Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/-CLoFeaGHDUN0W1lU9iZFq4Pm7I.roa
File:                     -CLoFeaGHDUN0W1lU9iZFq4Pm7I.roa (raw, json)
Hash identifier:          /t9iAquPnZ6LfidPJ1K1/qd4PyAGQJUii+IYIr2v4E8=
Subject key identifier:   F8:22:E8:15:E6:86:1C:35:0D:D1:6D:65:53:D8:99:16:AE:0F:9B:B2
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       0B
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/-CLoFeaGHDUN0W1lU9iZFq4Pm7I.roa
Signing time:             Tue 09 May 2023 08:16:38 +0000
ROA not before:           Tue 09 May 2023 08:16:38 +0000
ROA not after:            Sun 14 Apr 2024 01:30:02 +0000
asID:                     4685
IP address blocks:        122.103.128.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: May  9 08:16:38 2023 GMT
            Not After : Apr 14 01:30:02 2024 GMT
        Subject: CN=F822E815E6861C350DD16D6553D89916AE0F9BB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:76:7d:4b:d5:e8:00:2e:c5:c9:03:88:f3:b7:
                    32:ef:3d:02:cb:99:9f:e7:b7:38:dd:76:c9:50:ae:
                    f0:a8:21:89:1a:dd:84:f3:b1:5e:00:f5:5d:fd:00:
                    f3:ad:54:80:a1:f8:15:c7:1c:52:f1:96:11:04:0d:
                    da:73:5c:9f:11:72:37:9a:e9:af:c3:a9:74:81:6d:
                    89:d4:2e:ca:eb:df:a4:1f:8f:e1:27:e8:24:a9:a4:
                    28:1d:5e:72:e2:c7:d3:8f:f7:9e:3f:7b:90:15:1a:
                    ec:87:fd:4f:7c:fe:75:d0:2c:a1:32:65:6b:00:d3:
                    af:36:ba:c3:05:ce:2a:ae:22:7a:09:70:49:9c:a1:
                    c6:f5:1a:2a:14:56:6d:5e:22:9a:1b:25:71:66:fa:
                    bb:61:df:67:56:8e:74:94:f7:cd:3a:32:a1:e8:80:
                    13:a4:16:73:0c:e1:0f:ba:a3:6a:73:f7:0a:a8:67:
                    f7:d6:ba:78:08:cf:4f:12:28:3e:4a:64:d7:e9:70:
                    6e:cc:b8:d3:40:26:30:1b:26:36:c6:d2:59:c5:d8:
                    47:26:d8:52:a8:8a:09:07:84:5c:c7:bd:54:e7:54:
                    0e:ea:0f:4a:bd:7f:c5:ac:85:e3:5b:db:54:f1:07:
                    51:05:81:85:b4:29:ec:54:e5:f2:52:e0:8f:51:a9:
                    52:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:22:E8:15:E6:86:1C:35:0D:D1:6D:65:53:D8:99:16:AE:0F:9B:B2
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/-CLoFeaGHDUN0W1lU9iZFq4Pm7I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.103.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3c:9f:98:e0:c2:22:68:74:0f:bd:b4:9d:56:2a:82:91:96:d2:
         c7:05:48:66:d2:76:d6:db:ea:b2:33:a7:51:5b:ff:a5:7f:8f:
         b1:c7:ad:25:dd:0d:52:c1:84:bb:77:82:6f:68:bf:4e:5a:0f:
         78:19:4f:2a:c7:20:f3:a2:ba:2d:3c:e2:e4:a6:89:5d:a8:30:
         5e:1a:47:de:01:63:5b:38:b1:96:5f:2b:dd:83:47:6a:98:ba:
         96:8b:81:f5:22:dc:95:ce:b7:58:77:68:fd:83:1b:d0:8d:77:
         d4:d9:b0:8f:8b:d7:82:e8:a7:0f:f3:14:44:2c:3e:ac:7a:8d:
         57:ac:77:c2:fe:ce:c1:c7:b6:ea:7c:22:91:99:09:05:fd:08:
         9f:07:c8:40:05:39:09:bd:ba:c2:8a:d8:54:7c:31:1f:14:b5:
         ed:a9:b0:78:23:e9:c3:7c:b1:7d:61:17:44:ab:be:f8:c5:38:
         48:e3:1d:6d:4d:18:e5:74:9e:80:7c:37:0b:b3:1d:82:97:1f:
         70:be:2c:cc:bc:24:aa:43:08:e2:d5:f9:39:0e:73:e8:97:b4:
         c3:98:b5:7e:ea:52:58:c8:c5:ba:d6:25:b4:67:57:bd:92:62:
         78:b0:d6:31:7d:be:f0:96:46:f4:9f:aa:aa:76:67:3a:57:82:
         f2:1e:94:48
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQkUz
QUIwRjhEQjI2NUFCQjIyODdFNzUxNTFFN0Y1QTkzQjJDNzM2MB4XDTIzMDUwOTA4
MTYzOFoXDTI0MDQxNDAxMzAwMlowMzExMC8GA1UEAxMoRjgyMkU4MTVFNjg2MUMz
NTBERDE2RDY1NTNEODk5MTZBRTBGOUJCMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANl2fUvV6AAuxckDiPO3Mu89AsuZn+e3ON12yVCu8KghiRrdhPOx
XgD1Xf0A861UgKH4FcccUvGWEQQN2nNcnxFyN5rpr8OpdIFtidQuyuvfpB+P4Sfo
JKmkKB1ecuLH04/3nj97kBUa7If9T3z+ddAsoTJlawDTrza6wwXOKq4ieglwSZyh
xvUaKhRWbV4imhslcWb6u2HfZ1aOdJT3zToyoeiAE6QWcwzhD7qjanP3Cqhn99a6
eAjPTxIoPkpk1+lwbsy400AmMBsmNsbSWcXYRybYUqiKCQeEXMe9VOdUDuoPSr1/
xayF41vbVPEHUQWBhbQp7FTl8lLgj1GpUikCAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBT4IugV5oYcNQ3RbWVT2JkWrg+bsjAfBgNVHSMEGDAWgBQb46sPjbJlq7IofnUV
Hn9ak7LHNjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTAvRy1PckQ0MnlaYXV5S0g1MUZSNV9XcE95eHpZLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRy1PckQ0MnlaYXV5S0g1MUZSNV9XcE95
eHpZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzUwLy1DTG9GZWFHSERVTjBXMWxVOWlaRnE0UG03SS5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAV6Z4AwDQYJKoZIhvcNAQELBQADggEBADyfmODCImh0D720nVYqgpGW0scFSGbS
dtbb6rIzp1Fb/6V/j7HHrSXdDVLBhLt3gm9ov05aD3gZTyrHIPOiui084uSmiV2o
MF4aR94BY1s4sZZfK92DR2qYupaLgfUi3JXOt1h3aP2DG9CNd9TZsI+L14Lopw/z
FEQsPqx6jVesd8L+zsHHtup8IpGZCQX9CJ8HyEAFOQm9usKK2FR8MR8Ute2psHgj
6cN8sX1hF0SrvvjFOEjjHW1NGOV0noB8NwuzHYKXH3C+LMy8JKpDCOLV+TkOc+iX
tMOYtX7qUljIxbrWJbRnV72SYniw1jF9vvCWRvSfqqp2ZzpXgvIelEg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:47 2025 by rpki-client