af:38:91:79:59:84:32:2d:b2:f2:4a:b8:d7:2d:5a:45:50:5b:
         4e:01:fa:fa:9f:6f:2d:6f:cb:ad:74:7c:c5:0f:4e:40:6d:d4:
         da:4f:8d:c9:8b:c9:dc:44:82:5f:34:4b:3f:d9:4e:17:82:eb:
         15:1a:cd:c6:90:6f:54:af:66:99:36:68:40:f2:44:a1:f4:48:
         04:69:7f:17:a7:d2:3a:7c:8f:f7:6b:9f:6f:a0:02:21:a3:e7:
         8c:e0:c1:09:1d:48:69:b8:f1:f2:8f:20:e8:3f:e1:0a:7f:6f:
         b1:09:4d:f3:e2:57:87:7b:2e:44:06:d1:83:52:f9:85:1c:bf:
         30:3b:d6:d3:bb:89:9f:20:c8:60:3b:9f:30:31:bb:51:71:24:
         a0:aa:fd:f0:97:a4:1f:fe:5f:69:87:09:53:8c:41:f5:24:89:
         c8:ac:f5:19:e1:5a:c6:f5:06:cf:07:c6:00:00:cc:99:8c:42:
         2d:89:c4:1a:64:21:34:68:14:e9:02:a1:15:f3:ac:68:e3:84:
         cf:f5:5c:87:a0:60:03:04:43:cb:84:e7:25:b2:00:92:7d:14:
         bf:12:94:47:52:3d:8d:8d:be:95:25:0a:22:a5:57:34:04:d9:
         74:f6:ff:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:23 2025 by rpki-client