Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/942/ID99Fr1k-INvjkqJ7hbXnRxHzEQ.roa
File:                     ID99Fr1k-INvjkqJ7hbXnRxHzEQ.roa (raw, json)
Hash identifier:          xDXjqBaijrtIGUHsZgj8tPEfhlgpESCkAjDWKXIozG8=
Subject key identifier:   20:3F:7D:16:BD:64:F8:83:6F:8E:4A:89:EE:16:D7:9D:1C:47:CC:44
Certificate issuer:       /CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
Certificate serial:       18
Authority key identifier: 8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ID99Fr1k-INvjkqJ7hbXnRxHzEQ.roa
Signing time:             Thu 06 Apr 2023 02:52:54 +0000
ROA not before:           Thu 06 Apr 2023 02:52:54 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     37908
IP address blocks:        175.103.0.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
        Validity
            Not Before: Apr  6 02:52:54 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=203F7D16BD64F8836F8E4A89EE16D79D1C47CC44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8f:65:80:43:e3:eb:f4:98:32:be:a5:17:1f:
                    10:c7:4b:f6:17:71:1e:58:78:df:c7:80:10:79:89:
                    96:b2:43:84:af:f0:64:e5:2c:f0:dc:a0:c3:14:e1:
                    b5:8c:1f:c1:9d:03:86:3c:68:45:49:09:92:25:58:
                    cd:2a:b7:fb:04:dd:2c:f3:0d:e0:10:d1:bf:6f:c1:
                    25:94:91:dd:58:5c:45:3b:2e:3e:a9:5a:78:39:e1:
                    69:d7:cf:a4:a2:b0:5f:22:d0:01:9f:bf:0c:ad:13:
                    c0:79:57:0c:c5:d1:bf:50:00:42:78:a4:7a:62:09:
                    78:40:2d:d3:48:20:fb:eb:ba:6c:66:73:02:d2:a7:
                    4c:2d:24:ac:77:ea:b4:65:61:3a:f1:67:d5:7c:b8:
                    1d:c3:71:7f:db:1f:a5:bc:7a:70:01:b2:7a:02:4d:
                    fd:0e:e3:bc:73:78:b1:67:b0:10:c0:4e:13:81:e6:
                    70:01:ed:2f:22:70:45:d0:01:81:a1:ca:82:91:e8:
                    85:06:93:4d:52:83:92:bf:8f:fd:0a:f5:1b:51:a7:
                    ce:ee:23:61:bd:6c:98:92:eb:84:ce:c4:9b:d2:c1:
                    4e:3e:39:c3:96:07:02:c3:d8:30:df:d0:2e:73:7d:
                    52:ca:95:5c:57:96:2e:81:40:0c:d1:11:08:dd:c0:
                    30:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3F:7D:16:BD:64:F8:83:6F:8E:4A:89:EE:16:D7:9D:1C:47:CC:44
            X509v3 Authority Key Identifier:
                keyid:8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ID99Fr1k-INvjkqJ7hbXnRxHzEQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:26:86:80:b3:9b:1e:e2:f9:60:28:08:b1:01:62:f9:bb:84:
         14:94:54:6c:ab:d6:11:00:12:01:33:b1:b9:ce:d5:76:68:46:
         10:5d:ab:89:2c:34:0d:01:3c:09:5c:f7:d1:b0:8d:22:e0:ca:
         ea:77:04:4e:5e:1e:99:ff:f7:ad:32:de:0a:33:79:dd:e4:39:
         c6:ce:7f:c9:9a:75:50:a6:a1:fd:22:d3:c0:d0:60:cb:46:11:
         02:21:d7:cc:f3:7b:9e:6e:dc:4c:b7:82:cb:0d:4a:0c:5f:55:
         52:6f:a9:5c:66:4a:59:46:d1:09:ba:80:8e:2d:26:a4:e6:4f:
         4a:6b:a0:da:aa:82:36:f0:11:b2:48:a8:4b:4f:1b:18:f0:6c:
         6f:dd:94:9a:52:4e:da:2b:0c:f4:fa:cc:c9:7e:74:80:cb:35:
         9d:fb:c2:ec:dd:20:60:b2:92:f8:4d:5f:8e:ea:a4:3f:19:2c:
         32:35:73:7f:16:68:67:e5:0a:6d:dd:17:89:93:7d:6a:05:98:
         73:6e:ae:68:03:4f:e5:3f:c5:42:1a:43:61:56:47:97:d3:3a:
         3b:3a:b8:33:e8:7c:19:88:ab:59:60:bd:63:a9:82:5e:84:c9:
         27:cc:ed:4e:a8:a6:53:5c:7f:02:0a:ad:aa:97:bf:53:cd:e5:
         6b:2e:e1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:40 2025 by rpki-client