Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/SQgv4TZpQwpK4pVF1yf_vsPktCc.roa
File:                     SQgv4TZpQwpK4pVF1yf_vsPktCc.roa (raw, json)
Hash identifier:          SP7UoZ2ZUX0bbraC7ITFaqU3bKSEXV4Xhe6/dNSu5zI=
Subject key identifier:   49:08:2F:E1:36:69:43:0A:4A:E2:95:45:D7:27:FF:BE:C3:E4:B4:27
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       41
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/SQgv4TZpQwpK4pVF1yf_vsPktCc.roa
Signing time:             Thu 22 Jun 2023 00:34:07 +0000
ROA not before:           Thu 22 Jun 2023 00:34:07 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        122.128.112.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:34:07 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=49082FE13669430A4AE29545D727FFBEC3E4B427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7b:36:52:5f:fb:9c:69:62:f6:1b:98:8e:e1:
                    bc:71:e4:fe:e4:fa:39:fd:53:82:26:34:2c:b8:70:
                    ca:f4:f9:65:eb:18:14:8a:cc:6e:b2:78:db:6a:45:
                    13:df:0d:4d:2b:f2:a3:32:e3:14:c3:5c:80:fb:82:
                    ea:59:0b:23:33:2a:5f:f8:a4:d9:fa:4e:5b:36:09:
                    9f:41:f4:13:7c:13:b7:33:e1:e1:aa:da:88:09:ba:
                    2a:08:bb:5f:f0:3a:39:9f:b1:bd:9b:eb:0b:fc:9d:
                    44:1c:1b:eb:1d:18:93:97:7b:4b:d5:f8:bb:b0:af:
                    85:51:ae:8d:07:9c:3d:cc:a5:3c:25:26:89:25:d3:
                    d9:7e:ed:17:e9:09:46:f6:14:e2:c9:21:7b:53:69:
                    57:b4:de:70:79:f7:be:f1:f7:98:f3:66:56:11:c8:
                    d8:48:d1:dd:66:20:42:a2:c7:53:40:b0:8f:14:63:
                    a4:4b:7b:91:c0:b5:b8:5d:6b:bf:77:c2:55:78:b1:
                    d1:3f:d3:59:a9:91:47:2b:52:3c:07:0e:1c:89:5a:
                    35:3c:03:ac:8a:a5:8a:f5:91:23:24:70:d9:f1:13:
                    bd:bb:5b:13:e1:7d:13:b1:ef:a4:92:fb:14:9b:f3:
                    9d:68:47:39:2f:6e:a5:1c:93:fc:87:40:18:6c:b2:
                    e1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:08:2F:E1:36:69:43:0A:4A:E2:95:45:D7:27:FF:BE:C3:E4:B4:27
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/SQgv4TZpQwpK4pVF1yf_vsPktCc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.128.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:8f:5d:84:53:8f:16:3f:79:76:3f:60:f1:cb:a0:82:ae:ea:
         84:db:23:07:a4:c2:dd:ab:c2:76:88:7a:f8:9a:99:3f:1a:64:
         49:32:2e:a0:95:4d:d3:4d:80:49:f5:23:f3:5b:d5:1c:19:17:
         a8:2c:5e:a2:61:35:d8:b2:43:25:59:d7:19:f3:8d:63:a4:8f:
         54:79:f5:e3:3e:8e:69:c5:43:ff:61:23:43:a2:62:48:f7:8a:
         a4:2d:96:3f:5d:3d:1a:d2:8d:b4:f9:e5:28:3e:88:19:7a:2f:
         42:6f:9f:a6:4a:5b:94:8f:2b:de:25:a0:32:5f:41:e7:9e:af:
         19:d5:f5:ce:42:8b:2f:4b:3d:71:63:28:a9:80:98:14:16:f6:
         3a:8f:a6:b8:c7:b6:7a:d2:c9:3f:d2:b2:68:d5:c1:94:15:a4:
         aa:8c:c8:87:7d:0d:e9:56:a4:48:ef:0d:3c:6b:d3:66:4e:78:
         da:10:cc:1c:3c:f7:ae:35:ba:b5:7a:01:fe:77:f3:28:04:84:
         5c:f4:27:af:25:f3:1b:cb:c0:52:6a:6d:f4:d5:47:7b:d7:aa:
         05:14:59:ee:a9:bb:3e:ae:37:dc:8b:0d:7c:44:be:e2:8a:cf:
         3e:97:ff:86:7b:ed:4e:4d:83:5b:a8:2c:87:ea:cd:ea:64:63:
         52:f6:78:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 3 22:52:12 2025 by rpki-client