Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30073/Vegfg3mHg75vtQbEpaTho847UPE.roa
File:                     Vegfg3mHg75vtQbEpaTho847UPE.roa (raw, json)
Hash identifier:          QRcsN90UWrTKj9UuurqqMcNF6SJW1Mz7FRNjecCSQxc=
Subject key identifier:   55:E8:1F:83:79:87:83:BE:6F:B5:06:C4:A5:A4:E1:A3:CE:3B:50:F1
Certificate issuer:       /CN=B3C7A19804F728E8FF5E45BEC8DA582105A3DA9D
Certificate serial:       27
Authority key identifier: B3:C7:A1:98:04:F7:28:E8:FF:5E:45:BE:C8:DA:58:21:05:A3:DA:9D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/Vegfg3mHg75vtQbEpaTho847UPE.roa
Signing time:             Sun 01 May 2022 01:31:13 +0000
ROA not before:           Sun 01 May 2022 01:31:13 +0000
ROA not after:            Thu 27 Apr 2023 09:52:34 +0000
asID:                     4713
IP address blocks:        2400:4000::/22 maxlen: 64
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C7A19804F728E8FF5E45BEC8DA582105A3DA9D
        Validity
            Not Before: May  1 01:31:13 2022 GMT
            Not After : Apr 27 09:52:34 2023 GMT
        Subject: CN=55E81F83798783BE6FB506C4A5A4E1A3CE3B50F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b2:c4:b5:7c:47:8c:fa:99:c8:27:ed:a4:7c:
                    bb:bd:0c:45:52:60:3d:d7:cd:54:2c:86:39:35:97:
                    bc:60:47:97:89:7e:8e:49:a5:53:3e:6d:12:07:44:
                    a9:a5:29:71:7e:f4:7d:26:e5:d1:ee:8d:ee:a1:24:
                    39:24:a2:6f:f9:10:56:73:bd:ac:c4:78:89:02:f6:
                    77:d1:a4:b1:97:96:c3:9d:41:fc:8b:e4:34:d5:6d:
                    0a:13:74:49:9f:92:65:52:1b:51:3c:a3:dc:ec:50:
                    60:78:7c:28:fc:c0:6f:2f:7e:b2:95:fa:21:36:a8:
                    b4:0d:5e:fc:2e:47:b6:81:00:75:66:86:2a:52:39:
                    10:4a:17:3c:81:38:fb:28:7e:3d:47:00:3c:b5:d7:
                    e6:ad:88:dc:e2:8a:95:09:05:48:f1:9f:e2:0d:e7:
                    3f:a8:08:7b:72:e3:27:90:af:bb:3f:30:35:08:cf:
                    94:80:9a:cb:40:69:2e:3f:b2:04:c9:e0:28:1d:32:
                    6e:00:2e:81:4d:3e:55:84:e2:7c:2a:97:43:31:f8:
                    f5:24:6a:6e:b3:ed:37:4e:78:ff:07:cf:a3:97:32:
                    2f:28:b1:05:e0:3e:0f:94:30:8d:83:02:83:c6:b9:
                    ea:fb:c3:2e:25:58:ae:9b:28:78:d1:13:20:d8:84:
                    29:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E8:1F:83:79:87:83:BE:6F:B5:06:C4:A5:A4:E1:A3:CE:3B:50:F1
            X509v3 Authority Key Identifier:
                keyid:B3:C7:A1:98:04:F7:28:E8:FF:5E:45:BE:C8:DA:58:21:05:A3:DA:9D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/s8ehmAT3KOj_XkW-yNpYIQWj2p0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/Vegfg3mHg75vtQbEpaTho847UPE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:4000::/22

    Signature Algorithm: sha256WithRSAEncryption
         16:40:ec:0a:f0:42:77:0b:00:b1:ed:05:8e:92:3b:b0:a5:e9:
         17:c5:ab:d9:34:72:e3:fa:27:c8:14:7a:f1:e7:d1:3b:50:d2:
         00:16:d0:c5:5d:fe:d6:0b:b4:7d:bd:05:23:31:51:53:dd:87:
         54:77:d4:94:c3:26:37:f7:84:b4:70:7f:d8:55:a4:4b:a2:64:
         d7:4b:00:2f:fa:87:3c:fc:07:81:ed:77:0e:a8:98:ec:6c:0f:
         f0:c6:69:11:44:17:6e:71:9f:bc:4f:35:a1:55:cf:52:8f:8f:
         b5:a1:86:5c:33:aa:14:cc:35:51:45:f6:a2:2d:5b:1f:5d:f4:
         68:1c:3b:eb:d1:c7:6b:15:5f:e7:f6:70:2c:74:6c:df:ce:6d:
         74:46:36:0d:8e:f3:bd:c9:2a:ea:7b:95:09:72:0c:4b:5b:3a:
         b6:b2:09:52:12:83:36:b2:0f:05:a2:81:26:2f:e0:5a:de:26:
         9b:5a:78:41:bd:76:a5:38:84:6c:e7:38:ec:22:c1:d3:78:15:
         15:e0:16:44:8a:f8:f1:97:95:12:1c:b4:0c:d8:a9:44:eb:3e:
         b4:3d:7f:78:85:67:f7:45:5d:ff:1d:cb:b7:12:77:60:8b:9b:
         92:da:4d:86:47:47:20:17:94:cf:b3:27:04:0c:d0:15:4a:83:
         6e:11:01:08
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:45:56 2025 by rpki-client