Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/eibTxpnEtR-NHg5fBB1-JMT8Gyo.roa
File:                     eibTxpnEtR-NHg5fBB1-JMT8Gyo.roa (raw, json)
Hash identifier:          krBQrcVPTTTi474Ccflp8MGsijaaEGO+Y6I9mSeolyY=
Subject key identifier:   7A:26:D3:C6:99:C4:B5:1F:8D:1E:0E:5F:04:1D:7E:24:C4:FC:1B:2A
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       2D
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/eibTxpnEtR-NHg5fBB1-JMT8Gyo.roa
Signing time:             Tue 26 Sep 2023 06:53:16 +0000
ROA not before:           Tue 26 Sep 2023 06:53:16 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     17941
IP address blocks:        182.236.64.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Sep 26 06:53:16 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=7A26D3C699C4B51F8D1E0E5F041D7E24C4FC1B2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cd:85:03:41:51:d7:4c:29:55:c4:2f:38:e9:
                    ad:42:ff:e2:8a:48:44:72:73:1e:18:fa:bc:1a:6d:
                    8a:1b:f5:dd:fa:e3:1c:a4:75:f3:0d:43:02:7e:d5:
                    b3:c4:2c:43:be:88:bc:bd:25:09:68:44:20:05:ba:
                    f6:2a:21:09:e9:a7:85:d8:22:de:d9:31:98:2e:cd:
                    e9:2c:a1:9e:2c:5e:b3:66:ae:5f:68:aa:20:5b:c8:
                    31:0e:dc:6b:a8:80:50:03:21:36:87:3b:ff:a6:40:
                    21:92:b6:d1:1b:03:b9:16:0d:29:aa:65:97:34:d3:
                    da:66:5a:f4:1c:99:ef:e8:01:8d:f4:86:ad:45:7d:
                    6f:6d:ad:59:3b:eb:b7:47:13:37:0a:98:c1:41:e2:
                    46:ee:cb:d3:6f:bd:8d:58:1d:02:fc:08:23:36:1b:
                    d3:20:5d:fb:a7:b0:f2:fc:05:a4:52:cb:e4:74:35:
                    f1:85:42:45:3a:37:53:ca:92:66:56:fc:fd:61:3f:
                    1b:e0:bf:ca:ca:45:c5:7e:55:f7:a5:1b:fc:2b:d2:
                    e9:0c:61:45:70:11:c8:5d:28:34:7e:c1:42:3e:c8:
                    98:35:f9:3d:f9:28:70:a0:cc:9a:e8:4f:ee:8e:5a:
                    a4:92:e0:3c:17:b9:24:b2:ad:45:ef:79:04:b0:d3:
                    64:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:26:D3:C6:99:C4:B5:1F:8D:1E:0E:5F:04:1D:7E:24:C4:FC:1B:2A
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/eibTxpnEtR-NHg5fBB1-JMT8Gyo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.236.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         95:61:d2:f5:2c:b2:08:a6:91:b6:4e:37:5e:54:9a:6a:8a:c3:
         fe:79:e4:40:ba:4c:40:8d:ad:70:7d:d5:55:e6:8d:22:71:4d:
         78:f4:1c:b3:3d:c3:0a:0b:b4:2d:c9:7a:65:0e:fe:a6:fb:36:
         9c:05:e8:e5:c6:0c:40:88:55:2a:4c:a1:96:d3:03:86:1e:58:
         02:89:92:c1:fa:c1:02:b8:eb:3d:24:1b:17:38:cb:17:26:f1:
         84:3e:f6:52:05:ac:65:d4:b6:94:2a:4f:89:4e:a7:7c:ea:94:
         7f:a4:c4:84:59:7e:75:ce:3a:80:52:bf:f0:a0:75:21:2c:30:
         51:30:6b:8d:bb:16:ee:5b:e5:bb:62:95:15:f4:9f:1c:6e:13:
         38:b5:cf:ba:9d:0d:9c:e8:60:84:b9:cf:d6:a7:1d:b0:ac:d2:
         cf:83:99:73:53:a9:f6:10:64:5d:82:ad:30:0f:ad:49:60:e9:
         5a:23:56:a8:42:c7:7c:a4:b6:b8:26:ef:99:9a:4e:01:49:62:
         3a:c6:a8:8f:24:46:b8:29:1d:47:cb:29:eb:79:2c:f5:e8:9b:
         1c:e9:6b:e2:68:78:16:30:d7:95:ba:6f:c4:55:e0:68:2e:f1:
         f9:01:4c:6c:96:e7:65:46:54:ed:d9:12:60:1c:ce:5d:0f:d7:
         9e:c6:74:9b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:53 2025 by rpki-client