Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/hXJ0zAsxC06OslbwJDjvpSh7vok.roa
File:                     hXJ0zAsxC06OslbwJDjvpSh7vok.roa (raw, json)
Hash identifier:          sD7AsyJIJxN6gcHMouwXEVJZrW17FStw5T4AcDFJiDk=
Subject key identifier:   85:72:74:CC:0B:31:0B:4E:8E:B2:56:F0:24:38:EF:A5:28:7B:BE:89
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       05
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/hXJ0zAsxC06OslbwJDjvpSh7vok.roa
Signing time:             Tue 16 Mar 2021 04:45:36 +0000
ROA not before:           Tue 16 Mar 2021 04:45:36 +0000
ROA not after:            Tue 15 Mar 2022 08:34:35 +0000
asID:                     9351
IP address blocks:        27.113.192.0/19 maxlen: 19
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Mar 16 04:45:36 2021 GMT
            Not After : Mar 15 08:34:35 2022 GMT
        Subject: CN=857274CC0B310B4E8EB256F02438EFA5287BBE89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e4:48:8d:96:54:c1:80:d0:b6:70:69:92:0d:
                    3d:fe:da:a5:2f:5d:6b:10:f6:b4:a2:6e:34:68:87:
                    23:93:0b:16:93:18:83:42:ad:e3:7f:70:e4:7d:5d:
                    e6:68:25:af:43:71:b4:a6:91:65:85:75:2a:9c:5c:
                    56:01:ba:09:40:da:5c:e1:e7:65:fc:fa:58:e9:cd:
                    99:04:d4:6a:c4:68:f1:94:8b:bf:67:bc:c4:60:1d:
                    b9:3b:a3:f6:d7:e0:89:3b:af:2e:c7:5f:c8:37:2b:
                    fd:62:00:b9:c6:e5:11:38:8d:3e:1a:eb:3d:07:c5:
                    22:73:95:a8:07:45:89:5b:20:76:4f:d1:c8:08:56:
                    80:18:2b:4f:1d:ee:b1:41:3a:7c:5b:0a:66:49:b5:
                    0a:ba:30:cd:f6:c6:1a:1c:a2:c4:b6:9e:fc:0c:b9:
                    b0:93:ff:07:06:74:06:c4:ea:6e:2a:4d:fd:a7:90:
                    4b:8b:3e:97:7d:2d:70:45:60:73:58:b3:7e:0e:5a:
                    b1:28:94:67:dd:f2:57:43:da:49:e6:67:a3:01:68:
                    de:de:9c:9d:2d:b3:e8:d9:8d:b5:3a:0c:7a:26:c4:
                    3e:b5:8c:d8:3c:c3:8e:02:b0:a8:ff:fa:00:a5:2f:
                    97:0d:47:21:26:fe:f6:95:79:6c:19:39:be:ad:04:
                    68:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:72:74:CC:0B:31:0B:4E:8E:B2:56:F0:24:38:EF:A5:28:7B:BE:89
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/hXJ0zAsxC06OslbwJDjvpSh7vok.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.113.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         17:0a:f7:9e:68:0b:60:ef:0d:a4:6d:63:7d:1c:7b:ad:c2:68:
         d8:64:f5:59:f1:4e:15:cc:28:c1:43:08:8c:69:56:f4:c3:53:
         f8:d2:3c:3b:44:d6:8a:56:08:de:8c:a5:56:7e:73:2c:c6:f8:
         9b:0e:d8:64:6e:e0:ff:f2:7b:24:ea:5f:df:8d:66:fb:d3:4c:
         fe:a7:3f:3e:fb:55:5e:6f:c2:2d:1e:08:51:ec:57:92:e8:aa:
         6b:e8:e1:1f:49:ba:04:01:fa:9e:1a:fa:04:61:94:8e:3e:a9:
         a9:fa:b5:9b:43:23:69:cb:14:e8:a6:71:dd:40:08:38:f6:5c:
         09:1d:ed:05:c8:f9:a0:fb:ea:6b:b8:f5:59:30:c7:8b:5e:01:
         1a:63:a6:ee:7e:10:75:a9:f1:de:b2:24:ca:be:be:8c:ca:14:
         4c:4f:03:41:e4:67:1f:3f:6b:65:68:0a:43:78:b3:0e:b4:39:
         8a:91:b6:86:ff:2b:f7:8b:64:4b:d8:9c:56:7d:b9:58:ec:54:
         1e:57:cc:16:d7:38:7b:33:0c:dd:7d:dd:3c:a9:9f:f0:bc:a0:
         89:fd:d8:72:dd:68:c6:5e:64:fc:43:0d:9e:49:d1:36:18:f2:
         e5:6b:25:08:8b:dc:70:05:47:99:75:52:a5:c8:88:38:7f:36:
         64:82:84:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:20 2025 by rpki-client