Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/Wwe9kr-kaYq1XJbhE-zuaxk3aKc.roa
File:                     Wwe9kr-kaYq1XJbhE-zuaxk3aKc.roa (raw, json)
Hash identifier:          xxnVi7btytbQJn5U2VWyrC/aRUGFGIoLSVxlqwqiD/0=
Subject key identifier:   5B:07:BD:92:BF:A4:69:8A:B5:5C:96:E1:13:EC:EE:6B:19:37:68:A7
Certificate issuer:       /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Certificate serial:       38
Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/Wwe9kr-kaYq1XJbhE-zuaxk3aKc.roa
Signing time:             Sat 01 Jul 2023 01:28:15 +0000
ROA not before:           Sat 01 Jul 2023 01:28:15 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24295
IP address blocks:        103.28.24.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
        Validity
            Not Before: Jul  1 01:28:15 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=5B07BD92BFA4698AB55C96E113ECEE6B193768A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f0:43:d0:09:6e:d3:28:c0:b2:cb:5a:96:bf:
                    71:9f:f2:60:64:71:18:ca:9c:f8:4f:e5:93:26:9d:
                    4c:da:c6:dd:fd:43:21:63:51:79:51:4a:2f:bb:9f:
                    27:e7:58:e7:3d:bf:71:e8:58:b5:6c:6e:f9:53:f1:
                    5e:38:d7:c9:62:82:07:48:8f:62:37:35:ad:7a:f3:
                    15:53:52:9b:f3:5e:e1:e1:d7:ee:f8:3d:5b:b2:f3:
                    89:d6:bc:2c:78:d3:e9:20:66:b9:60:57:2e:d5:d8:
                    42:eb:0c:95:93:46:66:c9:6d:fd:d0:d4:c4:70:00:
                    bf:16:49:0f:51:96:de:8e:ac:55:08:ec:bd:68:cd:
                    a3:73:6c:02:c2:58:09:23:ac:b6:51:e9:9c:30:1b:
                    82:32:e0:04:5b:0a:5e:23:5d:4d:8c:5a:10:ce:1e:
                    58:17:77:83:50:3e:e3:8f:9b:7b:27:f9:34:36:41:
                    2e:82:82:8e:8d:06:44:0e:fb:90:26:25:d6:d1:00:
                    26:b2:ca:a1:54:14:74:27:ec:46:19:88:f1:e6:a6:
                    17:ec:94:bd:a9:94:53:fb:c6:d5:ae:21:d1:1c:3c:
                    aa:51:84:2d:0a:d5:58:e4:7d:23:a5:c8:57:0d:e3:
                    b2:9e:34:2f:34:81:f9:19:fd:39:85:b3:5c:4b:f2:
                    e8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:07:BD:92:BF:A4:69:8A:B5:5C:96:E1:13:EC:EE:6B:19:37:68:A7
            X509v3 Authority Key Identifier:
                keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/Wwe9kr-kaYq1XJbhE-zuaxk3aKc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:6d:df:7c:e0:fb:b8:ad:7b:c9:52:ca:d2:9c:0c:b3:ce:2f:
         15:8d:ec:d0:56:27:32:1f:8e:d3:40:78:46:8f:14:8e:0d:ea:
         1c:19:d6:d0:e2:e3:a0:c4:95:0a:7a:e5:90:06:68:ef:38:6a:
         bc:d7:ff:2e:42:7f:da:83:21:90:37:c7:7f:2d:49:91:ca:66:
         18:df:eb:e0:ab:8d:ab:aa:9b:61:64:f4:e9:08:64:05:8c:9f:
         97:11:6e:3c:07:b5:e3:b0:50:4b:b9:2d:11:16:c9:d5:36:d6:
         c2:be:a1:1d:5a:77:85:ae:67:95:2f:c4:2a:7d:96:3e:90:4f:
         48:cf:9c:6d:6a:98:09:f8:bf:91:de:4e:ce:4b:c7:34:6f:4e:
         e4:77:34:b4:c0:4c:e5:73:00:ea:42:cf:65:3b:37:94:c7:44:
         3d:59:2c:3d:52:01:c3:85:36:fe:53:99:b0:10:9c:49:99:dc:
         a9:a8:e8:b3:e1:7e:90:e5:c5:a1:3f:22:7a:f8:16:10:b9:e2:
         f2:e8:7d:1b:b5:b3:8c:e7:f7:bc:64:cf:5a:f1:f9:66:8f:2c:
         e2:ec:c9:9a:0c:eb:9d:87:11:c2:05:c7:f3:02:32:b3:e0:f3:
         ff:4a:95:c7:0a:be:4d:36:a8:45:8c:ba:b0:f8:fb:71:58:dc:
         e8:29:c4:f8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:13 2025 by rpki-client