Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/942/AU8X_Wk25E-IfeEj_KE-IqCVtKU.roa
File:                     AU8X_Wk25E-IfeEj_KE-IqCVtKU.roa (raw, json)
Hash identifier:          OTZnUHmgKCkQcFirZkCl0EmyvBqsxHAOnNEdOP21qVI=
Subject key identifier:   01:4F:17:FD:69:36:E4:4F:88:7D:E1:23:FC:A1:3E:22:A0:95:B4:A5
Certificate issuer:       /CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
Certificate serial:       06
Authority key identifier: 8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/AU8X_Wk25E-IfeEj_KE-IqCVtKU.roa
Signing time:             Wed 20 Apr 2022 07:22:14 +0000
ROA not before:           Wed 20 Apr 2022 07:22:14 +0000
ROA not after:            Thu 20 Apr 2023 02:53:00 +0000
asID:                     37908
IP address blocks:        118.103.128.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
        Validity
            Not Before: Apr 20 07:22:14 2022 GMT
            Not After : Apr 20 02:53:00 2023 GMT
        Subject: CN=014F17FD6936E44F887DE123FCA13E22A095B4A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c9:d8:94:f2:7d:ed:d3:71:96:e9:63:6a:5f:
                    22:c0:fc:fa:42:f1:cc:4f:76:9b:69:d9:c9:80:ac:
                    88:3a:a7:3d:b5:18:09:46:97:74:96:0a:c9:a8:3a:
                    45:0d:c8:66:93:2f:e5:3d:a8:dc:0f:3e:da:7f:fb:
                    da:c5:73:73:04:de:48:1e:b8:ec:5a:33:34:48:db:
                    f1:09:83:bd:a5:f5:37:fc:23:a2:b3:aa:3d:5f:35:
                    16:50:45:f2:62:f2:3f:5b:4c:96:46:57:53:f7:0e:
                    b9:ed:7d:c4:16:8a:88:7d:ed:7c:63:2f:12:e9:a1:
                    33:a8:cd:b8:5c:84:c2:4c:57:83:fc:30:87:cf:41:
                    46:59:ce:c9:09:55:ec:18:43:77:25:70:66:c1:31:
                    e1:bc:3b:22:74:e5:4c:30:cf:7a:02:f6:71:1d:fd:
                    41:7f:0b:12:c0:7f:bd:2e:c3:32:c5:43:1b:bf:cf:
                    0e:b8:2c:9a:e2:0a:be:e9:59:93:5e:40:0e:20:33:
                    29:67:83:48:24:89:58:70:d4:53:9e:9b:c2:e6:ea:
                    61:d1:7b:0a:d8:93:1a:1c:eb:c0:5b:84:b7:92:9e:
                    3a:3f:c6:4f:0d:27:1a:ab:13:65:3a:ac:96:f4:b5:
                    13:24:95:6d:17:f8:c3:0f:c1:35:7f:28:bb:2f:22:
                    95:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4F:17:FD:69:36:E4:4F:88:7D:E1:23:FC:A1:3E:22:A0:95:B4:A5
            X509v3 Authority Key Identifier:
                keyid:8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/AU8X_Wk25E-IfeEj_KE-IqCVtKU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.103.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         05:75:8d:c7:f3:10:5c:95:a1:77:27:67:2b:6e:f7:e2:3c:97:
         c8:41:c2:3d:10:e0:f8:7c:09:ff:91:4d:a3:e8:1f:fc:d6:e5:
         b0:9a:4e:5a:dd:20:4f:f2:88:5b:9b:08:dd:2f:48:03:99:a6:
         76:aa:e3:bb:95:2b:f4:0b:12:c5:ce:03:a3:25:6c:86:05:2c:
         83:99:ed:ac:7b:b8:5f:1d:6d:9c:e8:4a:c7:2d:c4:36:f4:9c:
         90:3a:e2:91:5f:73:13:87:20:b2:c9:e5:cb:56:92:42:55:88:
         8f:a0:fc:d5:f2:2b:06:e5:b0:f5:9d:cc:a4:4b:af:10:28:18:
         c3:95:7f:2e:6d:94:fa:3b:83:ef:3a:73:08:19:17:dd:47:e2:
         c1:42:3b:b6:2c:ee:47:24:45:19:75:94:df:f8:59:f2:7d:c9:
         de:34:29:fe:68:77:50:4a:dd:a1:c8:c5:52:ca:6e:66:3e:3e:
         6a:91:cc:1a:9f:f2:36:af:3a:af:8e:e6:32:3a:d9:53:56:46:
         d9:ea:be:bd:6c:d7:97:2f:c2:fd:c7:e9:c6:42:78:b2:1b:53:
         73:04:2d:a0:45:e7:24:48:2e:ce:07:ee:74:87:dd:84:86:eb:
         d5:5f:10:cc:b3:1b:62:ee:d6:a1:46:b3:0f:70:8d:0c:a4:83:
         c5:d0:9b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:55 2025 by rpki-client