Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/5hOPPWT7cq1KNMlPHIGHBRo_ToA.roa
File:                     5hOPPWT7cq1KNMlPHIGHBRo_ToA.roa (raw, json)
Hash identifier:          ymvYuu8qW4jyHMxU6x7rD8NpZ+/lrbLRBoymChIXy0Q=
Subject key identifier:   E6:13:8F:3D:64:FB:72:AD:4A:34:C9:4F:1C:81:87:05:1A:3F:4E:80
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       2D
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/5hOPPWT7cq1KNMlPHIGHBRo_ToA.roa
Signing time:             Tue 19 Apr 2022 07:24:09 +0000
ROA not before:           Tue 19 Apr 2022 07:24:09 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     9622
IP address blocks:        203.179.0.0/20 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Apr 19 07:24:09 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=E6138F3D64FB72AD4A34C94F1C8187051A3F4E80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:01:59:73:49:ae:1d:b2:ad:79:a3:49:5c:c6:
                    dc:69:ba:45:a3:dd:4f:d0:b3:da:e3:de:a8:1b:08:
                    51:de:12:a1:17:a9:10:5e:19:31:22:c6:45:97:94:
                    27:b3:36:90:b4:18:7a:07:de:2c:66:4e:3f:0a:24:
                    31:73:33:b2:fa:46:c6:be:cf:94:91:e2:70:03:61:
                    fd:54:41:1b:6e:f9:00:ef:26:9c:24:a8:ee:c3:a6:
                    12:c2:0a:38:df:b5:73:8b:d5:24:af:6f:0b:23:97:
                    9f:46:e8:93:33:87:bd:c7:c4:dc:20:28:2c:14:fb:
                    d8:b0:a2:9b:22:a6:6b:a5:02:45:ad:d4:3c:68:4c:
                    22:e8:1d:e3:c9:f7:0a:d7:20:c0:46:e5:a5:eb:6e:
                    6f:39:2e:6f:ab:51:fa:8e:c0:fc:7a:d8:f8:d5:79:
                    fe:89:7e:ed:fa:d0:28:06:0d:16:0f:98:67:bb:72:
                    d4:64:d7:1a:96:e8:55:79:d2:52:08:a7:d6:82:62:
                    c6:37:81:19:69:79:5c:25:0e:a7:3b:9a:89:15:d2:
                    1a:9e:56:28:7f:1d:c4:33:28:82:03:fd:d9:db:ed:
                    f0:2a:c1:1c:66:42:96:f0:ac:97:f3:e6:6b:29:5b:
                    70:52:d2:30:d8:51:03:e2:d7:1c:69:bc:34:c5:7c:
                    4b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:13:8F:3D:64:FB:72:AD:4A:34:C9:4F:1C:81:87:05:1A:3F:4E:80
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/5hOPPWT7cq1KNMlPHIGHBRo_ToA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.179.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         63:b0:92:88:42:63:aa:fc:af:3f:d9:78:36:c4:f8:a1:22:1e:
         11:5d:2f:f6:7c:40:08:7b:a2:ae:95:76:78:59:98:98:87:97:
         4e:f8:91:83:3b:ef:f4:7c:24:a3:5e:0b:d1:fb:84:90:11:84:
         7b:b4:c5:8c:c0:6a:04:08:7a:c6:71:04:1e:8b:19:a8:16:66:
         3b:9c:d0:cc:b4:eb:bd:d1:f7:bd:e3:5b:58:13:76:90:49:c7:
         a4:3a:6e:48:7c:1f:7a:b9:44:0e:a6:09:4b:c8:d4:96:91:7c:
         a4:c4:17:eb:82:60:94:46:a0:09:f0:ce:8b:51:19:a0:b7:5f:
         c3:e8:a6:fd:0e:61:84:cc:e0:36:bd:2b:4f:d5:2e:7b:7b:42:
         fb:2f:8e:1b:48:03:32:c6:f7:91:24:28:37:60:d0:69:b9:52:
         4f:8e:e2:96:9d:dc:ce:8d:81:da:85:17:98:1c:9a:1c:ee:c3:
         17:9a:8c:cd:33:ff:f5:a1:af:13:2d:2e:f7:fe:f1:58:5d:d3:
         fa:98:d6:5f:45:51:65:83:9f:28:06:f8:c8:94:e7:2f:42:46:
         b0:62:61:90:e3:f4:06:72:4d:ec:90:54:65:d7:f2:8e:8c:f1:
         0e:c4:5b:53:e1:b0:c2:1b:95:58:d5:16:fb:fa:8f:0c:0e:a3:
         61:3b:ae:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:48 2025 by rpki-client