Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/PCmc0SuzhkaHCfp2TJDn_m4gKE4.roa
File:                     PCmc0SuzhkaHCfp2TJDn_m4gKE4.roa (raw, json)
Hash identifier:          1C5oZY/bBS+pIimdJ8Nfkq37TvVzY4TfYmuLWBM0Vv8=
Subject key identifier:   3C:29:9C:D1:2B:B3:86:46:87:09:FA:76:4C:90:E7:FE:6E:20:28:4E
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       70
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/PCmc0SuzhkaHCfp2TJDn_m4gKE4.roa
Signing time:             Fri 22 Jul 2022 04:43:12 +0000
ROA not before:           Fri 22 Jul 2022 04:43:12 +0000
ROA not after:            Fri 21 Jul 2023 04:07:13 +0000
asID:                     10013
IP address blocks:        59.156.128.0/22 maxlen: 22
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jul 22 04:43:12 2022 GMT
            Not After : Jul 21 04:07:13 2023 GMT
        Subject: CN=3C299CD12BB386468709FA764C90E7FE6E20284E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ab:9f:3b:f2:2e:75:ea:e7:f7:64:ba:e9:35:
                    dc:a8:fa:d3:a1:84:9c:9c:5a:ca:fb:d1:94:18:df:
                    01:2a:e9:78:42:d5:36:78:f0:3d:bb:0a:f8:2f:0b:
                    34:d5:b8:fc:04:22:d5:02:6a:6c:d1:b3:60:18:16:
                    a2:c8:66:33:24:58:69:4b:57:70:33:37:76:84:f0:
                    a7:9e:14:fd:be:5c:24:ff:b2:8f:8f:63:4a:52:60:
                    c3:ad:f3:51:31:d6:00:cf:ba:cb:e2:2d:30:1b:c3:
                    e9:e7:9d:84:23:5d:bf:fb:49:e7:0c:70:52:ea:9a:
                    4f:1c:76:a0:c2:55:66:39:40:15:f9:50:63:fc:45:
                    51:2b:b8:da:fd:c0:bd:d0:86:3f:32:97:fc:a0:b5:
                    af:64:ca:cf:7d:d2:46:53:d7:d6:9a:d8:ba:58:3e:
                    a7:c3:c5:74:eb:da:ee:94:b8:cf:63:6f:2b:55:6d:
                    d2:70:1a:7f:be:6d:94:7f:ec:b9:25:fa:ca:19:34:
                    4d:08:b2:05:4a:29:3b:dc:b4:ce:c5:6f:16:47:4a:
                    ab:8f:8e:d8:3b:49:3c:2a:3b:17:ef:85:f9:74:6b:
                    e0:0d:b0:b0:e4:18:3f:43:09:f2:3c:22:89:3e:65:
                    f7:97:5c:7a:25:fc:7b:8a:11:76:fe:27:0a:90:e3:
                    63:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:29:9C:D1:2B:B3:86:46:87:09:FA:76:4C:90:E7:FE:6E:20:28:4E
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/PCmc0SuzhkaHCfp2TJDn_m4gKE4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.156.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:75:b1:4d:30:85:d5:ae:36:11:36:95:44:c7:bd:59:79:c4:
         f9:01:a4:6b:7f:d1:b8:84:a3:18:2f:8a:a4:0f:89:f2:ee:85:
         01:17:83:8b:4b:3b:aa:88:8f:d7:63:88:3c:f1:24:58:06:23:
         7c:6b:58:bf:d6:43:3d:7b:2e:e7:a7:dd:fc:48:d2:b3:e9:c2:
         d8:b0:c6:ef:19:fd:52:a7:7b:a2:38:05:2d:cf:6c:dd:42:bc:
         ad:0c:c7:55:11:f6:95:b3:d5:ca:5f:6a:33:98:95:f1:d9:d5:
         38:2f:b3:6f:77:17:b4:e0:d6:12:f6:ba:5a:3d:a5:b5:42:61:
         93:44:43:30:2a:d7:cb:ac:4e:79:bf:e2:23:87:6e:32:fa:ec:
         5b:20:50:ef:d5:c1:d8:56:b6:b7:f2:2a:6e:7f:41:1e:33:c4:
         e9:eb:10:0c:e0:1c:f9:7d:18:40:23:55:0d:c6:eb:93:44:4b:
         b5:8b:7e:a4:a5:d8:a8:77:19:d7:ce:87:28:06:96:f7:4a:36:
         0d:39:2e:51:15:0b:18:b0:e4:86:16:bd:d7:74:18:32:63:46:
         e4:e8:6c:a5:52:c0:20:96:56:65:97:10:1d:51:d3:0f:f2:46:
         8c:15:09:3c:d9:b2:2b:0a:10:6f:d9:f5:77:91:04:f3:57:4a:
         f9:d8:79:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:47 2025 by rpki-client