Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/ge2ACUYIqQgUYQEEWx4lsJBkwEQ.roa
File:                     ge2ACUYIqQgUYQEEWx4lsJBkwEQ.roa (raw, json)
Hash identifier:          qkwVa9YL4m9TFztOPqMqLaO+apkqOVvjRbM8HEzZfvY=
Subject key identifier:   81:ED:80:09:46:08:A9:08:14:61:01:04:5B:1E:25:B0:90:64:C0:44
Certificate issuer:       /CN=D79B3890C2DA3795148976B954C2024056797554
Certificate serial:       17
Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/ge2ACUYIqQgUYQEEWx4lsJBkwEQ.roa
Signing time:             Thu 13 Apr 2023 09:51:23 +0000
ROA not before:           Thu 13 Apr 2023 09:51:23 +0000
ROA not after:            Thu 14 Mar 2024 01:30:02 +0000
asID:                     131934
IP address blocks:        14.192.96.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79B3890C2DA3795148976B954C2024056797554
        Validity
            Not Before: Apr 13 09:51:23 2023 GMT
            Not After : Mar 14 01:30:02 2024 GMT
        Subject: CN=81ED80094608A908146101045B1E25B09064C044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:35:78:95:de:d7:6a:71:de:26:5a:c7:ba:fb:
                    15:c8:bd:67:be:74:74:c5:53:89:78:10:8b:ea:16:
                    90:fa:06:67:23:0a:e7:05:42:51:9c:5b:32:07:5d:
                    56:7f:c3:0f:46:1c:08:28:f0:9d:af:32:eb:10:aa:
                    59:43:b7:68:7e:de:6a:07:f0:4b:5e:3d:f5:37:19:
                    02:71:58:65:09:54:82:0e:ab:c1:75:98:11:cd:77:
                    64:92:51:4c:37:8b:2a:1e:aa:3b:a5:61:8c:93:2f:
                    e1:ab:68:a7:ff:d6:f2:a1:64:ee:04:db:13:b5:b2:
                    1f:dd:d4:10:3f:68:b4:c2:c2:45:50:0d:fe:d8:8b:
                    7a:1a:c5:7e:4e:d0:bf:75:92:f7:3d:73:95:fa:ef:
                    81:9f:a1:b3:64:6a:cb:40:a9:8f:14:fb:27:f0:c9:
                    1b:53:55:fa:97:6b:56:8f:45:18:cc:60:6f:c2:61:
                    17:eb:25:03:18:f1:94:76:14:52:ef:de:42:b3:fa:
                    7a:d8:31:ee:af:c1:31:f3:88:3b:62:7f:70:f1:4b:
                    30:bd:9c:a7:c3:55:3d:f8:1b:61:74:e6:13:52:17:
                    4f:ab:f0:16:5a:f0:23:aa:c5:61:9b:16:a3:8d:13:
                    c7:7a:0e:56:f2:27:32:a0:d1:04:41:d5:f4:51:03:
                    84:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:ED:80:09:46:08:A9:08:14:61:01:04:5B:1E:25:B0:90:64:C0:44
            X509v3 Authority Key Identifier:
                keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/ge2ACUYIqQgUYQEEWx4lsJBkwEQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         11:66:a8:9c:af:b9:26:62:b2:ba:a3:ba:5f:e2:df:0a:e4:04:
         9b:0c:22:08:c8:26:0c:08:16:97:3a:a3:14:d3:17:16:9b:dc:
         70:08:73:32:2b:33:e5:a3:68:89:be:ef:48:28:c1:82:e7:2e:
         32:0b:91:a9:6d:d6:cc:3f:86:d1:fd:9f:d1:14:e9:4c:d5:d0:
         d2:f0:33:20:7b:ce:61:05:b2:b8:e9:26:2e:bf:dd:4e:25:94:
         36:fa:ea:db:67:e0:5d:79:6d:c0:d9:e7:4a:41:f8:e2:3a:6c:
         cb:91:a4:5d:96:6f:8d:d5:0d:f3:9f:a3:60:57:de:52:08:d8:
         c4:3e:1b:3e:25:0b:d5:73:70:15:27:d0:f7:cf:c2:31:9d:c0:
         1f:9c:bd:d8:0d:f0:4c:3c:01:d2:05:ba:b7:9f:ad:62:01:7c:
         ba:d5:7a:55:98:69:d6:08:68:14:8e:dc:58:0b:0e:b3:de:d8:
         51:8f:4e:8a:ab:3b:be:a4:f6:ba:64:1f:0b:6a:1b:f0:a8:ba:
         b1:16:77:08:d0:58:b1:50:33:d1:a6:15:47:48:3f:6b:06:6a:
         56:21:a4:69:99:78:75:bc:88:79:37:f4:dd:61:37:06:37:d9:
         a0:0b:3f:4b:1b:db:c2:a5:ba:aa:dc:66:0e:e2:72:bc:8f:c1:
         d2:24:ae:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:57 2025 by rpki-client