Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20093/y68eD36pGIwhimDunJ3j1ZORueE.roa
File:                     y68eD36pGIwhimDunJ3j1ZORueE.roa (raw, json)
Hash identifier:          2MbIWIfgxBupnTxcL5h8nx4fdawy2Uh1TyCNEb7RkiU=
Subject key identifier:   CB:AF:1E:0F:7E:A9:18:8C:21:8A:60:EE:9C:9D:E3:D5:93:91:B9:E1
Certificate issuer:       /CN=711F626595BDEABE9334C61D729C4DA254CED91C
Certificate serial:       21
Authority key identifier: 71:1F:62:65:95:BD:EA:BE:93:34:C6:1D:72:9C:4D:A2:54:CE:D9:1C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/y68eD36pGIwhimDunJ3j1ZORueE.roa
Signing time:             Mon 01 Aug 2022 01:28:59 +0000
ROA not before:           Mon 01 Aug 2022 01:28:59 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     131949
IP address blocks:        202.226.8.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=711F626595BDEABE9334C61D729C4DA254CED91C
        Validity
            Not Before: Aug  1 01:28:59 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=CBAF1E0F7EA9188C218A60EE9C9DE3D59391B9E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cc:b4:ce:ed:d9:c6:1a:06:75:ff:5a:43:9d:
                    e8:2b:2b:74:f0:88:88:2a:03:67:69:aa:e7:43:7a:
                    2b:50:df:19:16:a0:ae:25:9d:5f:81:45:da:95:83:
                    6c:65:01:0c:7d:a6:04:53:79:2d:c9:ea:4c:8e:9b:
                    96:07:68:0a:19:fa:48:71:27:5d:02:ec:db:ce:91:
                    83:d5:2a:4a:88:fe:9e:9a:dd:1c:80:ca:ea:6f:bb:
                    ef:d2:34:8e:f8:bd:8d:08:96:a2:89:26:00:97:d7:
                    4c:c9:05:be:fa:d7:79:0d:56:7c:8b:5c:de:04:0c:
                    bf:08:97:c8:64:3b:62:43:fc:e5:df:a5:2b:e6:62:
                    09:9d:bc:84:1e:a3:80:27:ea:ee:7c:a1:45:14:a3:
                    da:91:fd:ec:7a:2b:e3:e0:4c:77:83:ff:01:34:4b:
                    07:14:26:af:53:78:e4:1f:10:39:a4:00:b9:2a:d5:
                    06:37:75:0f:7a:a9:9e:b5:27:45:bd:8c:44:bc:27:
                    1d:f6:59:22:63:c6:42:54:63:d0:44:3c:a3:2d:39:
                    89:3f:00:79:6d:9f:4d:58:12:98:1e:5c:c6:ba:6c:
                    df:da:96:47:51:18:a7:77:3c:a6:2f:ba:36:02:e1:
                    6a:b2:e2:df:af:5e:e5:63:6b:8b:88:c6:8a:d6:dd:
                    ce:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AF:1E:0F:7E:A9:18:8C:21:8A:60:EE:9C:9D:E3:D5:93:91:B9:E1
            X509v3 Authority Key Identifier:
                keyid:71:1F:62:65:95:BD:EA:BE:93:34:C6:1D:72:9C:4D:A2:54:CE:D9:1C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/cR9iZZW96r6TNMYdcpxNolTO2Rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cR9iZZW96r6TNMYdcpxNolTO2Rw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20093/y68eD36pGIwhimDunJ3j1ZORueE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.226.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:5a:b0:76:84:9a:f5:32:e9:8b:9a:f5:6e:cb:c9:01:57:15:
         46:05:70:a8:28:b5:8f:ba:12:4a:1a:6b:94:79:76:59:a8:1c:
         4d:7b:94:b9:5a:27:d3:c1:11:76:55:74:c3:d9:8f:91:8a:47:
         21:35:db:16:c3:e8:76:99:ad:c6:25:b5:06:e1:ee:4e:f4:6a:
         0a:1a:8f:49:19:c0:43:5a:df:87:55:48:d1:4f:ae:a3:e2:b7:
         6e:6a:51:9d:4a:75:b2:a5:f3:fd:83:89:9c:e6:9e:f3:8a:ee:
         ec:57:2d:c2:b3:5f:d6:db:ad:e2:4f:0e:9e:d2:34:a6:b2:d1:
         a7:86:8c:00:af:1a:3e:82:d3:8d:b8:cc:81:e5:b6:a1:32:aa:
         80:83:e6:8c:c9:d2:26:54:30:5c:5e:1e:c0:31:78:a8:c5:e4:
         e1:ad:cb:4f:7d:64:ba:0e:4c:0b:28:6f:2c:41:d3:95:f4:27:
         86:65:80:78:ca:90:c8:3d:c1:b2:fb:1c:77:c4:39:55:22:b7:
         51:74:75:7f:df:3d:c4:77:89:25:5d:a8:b8:b1:61:fd:af:a7:
         7f:ec:44:57:8e:36:a0:bd:72:3e:6d:a2:d0:74:b1:b4:72:18:
         18:44:2f:34:22:99:32:b5:6a:9f:aa:a3:7b:81:b7:a2:d9:64:
         c0:a3:2c:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:20:09 2025 by rpki-client