Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/877/7p1POvBnfBL4kU7ZGTf9716QQkY.roa
File:                     7p1POvBnfBL4kU7ZGTf9716QQkY.roa (raw, json)
Hash identifier:          jL7y1xxlKnGF78RSyVy5kJQ16hYJzsL5qmMkFURGUo4=
Subject key identifier:   EE:9D:4F:3A:F0:67:7C:12:F8:91:4E:D9:19:37:FD:EF:5E:90:42:46
Certificate issuer:       /CN=1933DE3EF96450CA120C77A5EA826434DD149549
Certificate serial:       02
Authority key identifier: 19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/7p1POvBnfBL4kU7ZGTf9716QQkY.roa
Signing time:             Tue 29 Mar 2022 03:20:47 +0000
ROA not before:           Tue 29 Mar 2022 03:20:47 +0000
ROA not after:            Wed 29 Mar 2023 00:14:48 +0000
asID:                     55385
IP address blocks:        103.2.0.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1933DE3EF96450CA120C77A5EA826434DD149549
        Validity
            Not Before: Mar 29 03:20:47 2022 GMT
            Not After : Mar 29 00:14:48 2023 GMT
        Subject: CN=EE9D4F3AF0677C12F8914ED91937FDEF5E904246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:77:83:87:0a:1c:31:00:a0:ca:88:14:a9:
                    ab:d3:d7:a1:40:70:07:34:2d:0c:d6:23:f9:1b:61:
                    d8:a4:0b:39:1e:bf:e2:fe:af:9b:f9:b3:f8:73:77:
                    3c:b6:fb:21:b7:5c:a1:96:30:3b:0a:74:9f:22:ed:
                    d7:28:b0:f1:e7:2a:ff:37:6d:3d:2e:67:4d:59:72:
                    30:bc:98:93:d6:66:4b:e0:cc:40:d3:89:a2:09:c1:
                    1f:bd:c3:b6:1f:63:f1:72:df:c5:50:08:3e:e2:68:
                    55:99:b3:b1:ea:49:40:6d:0f:f1:4e:ac:1e:3b:2e:
                    41:47:d7:ac:c5:be:23:66:eb:b3:c5:25:e6:ed:67:
                    c9:27:1f:a8:bb:b9:ea:5c:86:de:97:5f:90:f0:23:
                    94:89:e2:94:98:a0:dd:cc:73:24:c4:d8:0a:55:a5:
                    05:48:7f:fd:fd:f5:53:78:2e:67:6f:e7:95:89:01:
                    20:50:b3:10:5c:e1:4e:9a:48:18:00:db:ed:db:58:
                    5d:d5:55:11:3f:05:0f:73:31:36:54:a2:89:86:54:
                    1c:e6:5b:8b:3b:ef:52:85:99:b3:41:49:b3:42:85:
                    c5:25:0c:c4:49:01:76:a2:a3:b3:53:ec:7b:67:c2:
                    56:ba:b4:7a:6d:d1:fd:c0:40:4d:b8:a7:45:b6:66:
                    06:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9D:4F:3A:F0:67:7C:12:F8:91:4E:D9:19:37:FD:EF:5E:90:42:46
            X509v3 Authority Key Identifier:
                keyid:19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/7p1POvBnfBL4kU7ZGTf9716QQkY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:bd:fd:c1:e7:49:35:9a:bd:6c:73:3d:fc:65:ac:31:18:41:
         b7:24:8a:01:c1:ec:44:a3:84:10:06:fd:20:41:9e:dd:69:45:
         a4:a6:92:8b:41:14:9b:6a:88:b7:f9:52:15:04:1e:9a:d7:e6:
         84:f4:00:79:2b:fc:5e:c1:20:a2:ba:a9:04:52:d5:43:02:28:
         3e:97:25:84:cb:cc:11:cf:aa:1e:39:19:8b:5e:d4:44:5a:31:
         dd:47:36:c7:31:3c:a2:42:12:28:aa:e2:86:92:ac:78:82:00:
         85:4c:64:f0:20:67:06:13:2c:13:82:a8:21:1c:e9:7f:88:1c:
         72:8a:32:3f:87:32:3f:41:0d:f0:e3:8d:ad:82:eb:7b:d7:fb:
         33:35:1d:3d:fe:b8:d9:fb:75:dc:cf:c9:de:e8:37:5d:5d:c3:
         bf:ee:ed:5a:b1:a8:c0:d2:f1:a3:9b:a7:3f:a2:d5:e7:ba:03:
         4d:b7:8e:f7:3a:3f:b3:09:91:9e:5e:d7:55:35:aa:34:b5:55:
         dc:82:2d:cc:cd:35:49:cf:b5:c1:33:eb:71:92:ca:2d:00:f9:
         73:92:c9:90:84:dc:3d:a2:03:ac:11:3d:7b:b6:48:8d:1c:f2:
         54:fe:e9:7c:04:39:3f:03:90:b6:f0:a6:be:e0:b1:11:5d:4a:
         4e:ad:8d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:26 2025 by rpki-client