Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20041/EYgU0pI5mTQ34bFwv5Mt3yogvQY.roa
File:                     EYgU0pI5mTQ34bFwv5Mt3yogvQY.roa (raw, json)
Hash identifier:          mTEp1XMoVctzYTLc4Oc/zDBRHAsik6rUChbmiFK9tQY=
Subject key identifier:   11:88:14:D2:92:39:99:34:37:E1:B1:70:BF:93:2D:DF:2A:20:BD:06
Certificate issuer:       /CN=28E69152BA3F7A57A1B991000156E582AD0EC9D9
Certificate serial:       2C
Authority key identifier: 28:E6:91:52:BA:3F:7A:57:A1:B9:91:00:01:56:E5:82:AD:0E:C9:D9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KOaRUro_elehuZEAAVblgq0Oydk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20041/EYgU0pI5mTQ34bFwv5Mt3yogvQY.roa
Signing time:             Sat 22 Jul 2023 07:28:13 +0000
ROA not before:           Sat 22 Jul 2023 07:28:13 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     63771
IP address blocks:        202.223.56.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28E69152BA3F7A57A1B991000156E582AD0EC9D9
        Validity
            Not Before: Jul 22 07:28:13 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=118814D29239993437E1B170BF932DDF2A20BD06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:6c:f5:81:09:38:b0:c4:37:de:0e:f2:82:28:
                    87:c0:44:91:e8:17:1e:66:17:2f:83:e0:4d:1c:c2:
                    72:c9:5c:7e:3d:39:cc:97:30:18:6d:aa:22:1b:78:
                    31:63:92:a0:c6:cd:58:7d:4a:a6:db:15:34:d8:92:
                    2e:c3:e6:cc:6e:35:84:e9:22:3e:93:8c:47:d4:6c:
                    f6:ec:72:a9:3b:c9:cc:56:50:e2:e0:76:23:cd:dc:
                    0b:ff:38:46:82:ec:b8:6f:c7:5c:90:e9:a2:c1:51:
                    d9:ce:79:bc:34:c1:93:71:33:89:7e:da:72:2a:7d:
                    72:bd:ce:fe:a9:29:be:98:f6:c6:db:02:2d:78:1f:
                    b1:47:79:a5:ce:ed:f6:37:17:ca:33:4e:cd:dc:b7:
                    a8:90:ac:71:05:4f:0e:dd:3a:16:9f:bb:f1:6e:c7:
                    a4:35:bd:9b:1f:b2:21:7f:7e:48:59:6c:59:64:a4:
                    b5:fe:c8:ce:55:5d:ec:aa:4a:3f:fe:aa:c6:11:af:
                    b9:0e:64:fa:10:64:8a:58:cf:15:18:64:88:1c:a3:
                    92:43:78:c0:f2:c3:66:3b:f7:30:17:10:cd:a2:9c:
                    12:95:56:8e:f7:6a:9c:fa:95:ea:41:d7:68:6c:ff:
                    fc:e8:45:b3:8e:2f:2d:44:ae:eb:49:4d:ce:b3:09:
                    67:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:88:14:D2:92:39:99:34:37:E1:B1:70:BF:93:2D:DF:2A:20:BD:06
            X509v3 Authority Key Identifier:
                keyid:28:E6:91:52:BA:3F:7A:57:A1:B9:91:00:01:56:E5:82:AD:0E:C9:D9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20041/KOaRUro_elehuZEAAVblgq0Oydk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KOaRUro_elehuZEAAVblgq0Oydk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20041/EYgU0pI5mTQ34bFwv5Mt3yogvQY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.223.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:88:00:45:f7:ac:98:00:c6:c7:23:8a:55:27:d6:61:b0:e9:
         8b:4b:a1:99:26:4d:b3:31:69:48:c8:c3:a9:d2:e6:79:51:06:
         be:1c:f1:1d:92:6a:87:52:2b:ce:1d:a6:fc:cf:fe:98:5c:15:
         14:25:af:21:7b:4a:d6:76:b2:f4:ce:80:f9:f8:2b:e6:03:82:
         94:53:0e:95:5c:0d:e5:b3:28:95:10:71:c7:fd:89:f7:d5:e1:
         1f:d5:ba:c1:0c:bb:f3:70:8b:7b:b9:41:ce:6e:02:ec:e7:9f:
         44:42:d8:ef:16:37:16:94:fb:e5:60:37:5e:ef:50:63:e9:24:
         71:20:da:46:ac:0f:f4:bc:17:6a:dc:2e:57:95:b9:5d:1c:8b:
         50:03:11:b4:5e:9c:0f:f7:b3:7b:d5:68:df:42:ab:d1:28:9b:
         df:d7:4d:c3:30:9d:b5:79:51:6e:3b:43:f0:94:8a:80:17:38:
         56:dd:f6:83:3c:dc:56:c6:e8:06:98:22:43:b4:03:26:19:85:
         b7:d5:60:ff:22:f4:18:b1:cd:21:39:d4:aa:a0:8c:82:66:09:
         6e:76:9c:45:70:50:8e:95:53:7e:ab:d2:70:d1:c6:20:2f:83:
         17:e4:72:f2:7e:3c:4f:a4:c9:34:c0:f4:f0:5b:cb:4c:56:c9:
         6f:48:56:c4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:17 2025 by rpki-client