Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/GTfDEWLcQIN_DmKHA0wljDYT2XU.roa
File:                     GTfDEWLcQIN_DmKHA0wljDYT2XU.roa (raw, json)
Hash identifier:          FUfEIMOND7nyDzjHy7breecVvwhOYOggjllMh33CUTA=
Subject key identifier:   19:37:C3:11:62:DC:40:83:7F:0E:62:87:03:4C:25:8C:36:13:D9:75
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0149
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/GTfDEWLcQIN_DmKHA0wljDYT2XU.roa
Signing time:             Fri 07 Jul 2023 04:08:24 +0000
ROA not before:           Fri 07 Jul 2023 04:08:24 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     10013
IP address blocks:        220.215.96.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul  7 04:08:24 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=1937C31162DC40837F0E6287034C258C3613D975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:eb:7a:5d:a3:33:40:bd:40:23:86:74:92:85:
                    df:5b:08:78:a8:a0:4f:63:84:46:a9:99:06:9f:1e:
                    e5:f1:7e:02:5b:c8:0b:3f:bd:14:cb:92:2f:af:d6:
                    3e:42:08:03:64:78:3d:f4:de:d7:6f:e2:1b:2b:75:
                    d3:b1:fe:61:c8:22:65:98:96:73:f7:a1:55:0a:3b:
                    4a:e4:e0:64:84:58:25:d1:8b:4a:17:dd:ee:4e:eb:
                    e4:dd:49:11:b9:74:a6:e7:b6:74:1c:fb:ed:29:fb:
                    f5:de:1a:3b:f8:74:b4:51:45:8e:e7:47:93:f9:e0:
                    93:75:87:60:76:cc:bd:9a:99:6e:47:72:e6:d9:f8:
                    99:2a:22:b3:64:f2:33:74:83:70:bb:51:99:b1:7d:
                    01:8f:fb:26:84:db:a6:65:79:19:8b:ce:3b:5b:48:
                    1e:1a:2d:0d:27:1c:b9:5f:d3:64:17:ac:b0:72:1e:
                    6b:cf:32:b8:56:db:29:ea:33:47:a1:4b:b8:67:a7:
                    40:73:99:7b:3e:0f:83:42:04:c0:b1:7c:a3:8c:a0:
                    7e:91:7f:34:85:eb:a7:72:c9:c8:41:d1:05:8f:83:
                    7e:95:74:41:39:e7:61:e6:4e:84:7d:97:ad:76:04:
                    e2:a4:29:91:23:8f:dd:27:06:6f:64:87:a2:d6:06:
                    c2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:37:C3:11:62:DC:40:83:7F:0E:62:87:03:4C:25:8C:36:13:D9:75
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/GTfDEWLcQIN_DmKHA0wljDYT2XU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.215.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6d:e0:f2:a3:fe:78:5c:70:9c:31:21:b5:01:e5:f8:d3:40:fe:
         a0:42:80:83:ef:6b:2d:04:b5:77:b3:41:ec:2f:da:c4:0a:a6:
         08:8d:eb:84:a8:1a:22:06:e7:31:4b:5c:a4:aa:dc:c4:68:a9:
         40:f8:5b:d5:95:2c:1c:7a:63:0c:e3:38:56:c2:7d:d9:18:6a:
         4b:59:3e:e8:01:44:5c:da:a9:c7:9c:a5:5c:b5:4c:ee:57:fe:
         2f:b9:8a:bf:5f:2e:33:83:5d:b8:ef:34:60:ab:8b:82:d1:60:
         93:d0:a4:42:15:57:32:d9:54:8c:97:89:4b:11:6e:2c:2b:00:
         45:02:4a:97:19:fc:5a:03:4a:1d:2a:f6:14:ba:83:8f:26:8b:
         82:67:68:58:95:90:25:e9:9e:36:ea:14:05:95:0b:33:87:14:
         38:ba:5d:cd:72:c1:9c:2e:13:87:0d:16:bc:af:6a:99:c0:d6:
         2c:27:96:df:69:08:05:3e:d6:94:67:f7:22:6b:74:4a:06:40:
         ab:d0:b5:77:0a:6f:e8:16:2b:96:30:29:37:37:6c:be:92:a8:
         46:c4:b8:3c:53:df:15:82:3b:2e:b9:1c:02:73:a5:3f:10:9f:
         3c:e6:29:63:21:49:d7:14:bd:46:57:ee:c6:c2:5c:ea:e6:41:
         b6:0b:84:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:41:52 2025 by rpki-client