Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/q9fK-m5cHeQqpJZxIqb6lA0AwIE.roa
File:                     q9fK-m5cHeQqpJZxIqb6lA0AwIE.roa (raw, json)
Hash identifier:          RRcLTJ2TKsddu4aaLrtuS9aL/1H/bIQuqx+4KROSbY0=
Subject key identifier:   AB:D7:CA:FA:6E:5C:1D:E4:2A:A4:96:71:22:A6:FA:94:0D:00:C0:81
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       F6
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/q9fK-m5cHeQqpJZxIqb6lA0AwIE.roa
Signing time:             Thu 08 Jun 2023 09:39:22 +0000
ROA not before:           Thu 08 Jun 2023 09:39:22 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     2527
IP address blocks:        116.91.32.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Jun  8 09:39:22 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=ABD7CAFA6E5C1DE42AA4967122A6FA940D00C081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:77:42:b1:18:df:ed:ea:c5:e5:4a:75:65:dd:
                    59:df:5c:a3:0f:9f:29:d3:d1:42:fc:06:f7:e2:cd:
                    17:ed:b0:72:9d:b4:31:86:62:5b:dd:d3:6f:43:64:
                    1e:36:cb:9b:2f:29:63:6a:f4:0e:30:12:7c:8d:05:
                    20:98:1e:51:af:57:ca:dc:e7:17:29:43:c6:50:3f:
                    65:f8:4c:e3:20:45:92:34:cd:43:5e:5f:0c:ec:b8:
                    ef:f6:55:00:4a:df:5b:97:37:bc:ea:65:20:c9:b3:
                    2c:4f:8b:70:3d:27:3e:b7:19:f6:c5:6a:a9:27:5b:
                    68:2b:3c:a1:77:d6:67:16:bd:0d:97:e3:56:ac:77:
                    5c:30:0b:66:da:74:13:e6:47:fa:7f:4c:40:1b:b9:
                    fe:84:33:06:dc:4d:c8:73:02:fa:36:d2:9d:d7:41:
                    d2:1c:18:fa:0b:9e:58:8b:1b:58:97:a4:50:66:13:
                    f5:5f:aa:d8:d0:24:0f:ef:60:9a:da:e9:3b:1f:58:
                    9d:8f:ae:fe:a2:70:ca:aa:c9:95:37:7c:06:7f:ba:
                    c2:40:29:5d:5f:94:ba:f5:23:bf:3f:29:50:19:6d:
                    c6:a2:b9:16:ec:f9:86:13:62:d5:47:3e:61:3c:5a:
                    d6:f2:00:2b:55:9c:bb:35:cb:ab:89:93:0d:3d:3d:
                    c6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D7:CA:FA:6E:5C:1D:E4:2A:A4:96:71:22:A6:FA:94:0D:00:C0:81
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/q9fK-m5cHeQqpJZxIqb6lA0AwIE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.91.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a4:68:36:2f:54:15:b9:b2:4a:fd:44:93:4b:ae:46:d0:f0:77:
         df:41:20:32:e3:08:77:20:82:6e:fe:e5:c2:93:da:34:49:5a:
         df:dc:6f:43:4b:27:99:d4:96:a7:0b:81:df:d1:06:0e:d7:98:
         8a:f9:77:6c:b4:58:a0:ce:5a:7c:4f:e3:e1:9a:5d:0e:71:4d:
         aa:1b:4e:47:10:cd:38:87:a1:cb:0b:5b:bd:35:0e:a7:4e:7e:
         a6:75:fa:7a:8f:67:81:19:46:e7:a5:6d:8a:90:a2:da:31:77:
         94:8e:34:b1:61:e7:2e:2c:d9:cc:2e:61:61:08:57:42:15:a7:
         df:88:fd:7d:bd:32:e6:27:32:5e:a2:23:6b:56:b2:61:40:e8:
         70:33:ea:37:3d:be:94:f4:e9:a8:72:5b:f8:21:0d:54:0c:69:
         88:5c:6b:b7:30:08:13:82:da:65:f9:92:40:fb:fb:db:80:45:
         59:4c:57:f0:51:36:4d:83:6e:3d:09:d2:fc:0d:cf:06:59:7b:
         0b:15:4a:c7:15:5c:a3:36:cf:e2:d2:52:6b:b6:90:65:0d:1b:
         45:5f:fb:7c:a2:ba:2f:1d:28:09:38:61:93:1f:56:38:d3:23:
         7c:6e:44:10:3a:b8:ca:2e:ac:bd:12:f1:90:99:d1:05:db:33:
         6c:fb:26:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 05:10:40 2025 by rpki-client