Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/sryyVg4SB6AWTdIapCr2lwHbb_g.roa
File:                     sryyVg4SB6AWTdIapCr2lwHbb_g.roa (raw, json)
Hash identifier:          LQkJYN/R+oC3Lh77mfJq2NYh7AfUOd+4n7Xdlx89RgI=
Subject key identifier:   B2:BC:B2:56:0E:12:07:A0:16:4D:D2:1A:A4:2A:F6:97:01:DB:6F:F8
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       2F
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/sryyVg4SB6AWTdIapCr2lwHbb_g.roa
Signing time:             Tue 19 Apr 2022 07:24:10 +0000
ROA not before:           Tue 19 Apr 2022 07:24:10 +0000
ROA not after:            Sat 15 Apr 2023 01:30:02 +0000
asID:                     9622
IP address blocks:        211.125.96.0/19 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Apr 19 07:24:10 2022 GMT
            Not After : Apr 15 01:30:02 2023 GMT
        Subject: CN=B2BCB2560E1207A0164DD21AA42AF69701DB6FF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:54:a7:fc:3d:a1:48:43:8f:2a:58:2c:f2:30:
                    5a:97:20:bc:cf:ff:5b:fa:a8:4e:0d:4a:1d:41:a9:
                    60:8d:4f:8e:91:cb:fb:a9:73:d0:7e:d6:8a:5e:8a:
                    2c:b1:b7:8f:88:18:c3:85:b5:be:e7:f3:8a:aa:d8:
                    fa:55:3a:54:49:95:e3:30:5b:d7:ca:9a:7b:d6:59:
                    b2:6e:ab:12:7f:4a:e8:01:16:82:fa:98:4c:d5:b8:
                    f8:4f:c3:00:f2:4f:9d:28:41:4c:b5:b1:17:51:21:
                    33:a9:c7:51:1c:4d:14:40:7a:2a:61:1d:ef:fe:22:
                    63:c7:1c:82:f1:66:a4:2a:90:03:ab:eb:72:5f:6b:
                    96:d7:7d:94:ab:8c:45:81:aa:dd:02:34:c3:ec:d6:
                    d5:81:7b:57:76:d1:4e:89:05:f4:56:e8:7e:99:47:
                    e2:76:a2:1f:2e:a5:4e:a3:a8:af:7f:9c:5f:b6:de:
                    83:a6:60:48:9b:09:d8:b9:7f:e2:63:f3:89:70:2f:
                    54:dd:00:95:70:11:8d:b3:7b:d0:75:5f:79:65:40:
                    16:5d:59:c4:d4:3a:d0:59:bd:33:ec:09:76:75:bc:
                    1e:c1:c1:62:b7:e6:5e:e7:94:33:cb:cf:cb:60:92:
                    44:09:c8:59:34:21:e9:02:a0:76:92:b4:f5:1b:f7:
                    37:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:BC:B2:56:0E:12:07:A0:16:4D:D2:1A:A4:2A:F6:97:01:DB:6F:F8
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/sryyVg4SB6AWTdIapCr2lwHbb_g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         44:cb:22:20:2c:ab:0f:cc:ee:36:b6:ca:dc:93:fa:1d:7c:1d:
         49:6e:ad:1c:f8:1f:5f:6a:95:6d:9d:03:7b:62:14:a5:27:3d:
         c6:fa:68:d7:23:0f:ab:26:e6:6f:58:56:16:c5:15:d0:08:0f:
         25:ad:51:ae:38:43:aa:f9:ba:64:61:d3:27:25:b9:a9:1a:95:
         e0:44:30:02:30:63:47:aa:13:cc:a0:59:90:7c:40:1f:a6:8d:
         e7:1e:a5:63:e7:01:84:5d:1a:e9:be:b3:f2:2c:13:fa:91:3e:
         63:41:08:a8:3d:b8:bd:59:af:4d:19:bd:ec:88:c5:99:1a:fd:
         3c:68:41:2f:39:e5:9e:3a:37:fc:e4:93:2c:1e:59:3d:65:e1:
         de:41:37:62:6d:a1:bf:95:30:e3:5f:28:bb:1f:05:09:5b:d6:
         2b:4f:a4:c2:20:e4:78:88:67:fe:b6:e7:18:c3:40:9a:1e:dd:
         51:8c:e7:0d:fc:6e:ab:d5:4c:92:7b:bf:ce:10:1a:ad:09:08:
         8d:45:e8:91:ab:f1:01:03:85:5e:58:07:8b:88:cf:9b:23:b3:
         7d:d2:cd:e1:07:cb:aa:10:4e:1e:e9:c2:c2:05:c0:f6:28:c9:
         7c:cd:b4:de:77:75:e7:36:94:52:fb:71:f9:84:b6:fe:3b:22:
         23:be:07:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:54 2025 by rpki-client