Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/autddWq2D9tm_avfVE742zLNdU0.roa
File:                     autddWq2D9tm_avfVE742zLNdU0.roa (raw, json)
Hash identifier:          cWzKmdUF8FgdrrMrxDY++u9y2rUmADcDrKSkd4MYXJM=
Subject key identifier:   6A:EB:5D:75:6A:B6:0F:DB:66:FD:AB:DF:54:4E:F8:DB:32:CD:75:4D
Certificate issuer:       /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial:       23
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/autddWq2D9tm_avfVE742zLNdU0.roa
Signing time:             Fri 01 Jul 2022 01:30:09 +0000
ROA not before:           Fri 01 Jul 2022 01:30:09 +0000
ROA not after:            Thu 15 Jun 2023 01:30:04 +0000
asID:                     7660
IP address blocks:        203.181.194.0/23 maxlen: 32
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
        Validity
            Not Before: Jul  1 01:30:09 2022 GMT
            Not After : Jun 15 01:30:04 2023 GMT
        Subject: CN=6AEB5D756AB60FDB66FDABDF544EF8DB32CD754D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:40:de:2b:e6:81:fd:35:17:ad:3a:3e:2d:52:
                    33:af:69:f3:40:af:e4:a7:80:f4:4d:87:41:86:3d:
                    53:e5:62:26:d3:90:6f:92:4d:51:08:f7:b0:49:63:
                    93:86:3c:ed:d4:b4:b7:48:02:4d:7d:a2:70:33:d2:
                    12:fc:fe:97:b3:5a:7b:7c:00:2c:cc:c3:af:a2:db:
                    66:b0:f6:00:9a:3b:44:0f:8f:97:1d:30:fb:10:a4:
                    81:08:5b:ea:c4:14:be:35:71:a5:25:11:0b:61:c3:
                    72:07:91:fa:b1:93:67:e0:c4:86:80:9b:e8:89:f4:
                    8c:36:4f:50:93:89:55:11:b4:7c:19:46:61:9d:e4:
                    f0:21:53:7c:13:3e:fb:c1:a8:fb:ce:c1:60:d7:94:
                    e7:d2:67:c3:95:c6:e7:7b:4a:f9:e1:68:e7:c0:98:
                    ef:e5:85:05:3c:76:6a:81:a2:a0:7d:fb:45:28:02:
                    72:ca:89:b8:fd:72:56:d5:f5:9d:bc:f6:c0:15:7c:
                    f1:b2:00:46:d2:ce:d1:2d:4b:42:83:e1:50:d5:b1:
                    3d:86:06:c6:7e:c4:68:10:58:b8:98:e3:c9:cd:39:
                    40:70:75:ff:28:df:15:8e:97:94:54:01:1e:ff:b3:
                    7b:48:92:62:86:54:e3:c2:0f:4e:f9:d0:ce:c1:e0:
                    4b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:EB:5D:75:6A:B6:0F:DB:66:FD:AB:DF:54:4E:F8:DB:32:CD:75:4D
            X509v3 Authority Key Identifier:
                keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/autddWq2D9tm_avfVE742zLNdU0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.181.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:71:cb:ff:63:2b:b9:d3:5f:13:dc:02:69:50:10:03:81:7f:
         bf:42:6b:a6:1a:f2:81:e7:26:d5:96:a1:f4:5b:71:e6:cf:3a:
         53:0f:30:82:4b:d8:44:f3:4b:9f:d8:34:d6:ca:99:2c:9f:d0:
         2f:90:16:5a:c5:7e:fa:d0:72:0b:87:28:d1:5e:59:ad:ef:6e:
         dd:07:ee:19:e5:7a:73:15:f0:90:b1:c1:c4:ef:b1:f2:f0:4c:
         9e:c0:bc:d6:73:09:4f:d3:91:4b:e0:82:65:78:47:95:fb:1b:
         e3:98:9d:3d:1b:f6:d4:fa:8f:76:77:7c:fb:e3:61:8b:d8:d5:
         84:dd:05:c2:ea:9a:9f:fc:66:43:52:66:f1:ee:5a:b5:2b:ae:
         5b:dd:f7:d4:dc:de:88:69:4b:9e:71:7d:a0:27:45:d3:a8:06:
         af:17:54:69:c3:f1:f6:c3:6a:b5:aa:66:3e:f7:1c:ed:a4:b6:
         ab:7a:96:0b:af:06:02:56:c6:81:2d:7c:4f:cb:a9:55:fd:ab:
         c8:a0:ad:b1:74:72:38:23:cb:61:63:ef:e1:2b:64:60:3c:b2:
         c9:a2:72:75:a9:89:b9:9e:32:38:d1:20:17:99:39:66:84:48:
         4c:ce:33:4e:55:ed:b7:ba:83:22:bb:59:d0:9b:7f:b1:ff:4e:
         ab:ee:48:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:51 2025 by rpki-client