Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9/fHNquRfZO8q_RAWz-ZPzz5Ccdgw.roa
File:                     fHNquRfZO8q_RAWz-ZPzz5Ccdgw.roa (raw, json)
Hash identifier:          BMhJp8VVRaAPIDqw1cZ0qwuT4nm6zak83t1+r/H+9Gc=
Subject key identifier:   7C:73:6A:B9:17:D9:3B:CA:BF:44:05:B3:F9:93:F3:CF:90:9C:76:0C
Certificate issuer:       /CN=16851F56697ED9D56929BD0242D43B0278FC16E0
Certificate serial:       1B
Authority key identifier: 16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/fHNquRfZO8q_RAWz-ZPzz5Ccdgw.roa
Signing time:             Tue 25 May 2021 02:46:57 +0000
ROA not before:           Tue 25 May 2021 02:46:57 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     2500
IP address blocks:        202.249.0.0/17 maxlen: 18
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16851F56697ED9D56929BD0242D43B0278FC16E0
        Validity
            Not Before: May 25 02:46:57 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=7C736AB917D93BCABF4405B3F993F3CF909C760C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:34:5d:81:18:10:c2:5d:ba:4c:d6:14:54:65:
                    0a:83:5e:85:51:6f:09:59:56:d4:87:74:35:1b:61:
                    4c:19:2e:cb:ad:6e:97:b2:83:0f:b8:67:b6:9d:9c:
                    e7:0a:0e:ca:98:71:f7:28:45:77:e8:0b:c5:71:8f:
                    47:4c:b0:8f:4d:10:1f:56:84:cf:b5:bd:75:94:b1:
                    bc:f3:ee:39:95:6a:7c:04:6e:34:04:f7:b7:4d:af:
                    1e:db:d8:29:01:a7:9f:6b:a4:e3:52:c1:48:66:74:
                    48:0d:d6:d3:1a:70:0b:16:11:7e:2a:26:c2:c6:80:
                    80:ce:02:c3:f4:be:94:df:d2:19:46:34:ed:d5:d0:
                    e7:ee:3e:bf:cd:6c:98:c6:97:8a:50:21:da:f8:af:
                    44:e2:1d:aa:3d:98:3f:e3:bc:7b:0f:85:89:63:56:
                    df:b1:16:5f:e9:8a:77:73:da:89:66:30:f7:50:4a:
                    52:d1:ea:74:3f:0f:fc:58:1e:91:85:50:b7:ff:a3:
                    46:28:e5:e6:d3:0a:78:79:87:9f:4f:93:0f:e0:94:
                    e4:65:e6:1a:60:b3:0e:c5:a9:81:b2:8c:e0:ac:d2:
                    46:2c:77:b7:dd:66:68:fc:1f:ce:ad:94:e9:e1:8c:
                    94:38:2a:15:27:61:fe:64:52:68:bb:13:f0:3a:de:
                    3f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:73:6A:B9:17:D9:3B:CA:BF:44:05:B3:F9:93:F3:CF:90:9C:76:0C
            X509v3 Authority Key Identifier:
                keyid:16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/fHNquRfZO8q_RAWz-ZPzz5Ccdgw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.249.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9e:11:38:45:88:b2:58:3d:c8:43:3a:45:4a:54:be:ba:a3:5f:
         f3:d2:d2:55:e1:80:b8:12:c3:7d:25:82:da:f8:67:f7:c7:ed:
         84:c6:11:08:ea:e4:20:ff:49:56:7d:e1:86:a7:7f:8b:75:c9:
         9e:c3:e6:78:a5:3b:f1:ed:57:43:ff:b5:0b:68:cc:3d:69:82:
         77:34:08:82:e9:01:48:64:b4:47:0c:bf:de:39:2c:0f:56:37:
         cb:d1:2f:93:b5:52:44:10:ce:7e:54:d2:85:1c:0c:63:f8:a3:
         31:e3:06:a3:6d:51:b9:39:59:f5:6d:ad:4e:e6:28:a4:1f:55:
         7d:ee:81:6c:c0:94:82:c4:9a:58:0c:a2:48:4d:28:64:43:a6:
         2e:40:fb:9c:b5:3f:ab:4b:0f:87:e7:85:dc:f5:0a:ad:ce:32:
         0f:1c:f9:32:b3:d3:f5:44:4e:eb:ee:07:a9:ef:53:ab:3d:50:
         db:d2:fe:1f:01:a6:25:78:03:bf:02:b4:42:bf:c9:ad:f6:fb:
         b2:2b:8a:fe:34:04:c5:85:0c:80:39:65:0b:a8:c1:df:b1:3c:
         79:f2:5b:36:2e:1d:4f:8e:90:d3:c1:ea:9e:37:6a:cf:e2:5b:
         12:2f:4c:2e:85:97:4b:c2:b7:a1:28:d8:95:85:4d:62:87:62:
         1d:35:db:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:47:36 2025 by rpki-client