Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20074/JQlx02uGnhLjgd955IR3V2uFwU4.roa
File:                     JQlx02uGnhLjgd955IR3V2uFwU4.roa (raw, json)
Hash identifier:          vqnF1Ubd/bZV1Ji6aJNuF73NalhWWwSr1MqLpGot+KA=
Subject key identifier:   25:09:71:D3:6B:86:9E:12:E3:81:DF:79:E4:84:77:57:6B:85:C1:4E
Certificate issuer:       /CN=9E5004D44AF29AD1209AB85A95F160E83D24E588
Certificate serial:       09
Authority key identifier: 9E:50:04:D4:4A:F2:9A:D1:20:9A:B8:5A:95:F1:60:E8:3D:24:E5:88
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/JQlx02uGnhLjgd955IR3V2uFwU4.roa
Signing time:             Tue 01 Nov 2022 06:33:57 +0000
ROA not before:           Tue 01 Nov 2022 06:33:57 +0000
ROA not after:            Sun 15 Oct 2023 01:30:02 +0000
asID:                     63782
IP address blocks:        133.186.56.0/21 maxlen: 21
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E5004D44AF29AD1209AB85A95F160E83D24E588
        Validity
            Not Before: Nov  1 06:33:57 2022 GMT
            Not After : Oct 15 01:30:02 2023 GMT
        Subject: CN=250971D36B869E12E381DF79E48477576B85C14E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b3:88:a3:a6:36:34:cb:91:55:02:0a:81:a9:
                    31:f0:ad:be:9b:b4:68:d3:fd:e0:a8:fd:93:81:1e:
                    66:c8:38:e4:c4:6a:63:a7:f0:cc:18:23:e5:b4:2e:
                    b9:3f:2c:0c:a8:0e:b0:99:f5:e8:8b:4a:03:b4:11:
                    8c:d6:3b:1d:14:02:8b:03:ef:08:45:8c:6b:4d:bf:
                    3a:70:d9:4d:52:bf:02:e0:fb:c5:27:05:0a:86:18:
                    cd:bb:7b:03:35:75:2a:50:68:30:b2:a8:71:84:56:
                    32:47:39:8f:5a:56:ff:a0:5c:90:41:69:1e:7b:59:
                    ab:79:27:cd:3f:73:05:5b:22:67:cf:81:60:b9:1a:
                    68:40:a7:80:e7:73:31:79:5e:3e:8b:e3:20:22:a1:
                    79:9e:b4:9a:62:2c:21:de:ae:dd:c1:c5:f0:c9:74:
                    26:ab:d3:21:61:44:41:55:fc:ca:08:47:ed:be:a5:
                    53:75:38:b2:68:37:08:23:b4:43:98:2e:fa:87:18:
                    60:a1:9c:fe:b8:54:2c:da:fa:86:76:0e:18:14:ba:
                    38:20:e5:fc:58:de:63:39:55:11:7a:2b:77:68:be:
                    c0:16:cf:d7:ea:93:34:39:72:cd:5b:f4:52:2b:c6:
                    d3:1e:36:c9:a2:5c:34:58:d4:e5:96:18:5f:86:8f:
                    30:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:09:71:D3:6B:86:9E:12:E3:81:DF:79:E4:84:77:57:6B:85:C1:4E
            X509v3 Authority Key Identifier:
                keyid:9E:50:04:D4:4A:F2:9A:D1:20:9A:B8:5A:95:F1:60:E8:3D:24:E5:88

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/JQlx02uGnhLjgd955IR3V2uFwU4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.186.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         50:75:8f:3c:d4:67:86:6a:6e:4d:2c:9d:78:3e:88:eb:a8:de:
         d0:6e:e4:ca:d7:d4:c5:48:0e:7b:dc:c1:b0:0b:52:c8:a7:17:
         37:ce:62:6c:c1:d3:af:5b:11:57:24:b9:8e:2c:c3:ba:60:2a:
         90:14:29:d9:22:ea:a5:83:9f:dc:23:71:c8:5d:89:37:4f:4e:
         d2:db:54:f4:7e:f2:76:c3:57:ca:04:11:5f:09:82:0e:f5:dc:
         35:99:96:b4:c9:f0:20:e5:f5:d9:a0:2a:08:f1:6d:6f:d8:d0:
         7f:ba:b4:9a:9b:c3:2f:13:33:a3:0e:df:e1:35:d7:2a:d8:cb:
         77:14:29:a3:2b:5a:e1:0e:6e:1d:48:55:ab:f5:8f:df:63:7a:
         ab:53:70:22:66:85:32:88:f6:64:48:c8:41:66:1d:49:7e:0d:
         f2:a9:4a:4a:6b:62:c0:6c:d3:68:29:35:dc:0d:5e:15:5d:5d:
         8c:fb:aa:6f:d7:21:46:67:cd:48:42:61:7e:f7:d0:ec:8c:0c:
         84:4f:68:a8:9c:49:a2:b9:25:e8:b7:44:5f:3c:80:7f:18:47:
         27:ef:e0:b0:29:88:25:ee:81:9a:8e:48:2f:cb:89:50:62:04:
         4a:70:70:7d:97:07:01:a7:e0:d7:f7:28:e7:09:89:9e:da:c7:
         75:a2:14:75
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:54 2025 by rpki-client