Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/_5ICCVYGbkciWyp1pCj110hZFi0.roa
File:                     _5ICCVYGbkciWyp1pCj110hZFi0.roa (raw, json)
Hash identifier:          oMNh8y+EdPBiI6Ukci/XCgOU3zHovQ0LLSjfT3Y6vBw=
Subject key identifier:   FF:92:02:09:56:06:6E:47:22:5B:2A:75:A4:28:F5:D7:48:59:16:2D
Certificate issuer:       /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial:       3A
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/_5ICCVYGbkciWyp1pCj110hZFi0.roa
Signing time:             Wed 01 Feb 2023 01:29:37 +0000
ROA not before:           Wed 01 Feb 2023 01:29:37 +0000
ROA not after:            Mon 15 Jan 2024 01:30:02 +0000
asID:                     10011
IP address blocks:        61.121.224.0/20 maxlen: 20
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
        Validity
            Not Before: Feb  1 01:29:37 2023 GMT
            Not After : Jan 15 01:30:02 2024 GMT
        Subject: CN=FF92020956066E47225B2A75A428F5D74859162D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ec:52:00:ab:90:1f:0e:96:15:87:28:4a:12:
                    bd:bb:ce:20:ca:9f:4f:2e:05:25:34:91:30:1b:e9:
                    8d:90:ca:2a:d6:9f:12:be:83:87:10:c2:b6:16:14:
                    27:86:c3:8d:73:8b:71:82:05:ba:ec:b1:3f:c8:9f:
                    e1:70:e1:7c:cb:16:95:ea:d4:c3:c5:93:58:5a:f7:
                    82:1b:11:79:93:7e:8e:2b:43:19:92:fe:ac:86:cc:
                    38:e3:a1:dc:3d:e3:55:0a:47:5d:3a:e7:b3:b1:b0:
                    89:34:7a:f2:f0:56:f2:39:37:a2:0e:10:99:98:2c:
                    33:2b:b8:c8:fd:a6:10:15:ae:70:8b:fe:40:bf:45:
                    08:87:82:7f:97:54:36:ac:74:b0:69:55:19:0e:93:
                    7f:2b:63:99:cc:86:6c:d2:af:a3:eb:e7:c8:eb:58:
                    2b:22:f3:05:c0:3b:26:54:1c:84:49:ab:2c:df:03:
                    84:92:39:5d:94:b3:45:a0:4c:a8:03:25:26:bd:cc:
                    fc:ba:d6:d2:ec:78:a6:e0:09:da:4e:93:6c:6e:2e:
                    a4:7f:6f:c1:2c:38:6b:e1:22:1f:0e:ab:68:dc:c1:
                    d6:46:fe:4f:c5:5f:09:11:ae:5e:5b:65:ad:ad:bb:
                    bf:54:6c:ac:d6:3f:5f:c9:89:62:4f:96:ae:81:cf:
                    d1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:92:02:09:56:06:6E:47:22:5B:2A:75:A4:28:F5:D7:48:59:16:2D
            X509v3 Authority Key Identifier:
                keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/_5ICCVYGbkciWyp1pCj110hZFi0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.121.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b2:ed:1e:9a:9a:38:cd:41:08:ae:9e:fb:3c:e2:ab:87:c5:be:
         c9:09:5d:22:2d:c3:f9:5b:75:f3:5a:ab:df:18:d2:44:9a:8f:
         fa:f6:b3:d6:56:d9:f0:b8:26:ab:b4:61:99:20:b5:73:12:79:
         fc:c1:53:d8:5b:74:a7:4b:52:de:99:1d:6c:d6:55:25:58:14:
         36:77:65:50:cb:44:fe:72:f0:43:34:63:59:71:ad:8a:0c:63:
         7c:ef:3f:07:0c:c8:03:4e:5b:02:3d:b6:1e:a6:f7:79:c2:50:
         4d:f0:50:d7:a3:ab:bc:7b:dc:bf:68:4c:55:63:5c:5c:8c:75:
         ef:4f:e1:51:03:91:23:d3:0c:4e:1b:99:9d:72:96:85:65:c6:
         a0:36:18:1d:88:b7:35:f1:00:32:56:85:5d:bf:6a:fe:0d:b7:
         e9:10:b6:26:8c:b7:09:ec:c5:a8:44:82:f1:fa:4a:19:16:bb:
         9d:ad:83:2f:dd:b1:88:7d:ad:5d:e8:33:24:f1:12:b5:29:67:
         a3:0f:d3:95:8b:1c:64:a8:10:10:d7:8f:ba:dd:3c:cc:20:c7:
         0c:01:b0:b7:c9:f3:68:98:01:20:98:69:a7:e4:65:b8:32:a9:
         25:66:f3:a3:71:63:60:03:8b:03:3f:da:40:1f:e5:1f:9a:8a:
         95:c8:9d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:43 2025 by rpki-client