Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/l58aEhcRS89N0Uxym4fRi-qCBxY.roa
File:                     l58aEhcRS89N0Uxym4fRi-qCBxY.roa (raw, json)
Hash identifier:          0AMk6dJGBvMOVB25o4Kn72lcz82o4AmJghgPGUwpAXU=
Subject key identifier:   97:9F:1A:12:17:11:4B:CF:4D:D1:4C:72:9B:87:D1:8B:EA:82:07:16
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       50
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/l58aEhcRS89N0Uxym4fRi-qCBxY.roa
Signing time:             Tue 23 Feb 2021 08:57:37 +0000
ROA not before:           Tue 23 Feb 2021 08:57:37 +0000
ROA not after:            Tue 15 Feb 2022 01:30:02 +0000
asID:                     2527
IP address blocks:        219.98.0.0/16 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Feb 23 08:57:37 2021 GMT
            Not After : Feb 15 01:30:02 2022 GMT
        Subject: CN=979F1A1217114BCF4DD14C729B87D18BEA820716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:73:b9:a4:f5:9d:a6:74:ea:85:bf:51:af:89:
                    76:d1:5d:35:22:0c:9d:e3:59:b4:4c:16:91:6e:7c:
                    c4:81:e9:b1:15:90:3c:10:4d:48:0f:fb:63:a8:c6:
                    39:99:f7:94:d8:9f:b4:60:52:4b:d7:b7:b1:c3:50:
                    1f:24:c2:d6:28:a7:a3:82:dd:ee:8f:9b:1b:c8:98:
                    4a:36:38:c7:79:a2:0a:8d:e0:33:2f:6e:70:3c:6c:
                    dd:9a:03:4c:88:fb:02:3f:16:73:57:58:cc:b4:04:
                    40:b8:6d:28:0a:42:e2:77:c4:4c:12:82:0a:45:a8:
                    50:d5:b8:7b:d6:e2:2c:27:58:cc:a6:59:07:1a:4d:
                    4b:1e:de:8e:84:ab:14:7b:6a:95:1b:d7:12:69:96:
                    b4:3f:63:b5:26:0d:c9:46:91:ee:e3:0f:73:1d:8c:
                    97:b7:4c:95:e6:a3:65:94:a4:c8:94:82:b4:67:bf:
                    b7:61:d1:07:48:fb:14:e7:4c:03:b0:af:ac:86:0e:
                    9c:d2:ab:41:ad:9e:79:2a:f3:21:92:1c:3b:f5:82:
                    f5:f4:ff:bf:e4:1a:e2:ff:7a:0d:eb:4c:a3:fb:0f:
                    c8:1d:65:da:ed:5a:98:8a:3f:ea:6b:81:36:14:d2:
                    11:db:b7:a9:3f:e2:80:99:62:0b:da:1f:94:cd:20:
                    48:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9F:1A:12:17:11:4B:CF:4D:D1:4C:72:9B:87:D1:8B:EA:82:07:16
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/l58aEhcRS89N0Uxym4fRi-qCBxY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.98.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4f:74:31:e8:11:12:99:ae:00:8f:9a:cc:c8:58:94:d3:f8:0a:
         ab:dd:6c:23:ef:fe:e5:5e:7c:b3:cc:c1:cf:6e:b9:49:36:c3:
         f6:da:49:6c:da:b6:a2:35:e4:0f:30:90:08:68:0f:29:30:71:
         16:43:41:ab:b1:2d:a8:3c:90:23:e3:42:f4:fe:ac:da:ff:82:
         eb:7d:f9:b1:ad:dd:b9:f2:9d:fd:47:93:61:76:ce:99:2c:71:
         eb:03:ba:82:b3:6a:0d:da:a4:6b:61:2c:67:1d:8f:1b:cb:48:
         76:1f:3c:46:0a:2a:1a:0f:3c:26:5e:2e:b8:fe:16:15:d7:2f:
         a6:82:bf:e6:2f:d2:5b:fe:e2:e7:88:b5:a1:59:4e:12:66:be:
         91:0e:60:fe:4d:89:ba:6c:5f:4c:c5:b3:4e:59:14:75:6f:2e:
         55:38:7f:92:bc:3b:36:8e:59:11:97:8f:47:09:b4:0e:bf:35:
         20:3c:c9:e8:27:e2:8d:22:99:ae:3e:2a:ca:a9:db:28:42:91:
         dd:29:6d:73:19:1b:3f:88:25:dc:0f:69:9d:ec:b3:da:46:5a:
         44:5b:0c:98:dc:dd:60:99:2b:96:e4:2d:92:38:b2:89:39:f7:
         65:fc:98:0a:86:dc:86:c2:26:14:a7:ec:92:8a:1c:08:30:38:
         b5:ea:a6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:18:47 2025 by rpki-client