Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/poy81WQbxCDrtt0ZOKKa8VW8ppg.roa
File:                     poy81WQbxCDrtt0ZOKKa8VW8ppg.roa (raw, json)
Hash identifier:          ApHFBgqbJhFF3yxdHy6yuOAlOrYU7AwNZ7DHNFfMBZY=
Subject key identifier:   A6:8C:BC:D5:64:1B:C4:20:EB:B6:DD:19:38:A2:9A:F1:55:BC:A6:98
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       C5
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/poy81WQbxCDrtt0ZOKKa8VW8ppg.roa
Signing time:             Sat 01 Jul 2023 01:31:23 +0000
ROA not before:           Sat 01 Jul 2023 01:31:23 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     9370
IP address blocks:        59.106.240.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Jul  1 01:31:23 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=A68CBCD5641BC420EBB6DD1938A29AF155BCA698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7c:db:78:9d:20:0f:c1:04:c3:7b:94:f4:36:
                    36:bb:2f:94:91:00:29:ef:57:fd:fc:24:7d:ea:a9:
                    9c:c0:61:de:6a:58:c0:86:06:94:e7:2b:af:85:6d:
                    da:60:65:af:f1:84:0e:26:6c:af:20:ad:57:2f:8d:
                    d5:e7:6d:9b:46:b5:05:58:b0:b2:60:47:10:19:3a:
                    f4:e5:22:94:d5:83:58:be:79:8c:25:2b:85:47:be:
                    c1:64:39:79:a4:51:a0:08:c7:ca:64:0c:a5:0d:90:
                    3b:5d:2e:78:68:7f:28:6e:e3:fe:90:94:67:6f:bb:
                    c7:e3:83:2c:e5:10:b7:43:b6:3c:cc:47:3a:c2:64:
                    33:f2:d9:6b:57:5e:72:83:28:23:ec:8e:b6:8e:03:
                    6f:21:20:02:dc:9e:20:bd:d0:c8:a2:d3:fc:22:11:
                    16:cb:8c:cc:5b:d4:8b:e6:8e:89:6d:ad:54:8c:43:
                    b0:6c:5d:83:19:c0:6f:02:09:3e:08:33:87:83:b5:
                    c3:82:83:fe:5a:6a:7e:e5:a6:c3:c8:fa:75:03:70:
                    3b:71:45:66:d8:c4:c0:66:40:c9:0a:c7:de:a0:ed:
                    3f:2f:4e:53:f8:11:ce:12:ea:c7:cd:59:fd:ab:e3:
                    bb:50:a2:dd:c5:a0:09:75:cc:06:a0:28:3d:6e:60:
                    e5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8C:BC:D5:64:1B:C4:20:EB:B6:DD:19:38:A2:9A:F1:55:BC:A6:98
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/poy81WQbxCDrtt0ZOKKa8VW8ppg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.106.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:f6:58:a2:e4:02:ef:da:0e:01:02:4c:f5:9e:bf:8a:37:ac:
         eb:0b:06:3e:82:ff:db:a4:8f:4b:04:69:c9:54:4f:4d:9c:3d:
         bb:59:f2:cb:39:08:7c:bc:e6:63:41:15:2c:14:7f:a7:67:51:
         22:8c:ad:ca:cc:bd:02:ce:ad:8a:56:6e:c1:3b:c1:a7:ca:9f:
         96:0c:eb:ab:db:1f:36:36:dd:ab:75:34:8b:3b:3a:a3:eb:73:
         23:56:23:ea:d1:c0:c9:87:af:33:ac:5e:8a:2a:84:40:41:af:
         42:40:54:17:ac:bb:fb:17:d6:9c:b1:bf:94:5f:8c:57:13:96:
         79:5c:2a:5b:b7:66:9d:61:0b:1e:04:d0:17:be:43:3b:62:d3:
         fc:7e:8a:5a:67:d5:96:62:c7:52:f1:a9:ae:5e:c6:77:81:67:
         ab:03:3c:80:e8:94:e4:03:eb:9e:d3:46:30:b2:d9:de:3f:d4:
         a5:0d:47:26:91:db:3e:5d:97:6e:16:b6:ec:c9:27:11:23:18:
         78:2d:46:66:87:59:1f:2a:f3:a5:75:d1:d1:64:55:38:e5:a0:
         16:d2:b1:22:9a:64:95:83:60:a2:5d:4a:92:c4:aa:d6:94:27:
         b6:b3:7a:c9:5c:b1:cb:cc:f2:ea:17:65:81:89:9b:3f:ea:20:
         c9:b7:f9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:45:56 2025 by rpki-client