Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/FO8imoeWqcpNqioATWH1zYI0qeI.roa
File:                     FO8imoeWqcpNqioATWH1zYI0qeI.roa (raw, json)
Hash identifier:          0KDlP/pafRriioROyJFPgb5Z+PHafKLcCH4F+NnTkkA=
Subject key identifier:   14:EF:22:9A:87:96:A9:CA:4D:AA:2A:00:4D:61:F5:CD:82:34:A9:E2
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       EC
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/FO8imoeWqcpNqioATWH1zYI0qeI.roa
Signing time:             Wed 01 Feb 2023 01:29:27 +0000
ROA not before:           Wed 01 Feb 2023 01:29:27 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     2527
IP address blocks:        219.104.192.0/18 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Feb  1 01:29:27 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=14EF229A8796A9CA4DAA2A004D61F5CD8234A9E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b8:62:27:e3:2a:20:e7:7a:10:42:4e:15:b1:
                    96:1d:af:e2:71:d3:e1:6d:6f:a3:29:76:05:f4:ec:
                    1c:56:df:f0:25:b2:e4:ab:19:d3:90:a3:fe:c1:d2:
                    fb:ac:d6:a8:47:45:09:e7:ab:e1:99:db:12:74:ff:
                    93:fc:5b:fc:2c:2b:22:00:1c:7b:61:62:c5:d4:aa:
                    57:ef:e3:d8:e3:3f:ab:8d:61:76:3f:47:c9:a1:3c:
                    11:a8:b5:0d:39:ba:a9:81:b1:75:8d:52:3f:ca:05:
                    40:6d:0f:2d:f1:ec:7a:27:23:1c:f6:22:56:42:43:
                    30:46:76:8b:3c:0e:bb:82:ce:78:7d:eb:1a:a1:af:
                    f0:d9:29:7d:2b:9f:a2:09:af:d0:ee:6d:92:39:18:
                    0b:86:39:e5:e2:61:4d:d0:a9:89:2c:69:ae:a8:b6:
                    3a:31:aa:70:e8:22:1c:1b:77:9c:b0:db:65:3e:87:
                    1d:91:f3:0b:1b:8a:6c:0b:90:12:41:f6:2f:b1:bf:
                    cd:06:dc:36:68:8b:77:14:e4:a5:ac:51:2d:53:6b:
                    5e:c9:f4:fc:b4:14:31:c2:e4:db:d8:a7:a2:88:81:
                    10:40:7b:a4:b2:31:4a:07:a9:18:8a:a1:61:eb:87:
                    ff:55:5d:a2:cb:4b:c3:ab:70:99:74:22:df:ee:f8:
                    11:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EF:22:9A:87:96:A9:CA:4D:AA:2A:00:4D:61:F5:CD:82:34:A9:E2
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/FO8imoeWqcpNqioATWH1zYI0qeI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.104.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9d:ce:1e:d4:77:cd:90:ed:29:21:75:7d:fd:b1:a9:3d:fc:61:
         3a:c4:fb:46:3d:e9:ae:cf:08:83:a6:ad:5f:0c:5a:7b:dc:e2:
         8a:57:2c:f8:81:20:a8:45:c7:9b:ad:90:94:d4:7b:71:18:6c:
         ca:e6:90:04:16:52:fa:64:12:48:ec:d5:39:03:bf:01:a8:93:
         84:2b:ed:41:bf:7f:a7:20:b6:cf:df:06:85:04:ec:54:84:f3:
         4f:85:6c:c8:b8:6a:9a:62:43:33:b0:fb:8c:5e:f1:7f:3f:96:
         e5:7e:28:b5:76:ec:ab:66:22:73:df:25:cc:69:af:81:94:8d:
         63:09:38:76:64:b0:e3:11:d5:4f:ee:47:4f:fa:2f:fb:23:31:
         77:43:d4:74:61:a0:5f:b6:4a:41:c0:5d:1e:35:5d:f8:cb:de:
         ea:87:89:aa:77:fe:8c:ff:42:60:1b:b4:97:24:51:fa:b1:ae:
         2f:6a:68:95:35:db:ef:7a:c1:c8:3d:c6:44:86:2c:09:f8:14:
         82:f3:c6:f9:0c:85:60:eb:79:5b:10:72:59:d4:31:a0:55:2c:
         51:6d:96:97:ce:bb:d7:1b:f0:88:63:b0:d3:a8:a0:a6:b4:d5:
         a2:00:1f:29:d1:ec:b6:73:79:f2:e9:14:a6:5b:ee:79:a4:88:
         8d:51:d8:7c
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yMzAyMDEw
MTI5MjdaFw0yNDAxMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDE0RUYyMjlBODc5NkE5
Q0E0REFBMkEwMDRENjFGNUNEODIzNEE5RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFuGIn4yog53oQQk4VsZYdr+Jx0+Ftb6MpdgX07BxW3/AlsuSr
GdOQo/7B0vus1qhHRQnnq+GZ2xJ0/5P8W/wsKyIAHHthYsXUqlfv49jjP6uNYXY/
R8mhPBGotQ05uqmBsXWNUj/KBUBtDy3x7HonIxz2IlZCQzBGdos8DruCznh96xqh
r/DZKX0rn6IJr9DubZI5GAuGOeXiYU3QqYksaa6otjoxqnDoIhwbd5yw22U+hx2R
8wsbimwLkBJB9i+xv80G3DZoi3cU5KWsUS1Ta17J9Py0FDHC5NvYp6KIgRBAe6Sy
MUoHqRiKoWHrh/9VXaLLS8OrcJl0It/u+BGXAgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQUFO8imoeWqcpNqioATWH1zYI0qeIwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80My9GTzhpbW9lV3FjcE5xaW9BVFdIMXpZSTBxZUkucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQG22jAMA0GCSqGSIb3DQEBCwUAA4IBAQCdzh7Ud82Q7SkhdX39sak9/GE6xPtG
PemuzwiDpq1fDFp73OKKVyz4gSCoRcebrZCU1HtxGGzK5pAEFlL6ZBJI7NU5A78B
qJOEK+1Bv3+nILbP3waFBOxUhPNPhWzIuGqaYkMzsPuMXvF/P5blfii1duyrZiJz
3yXMaa+BlI1jCTh2ZLDjEdVP7kdP+i/7IzF3Q9R0YaBftkpBwF0eNV34y97qh4mq
d/6M/0JgG7SXJFH6sa4vamiVNdvvesHIPcZEhiwJ+BSC88b5DIVg63lbEHJZ1DGg
VSxRbZaXzrvXG/CIY7DTqKCmtNWiAB8p0ey2c3ny6RSmW+55pIiNUdh8
-----END CERTIFICATE-----
Generated at Wed Apr 16 05:20:21 2025 by rpki-client