Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/826/WEzk5kTyjCLF1UoZNSh8VqBF1ik.roa
File:                     WEzk5kTyjCLF1UoZNSh8VqBF1ik.roa (raw, json)
Hash identifier:          UKc8ahsA9THR36nOFeA99lgGYwUmwYAqFoKe11aph+I=
Subject key identifier:   58:4C:E4:E6:44:F2:8C:22:C5:D5:4A:19:35:28:7C:56:A0:45:D6:29
Certificate issuer:       /CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
Certificate serial:       04
Authority key identifier: 5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/WEzk5kTyjCLF1UoZNSh8VqBF1ik.roa
Signing time:             Wed 20 Apr 2022 04:16:52 +0000
ROA not before:           Wed 20 Apr 2022 04:16:52 +0000
ROA not after:            Thu 20 Apr 2023 03:04:46 +0000
asID:                     23618
IP address blocks:        103.114.184.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
        Validity
            Not Before: Apr 20 04:16:52 2022 GMT
            Not After : Apr 20 03:04:46 2023 GMT
        Subject: CN=584CE4E644F28C22C5D54A1935287C56A045D629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:e2:16:73:86:5b:10:b8:77:1d:da:51:6e:
                    91:dc:da:7e:5f:94:1c:ad:3b:fb:25:82:50:6d:32:
                    6a:9c:6f:07:56:c8:de:c7:dd:2b:2a:43:66:f0:20:
                    73:ba:eb:f1:73:fc:e5:83:43:96:3b:0e:27:30:74:
                    0d:05:94:39:ac:f5:bb:2c:ad:84:41:2a:86:cf:f2:
                    1e:cd:b3:02:a4:e6:b8:69:73:da:e5:bb:8c:72:d7:
                    b2:39:72:26:be:af:75:77:ab:15:93:27:a9:ef:e1:
                    1a:bc:3d:64:34:9d:2e:57:2c:f3:39:94:f1:8c:35:
                    8e:c0:51:f2:fe:34:84:ee:9e:4e:7d:8d:75:9a:e6:
                    80:27:91:0a:b3:89:f8:b9:31:05:33:0f:98:a2:80:
                    7c:e4:b6:32:3a:4c:ec:4f:c2:79:5c:3c:c6:3b:23:
                    3b:66:86:6b:6d:e0:a7:1b:80:c4:63:6d:08:08:cf:
                    e7:ad:79:74:3f:1b:ab:3d:84:e3:ec:f2:ba:f8:d4:
                    c9:43:8a:43:62:b8:b8:de:19:27:f7:c0:4d:ec:d6:
                    a6:b0:1a:31:fd:59:e0:44:45:1e:83:33:04:73:be:
                    78:8f:c5:7d:c1:3c:d8:29:ce:c0:85:3c:b3:92:5e:
                    b1:8d:27:b7:74:ef:0c:0f:d1:1d:9b:99:08:34:91:
                    05:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4C:E4:E6:44:F2:8C:22:C5:D5:4A:19:35:28:7C:56:A0:45:D6:29
            X509v3 Authority Key Identifier:
                keyid:5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/WEzk5kTyjCLF1UoZNSh8VqBF1ik.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:19:99:c7:06:f3:7e:c8:18:89:bc:8e:ef:30:89:26:2b:f9:
         ad:54:a2:bb:eb:40:bf:67:67:40:23:62:9d:90:7d:34:f3:f4:
         49:1e:65:e8:03:e9:a5:0f:85:a7:f3:39:56:21:b1:47:4b:48:
         4c:9e:f5:ce:46:8b:e1:fd:9b:e9:e7:8f:ec:8d:11:cc:ec:75:
         83:7f:ac:22:f6:9a:26:cf:e0:23:74:e6:e0:ae:f1:60:af:19:
         8b:5a:d0:df:f3:e7:7f:5b:d5:04:b9:3f:d4:3b:b7:97:c3:2c:
         03:43:6f:3f:82:74:2b:0c:c0:a4:8c:21:0a:70:bd:7d:e0:87:
         6e:59:3a:0a:a1:b9:19:17:2b:ab:a0:05:00:7a:14:ec:19:4c:
         15:16:79:10:3e:38:5e:c9:d0:5d:bf:9c:c9:c6:0c:62:36:ed:
         73:35:5c:f5:d0:32:1c:30:af:36:a0:31:ae:47:01:f9:47:b5:
         e6:62:be:e8:ac:6c:51:3f:a1:93:26:2e:be:ae:39:58:63:32:
         ab:51:e6:b9:6f:42:5d:4b:ba:57:c2:4d:ea:c0:d6:27:3f:a3:
         b1:c1:9d:75:a0:43:e8:49:7e:d6:dc:f6:31:4d:21:a8:57:ea:
         a1:83:6a:3c:76:f5:1a:9f:e3:10:10:9b:06:c3:52:3e:a1:c7:
         bd:b1:c7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:02 2025 by rpki-client