Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/aNfpPgXBGOQPn_cN1XIjG1tUkZk.roa
File:                     aNfpPgXBGOQPn_cN1XIjG1tUkZk.roa (raw, json)
Hash identifier:          xGxkfeZg+q5fSRZ6GkRWMPEVqVPXv5x06YjPAx4C3i0=
Subject key identifier:   68:D7:E9:3E:05:C1:18:E4:0F:9F:F7:0D:D5:72:23:1B:5B:54:91:99
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       36
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/aNfpPgXBGOQPn_cN1XIjG1tUkZk.roa
Signing time:             Thu 22 Jun 2023 00:34:02 +0000
ROA not before:           Thu 22 Jun 2023 00:34:02 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     24277
IP address blocks:        115.166.189.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Jun 22 00:34:02 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=68D7E93E05C118E40F9FF70DD572231B5B549199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f3:83:ed:37:80:8f:a9:4d:aa:4d:93:ee:51:
                    f8:48:ae:53:d0:6a:de:9b:31:de:57:dc:e1:17:40:
                    12:7c:b4:4f:20:59:9b:58:24:c6:72:d8:da:dd:73:
                    99:2b:aa:44:84:f1:e6:3b:a4:f0:c0:d6:15:44:55:
                    83:53:50:07:97:ad:e0:5a:3c:60:5c:c6:45:79:74:
                    5e:bd:dd:72:d8:81:00:6f:62:d3:9f:1f:16:3d:f6:
                    6c:a4:a0:ff:15:bf:87:93:32:61:4b:03:b2:2c:1a:
                    be:b5:0a:5d:06:33:ad:47:03:cf:24:da:79:b4:47:
                    ed:e9:89:67:51:9b:88:f3:76:6e:33:48:1c:97:d4:
                    3f:29:8d:32:6e:7c:1a:84:1a:db:0d:10:36:00:4d:
                    68:e1:08:62:05:d0:bf:d0:b5:96:56:56:9c:9d:18:
                    d0:56:cf:94:3a:5f:59:e7:0e:69:1b:8d:e7:28:01:
                    5b:ba:22:1e:98:74:22:94:2c:51:b2:68:08:4e:10:
                    c7:20:17:5e:3f:7b:c3:12:88:95:5b:cd:99:c0:7e:
                    13:b2:1c:b8:8e:83:a2:b4:65:0b:36:03:8f:f6:41:
                    56:db:fd:2d:e7:1b:e2:b4:f2:9b:a4:1a:e6:dc:49:
                    77:cf:9f:af:c9:ee:14:8d:7b:6b:fb:34:55:b3:9f:
                    73:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D7:E9:3E:05:C1:18:E4:0F:9F:F7:0D:D5:72:23:1B:5B:54:91:99
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/aNfpPgXBGOQPn_cN1XIjG1tUkZk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.166.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:66:bf:ca:af:e6:7f:09:ee:2c:fa:72:7f:8d:dc:82:13:10:
         12:ba:c4:d4:97:3d:25:89:c5:30:02:7d:b3:39:17:b9:5d:d0:
         61:37:fb:ca:84:b0:06:5a:45:54:bc:a9:56:2c:06:85:58:56:
         1c:1b:05:78:7d:0c:89:06:0e:75:99:0d:83:3d:4c:a5:0f:76:
         9b:8b:dc:89:3b:75:c7:c6:76:69:9c:82:50:5f:00:df:1c:f4:
         85:9c:33:4d:20:e8:b4:44:bf:33:ff:25:6b:87:0c:54:85:57:
         e3:df:bb:76:45:8d:d7:11:82:0f:44:8f:59:b0:96:50:36:9d:
         26:c6:06:ea:61:c0:e1:9a:d0:f0:68:0a:8b:5b:ae:5e:1f:f9:
         91:d6:7d:a3:41:52:1e:97:66:2d:28:6c:44:e4:a0:f7:b6:cd:
         22:dc:dc:01:fa:68:6b:cd:4d:d8:6b:21:36:18:da:d6:a6:14:
         d8:39:c9:5f:f1:8b:dd:c3:0a:8f:8a:f3:bd:a0:7c:92:e9:31:
         d0:08:d9:a5:6b:91:09:86:b3:d8:86:fd:5a:f5:c0:4a:c4:98:
         ad:b8:8f:fc:59:89:4e:8a:28:13:92:a1:dc:2c:73:97:df:89:
         86:2f:03:0a:02:e7:78:e3:3c:85:1b:de:79:79:60:69:52:e8:
         9d:d1:1f:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:36 2025 by rpki-client