Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12207/lVhlTGUjGGqSTBFP0UcfyVRCzF8.roa
File:                     lVhlTGUjGGqSTBFP0UcfyVRCzF8.roa (raw, json)
Hash identifier:          BE8Wg/ul7cKXoZdtamwooxZYxv0mbRkuzBL3yBsBcKU=
Subject key identifier:   95:58:65:4C:65:23:18:6A:92:4C:11:4F:D1:47:1F:C9:54:42:CC:5F
Certificate issuer:       /CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E
Certificate serial:       13
Authority key identifier: 19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/lVhlTGUjGGqSTBFP0UcfyVRCzF8.roa
Signing time:             Tue 25 May 2021 02:31:50 +0000
ROA not before:           Tue 25 May 2021 02:31:50 +0000
ROA not after:            Sun 15 May 2022 01:30:02 +0000
asID:                     55392
IP address blocks:        130.62.0.0/16 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E
        Validity
            Not Before: May 25 02:31:50 2021 GMT
            Not After : May 15 01:30:02 2022 GMT
        Subject: CN=9558654C6523186A924C114FD1471FC95442CC5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:88:aa:a6:12:db:5a:ce:cf:e1:c5:44:85:cd:
                    8e:6f:2f:09:3c:36:3a:7b:0f:e9:28:d4:57:b2:a4:
                    f5:b3:f2:4c:8f:c1:52:c5:a7:ac:89:20:14:ea:23:
                    b7:09:82:e6:97:32:69:d5:8a:ca:df:a1:4b:36:fa:
                    d3:5d:e2:70:74:43:d7:e4:71:16:13:72:2f:7a:de:
                    0d:7a:ea:04:49:58:df:08:fe:dd:8d:4b:c4:ae:bc:
                    ef:a8:4f:ce:c8:de:16:ea:4c:e2:ef:b7:78:5f:51:
                    36:2a:3d:0c:d5:8e:dc:65:df:15:ac:ff:3d:52:ff:
                    d8:d1:bc:9b:49:44:99:12:ed:aa:b8:29:77:a3:e2:
                    ae:50:93:10:f1:82:94:fb:8e:91:3a:02:b4:72:26:
                    fb:a5:2c:ce:12:4d:76:34:eb:f8:1e:f4:ca:d2:64:
                    17:78:76:89:d5:62:de:ba:0d:6f:a6:9f:6f:d3:24:
                    c0:25:bb:14:39:65:35:ff:06:ba:fa:cb:7a:61:ff:
                    f3:7f:fb:d0:95:fe:5f:58:06:7b:e3:d4:3e:62:f9:
                    9f:f1:ee:3e:9d:a7:19:6f:60:ba:96:74:a6:e5:ac:
                    8c:4c:a3:9b:b5:72:ae:07:50:8b:2c:85:e0:22:ae:
                    dd:e4:16:40:85:1b:29:b0:ff:9d:98:ee:91:ef:d8:
                    d2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:58:65:4C:65:23:18:6A:92:4C:11:4F:D1:47:1F:C9:54:42:CC:5F
            X509v3 Authority Key Identifier:
                keyid:19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/lVhlTGUjGGqSTBFP0UcfyVRCzF8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.62.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         65:a7:c4:f0:fc:e5:ea:e0:5e:10:8a:d7:6f:b8:5b:88:c4:b6:
         de:f9:f2:ae:cf:95:1d:88:7b:05:ae:55:cb:31:bd:99:49:f4:
         53:87:dd:41:5e:ea:35:f9:6e:94:a5:08:eb:fa:12:22:ef:f3:
         08:b7:03:22:bb:00:18:63:e3:d3:e0:6f:1f:9b:a1:9e:66:e5:
         8f:a7:5c:50:87:a0:d7:a7:83:6f:dc:19:4d:68:5a:a0:e7:f7:
         d1:37:78:89:a0:3f:f6:0f:f8:af:6b:c7:15:67:a8:2d:b3:b7:
         21:33:d7:13:c9:b0:6a:f9:bc:34:f8:a2:a0:a5:8e:fc:4a:07:
         a9:80:13:1f:df:14:51:10:07:c8:2e:7a:43:e7:ca:c3:4a:bf:
         41:f0:fb:ff:e8:91:9c:61:60:f2:47:ac:15:cf:7b:b2:71:7e:
         c8:9b:5b:1b:47:a5:ab:96:0e:f4:a6:3e:a2:68:77:3e:95:50:
         c1:aa:71:1b:a9:4f:13:e0:de:05:48:55:89:37:b4:de:d0:ba:
         bb:28:01:62:2c:9f:58:b6:ec:30:00:8b:31:27:5f:ad:d7:a0:
         81:e9:c1:c5:e7:1a:4c:7e:96:8f:64:86:e2:60:73:bf:eb:a3:
         1e:4d:f7:eb:8f:7a:e8:ae:0c:f0:21:d6:4c:d3:53:05:77:70:
         2c:07:7f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:13 2025 by rpki-client