Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/9CaP04WVcOZEKm5ZptOVbaohJhk.roa
File:                     9CaP04WVcOZEKm5ZptOVbaohJhk.roa (raw, json)
Hash identifier:          SIFICXJoBkXtW5LhAT0JBVnXerQ2juNkSprlO5iDt44=
Subject key identifier:   F4:26:8F:D3:85:95:70:E6:44:2A:6E:59:A6:D3:95:6D:AA:21:26:19
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       6D
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/9CaP04WVcOZEKm5ZptOVbaohJhk.roa
Signing time:             Thu 22 Jun 2023 00:36:56 +0000
ROA not before:           Thu 22 Jun 2023 00:36:56 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.183.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:36:56 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=F4268FD3859570E6442A6E59A6D3956DAA212619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ad:6c:84:24:c3:7d:7a:70:9d:f4:24:b1:e1:
                    85:38:a9:d3:61:15:62:e8:9b:a3:5f:ed:3a:92:d8:
                    65:0d:b3:59:ba:96:07:69:34:14:88:d7:a7:76:e8:
                    a1:b6:cc:5d:be:be:af:00:cc:73:b8:16:9d:45:7c:
                    48:cf:b7:64:05:4f:ac:53:38:75:0f:68:22:41:64:
                    b6:90:3e:43:55:f4:1a:09:a7:e4:72:04:c8:c4:6f:
                    cf:54:f4:da:1b:35:84:17:62:c4:0a:c5:ca:87:5a:
                    2e:13:cb:6d:26:6f:3e:42:de:6e:12:1c:46:7b:0c:
                    0f:01:cd:3a:40:00:09:fd:f2:a1:71:a2:55:f6:ef:
                    b3:8c:ca:be:0a:e7:33:a7:fd:15:e0:3b:a4:1b:86:
                    5e:fd:bc:f9:85:51:ce:b7:40:3d:e6:05:d6:e7:c8:
                    be:09:db:dc:1e:38:dc:3f:ba:79:ca:e6:9b:de:31:
                    c8:89:f6:31:72:9c:36:bb:6f:25:e4:08:17:15:21:
                    37:22:d3:f6:e1:d1:19:fd:b7:e3:56:48:85:8e:bb:
                    27:6f:8d:fa:70:29:d6:8c:ac:f7:56:4f:e1:60:88:
                    82:99:6b:45:84:f7:29:c2:d0:27:6f:b0:13:5e:29:
                    9d:d4:d0:a5:7d:8e:1d:25:36:db:b6:cb:b2:34:e3:
                    81:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:26:8F:D3:85:95:70:E6:44:2A:6E:59:A6:D3:95:6D:AA:21:26:19
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/9CaP04WVcOZEKm5ZptOVbaohJhk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:38:07:4e:15:11:67:c6:46:b2:1a:71:94:ef:d6:86:95:48:
         2a:aa:b2:7a:11:8f:af:6c:f5:f9:77:53:b9:ce:88:75:fd:69:
         29:61:09:67:0b:db:6a:bb:4d:64:10:bc:ad:bb:8d:e6:38:c5:
         65:bb:18:0f:c7:35:35:3e:f4:47:b8:14:7c:fe:2e:bc:3c:cf:
         c4:90:45:f5:db:68:3d:04:f1:0a:66:96:0f:76:ca:33:3b:ee:
         88:96:0a:36:2a:c1:ff:a8:ec:4a:ba:ef:59:aa:59:b2:38:cb:
         52:92:95:22:85:3f:27:6b:47:31:0b:0f:ce:b4:4e:b2:64:6f:
         8f:65:e1:20:b3:a3:b5:ef:0f:ad:60:d0:07:37:5a:86:f6:22:
         16:6c:19:00:e9:dd:73:6a:42:c5:f5:7d:1a:37:5b:cb:89:2d:
         d6:b4:44:94:31:7b:50:3e:9c:42:d4:78:5d:92:fc:8c:be:bb:
         6e:48:3d:fb:75:fe:fd:93:64:b9:59:2f:20:14:61:a2:80:fa:
         ce:db:60:3c:7f:25:3a:e1:fb:fd:7a:d0:1a:e5:6a:c8:37:ce:
         68:1b:14:54:9a:13:93:86:09:c3:8e:6a:71:43:b7:1e:fc:55:
         56:15:a7:f2:a7:90:9d:85:fa:03:de:64:6b:e3:39:bc:57:2e:
         40:ff:5b:f5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:46 2025 by rpki-client