Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/877/xQxWoPTlY35a0uBHkORLKS1l_m8.roa
File:                     xQxWoPTlY35a0uBHkORLKS1l_m8.roa (raw, json)
Hash identifier:          +f3GnmdVofI3XVwm4LwQOnWyTx+ANFUBp3yEbDZwmoc=
Subject key identifier:   C5:0C:56:A0:F4:E5:63:7E:5A:D2:E0:47:90:E4:4B:29:2D:65:FE:6F
Certificate issuer:       /CN=1933DE3EF96450CA120C77A5EA826434DD149549
Certificate serial:       1A
Authority key identifier: 19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/xQxWoPTlY35a0uBHkORLKS1l_m8.roa
Signing time:             Wed 15 Mar 2023 00:13:56 +0000
ROA not before:           Wed 15 Mar 2023 00:13:56 +0000
ROA not after:            Thu 15 Feb 2024 01:30:03 +0000
asID:                     55385
IP address blocks:        202.174.58.0/23 maxlen: 23
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1933DE3EF96450CA120C77A5EA826434DD149549
        Validity
            Not Before: Mar 15 00:13:56 2023 GMT
            Not After : Feb 15 01:30:03 2024 GMT
        Subject: CN=C50C56A0F4E5637E5AD2E04790E44B292D65FE6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8a:50:ca:1f:fb:3f:3d:a4:a9:9f:d1:15:f4:
                    fc:a5:80:27:66:d8:9d:91:01:b2:1d:9f:fd:56:1f:
                    3b:45:77:49:06:76:50:57:6a:ad:54:21:a1:ad:0c:
                    94:97:6d:0b:eb:22:eb:33:ae:91:53:d5:12:97:6b:
                    bc:ce:f1:00:44:24:58:85:a5:6b:ab:45:1e:fa:21:
                    69:b1:5a:e3:d5:ea:a4:f0:34:a7:f2:a8:74:e4:1b:
                    7f:5e:83:91:cb:33:d6:e6:49:27:02:2c:74:0f:db:
                    55:3e:aa:5c:5d:69:13:52:8e:cd:03:22:c5:33:36:
                    82:af:e4:ae:bc:f5:8b:7e:7a:dd:7d:5a:1a:41:98:
                    a1:78:1c:5e:49:e5:6a:48:5e:da:e5:3c:2c:89:d8:
                    2f:24:62:fb:fa:6f:c8:9a:43:40:dc:10:42:23:1a:
                    d5:c1:7c:3d:b6:54:67:3a:5d:50:19:96:7d:19:94:
                    7b:52:91:d8:2b:3b:ca:00:63:50:e8:eb:af:4d:0f:
                    2b:d6:2a:1f:c8:b1:8a:bf:0b:5a:54:65:19:0d:00:
                    f0:e5:a3:75:70:9b:ad:d5:9d:12:78:10:6e:35:ad:
                    cc:d5:83:ae:2c:80:10:c9:5b:69:e7:5c:5c:ce:37:
                    23:90:f2:e8:1a:f5:c7:50:5f:ea:25:ba:bd:bc:8b:
                    6e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0C:56:A0:F4:E5:63:7E:5A:D2:E0:47:90:E4:4B:29:2D:65:FE:6F
            X509v3 Authority Key Identifier:
                keyid:19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/xQxWoPTlY35a0uBHkORLKS1l_m8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.174.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c9:96:a5:45:ef:52:63:8a:65:e1:e6:58:50:ae:f2:55:64:95:
         fa:e5:ea:f7:4f:50:93:56:cb:7f:e7:99:cd:17:38:9a:51:78:
         07:3e:25:33:4f:4a:89:ca:1d:5b:ef:38:61:e8:13:64:33:b3:
         8a:72:37:71:3b:fb:71:8e:9e:93:fe:6d:3f:bb:90:8b:7c:e4:
         5f:2c:c6:d8:88:ee:13:ec:67:0a:2c:87:04:7e:54:ff:e9:a0:
         62:2c:3b:b7:82:e6:91:50:d8:d9:78:cd:78:79:72:35:c8:24:
         59:cf:3d:8a:fc:74:f0:cb:4f:54:84:38:e8:85:83:d5:24:9e:
         41:80:c0:b4:53:3e:5a:90:15:09:ae:35:68:f1:be:f2:bc:c8:
         a8:41:42:a1:69:6e:0a:da:b9:69:19:e5:f4:75:20:35:e3:3d:
         28:1e:46:77:f2:03:c7:9d:08:00:fa:5d:8d:e0:07:75:48:83:
         4b:1f:93:85:06:08:74:b8:3a:48:3d:b6:81:25:a3:9f:ed:ae:
         38:c7:20:65:87:3d:ba:69:fd:85:5d:db:2a:e3:a9:43:45:86:
         16:89:05:a5:01:f7:8c:09:e0:5e:f8:8d:e5:09:9b:3d:8e:da:
         9f:5d:76:c4:96:3b:38:a7:01:64:a0:46:71:77:f4:01:40:44:
         5e:1c:2a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:10 2025 by rpki-client