Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39062/rT85FZlSpG4NFgvctWhrnD6W9ec.roa
File:                     rT85FZlSpG4NFgvctWhrnD6W9ec.roa (raw, json)
Hash identifier:          WOg71orKlUrL/6wIJ8sOQlZLHgVLSW6u+4XBRZ7fDvA=
Subject key identifier:   AD:3F:39:15:99:52:A4:6E:0D:16:0B:DC:B5:68:6B:9C:3E:96:F5:E7
Certificate issuer:       /CN=007304C8C78435522607E1CFAF1F3CE1A221FF7D
Certificate serial:       02
Authority key identifier: 00:73:04:C8:C7:84:35:52:26:07:E1:CF:AF:1F:3C:E1:A2:21:FF:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHMEyMeENVImB-HPrx884aIh_30.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/rT85FZlSpG4NFgvctWhrnD6W9ec.roa
Signing time:             Mon 11 Apr 2022 06:54:10 +0000
ROA not before:           Mon 11 Apr 2022 06:54:10 +0000
ROA not after:            Tue 11 Apr 2023 06:42:04 +0000
asID:                     146980
IP address blocks:        2001:df0:8bc0::/48 maxlen: 48
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007304C8C78435522607E1CFAF1F3CE1A221FF7D
        Validity
            Not Before: Apr 11 06:54:10 2022 GMT
            Not After : Apr 11 06:42:04 2023 GMT
        Subject: CN=AD3F39159952A46E0D160BDCB5686B9C3E96F5E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5e:1e:e1:32:8b:5d:2b:a0:93:f0:18:36:a9:
                    d0:cf:8d:7a:d7:64:b7:22:1e:48:5b:a3:13:69:7b:
                    ed:1e:e9:75:e8:09:ca:03:07:ad:f9:11:9a:90:c5:
                    e6:53:b8:5f:7f:e1:e0:22:1e:e6:40:71:97:7c:e3:
                    f1:49:6b:8f:61:9c:25:93:1e:de:e4:b4:f3:c0:fe:
                    19:75:d7:d5:98:ce:a0:57:01:08:8d:6f:ed:65:b8:
                    7c:fa:e8:5e:a7:77:02:b5:9e:72:e7:90:67:99:93:
                    8e:0d:fe:af:e3:80:13:e8:30:54:ac:a3:d0:1c:12:
                    fd:f9:0e:56:09:1f:ba:f7:e9:d5:e5:f5:68:69:58:
                    cc:ae:1e:39:70:90:bb:7c:7f:ac:a5:43:52:b3:72:
                    b7:39:b9:d0:73:b6:d8:09:bd:b6:4a:2b:2a:7a:c2:
                    37:93:f3:d1:e0:fc:f5:a4:cf:14:b9:ed:38:ac:7d:
                    bf:2c:b4:bb:58:dc:fa:ae:d4:6a:24:28:31:fe:c9:
                    db:b2:4f:cb:2c:75:4d:85:c7:db:8d:9f:73:e4:63:
                    cb:b6:8c:c7:f8:36:ce:58:b9:f9:b4:d7:85:04:6e:
                    af:c5:b6:b4:c7:28:2f:e1:be:3e:6d:9f:11:da:e5:
                    0f:5b:4d:52:06:80:28:cd:01:f0:72:01:bb:f0:e6:
                    ee:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:3F:39:15:99:52:A4:6E:0D:16:0B:DC:B5:68:6B:9C:3E:96:F5:E7
            X509v3 Authority Key Identifier:
                keyid:00:73:04:C8:C7:84:35:52:26:07:E1:CF:AF:1F:3C:E1:A2:21:FF:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/AHMEyMeENVImB-HPrx884aIh_30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHMEyMeENVImB-HPrx884aIh_30.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/rT85FZlSpG4NFgvctWhrnD6W9ec.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:8bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:05:4d:3f:a0:34:f6:21:36:86:bd:35:23:33:ec:df:67:00:
         3f:bd:22:d3:db:5b:a8:9c:a3:12:93:a4:68:63:0b:e2:df:b2:
         f1:ec:5b:28:49:a5:17:82:6c:28:7d:51:0d:a3:fe:b9:48:59:
         44:12:61:d4:c6:9d:9c:e4:cc:41:6b:7a:09:63:a0:ed:bb:66:
         c5:6b:d4:af:bc:de:e7:64:61:f4:82:c1:bf:35:cf:d6:97:9c:
         9a:e2:ae:db:3e:42:cc:40:3b:d8:65:2c:1e:4d:99:38:a8:af:
         fa:4b:6a:2b:99:8b:6b:64:65:9f:6f:f2:01:5e:af:ca:c8:13:
         3b:f1:75:59:11:09:9d:25:02:70:b2:ad:0b:e2:f3:06:69:eb:
         a8:32:83:11:0e:51:2f:9f:bc:e5:61:54:36:0e:cc:d6:67:af:
         70:c7:6a:c4:c1:ae:bf:22:69:46:f9:8b:f7:e2:38:4f:56:92:
         1c:f9:fd:ee:2e:fb:a9:f2:dd:8a:23:a2:cb:dd:d2:20:b7:7d:
         f1:ff:4e:b1:ea:b2:4e:2e:2e:01:66:03:94:44:c2:bb:e4:1a:
         2f:a5:7f:23:2b:61:d8:b5:a6:ae:63:45:9c:87:7a:08:16:7e:
         ca:30:45:08:49:47:09:cb:c0:69:dc:ef:f3:1d:be:19:6e:27:
         af:a3:12:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:13 2025 by rpki-client