Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/ikNx81KlE9LhEiY_tvd8Y9znyTE.roa
File:                     ikNx81KlE9LhEiY_tvd8Y9znyTE.roa (raw, json)
Hash identifier:          F7IDstZXw3n/9LRrQc3vRkj40BrUCK4smYUV5antzJ0=
Subject key identifier:   8A:43:71:F3:52:A5:13:D2:E1:12:26:3F:B6:F7:7C:63:DC:E7:C9:31
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0138
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/ikNx81KlE9LhEiY_tvd8Y9znyTE.roa
Signing time:             Fri 05 Aug 2022 05:02:46 +0000
ROA not before:           Fri 05 Aug 2022 05:02:46 +0000
ROA not after:            Sat 15 Jul 2023 01:30:03 +0000
asID:                     4713
IP address blocks:        218.44.0.0/16 maxlen: 16
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Aug  5 05:02:46 2022 GMT
            Not After : Jul 15 01:30:03 2023 GMT
        Subject: CN=8A4371F352A513D2E112263FB6F77C63DCE7C931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:f3:75:8b:f6:10:f8:e7:db:4a:c2:f2:0f:
                    75:0c:c5:c1:06:03:82:56:8f:64:6f:94:f9:1e:c8:
                    fb:69:cb:89:ff:7c:0a:19:cd:90:aa:f4:2d:89:7b:
                    f5:65:9a:c6:cd:5d:e9:59:ab:c9:41:69:4d:b5:f0:
                    ab:fe:d6:29:36:d2:a9:7e:ee:f1:16:df:c1:21:aa:
                    8c:62:13:9a:7d:54:60:48:bf:0e:73:22:90:1c:56:
                    2a:76:4d:16:3f:68:7a:6b:93:fc:85:c2:1d:24:d3:
                    f4:a0:58:ae:7f:fa:b5:b3:a8:d3:35:9b:99:e0:d6:
                    8f:f3:a1:f6:2c:36:25:4b:a7:a3:21:10:42:4f:9e:
                    1f:34:14:07:98:59:6f:2f:63:f1:08:1a:05:4b:52:
                    5c:77:31:d2:4f:95:f1:c4:e2:c5:41:ea:79:19:3d:
                    77:89:85:ce:c4:38:35:98:39:18:dd:7d:c6:dc:f8:
                    ee:ed:d4:b9:35:a2:68:5a:e3:76:66:ce:a1:db:ae:
                    80:ac:3a:ce:a9:b0:67:52:72:6a:30:e5:fc:4a:99:
                    7e:b2:14:e2:0f:33:0b:54:ac:37:ec:c7:f1:a7:1c:
                    18:67:38:88:3b:97:79:05:d5:b7:8e:61:df:01:60:
                    4a:d6:ee:1b:fb:27:85:9f:88:6e:20:52:e0:80:2a:
                    75:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:43:71:F3:52:A5:13:D2:E1:12:26:3F:B6:F7:7C:63:DC:E7:C9:31
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/ikNx81KlE9LhEiY_tvd8Y9znyTE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.44.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7b:b7:4e:e5:21:03:eb:e4:e0:16:4f:63:14:42:c2:7c:64:5a:
         cd:c1:00:79:8e:a6:14:ab:3b:65:74:f8:4d:d7:37:92:64:ad:
         19:c4:5f:c3:34:79:b2:a9:7c:d0:c2:05:3f:fe:69:c8:df:a4:
         ab:af:a7:57:b6:4d:cc:f5:80:e1:bc:0e:a9:24:fa:8f:51:6d:
         9b:f8:22:89:fe:f8:7e:b0:e4:04:c2:e0:1c:90:f1:0e:89:31:
         2e:ac:e6:89:e5:29:2b:e7:0a:ba:60:a9:5d:4a:7c:d8:aa:d3:
         82:a1:e1:87:40:2c:db:f9:4a:e2:d9:6b:9a:d9:05:d3:63:cd:
         01:e5:e8:cc:29:f4:3f:29:9d:bf:a1:19:bc:b4:76:fd:29:d2:
         9a:63:3e:98:87:35:3d:b6:73:52:f6:55:60:6c:4e:2a:62:82:
         95:09:b9:ee:b7:80:f3:f1:be:44:6a:e0:c4:bd:3d:ae:4f:51:
         ee:c7:3f:43:6d:78:1b:9f:a0:6b:73:10:1c:31:18:d8:7e:d0:
         b5:2e:96:c7:73:a7:5c:4d:cc:e7:7b:1a:b0:6a:c4:56:a2:8e:
         d4:20:aa:9a:f0:b6:81:47:d8:92:ce:6e:8c:eb:37:63:55:af:
         13:9b:9a:51:d3:a4:e4:7e:33:e6:f3:57:80:0f:ea:59:d0:36:
         f5:bd:89:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:44 2025 by rpki-client