Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/1RQg-JUC1Ejjh10B74VgWKBDhWE.roa
File:                     1RQg-JUC1Ejjh10B74VgWKBDhWE.roa (raw, json)
Hash identifier:          WyR69UPonZN3RIC9XZNWMMJNyIDcWv+xtX3SdVa5hnI=
Subject key identifier:   D5:14:20:F8:95:02:D4:48:E3:87:5D:01:EF:85:60:58:A0:43:85:61
Certificate issuer:       /CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
Certificate serial:       19
Authority key identifier: 72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/1RQg-JUC1Ejjh10B74VgWKBDhWE.roa
Signing time:             Sat 02 Oct 2021 08:41:56 +0000
ROA not before:           Sat 02 Oct 2021 08:41:56 +0000
ROA not after:            Thu 15 Sep 2022 01:30:02 +0000
asID:                     24296
IP address blocks:        210.252.64.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
        Validity
            Not Before: Oct  2 08:41:56 2021 GMT
            Not After : Sep 15 01:30:02 2022 GMT
        Subject: CN=D51420F89502D448E3875D01EF856058A0438561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e0:20:0e:07:1e:18:6e:f9:b5:9a:59:0f:a6:
                    36:7e:1e:82:0c:6a:c3:18:34:80:08:0e:d9:3a:c1:
                    81:07:77:25:40:df:57:ee:bb:5c:08:bb:2a:1a:5a:
                    2f:ff:2d:80:a5:c1:ad:19:3f:28:bb:29:3b:a3:69:
                    6a:17:60:81:57:2d:c5:00:44:50:a0:cb:5a:72:2d:
                    ef:81:2b:97:ef:13:e3:30:5e:2b:ae:9b:ed:62:c0:
                    95:21:ee:0d:1b:c4:6c:84:10:52:76:3d:0f:1e:3b:
                    68:84:d6:a4:13:52:07:2b:13:a9:ef:53:2d:24:d9:
                    12:e4:ca:08:0d:cb:e2:82:ed:f0:70:4e:79:5e:57:
                    5f:bc:05:b2:10:26:6b:f5:fe:e3:6f:cc:78:ef:33:
                    d3:95:69:95:0b:bc:bc:f9:d4:ab:9c:29:68:1f:59:
                    f5:54:cc:fb:2f:2a:b1:65:98:8d:62:59:1d:14:f5:
                    c2:1a:95:34:26:7f:94:fc:56:0d:3c:69:f0:77:ad:
                    f3:2f:3a:86:42:02:61:e5:4c:da:ec:6f:34:cf:e5:
                    ca:39:f1:9f:7c:10:55:27:33:73:d7:c9:fc:58:b2:
                    51:fe:98:46:3a:49:cc:b8:da:57:61:34:84:a8:d0:
                    d7:2d:de:72:ad:f0:25:a9:b7:c4:a2:47:4b:2f:ed:
                    22:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:14:20:F8:95:02:D4:48:E3:87:5D:01:EF:85:60:58:A0:43:85:61
            X509v3 Authority Key Identifier:
                keyid:72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/1RQg-JUC1Ejjh10B74VgWKBDhWE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.252.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1d:f8:f0:68:c8:16:31:3a:f0:bc:82:7f:cd:9b:fc:72:2d:bc:
         c4:0c:cd:f7:d8:e5:c2:1c:43:bd:43:37:b1:b5:70:df:5b:be:
         34:d4:5a:4f:4c:14:9e:1c:07:22:04:6f:c0:11:15:96:6c:6b:
         ab:0f:e0:af:fa:75:2f:41:ce:a9:af:16:c4:b9:62:b1:0b:58:
         bf:9c:7f:52:cc:63:62:97:53:c7:08:01:eb:5b:da:bb:a7:88:
         5e:44:9a:c6:f2:a2:ad:ca:dc:8c:0e:02:23:d7:cb:82:b6:d7:
         f4:f4:a1:d6:6e:42:23:70:7e:7c:e6:1f:6c:c5:1d:85:70:fd:
         a2:85:cf:6e:2e:ff:21:9e:cd:6a:e7:3a:87:0a:77:c1:80:14:
         63:5c:b3:ea:09:39:5c:a3:3d:db:c8:b5:de:bb:4c:91:41:5d:
         ed:30:85:4c:8f:9b:b6:c7:17:2b:ee:da:ce:62:58:21:03:67:
         4c:b6:cd:8b:e7:4e:f0:5d:66:51:aa:5b:84:30:81:18:8c:45:
         b5:80:dc:7d:a6:cf:d4:cf:a9:a1:a2:73:a3:aa:e3:19:46:07:
         f7:5f:18:84:66:7a:a6:ec:1d:29:43:5f:cb:ec:79:ec:4f:bb:
         1c:47:0f:1d:35:18:a3:77:44:20:fe:80:ce:8a:ef:aa:cb:d2:
         f6:d0:38:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:40 2025 by rpki-client