Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/V5fHE6bl6s6cLY-V-v0NYZbSZXA.roa
File:                     V5fHE6bl6s6cLY-V-v0NYZbSZXA.roa (raw, json)
Hash identifier:          syDmyHHaWiThK8VfFiX+0l8F4+fowrKoeAaqQlwRxdo=
Subject key identifier:   57:97:C7:13:A6:E5:EA:CE:9C:2D:8F:95:FA:FD:0D:61:96:D2:65:70
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       C9
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/V5fHE6bl6s6cLY-V-v0NYZbSZXA.roa
Signing time:             Sun 01 Jan 2023 01:29:35 +0000
ROA not before:           Sun 01 Jan 2023 01:29:35 +0000
ROA not after:            Fri 15 Dec 2023 01:30:02 +0000
asID:                     2527
IP address blocks:        111.216.0.0/15 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Jan  1 01:29:35 2023 GMT
            Not After : Dec 15 01:30:02 2023 GMT
        Subject: CN=5797C713A6E5EACE9C2D8F95FAFD0D6196D26570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cb:ec:05:27:9d:cb:a8:10:4d:a0:13:3f:e1:
                    03:c6:3f:01:ac:29:ac:9d:b5:25:97:2c:4c:12:8d:
                    5e:89:19:a5:31:51:7e:b1:6a:87:9d:e0:77:95:2f:
                    34:95:39:52:8b:77:41:fe:c8:d0:57:bb:04:6a:ae:
                    f0:2f:ae:78:ec:3b:97:15:bc:1d:39:f4:01:18:6d:
                    ec:bf:60:de:90:f1:f9:75:de:61:cf:e0:f7:88:09:
                    2a:fa:d6:f9:8a:ae:27:07:79:db:de:99:b1:d8:17:
                    69:68:11:20:53:0c:65:65:86:f1:0b:aa:07:8e:df:
                    c6:6e:3e:99:9b:20:f2:cd:7a:27:11:29:6a:ab:93:
                    20:8d:01:85:d9:a4:6e:dc:21:f9:e7:58:1e:e2:4f:
                    9c:f9:45:10:d7:e7:46:8a:e7:64:f9:54:ae:14:e7:
                    1d:34:30:b5:24:c1:b7:d7:b4:0f:6b:32:e8:d1:98:
                    09:30:0f:5f:de:51:1f:80:8b:20:81:5d:16:cf:16:
                    23:ba:71:4a:8c:cc:fc:66:c2:8b:41:9d:28:94:49:
                    e9:f6:22:43:09:eb:93:8e:3b:85:68:81:2d:52:ea:
                    17:42:2f:1a:7c:30:20:09:ea:f7:6c:41:67:2f:e2:
                    43:0e:fe:74:dc:82:c1:1c:9c:46:71:c3:03:9a:73:
                    3c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:97:C7:13:A6:E5:EA:CE:9C:2D:8F:95:FA:FD:0D:61:96:D2:65:70
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/V5fHE6bl6s6cLY-V-v0NYZbSZXA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.216.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         34:95:e3:36:60:5c:9e:c7:5f:14:06:c7:68:b7:a7:00:07:16:
         23:b0:af:a9:23:3d:7a:84:58:9c:44:17:5b:3c:b4:18:54:a9:
         2b:e4:8b:c4:d8:bc:ca:ff:be:47:56:2e:22:e4:91:4c:de:87:
         7a:68:5a:c3:53:1a:90:1b:ab:7b:e3:96:40:74:b6:1d:f4:e5:
         54:b1:ff:ce:d7:df:e0:03:cd:fa:31:b9:cb:4c:cd:59:c2:04:
         9f:99:24:fe:ed:17:3c:99:af:ee:8c:7a:45:bf:ca:e5:c3:48:
         9a:04:8a:87:07:c7:51:f8:f0:07:9a:a7:84:bd:53:9f:77:86:
         c6:2f:22:13:b3:90:b8:da:f5:39:83:9c:11:51:fa:bd:51:e0:
         20:75:d4:16:a0:2d:d7:47:12:28:b5:0d:8d:f8:98:2f:e0:cd:
         6a:5b:8e:31:3c:79:7a:71:ce:41:a6:cd:ce:28:61:fc:58:45:
         d0:63:a6:fc:3c:ac:83:d5:74:e0:00:17:10:07:a4:74:94:5c:
         8d:2b:e1:ba:45:a2:ff:53:b5:2f:e0:80:30:c8:ba:89:3f:7e:
         68:f7:5d:6b:b0:72:28:d9:90:a5:26:a8:a4:23:08:6d:06:e1:
         e2:c2:de:c2:f0:56:cf:80:4f:f0:2f:56:92:c6:32:1b:95:0e:
         e7:71:d8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:13:27 2025 by rpki-client